This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft File: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft (raw, json) Hash identifier: 5NfjkXBXeh/LLtJ5TA0JScmY8s7YXbZk2n4QSv7JiyE= Subject key identifier: 2F:E1:AD:EB:0C:E7:70:40:F5:0B:74:9D:C2:26:E7:95:E5:45:32:13 Authority key identifier: 0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2 Certificate issuer: /CN=apnic-rpki-root-iana-origin Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Subject info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft Manifest number: D6 Signing time: Sun 18 Jan 2026 23:14:55 +0000 Manifest this update: Sun 18 Jan 2026 23:14:55 +0000 Manifest next update: Wed 25 Feb 2026 23:14:55 +0000 Files and hashes: 1: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl (hash: qvhTC9BlwwX6Dj3019MY5F5epiRDupW15Ez6PerAE/g=) 2: mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer (hash: ahHgYHJpPQeo+cEhGy/tSNz0120m2CdyQeEG6CiAs50=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 23:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=apnic-rpki-root-iana-origin Validity Not Before: Jan 18 23:14:55 2026 GMT Not After : Feb 25 23:14:55 2026 GMT Subject: CN=696d696f-6e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:56:2c:99:05:b9:55:55:23:fe:83:2c:50: 10:8a:20:b4:9f:0d:a4:48:06:5b:fc:80:35:c8:5d: 5c:f5:26:4d:c8:9d:cd:87:7c:51:a6:8b:97:24:ef: a5:c4:cb:9c:56:6f:cf:bb:4f:ee:13:e0:b8:af:69: 8c:cc:49:d7:cb:dc:56:45:82:5d:a1:0d:62:68:5d: 85:ed:6a:8b:67:11:81:d4:5a:6c:3e:18:77:19:0a: f3:90:ae:18:71:c9:be:8f:7c:fd:08:d4:cf:69:3f: a3:2a:65:53:05:df:23:65:62:b2:7c:19:a0:14:8e: 1e:e0:a3:1c:f6:ed:59:32:0f:03:87:99:e7:08:ba: b4:cf:bc:4a:e6:e6:16:ac:e8:6d:81:16:31:ed:d2: 56:28:44:a2:ae:dc:3e:88:ec:93:48:40:47:15:10: 0e:3c:ac:f2:c1:10:e3:c8:67:08:de:ad:5f:db:61: 4a:b2:92:8d:10:e8:76:a8:a2:9f:9d:d7:0d:9c:0e: 19:c5:16:f1:4b:57:5f:43:a7:83:11:86:e1:9b:e8: e2:b3:94:41:ad:1a:6a:c8:9c:b4:0a:ac:52:6e:bc: 61:11:e2:a0:a7:8a:8f:b9:68:cd:28:97:ce:58:f0: 1c:cf:b0:20:d9:a4:1a:d9:6e:07:37:84:e4:1b:da: c6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E1:AD:EB:0C:E7:70:40:F5:0B:74:9D:C2:26:E7:95:E5:45:32:13 X509v3 Authority Key Identifier: keyid:0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:a6:1c:e5:06:4a:34:9d:59:8d:43:6d:54:74:4b:da:7f:b5: dc:6d:53:bb:48:29:57:af:41:b1:9d:1b:1b:59:30:74:1a:88: d9:e8:93:2a:be:34:e2:7f:25:51:67:6f:ff:fa:62:41:23:eb: