This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json) Hash identifier: yd7PGoIn5FnRq1IfX9FzDYcpcqtXNPrDvOfGUhHjlsU= Subject key identifier: 70:FC:F9:4A:31:F3:4B:BD:B7:CA:43:1B:83:EB:99:56:77:13:28:31 Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Certificate serial: 2C1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft Manifest number: 2C1C Signing time: Fri 16 Jan 2026 15:24:00 +0000 Manifest this update: Fri 16 Jan 2026 15:24:00 +0000 Manifest next update: Fri 23 Jan 2026 15:24:00 +0000 Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: P107d4eCrfamKsev2BG1bX9JPTWIN0YuNI3txO9ISj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 15:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11292 (0x2c1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Validity Not Before: Jan 16 15:24:00 2026 GMT Not After : Jan 23 15:24:00 2026 GMT Subject: CN=696a5810-2d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:26:70:ef:c3:b1:c6:d0:25:c1:fc:ca:f7:1a: ee:b6:12:51:13:be:71:66:07:ce:6b:69:b3:6f:fb: 8e:a5:40:fa:4e:57:41:c4:f8:c3:1a:d5:c9:7a:46: 68:d4:1d:63:0e:38:a6:7e:c3:63:07:b9:9d:a3:06: b3:4c:d3:6f:9c:40:0f:3d:ef:ec:57:e3:0d:02:ae: 53:f6:ad:d1:4b:9f:60:e7:32:36:5b:6d:ff:ac:a0: 48:62:ed:fe:0f:b2:fc:25:79:80:37:d7:49:46:8d: 71:0f:8c:eb:48:3a:c6:f7:b7:ba:0c:26:23:f8:68: 59:34:12:e4:0b:2b:71:22:85:1b:23:70:d6:c1:d4: 9b:5c:5a:ce:5d:5c:53:a6:1f:ce:60:ad:05:25:98: a2:42:63:25:c7:55:b5:af:f1:0d:ac:a6:31:7a:58: 0a:d0:32:26:20:51:ac:b5:d0:be:1d:ea:00:32:d6: 2a:fe:b6:cc:01:dd:cd:21:cc:ae:70:b9:70:0b:93: 7f:cd:b5:ff:d2:08:77:dc:c0:e0:37:cd:50:cb:ff: 2f:6a:28:df:73:95:8d:6a:a1:ee:ca:a6:8b:8b:f5: c7:08:1c:4b:c6:bd:c8:dc:b2:02:a6:cf:ef:37:94: 96:4a:11:d9:ab:33:5a:6e:53:4d:83:e4:7d:d7:bf: de:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FC:F9:4A:31:F3:4B:BD:B7:CA:43:1B:83:EB:99:56:77:13:28:31 X509v3 Authority Key Identifier: keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8b:0e:df:99:22:ff:96:8e:77:5e:2b:65:62:2e:53:6d:43: db:fd:2c:5f:81:4b:72:66:52:64:14:31:a4:27:ce:16:14:ee: 94:82:db:70:5a:f3:61:7f:3b:68:29:01:f9:21:39:44:ad:3c: 02:81:47:38:09:9b:a8:6a:9d:e9:bb:2f:be:43:e8:1d:c6:4f: 05:19:8e:da:31:8d:4c:cb:77:7b:1b:03:92:9b:58:52:c7:70: 68:08:b7:ce:ba:1a:f0:e9:e7:ed:31:a9:c4:1c:69:55:26:6c: eb:b8:31:d6:fe:c2:1a:45:54:cc:13:94:c9:4b:cb:f7:9f:ac: 85:c4:75:c6:2c:89:b7:f4:fb:f1:dc:47:dc:ab:66:7b:93:65: 32:30:ba:7b:e9:d0:d8:e6:d5:bc:fe:da:80:d1:ad:bc:9a:30: cd:e5:0f:56:eb:26:f1:00:b5:a9:90:dc:1a:5f:71:a7:6e:c0: 44:05:a9:9c:8d:e5:e3:40:b2:fd:10:d9:02:44:c7:39:49:17: cd:49:b1:e9:6d:92:97:95:84:68:53:72:ca:d0:2f:40:0f:04: 6e:33:5d:78:41:7e:6e:1b:91:75:6c:5e:1f:20:4d:2f:7f:55: 1e:24:69:80:e9:07:22:eb:6c:52:df:92:cb:4d:34:82:a7:ca: 0d:db:02:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEQ3NTJBQzI2MDU5NURFNkQxMDI5QzdCOTQ4RjQ5NDk3 RTQ4M0VBQ0UwHhcNMjYwMTE2MTUyNDAwWhcNMjYwMTIzMTUyNDAwWjAYMRYwFAYD VQQDDA02OTZhNTgxMC0yZDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCZw78OxxtAlwfzK9xruthJRE75xZgfOa2mzb/uOpUD6TldBxPjDGtXJekZo 1B1jDjimfsNjB7mdowazTNNvnEAPPe/sV+MNAq5T9q3RS59g5zI2W23/rKBIYu3+ D7L8JXmAN9dJRo1xD4zrSDrG97e6DCYj+GhZNBLkCytxIoUbI3DWwdSbXFrOXVxT ph/OYK0FJZiiQmMlx1W1r/ENrKYxelgK0DImIFGstdC+HeoAMtYq/rbMAd3NIcyu cLlwC5N/zbX/0gh33MDgN81Qy/8vaijfc5WNaqHuyqaLi/XHCBxLxr3I3LICps/v N5SWShHZqzNablNNg+R917/eKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHD8+Uox 80u9t8pDG4PrmVZ3EygxMB8GA1UdIwQYMBaAFNdSrCYFld5tECnHuUj0lJfkg+rO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC8zRDNGRTlCNkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNtMFFLY2U1U1BTVWwtU0Q2 czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzExS3NKZ1dWM20wUUtjZTVTUFNVbC1TRDZzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC8zRDNGRTlCNkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNt MFFLY2U1U1BTVWwtU0Q2czQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOiw7fmSL/lo53XitlYi5TbUPb/SxfgUtyZlJkFDGkJ84WFO6Ugttw WvNhfztoKQH5ITlErTwCgUc4CZuoap3puy++Q+gdxk8FGY7aMY1My3d7GwOSm1hS x3BoCLfOuhrw6eftManEHGlVJmzruDHW/sIaRVTME5TJS8v3n6yFxHXGLIm39Pvx 3Efcq2Z7k2UyMLp76dDY5tW8/tqA0a28mjDN5Q9W6ybxALWpkNwaX3GnbsBEBamc jeXjQLL9ENkCRMc5SRfNSbHpbZKXlYRoU3LK0C9ADwRuM114QX5uG5F1bF4fIE0v f1UeJGmA6Qci62xS35LLTTSCp8oN2wJB -----END CERTIFICATE-----Generated at Sun Jan 18 03:11:04 2026 by rpki-client