This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft File: 5OTCQkd4XDQv81kH9-EcSrs5i4M.mft (raw, json) Hash identifier: 2ZdrYfJDuQiocSPnEjUoFSOMjhTmR3sUOyEbBxQ4kQY= Subject key identifier: 60:7A:79:95:26:65:03:12:28:76:48:79:55:A9:66:A5:02:6A:E5:B1 Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 Certificate issuer: /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft Manifest number: 9E Signing time: Sun 25 Jan 2026 05:33:54 +0000 Manifest this update: Sun 25 Jan 2026 05:33:53 +0000 Manifest next update: Sun 01 Feb 2026 05:33:53 +0000 Files and hashes: 1: 5OTCQkd4XDQv81kH9-EcSrs5i4M.crl (hash: T3+JrOAgyBojwhAFEG8q0MwL6p4YVqlB/BGk19uD00g=) 2: 212E0B520DFE11F0B266963AC4F9AE02.roa (hash: dDhbAceYPTZoJoEOB7Q4AGN3lBigI7VE7UVJ4rk45bI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Validity Not Before: Jan 25 05:33:53 2026 GMT Not After : Feb 1 05:33:53 2026 GMT Subject: CN=6975ab42-d940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:df:3d:01:7c:69:cf:9b:c7:75:bc:37:14:62: 13:4e:0d:19:1e:7c:5a:55:44:46:93:5f:ff:7f:12: 7c:95:5a:af:ec:de:1f:67:2d:27:76:11:52:63:19: 75:1f:a0:6a:3b:58:6b:9c:b3:65:fb:09:99:81:53: 1c:50:34:0a:ee:f6:9d:e2:a5:cd:7b:a7:dd:0e:b4: 92:c3:6e:82:dc:6c:60:f2:03:e0:7e:8d:19:25:4a: fe:1b:3d:4f:4d:af:92:93:f2:47:be:1a:3b:2c:95: 87:f5:0a:0a:67:78:14:b0:b3:99:2f:d0:34:21:81: bc:bf:c1:2a:15:42:b5:e2:fa:3b:26:6c:c8:03:14: 54:ef:d6:6d:04:ba:2a:42:07:8e:3c:96:60:0c:47: 9a:fc:1f:79:f5:dc:58:91:13:8b:18:e6:79:2a:3f: 74:3d:a3:d7:4d:6c:2a:4e:2f:b0:c5:72:b1:7f:99: b6:17:3a:24:ec:cf:60:ae:33:c0:92:4c:ef:ed:90: ec:93:2e:24:64:a9:c3:d0:6e:dd:b5:23:e4:03:ed: f9:a2:0d:05:90:b7:61:8e:12:7a:06:b6:42:5e:6d: 22:7b:fd:a9:4b:ce:86:4f:5e:03:28:70:4b:7b:ea: 46:94:9c:41:a7:6c:63:0b:63:b6:fe:c7:ee:0d:14: f3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7A:79:95:26:65:03:12:28:76:48:79:55:A9:66:A5:02:6A:E5:B1 X509v3 Authority Key Identifier: keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:dc:ae:60:5e:36:9e:6a:da:5e:a2:3b:3f:62:bd:7e:01:30: f4:f1:d6:37:64:f3:3c:ad:01:cf:ac:49:b7:56:a8:56:7e:65: 96:3e:2a:dd:c2:c4:eb:60:06:47:91:3c:68:a9:64:54:a0:65: ef:3c:8f:f5:8a:7a:74:fb:54:19:6f:e5:48:bc:2f:c5:4b:43: 84:3a:bd:8f:e5:e2:c4:a2:34:27:1a:0e:6d:c3:7b:8f:e1:29: b6:78:36:7b:80:6b:4b:78:e7:61:fb:79:fa:4b:18:5b:c9:12: 53:0d:93:4d:e5:65:b3:50:42:0a:10:8b:cf:3c:9f:ad:a0:73: 65:9d:b3:25:8f:35:2f:34:35:7a:a5:97:c7:2d:89:3a:1a:a4: 4f:77:65:83:79:a9:ad:df:fd:f7:3c:0e:fe:d5:a7:40:15:cc: e7:a4:0d:1e:3f:86:7a:d7:ef:b5:a7:c2:36:4e:94:46:6b:77: 84:1a:cd:50:43:30:d9:f8:29:fd:ab:5e:93:7b:f8:9a:dc:3f: e1:04:0b:51:bf:50:13:08:a9:71:a1:da:df:9f:b6:81:56:66: 91:0c:a7:c9:40:5e:3c:a5:47:68:8f:f4:b4:76:df:13:6d:23: 70:78:e4:ba:93:ce:65:68:f0:99:ac:b0:6f:b4:bd:e1:c8:cc: e2:e6:22:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1RjExMTAvBgNVBAUTKEU0RTRDMjQyNDc3ODVDMzQyRkYzNTkwN0Y3RTExQzRB QkIzOThCODMwHhcNMjYwMTI1MDUzMzUzWhcNMjYwMjAxMDUzMzUzWjAYMRYwFAYD VQQDDA02OTc1YWI0Mi1kOTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqt89AXxpz5vHdbw3FGITTg0ZHnxaVURGk1//fxJ8lVqv7N4fZy0ndhFSYxl1 H6BqO1hrnLNl+wmZgVMcUDQK7vad4qXNe6fdDrSSw26C3Gxg8gPgfo0ZJUr+Gz1P Ta+Sk/JHvho7LJWH9QoKZ3gUsLOZL9A0IYG8v8EqFUK14vo7JmzIAxRU79ZtBLoq QgeOPJZgDEea/B959dxYkROLGOZ5Kj90PaPXTWwqTi+wxXKxf5m2Fzok7M9grjPA kkzv7ZDsky4kZKnD0G7dtSPkA+35og0FkLdhjhJ6BrZCXm0ie/2pS86GT14DKHBL e+pGlJxBp2xjC2O2/sfuDRTzOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGB6eZUm ZQMSKHZIeVWpZqUCauWxMB8GA1UdIwQYMBaAFOTkwkJHeFw0L/NZB/fhHEq7OYuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVGMS82MjIwNjMzQzBE RkMxMUYwQTFEOTgwNTNDNEY5QUUwMi81T1RDUWtkNFhEUXY4MWtIOS1FY1NyczVp NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVPVENRa2Q0WERRdjgxa0g5LUVjU3JzNWk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVGMS82MjIwNjMzQzBERkMxMUYwQTFEOTgwNTNDNEY5QUUwMi81T1RDUWtkNFhE UXY4MWtIOS1FY1NyczVpNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+3K5gXjaeatpeojs/Yr1+ATD08dY3ZPM8rQHPrEm3VqhWfmWWPird wsTrYAZHkTxoqWRUoGXvPI/1inp0+1QZb+VIvC/FS0OEOr2P5eLEojQnGg5tw3uP 4Sm2eDZ7gGtLeOdh+3n6SxhbyRJTDZNN5WWzUEIKEIvPPJ+toHNlnbMljzUvNDV6 pZfHLYk6GqRPd2WDeamt3/33PA7+1adAFcznpA0eP4Z61++1p8I2TpRGa3eEGs1Q QzDZ+Cn9q16Te/ia3D/hBAtRv1ATCKlxodrfn7aBVmaRDKfJQF48pUdoj/S0dt8T bSNweOS6k85laPCZrLBvtL3hyMzi5iJu -----END CERTIFICATE-----Generated at Sun Jan 25 23:11:44 2026 by rpki-client