This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft File: CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft (raw, json) Hash identifier: ESIqO0A73oX8GnDhA2yqdJPVDlSZuSG9Rf/KTjAmT1M= Subject key identifier: FD:D5:16:DA:C8:CE:E8:6F:40:63:A4:89:BC:9B:0C:1E:1C:B6:73:97 Authority key identifier: 09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C Certificate issuer: /CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft Manifest number: 0134 Signing time: Sun 25 Jan 2026 03:46:05 +0000 Manifest this update: Sun 25 Jan 2026 03:46:05 +0000 Manifest next update: Sun 01 Feb 2026 03:46:05 +0000 Files and hashes: 1: CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl (hash: wGcj6l5WG2jlWBiaO02QH5/AbcY1eGNsHI6E6MG4UD0=) 2: BE16D82423EC11EF8684D033C4F9AE02.roa (hash: GcLg66G+nJPqXwCpBzyC3D0WjujSmh3tIwuu+y3/BEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA5F, serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Validity Not Before: Jan 25 03:46:05 2026 GMT Not After : Feb 1 03:46:05 2026 GMT Subject: CN=697591fd-1795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8a:7c:72:a9:3b:56:2c:25:06:11:17:84:70: f7:c7:9f:b5:c1:68:85:12:f9:04:2d:63:e6:64:67: 0b:4b:31:3e:f8:81:b3:f4:76:49:52:f4:49:c4:7f: 87:f2:83:70:d8:6d:dd:f4:ce:53:1c:20:e1:a7:9d: 46:e6:f9:cc:1e:24:91:c6:4b:7f:8f:dd:df:cd:da: 9f:54:23:59:af:2f:16:22:a1:4c:58:2e:07:72:2b: cb:09:ac:ab:41:04:c4:a5:a8:22:5b:39:7e:8b:c4: 6f:14:96:51:39:5f:ef:85:fd:01:29:27:03:42:dd: a0:33:bc:b9:12:2c:0c:3f:8f:ba:8d:aa:d6:78:de: 37:63:35:49:50:93:77:c2:02:ce:ed:3c:9e:7f:49: e2:9d:1e:1c:71:f8:3f:f9:9b:58:92:a5:2f:4c:98: 42:11:7c:62:04:5f:d4:9f:3f:8d:de:e9:d5:a1:28: f7:8b:8d:1f:95:22:2d:fa:fa:bf:27:09:ce:1c:b5: e1:43:33:a9:7f:41:0e:ad:68:d2:03:e8:83:19:d6: 8c:68:09:60:3d:72:43:05:32:0a:e5:5b:f4:18:9e: aa:ba:ab:17:38:9e:06:cd:49:87:56:d1:14:4e:15: 68:34:1e:2a:2c:2e:86:f1:de:5e:89:9b:78:ad:f7: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D5:16:DA:C8:CE:E8:6F:40:63:A4:89:BC:9B:0C:1E:1C:B6:73:97 X509v3 Authority Key Identifier: keyid:09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ab:32:16:47:c0:ee:f1:5d:4f:86:7d:5b:6c:97:b8:7a:e0: 1a:5d:43:8b:99:3d:19:13:d4:cd:99:f4:7c:11:5a:3d:c3:74: f0:17:60:04:37:8f:14:37:84:ae:67:df:c3:2a:94:85:7b:84: 37:6a:fe:ee:3b:5b:15:b5:6b:e5:e7:4c:be:88:5a:89:98:b7: 8e:18:64:46:f2:f1:27:b3:72:07:3e:06:91:9d:5f:74:58:d5: ed:21:ad:28:d2:0c:a6:31:10:84:63:50:4f:5f:2b:01:a2:ef: 03:28:3a:a2:a0:d9:4f:fb:17:e9:80:b5:d1:e1:57:1e:33:57: 1f:5b:a2:16:12:3a:34:b9:31:9a:0f:01:53:ef:a0:0b:31:77: 10:59:ca:c8:70:34:af:84:e2:c6:66:91:e4:4c:59:d7:86:06: 5b:9a:e8:b3:0d:f7:b2:2a:20:1a:02:bf:81:18:d4:03:aa:65: 93:42:84:a0:a2:51:9c:bf:44:93:33:dc:9f:e9:82:d9:87:f1: 79:88:eb:55:1a:ff:af:2e:8b:e9:2d:11:a8:0f:00:6f:92:23: 18:6e:22:b7:13:0c:37:74:47:56:94:c7:c6:03:61:37:cf:d7: 76:be:8b:c7:bc:bd:de:bc:56:5a:28:0b:df:1b:c2:3e:ac:76: d4:96:3f:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNUYxMTAvBgNVBAUTKDA5QzdEOUU3RjI2M0RCMEI4QjgyMDFFN0QyOTNDQURF Q0I5N0NGOEMwHhcNMjYwMTI1MDM0NjA1WhcNMjYwMjAxMDM0NjA1WjAYMRYwFAYD VQQDDA02OTc1OTFmZC0xNzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ip8cqk7ViwlBhEXhHD3x5+1wWiFEvkELWPmZGcLSzE++IGz9HZJUvRJxH+H 8oNw2G3d9M5THCDhp51G5vnMHiSRxkt/j93fzdqfVCNZry8WIqFMWC4HcivLCayr QQTEpagiWzl+i8RvFJZROV/vhf0BKScDQt2gM7y5EiwMP4+6jarWeN43YzVJUJN3 wgLO7Tyef0ninR4ccfg/+ZtYkqUvTJhCEXxiBF/Unz+N3unVoSj3i40flSIt+vq/ JwnOHLXhQzOpf0EOrWjSA+iDGdaMaAlgPXJDBTIK5Vv0GJ6quqsXOJ4GzUmHVtEU ThVoNB4qLC6G8d5eiZt4rfcnXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3VFtrI zuhvQGOkibybDB4ctnOXMB8GA1UdIwQYMBaAFAnH2efyY9sLi4IB59KTyt7Ll8+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE1Ri80QjU5MDZCODIz RUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3dUxnZ0huMHBQSzNzdVh6 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjZlo1X0pqMnd1TGdnSG4wcFBLM3N1WHo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE1Ri80QjU5MDZCODIzRUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3 dUxnZ0huMHBQSzNzdVh6NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPqzIWR8Du8V1Phn1bbJe4euAaXUOLmT0ZE9TNmfR8EVo9w3TwF2AE N48UN4SuZ9/DKpSFe4Q3av7uO1sVtWvl50y+iFqJmLeOGGRG8vEns3IHPgaRnV90 WNXtIa0o0gymMRCEY1BPXysBou8DKDqioNlP+xfpgLXR4VceM1cfW6IWEjo0uTGa DwFT76ALMXcQWcrIcDSvhOLGZpHkTFnXhgZbmuizDfeyKiAaAr+BGNQDqmWTQoSg olGcv0STM9yf6YLZh/F5iOtVGv+vLovpLRGoDwBvkiMYbiK3Eww3dEdWlMfGA2E3 z9d2vovHvL3evFZaKAvfG8I+rHbUlj8G -----END CERTIFICATE-----Generated at Sun Jan 25 08:15:23 2026 by rpki-client