This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft File: BRnee0hmA7e6W2bauYkgP98ttJQ.mft (raw, json) Hash identifier: KvPbxbZFTEtSALi7QAb+oSC2UFNNYp9qWFD3Ug1wKVw= Subject key identifier: C9:DD:9F:2D:ED:98:5A:1E:41:1A:ED:2B:69:B4:A0:AF:13:A1:05:25 Authority key identifier: 05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 Certificate issuer: /CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Certificate serial: 0C8C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft Manifest number: 0C85 Signing time: Mon 26 Jan 2026 16:23:15 +0000 Manifest this update: Mon 26 Jan 2026 16:23:14 +0000 Manifest next update: Mon 02 Feb 2026 16:23:14 +0000 Files and hashes: 1: BRnee0hmA7e6W2bauYkgP98ttJQ.crl (hash: ehxRgAcoBqim6CWMtP+iPYjJrwzvzXjMk/8ARQ/hjc4=) 2: 05BE20062C5811EAA90F4B0EC4F9AE02.roa (hash: KZLdlP1OQSAqnUANoQynhHKfuaNstAKbyzLi1TUSbtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 16:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3212 (0xc8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912DD, serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Validity Not Before: Jan 26 16:23:14 2026 GMT Not After : Feb 2 16:23:14 2026 GMT Subject: CN=697794f3-4165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b7:8a:06:d6:d1:ad:54:4d:c8:62:d2:45:f6: 0d:2d:e9:07:91:52:b8:e6:53:45:34:3e:bc:bc:3a: d3:10:4c:00:ce:9b:61:25:06:cc:de:a7:ce:ba:6c: d6:f5:ee:7b:1f:a4:ed:f4:bd:e7:23:f3:4d:ed:04: e8:38:17:03:5c:fa:f2:ff:39:f7:73:b8:f7:93:f7: 0d:9f:bd:8e:7f:41:76:27:18:cc:9b:35:5e:72:b8: be:bf:e6:98:af:12:14:ca:b8:1f:e4:7c:21:6c:05: 59:d9:ed:79:78:5b:ac:33:68:30:44:96:97:c4:6a: 6b:3e:6f:7c:9b:55:d6:bb:9e:ce:84:6e:2f:23:5d: f7:6b:51:e6:9d:ef:53:7d:80:e4:77:dd:3d:5d:0c: 6f:0e:cd:b5:75:b1:5a:06:16:c5:66:ec:91:ba:ef: cd:b9:e0:40:58:ad:8b:53:8a:5f:89:17:b4:0b:a0: 4c:42:46:99:7a:6a:7e:94:ce:64:29:2d:8e:d6:63: 3b:27:4c:e1:f9:94:6c:9c:98:b4:df:47:7d:22:f5: 1f:33:b8:e8:9b:44:dd:0c:ae:b0:2c:dd:b6:8f:53: 1b:88:35:1c:85:8d:8f:82:8f:12:ae:ea:59:ca:6d: 74:81:1b:35:72:df:55:0f:1f:50:21:e3:39:9f:4d: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DD:9F:2D:ED:98:5A:1E:41:1A:ED:2B:69:B4:A0:AF:13:A1:05:25 X509v3 Authority Key Identifier: keyid:05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:1f:20:bf:f9:da:67:31:84:f6:40:09:f7:ff:5b:09:27:a3: 19:b1:a6:7c:77:60:a3:cf:59:6f:0e:74:69:e2:68:49:3f:e2: a7:3c:b4:85:f5:3a:03:31:86:00:78:85:58:c3:07:b7:32:6e: 0c:10:f8:1b:25:01:cd:be:da:54:cb:60:6e:8b:41:f3:47:e6: b3:2d:07:9f:0b:e7:33:2f:3b:f4:9a:2a:16:b0:1c:4b:1b:3d: 02:46:50:3e:b5:5b:0f:6a:e8:d1:54:1b:a8:b2:8a:7d:d7:38: 1f:df:ba:e2:4a:0d:cf:e2:e9:76:5b:a0:c6:e5:17:43:ce:96: f3:71:f3:b6:ce:90:e3:d6:ac:df:28:80:c2:30:a7:eb:95:4e: 23:a9:7e:ae:84:77:b9:0a:77:40:d9:b9:71:a1:da:35:35:f7: 09:18:6a:dc:f7:c5:4d:f5:fa:f5:ec:1e:fe:cf:16:40:4b:b2: 7a:37:e3:28:b8:43:b2:92:a8:0f:3f:b3:19:ca:d7:b8:35:39: 8a:d6:4f:44:85:a0:a0:21:35:7d:01:7d:f3:b5:8a:57:7a:d8: 25:b2:00:28:6b:46:f6:ac:93:84:bb:10:39:52:32:d7:4c:cb: 1c:e8:1a:d4:6b:58:72:b5:87:29:11:34:c5:fb:01:ed:3a:67: 61:77:49:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyREQxMTAvBgNVBAUTKDA1MTlERTdCNDg2NjAzQjdCQTVCNjZEQUI5ODkyMDNG REYyREI0OTQwHhcNMjYwMTI2MTYyMzE0WhcNMjYwMjAyMTYyMzE0WjAYMRYwFAYD VQQDDA02OTc3OTRmMy00MTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbeKBtbRrVRNyGLSRfYNLekHkVK45lNFND68vDrTEEwAzpthJQbM3qfOumzW 9e57H6Tt9L3nI/NN7QToOBcDXPry/zn3c7j3k/cNn72Of0F2JxjMmzVecri+v+aY rxIUyrgf5HwhbAVZ2e15eFusM2gwRJaXxGprPm98m1XWu57OhG4vI133a1Hmne9T fYDkd909XQxvDs21dbFaBhbFZuyRuu/NueBAWK2LU4pfiRe0C6BMQkaZemp+lM5k KS2O1mM7J0zh+ZRsnJi030d9IvUfM7jom0TdDK6wLN22j1MbiDUchY2Pgo8SrupZ ym10gRs1ct9VDx9QIeM5n03DiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMndny3t mFoeQRrtK2m0oK8ToQUlMB8GA1UdIwQYMBaAFAUZ3ntIZgO3ultm2rmJID/fLbSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTJERC9EQjRBNkNGQzEw RDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3ZTZXMmJhdVlrZ1A5OHR0 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JSbmVlMGhtQTdlNlcyYmF1WWtnUDk4dHRKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTJERC9EQjRBNkNGQzEwRDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3 ZTZXMmJhdVlrZ1A5OHR0SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVHyC/+dpnMYT2QAn3/1sJJ6MZsaZ8d2Cjz1lvDnRp4mhJP+KnPLSF 9ToDMYYAeIVYwwe3Mm4MEPgbJQHNvtpUy2Bui0HzR+azLQefC+czLzv0mioWsBxL Gz0CRlA+tVsPaujRVBuosop91zgf37riSg3P4ul2W6DG5RdDzpbzcfO2zpDj1qzf KIDCMKfrlU4jqX6uhHe5CndA2blxodo1NfcJGGrc98VN9fr17B7+zxZAS7J6N+Mo uEOykqgPP7MZyte4NTmK1k9EhaCgITV9AX3ztYpXetglsgAoa0b2rJOEuxA5UjLX TMsc6BrUa1hytYcpETTF+wHtOmdhd0mP -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:37 2026 by rpki-client