f7:64:4c:63:a2:b4:96:e2:7e:a9:ba:41:03:2a:58:09:73:c7: cc:28:a7:f9:10:2d:0d:42:04:76:79:68:c9:96:0a:d2:ba:aa: 68:c4:d0:e4:c7:4c:6a:1c:22:45:da:db:c8:3e:9c:72:b1:d8: bd:f2:16:39:07:bc:b6:af:c0:53:71:a6:45:97:3d:ff:41:fe: 02:51:54:44:20:c9:77:b4:94:95:32:b6:64:96:25:e0:fe:b3: 45:a2:7f:02:31:a9:30:66:8a:0a:45:c1:80:3e:33:17:76:0e: 5c:e6:9a:f7:e8:34:28:e9:bf:eb:0b:ef:ec:34:7e:83:97:24: be:fe:87:68:62:81:4e:17:94:a7:62:4f:99:e6:8d:b1:63:fa: 03:8b:b5:79:25:17:2c:93:2e:7b:19:82:1b:81:ac:a1:a9:34: 4b:db:e9:89:f7:82:cc:4f:62:00:d9:be:6e:eb:a0:98:dc:9b: da:2d:7d:a7:c6:6a:6b:9e:eb:84:17:6f:e9:b9:d2:e5:1e:d4: b8:ac:7c:4e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwJjEkMCIGA1UEAxMbYXBu aWMtcnBraS1yb290LWlhbmEtb3JpZ2luMB4XDTI2MDExODIzMTQ1NVoXDTI2MDIy NTIzMTQ1NVowGDEWMBQGA1UEAxMNNjk2ZDY5NmYtNmU1MDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKkDViyZBblVVSP+gyxQEIogtJ8NpEgGW/yANchd XPUmTcidzYd8UaaLlyTvpcTLnFZvz7tP7hPguK9pjMxJ18vcVkWCXaENYmhdhe1q i2cRgdRabD4YdxkK85CuGHHJvo98/QjUz2k/oyplUwXfI2VisnwZoBSOHuCjHPbt WTIPA4eZ5wi6tM+8SubmFqzobYEWMe3SVihEoq7cPojsk0hARxUQDjys8sEQ48hn CN6tX9thSrKSjRDodqiin53XDZwOGcUW8UtXX0OngxGG4Zvo4rOUQa0aasictAqs Um68YRHioKeKj7lozSiXzljwHM+wINmkGtluBzeE5BvaxisCAwEAAaOCAi4wggIq MB0GA1UdDgQWBBQv4a3rDOdwQPULdJ3CJueV5UUyEzAfBgNVHSMEGDAWgBQLnMqQ 3Q16ijdmaxkhf+DYQDe3ojAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5LzgzOERCMjE0MTY2 NTExRTJCM0JDMjg2MTcyRkQxRkYyL0M1ektrTjBOZW9vM1ptc1pJWF9nMkVBM3Q2 SS5jcmwwXQYIKwYBBQUHAQEEUTBPME0GCCsGAQUFBzAChkFyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvYXBuaWMtcnBraS1yb290LWlhbmEtb3JpZ2lu LmNlcjBKBgNVHSABAf8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0 dHBzOi8vd3d3LmFwbmljLm5ldC9SUEtJL0NQUy5wZGYwfgYIKwYBBQUHAQsEcjBw MG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv ODM4REIyMTQxNjY1MTFFMkIzQkMyODYxNzJGRDFGRjIvQzV6S2tOME5lb28zWm1z WklYX2cyRUEzdDZJLm1mdDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAJOm HOUGSjSdWY1DbVR0S9p/tdxtU7tIKVevQbGdGxtZMHQaiNnokyq+NOJ/JVFnb//6 YkEj6/dkTGOitJbifqm6QQMqWAlzx8wop/kQLQ1CBHZ5aMmWCtK6qmjE0OTHTGoc IkXa28g+nHKx2L3yFjkHvLavwFNxpkWXPf9B/gJRVEQgyXe0lJUytmSWJeD+s0Wi fwIxqTBmigpFwYA+Mxd2DlzmmvfoNCjpv+sL7+w0foOXJL7+h2higU4XlKdiT5nm jbFj+gOLtXklFyyTLnsZghuBrKGpNEvb6Yn3gsxPYgDZvm7roJjcm9otfafGamue 64QXb+m50uUe1LisfE4= -----END CERTIFICATE-----Generated at Sat Jan 24 22:09:45 2026 by rpki-client