This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft File: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft (raw, json) Hash identifier: Z0niYpj2/QeiJdMt4pLkvSGvkdq66JMPBbfQBxBrX5U= Subject key identifier: A9:4D:8A:6F:A8:9C:D7:FD:90:83:CC:10:4D:78:52:73:70:59:1E:1E Authority key identifier: 71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F Certificate issuer: /CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Certificate serial: 06AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft Manifest number: 06A5 Signing time: Sat 24 Jan 2026 21:39:50 +0000 Manifest this update: Sat 24 Jan 2026 21:39:49 +0000 Manifest next update: Sat 31 Jan 2026 21:39:49 +0000 Files and hashes: 1: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl (hash: 7DejxwdW7j0/Yhh+NOSeqcU+6lWtZ7SmfklvCyj4h7Q=) 2: 2F320256981611EB904AF150C4F9AE02.roa (hash: E4TUFKJ6pvq2MnnX/Fp4K5QwjuZ8zkimayyU0Jn+DJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1708 (0x6ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF84F, serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Validity Not Before: Jan 24 21:39:49 2026 GMT Not After : Jan 31 21:39:49 2026 GMT Subject: CN=69753c26-c3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d2:47:5a:fe:fd:da:2a:fb:6c:ab:aa:d4:1e: bc:94:d3:be:cb:25:ef:57:1b:0d:c5:ec:e6:4a:e6: 66:f5:4e:fb:60:9c:31:8e:97:5a:9f:6e:a8:8e:12: 50:2a:e0:5f:8c:54:c8:50:ab:29:ab:b7:3d:c2:d9: 97:be:60:7d:2d:f0:81:15:db:0a:ca:ad:06:32:6b: 9a:26:e7:19:09:5b:b3:79:10:11:77:b2:11:43:e6: 49:05:12:35:4f:4f:a6:d7:df:64:30:6f:7b:53:c8: 9d:0b:70:97:7a:c0:c7:92:de:00:25:e7:52:60:f1: c1:5e:23:dd:bb:93:3c:bc:f6:1b:f6:3d:d0:e3:dd: 71:9e:f6:35:5c:a1:72:f2:7e:6b:d7:9a:3d:98:f1: fd:9a:80:b7:91:73:8b:54:e3:48:e5:ca:65:36:2d: a3:99:97:a6:a8:f8:0c:c1:70:13:bb:f9:f2:48:39: 65:6f:4c:a0:fb:f3:98:20:3e:4e:26:89:78:3b:ca: 9f:c6:95:57:54:c6:a9:a9:ac:0c:3f:5c:a8:98:41: b0:a4:44:76:f9:c2:0b:34:70:54:63:3f:bd:45:4a: 9f:57:6f:71:b6:49:e5:68:7c:8f:2c:a6:03:36:0a: 93:f7:01:cc:1a:62:42:24:ea:e9:83:bd:3b:2c:65: 48:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4D:8A:6F:A8:9C:D7:FD:90:83:CC:10:4D:78:52:73:70:59:1E:1E X509v3 Authority Key Identifier: keyid:71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:05:26:bc:de:4b:24:4b:1f:4c:1c:96:e3:20:bf:5a:3c:ef: 60:d5:9b:2c:51:24:39:41:b8:b8:6a:49:67:10:2f:99:5b:70: f6:a0:62:c1:d9:72:60:bf:e1:dd:bf:bb:b3:f0:63:7c:ed:f3: 6f:8c:95:e9:df:e5:43:cd:cf:9b:23:f2:8e:36:97:1f:cc:dc: 62:84:95:1a:96:38:be:a5:7f:4c:34:ad:d6:5a:8c:a0:9b:37: b8:5b:f9:62:90:95:3e:ab:89:df:e7:a3:b5:b5:60:a7:39:3c: 8a:0b:e1:5f:0e:0e:42:8a:e3:7f:f0:e3:43:ee:ca:90:e4:6f: 2f:a2:40:77:2f:0b:99:91:9b:4a:49:0d:b8:5f:e3:3c:be:61: 29:2a:b4:0a:c4:39:08:3c:ab:b7:7e:0a:a3:db:32:50:04:1f: d9:ca:a3:2c:95:ce:a7:49:a2:01:e8:d3:03:c7:be:05:b8:1d: b5:c5:a0:9e:78:b4:6b:a5:e2:83:81:1f:d4:0f:e6:6f:e7:56: ac:4c:7f:a4:84:39:10:79:92:ca:75:77:bb:33:0f:4f:de:d5: a8:4a:48:cb:38:c0:2d:da:a8:da:3a:f8:a9:fb:9b:71:c3:87: 93:75:db:ad:b0:ef:51:d9:e5:31:29:7d:44:01:d5:c2:ca:9b: ab:15:1f:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY4NEYxMTAvBgNVBAUTKDcxNDFDMzE5QkI0NEJGQkNERTMzODJCM0JCNjkxMjY1 Rjk1RDMwOUYwHhcNMjYwMTI0MjEzOTQ5WhcNMjYwMTMxMjEzOTQ5WjAYMRYwFAYD VQQDDA02OTc1M2MyNi1jM2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9JHWv792ir7bKuq1B68lNO+yyXvVxsNxezmSuZm9U77YJwxjpdan26ojhJQ KuBfjFTIUKspq7c9wtmXvmB9LfCBFdsKyq0GMmuaJucZCVuzeRARd7IRQ+ZJBRI1 T0+m199kMG97U8idC3CXesDHkt4AJedSYPHBXiPdu5M8vPYb9j3Q491xnvY1XKFy 8n5r15o9mPH9moC3kXOLVONI5cplNi2jmZemqPgMwXATu/nySDllb0yg+/OYID5O Jol4O8qfxpVXVMapqawMP1yomEGwpER2+cILNHBUYz+9RUqfV29xtknlaHyPLKYD NgqT9wHMGmJCJOrpg707LGVIgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlNim+o nNf9kIPMEE14UnNwWR4eMB8GA1UdIwQYMBaAFHFBwxm7RL+83jOCs7tpEmX5XTCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjg0Ri9ERDQ4N0E1Qzk4 MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3emVNNEt6dTJrU1pmbGRN SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NVSERHYnRFdjd6ZU00S3p1MmtTWmZsZE1KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjg0Ri9ERDQ4N0E1Qzk4MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3 emVNNEt6dTJrU1pmbGRNSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/BSa83kskSx9MHJbjIL9aPO9g1ZssUSQ5Qbi4aklnEC+ZW3D2oGLB 2XJgv+Hdv7uz8GN87fNvjJXp3+VDzc+bI/KONpcfzNxihJUalji+pX9MNK3WWoyg mze4W/likJU+q4nf56O1tWCnOTyKC+FfDg5CiuN/8OND7sqQ5G8vokB3LwuZkZtK SQ24X+M8vmEpKrQKxDkIPKu3fgqj2zJQBB/ZyqMslc6nSaIB6NMDx74FuB21xaCe eLRrpeKDgR/UD+Zv51asTH+khDkQeZLKdXe7Mw9P3tWoSkjLOMAt2qjaOvip+5tx w4eTddutsO9R2eUxKX1EAdXCypurFR+S -----END CERTIFICATE-----Generated at Sun Jan 25 12:20:41 2026 by rpki-client