This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json) Hash identifier: K0p7evS1qOQDwZBfj87zaKw91NX5t7fR8uPKiQ0x6xA= Subject key identifier: 50:44:3A:70:C2:30:4C:D1:1F:6B:87:44:7A:C4:90:CF:51:35:46:BF Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Certificate serial: 0BE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft Manifest number: 0B74 Signing time: Tue 20 Jan 2026 18:53:11 +0000 Manifest this update: Tue 20 Jan 2026 18:53:10 +0000 Manifest next update: Tue 27 Jan 2026 18:53:10 +0000 Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: oqwJCj9k5A2TZgKFnUgssoACxeICYVTMFpsX1IjqN6g=) 2: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: DOBTNH4GGNPUe/CVItieZfmqwMcwBWdfPDr7AZPstYA=) 3: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: I/yFDnonwjcIdEyDMRzyxAMhULYfijDfUDeIkoqzyfk=) 4: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: 2efUF6FV6lzagFO6ixmFLw5grpZeZdNkHznhn486HIY=) 5: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: ioPHlw0sW6GeE8i+5W/iQUIzBchZcQHPRQo5hhiTaFw=) 6: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: 1Oowb0Op5/Cu+8FSjA8UF2OrKzh23X2j+ax5PBrX1iA=) 7: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 3y9BDXWhIindn9fV5yRhLvjaXOZjwz7wE89JCwHuZfU=) 8: 72E17FF2194F11ED818A3C66C4F9AE02.roa (hash: uU9R+G2quDutiuaDSqaRQis0/8oF8eouaABisexnp3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3041 (0xbe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Validity Not Before: Jan 20 18:53:10 2026 GMT Not After : Jan 27 18:53:10 2026 GMT Subject: CN=696fcf17-1436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:87:42:02:a0:35:41:32:e4:f5:90:cb:c3:e0: a1:a7:52:01:fb:85:09:ce:42:76:04:40:5b:47:7c: ff:27:0a:71:66:4d:e9:02:55:b3:62:63:87:7e:eb: d1:1e:8e:6e:b6:ea:30:6e:38:c5:bc:cb:d7:d6:5d: 12:b7:a7:09:ad:42:45:06:b9:f6:b3:5f:da:4d:c7: a1:be:d2:bc:0f:59:89:da:04:a0:2c:5d:99:51:15: bd:86:d8:be:45:29:65:cc:44:f1:e9:e4:fd:2e:f7: ad:69:e9:49:88:6e:9a:2b:1e:63:da:02:71:ae:2c: a5:69:69:86:60:c0:e4:e8:94:e9:68:09:57:8a:eb: a0:52:77:ab:48:a1:8a:02:b6:30:d6:f6:bd:1b:4c: 1d:77:d4:c4:5a:2a:dc:d0:06:b6:75:d6:87:8c:32: 69:04:7d:6e:63:ef:4b:45:0e:56:eb:fc:cb:91:87: 6b:d1:43:0c:19:bc:ca:81:d9:79:1d:45:5c:0c:02: 12:71:58:36:b9:8a:17:a4:39:d1:ac:c4:65:d1:8a: 0f:5d:f6:dc:b3:57:61:3a:99:21:e6:b7:df:8a:ee: 46:73:ee:75:3e:9f:dd:31:b6:04:89:d3:1e:49:cd: db:cf:21:4d:09:b4:17:2e:c7:1f:fd:88:65:b9:bf: fd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:44:3A:70:C2:30:4C:D1:1F:6B:87:44:7A:C4:90:CF:51:35:46:BF X509v3 Authority Key Identifier: keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:4f:a1:14:10:d3:8f:9f:f7:6e:ee:ce:48:2b:73:2e:ad:80: ba:01:78:b0:c7:22:df:78:b1:5c:0c:99:5b:2f:ec:8d:39:4c: 3c:e3:aa:33:45:13:30:fc:ea:ce:45:85:b7:2d:31:f1:69:ca: bc:94:ff:ff:43:73:80:48:98:93:e3:6a:db:b4:99:ab:0c:9b: 24:05:b3:62:f2:c4:1f:86:8a:46:bc:ae:18:57:01:32:e0:8a: 52:ba:15:40:de:eb:98:5c:7a:cc:12:00:a8:0c:82:db:1b:fc: 5a:72:53:32:0d:aa:a7:8f:f3:09:e4:ba:14:6a:68:4a:4d:7e: dc:26:4d:a0:6d:3e:e8:e5:4e:c1:ea:3f:2a:7e:74:e4:f1:11: b0:14:13:3e:bc:94:6a:67:08:ca:8d:12:00:63:e6:36:27:63: a8:e1:f0:b5:62:95:bf:84:e6:25:20:e7:53:18:34:49:2f:6f: 06:64:f9:65:c3:a6:7f:bc:32:d5:2d:c6:d4:d6:60:f6:12:3e: 3a:2d:5c:aa:a7:85:e6:07:1b:81:06:29:08:be:a7:e3:32:cf: 1d:56:2e:27:5d:87:16:e9:9a:c3:1f:e1:2d:f0:0e:2f:d3:5c: 30:7d:d8:27:7c:88:20:20:36:8f:60:a4:0e:f6:32:55:97:c1: 81:a6:aa:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw QjJEQTAxREUwHhcNMjYwMTIwMTg1MzEwWhcNMjYwMTI3MTg1MzEwWjAYMRYwFAYD VQQDDA02OTZmY2YxNy0xNDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmIdCAqA1QTLk9ZDLw+Chp1IB+4UJzkJ2BEBbR3z/JwpxZk3pAlWzYmOHfuvR Ho5utuowbjjFvMvX1l0St6cJrUJFBrn2s1/aTcehvtK8D1mJ2gSgLF2ZURW9hti+ RSllzETx6eT9LvetaelJiG6aKx5j2gJxriylaWmGYMDk6JTpaAlXiuugUnerSKGK ArYw1va9G0wdd9TEWirc0Aa2ddaHjDJpBH1uY+9LRQ5W6/zLkYdr0UMMGbzKgdl5 HUVcDAIScVg2uYoXpDnRrMRl0YoPXfbcs1dhOpkh5rffiu5Gc+51Pp/dMbYEidMe Sc3bzyFNCbQXLscf/Yhlub/9ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBEOnDC MEzRH2uHRHrEkM9RNUa/MB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9CNTc3M0FBQzU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82 Sk9DZG5HTVhpbHdMTGFBZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4T6EUENOPn/du7s5IK3MurYC6AXiwxyLfeLFcDJlbL+yNOUw846oz RRMw/OrORYW3LTHxacq8lP//Q3OASJiT42rbtJmrDJskBbNi8sQfhopGvK4YVwEy 4IpSuhVA3uuYXHrMEgCoDILbG/xaclMyDaqnj/MJ5LoUamhKTX7cJk2gbT7o5U7B 6j8qfnTk8RGwFBM+vJRqZwjKjRIAY+Y2J2Oo4fC1YpW/hOYlIOdTGDRJL28GZPll w6Z/vDLVLcbU1mD2Ej46LVyqp4XmBxuBBikIvqfjMs8dVi4nXYcW6ZrDH+Et8A4v 01wwfdgnfIggIDaPYKQO9jJVl8GBpqrp -----END CERTIFICATE-----Generated at Wed Jan 21 19:36:53 2026 by rpki-client