This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft File: CcNrxl3nKgQUf51yIL26jVJdFWQ.mft (raw, json) Hash identifier: 9VCUGqdpvfrm4NcndrEIARTRYSDvnHskmoU/Je7SxyU= Subject key identifier: 58:03:E7:6F:DE:90:51:4E:D9:09:84:CF:D4:E3:21:71:EA:4B:4E:FF Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 Certificate issuer: /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft Manifest number: 0132 Signing time: Sun 25 Jan 2026 03:47:09 +0000 Manifest this update: Sun 25 Jan 2026 03:47:09 +0000 Manifest next update: Sun 01 Feb 2026 03:47:09 +0000 Files and hashes: 1: CcNrxl3nKgQUf51yIL26jVJdFWQ.crl (hash: 21zitd/0VTI5bNNvRqdxOg8tugjWK4f1ot1agf+eT8A=) 2: 24AB7D08271F11EF81086430C4F9AE02.roa (hash: 2wSZlJkEVODTCB+anJmD5JlJEQTA220xHKcLvDnH+18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Validity Not Before: Jan 25 03:47:09 2026 GMT Not After : Feb 1 03:47:09 2026 GMT Subject: CN=6975923d-da33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c8:ed:d3:cd:a2:3f:15:24:8e:0a:cf:35:b6: 5f:c6:c4:76:fb:11:a1:62:14:48:01:2f:d4:20:3b: 23:eb:9e:64:ba:1d:aa:e0:89:1e:08:cc:c2:7c:80: 28:23:7a:de:7b:87:ce:39:79:48:f4:92:bf:00:7a: e0:b4:b7:3b:95:72:52:4a:f5:83:48:35:cf:76:ac: cb:28:5e:c0:29:30:df:d0:9b:74:21:7a:4b:0e:ed: 2f:3a:f1:f7:d1:fb:5c:d5:dd:14:8d:d7:01:63:15: ae:f3:82:4f:74:89:03:cd:bc:d1:9c:51:55:dd:31: c7:23:c9:e1:da:57:d0:a9:6c:c6:20:70:01:24:c7: 5a:55:6c:d7:ee:03:6e:7f:0c:6b:a1:12:04:37:52: 18:99:9c:4c:17:c3:d2:68:6d:36:d6:f4:ab:f0:f1: d1:c7:3e:04:72:e8:e5:65:a0:39:c0:36:67:0a:95: e4:7e:f0:5e:73:08:72:ed:fb:92:4e:e4:11:b4:c5: 27:c6:88:e1:c6:58:f1:14:1e:48:9e:b6:bc:59:21: dd:c6:4e:a5:48:24:d4:66:99:02:9e:7b:0d:7a:f2: 7b:44:56:ab:72:d8:79:46:f6:7f:9e:6c:18:70:aa: 48:16:ba:02:eb:33:03:14:0f:9d:7a:f9:50:21:44: 8c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:03:E7:6F:DE:90:51:4E:D9:09:84:CF:D4:E3:21:71:EA:4B:4E:FF X509v3 Authority Key Identifier: keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:ad:0c:d2:9e:40:05:90:0c:76:cb:86:36:a6:eb:58:e6:50: d0:ef:eb:02:ea:a6:b0:4a:4c:36:ad:ea:0d:87:88:29:db:d6: c6:01:d0:f4:ad:bf:6c:9b:ed:1a:09:83:21:ef:ef:5f:42:d3: 74:e3:78:5e:c8:cd:bb:b9:4e:0f:bd:a0:5f:46:eb:8e:f3:97: a1:10:9c:ee:bf:3a:4a:64:ba:2c:7c:57:80:e2:e4:2b:38:15: f7:82:f9:14:72:9e:77:bf:b7:ee:e7:63:46:52:54:88:81:b7: 5f:ae:ab:48:1b:9a:88:b4:ba:8d:66:5d:f2:21:a3:1f:90:d4: be:ab:84:70:62:f7:86:d4:cd:f4:02:7f:d4:c7:66:3a:25:28: 8f:1c:a2:f7:b4:c9:68:e6:20:f5:dc:bf:1e:e7:3b:f6:64:9a: ab:34:85:24:fd:1a:80:b9:64:9c:18:55:4b:a9:af:9a:d7:fc: 02:36:f3:93:26:66:73:37:a7:31:2f:2e:6f:b9:d8:54:fe:08: 7d:a0:42:0a:c5:18:c4:aa:b8:3e:09:b1:3b:fd:9c:e0:cd:b1: 14:7c:ab:61:1a:4a:cb:c7:5c:04:61:80:2a:4c:23:73:54:b0: ba:87:84:5e:a5:da:97:e0:7e:35:c2:e3:e4:02:d6:c5:e9:24: 05:b3:fc:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDA5QzM2QkM2NURFNzJBMDQxNDdGOUQ3MjIwQkRCQThE NTI1RDE1NjQwHhcNMjYwMTI1MDM0NzA5WhcNMjYwMjAxMDM0NzA5WjAYMRYwFAYD VQQDDA02OTc1OTIzZC1kYTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8jt082iPxUkjgrPNbZfxsR2+xGhYhRIAS/UIDsj655kuh2q4IkeCMzCfIAo I3ree4fOOXlI9JK/AHrgtLc7lXJSSvWDSDXPdqzLKF7AKTDf0Jt0IXpLDu0vOvH3 0ftc1d0UjdcBYxWu84JPdIkDzbzRnFFV3THHI8nh2lfQqWzGIHABJMdaVWzX7gNu fwxroRIEN1IYmZxMF8PSaG021vSr8PHRxz4EcujlZaA5wDZnCpXkfvBecwhy7fuS TuQRtMUnxojhxljxFB5Inra8WSHdxk6lSCTUZpkCnnsNevJ7RFarcth5RvZ/nmwY cKpIFroC6zMDFA+devlQIUSMFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgD52/e kFFO2QmEz9TjIXHqS07/MB8GA1UdIwQYMBaAFAnDa8Zd5yoEFH+dciC9uo1SXRVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy9BMzk3QTNFNDI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktnUVVmNTF5SUwyNmpWSmRG V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjTnJ4bDNuS2dRVWY1MXlJTDI2alZKZEZXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy9BMzk3QTNFNDI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktn UVVmNTF5SUwyNmpWSmRGV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1rQzSnkAFkAx2y4Y2putY5lDQ7+sC6qawSkw2reoNh4gp29bGAdD0 rb9sm+0aCYMh7+9fQtN043heyM27uU4PvaBfRuuO85ehEJzuvzpKZLosfFeA4uQr OBX3gvkUcp53v7fu52NGUlSIgbdfrqtIG5qItLqNZl3yIaMfkNS+q4RwYveG1M30 An/Ux2Y6JSiPHKL3tMlo5iD13L8e5zv2ZJqrNIUk/RqAuWScGFVLqa+a1/wCNvOT JmZzN6cxLy5vudhU/gh9oEIKxRjEqrg+CbE7/ZzgzbEUfKthGkrLx1wEYYAqTCNz VLC6h4RepdqX4H41wuPkAtbF6SQFs/zF -----END CERTIFICATE-----Generated at Sun Jan 25 09:26:55 2026 by rpki-client