This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json) Hash identifier: 7W9AjcMsn+6NAn3YEiij97Pbw8b9tHy/Q3PA8xFRe1s= Subject key identifier: CF:D0:DF:7E:E9:27:06:DD:F3:45:59:86:1A:63:D3:BB:5A:EE:7D:C5 Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Certificate serial: 06DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft Manifest number: 06DF Signing time: Sat 24 Jan 2026 21:20:17 +0000 Manifest this update: Sat 24 Jan 2026 21:20:16 +0000 Manifest next update: Sat 31 Jan 2026 21:20:16 +0000 Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: i20Nwulq+1t6Z9BoLJp/7fpMHqqMtehZGa/wUbi+ZjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1759 (0x6df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFDF3, serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Validity Not Before: Jan 24 21:20:16 2026 GMT Not After : Jan 31 21:20:16 2026 GMT Subject: CN=69753791-85a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:49:db:6c:87:4c:26:c6:4e:35:e3:d2:da: 55:ec:e3:3a:b5:1b:c2:95:69:66:a4:ae:74:d6:12: f0:8c:37:06:29:1f:94:4d:c7:f4:26:63:c9:ae:96: 96:fc:d9:ae:6b:c4:f7:a9:7b:f6:4f:3c:05:de:b7: 83:cf:39:67:7a:54:f8:56:08:73:e8:de:3e:44:7c: 5c:8b:7a:bd:64:09:90:94:ed:41:1a:46:e7:d0:80: 06:d2:d1:08:1c:29:6b:fd:0d:78:b6:c6:ad:be:72: ff:0a:2e:b7:4c:25:6d:fd:1c:71:9f:b8:42:48:79: c4:32:25:b9:ba:d9:ba:08:88:53:c1:bc:09:52:ad: 75:24:85:34:c8:07:2e:1a:c7:53:05:79:02:e9:31: 34:a4:80:d5:c3:51:35:7a:3b:15:f6:1d:72:74:96: 39:d1:72:38:56:3d:d5:83:06:f8:85:7d:1b:51:7f: 8f:cd:4c:41:f2:ea:51:ed:ff:e2:33:91:a4:15:30: ac:59:e6:07:60:d1:27:a8:cc:2d:4a:59:09:97:f0: 7a:43:e1:c1:57:04:79:8c:38:dd:9e:2c:7a:c0:92: 78:ab:3a:34:28:bd:55:b4:33:6d:74:eb:1e:48:66: 0a:fa:e8:ac:e7:30:52:e5:79:f7:0d:b5:35:33:ec: ca:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D0:DF:7E:E9:27:06:DD:F3:45:59:86:1A:63:D3:BB:5A:EE:7D:C5 X509v3 Authority Key Identifier: keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0f:b4:22:54:20:17:c0:a4:0a:78:db:4c:f3:dc:04:64:fb: fc:93:83:d3:a1:9e:20:f8:d0:a7:3f:67:da:fb:40:73:ed:d4: 37:60:06:fa:02:b1:a8:63:8d:b4:0a:12:29:82:0b:f2:31:dc: ec:cd:a6:97:8a:8f:4a:a4:c1:52:7a:6e:8c:48:46:c8:45:cd: 25:2d:aa:d2:a6:10:05:7c:f7:c6:83:48:4f:15:a9:9d:7e:9e: 59:da:a3:8c:7c:41:34:a7:11:4d:30:60:ec:c3:a3:90:97:84: e1:d7:a3:9d:12:0b:d7:94:a0:b3:0b:76:34:98:4a:f9:6b:01: 2a:ce:8b:c7:db:e3:5d:1d:e3:93:30:22:2b:04:80:be:29:eb: 1f:eb:65:78:60:1d:40:0f:c9:be:87:b4:d3:98:c0:ab:2a:d9: e6:78:66:e8:ae:4b:f4:98:d1:2a:5c:42:06:e5:71:a9:60:a8: ff:b4:d6:56:83:31:55:1a:ad:b7:40:ba:d2:2b:9e:63:42:aa: e2:e6:52:82:80:47:f1:bf:5f:f8:64:a8:6e:7c:e8:ac:c1:66: f3:ff:da:d5:39:7e:c0:8c:87:b9:5f:52:b3:cf:a3:8c:46:a8: bb:ad:c0:04:57:51:70:ef:b5:4f:4a:4c:17:c2:d3:87:67:38: 23:cd:16:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZERjMxMTAvBgNVBAUTKDcyNzQwMjNCMUZCNEE3NDkzMjhGNUQ0REY4M0IwREQz RjA3RkU5NDIwHhcNMjYwMTI0MjEyMDE2WhcNMjYwMTMxMjEyMDE2WjAYMRYwFAYD VQQDDA02OTc1Mzc5MS04NWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArClJ22yHTCbGTjXj0tpV7OM6tRvClWlmpK501hLwjDcGKR+UTcf0JmPJrpaW /Nmua8T3qXv2TzwF3reDzzlnelT4Vghz6N4+RHxci3q9ZAmQlO1BGkbn0IAG0tEI HClr/Q14tsatvnL/Ci63TCVt/Rxxn7hCSHnEMiW5utm6CIhTwbwJUq11JIU0yAcu GsdTBXkC6TE0pIDVw1E1ejsV9h1ydJY50XI4Vj3Vgwb4hX0bUX+PzUxB8upR7f/i M5GkFTCsWeYHYNEnqMwtSlkJl/B6Q+HBVwR5jDjdnix6wJJ4qzo0KL1VtDNtdOse SGYK+uis5zBS5Xn3DbU1M+zKpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/Q337p Jwbd80VZhhpj07ta7n3FMB8GA1UdIwQYMBaAFHJ0AjsftKdJMo9dTfg7DdPwf+lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkRGMy83NTdEQjc4ODdE NzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAwa3lqMTFOLURzTjBfQl82 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuUUNPeC0wcDBreWoxMU4tRHNOMF9CXzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkRGMy83NTdEQjc4ODdENzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAw a3lqMTFOLURzTjBfQl82VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9D7QiVCAXwKQKeNtM89wEZPv8k4PToZ4g+NCnP2fa+0Bz7dQ3YAb6 ArGoY420ChIpggvyMdzszaaXio9KpMFSem6MSEbIRc0lLarSphAFfPfGg0hPFamd fp5Z2qOMfEE0pxFNMGDsw6OQl4Th16OdEgvXlKCzC3Y0mEr5awEqzovH2+NdHeOT MCIrBIC+Kesf62V4YB1AD8m+h7TTmMCrKtnmeGborkv0mNEqXEIG5XGpYKj/tNZW gzFVGq23QLrSK55jQqri5lKCgEfxv1/4ZKhufOiswWbz/9rVOX7AjIe5X1Kzz6OM Rqi7rcAEV1Fw77VPSkwXwtOHZzgjzRaA -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:13 2026 by rpki-client