This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft File: Uf5h3GUzbaj92bxJe_pfniMuDMY.mft (raw, json) Hash identifier: ZbxHDpw62PjdltZlBkaREx+MMt95khQTlX9E1gkASOo= Subject key identifier: 89:4E:3A:4E:C8:9D:FD:79:EE:30:63:50:E5:83:B4:92:3D:69:D3:B1 Authority key identifier: 51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6 Certificate issuer: /CN=A91A4CC3/serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft Manifest number: 21 Signing time: Mon 19 Jan 2026 06:48:01 +0000 Manifest this update: Mon 19 Jan 2026 06:48:00 +0000 Manifest next update: Mon 26 Jan 2026 06:48:00 +0000 Files and hashes: 1: Uf5h3GUzbaj92bxJe_pfniMuDMY.crl (hash: 7gqBjj6cYpZje5Lb333WSROaD1y3v+hjapnxBIp/pI8=) 2: BFBA7E0ECC1C11F081ABD12EC4F9AE02.roa (hash: gpIhFKpXduF2CA0ZrD84omrJjlhpDXGZWRKDumLvbBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4CC3, serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6 Validity Not Before: Jan 19 06:48:00 2026 GMT Not After : Jan 26 06:48:00 2026 GMT Subject: CN=696dd3a1-e82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:4b:22:12:0a:e1:a2:56:1a:6c:4e:d9:2c: 59:b0:b2:6e:f1:d5:65:1b:7c:31:d6:dc:31:89:5d: cf:be:11:07:1a:cb:1a:1a:27:69:c7:bc:e4:fd:44: 46:d1:cd:c0:fa:dc:d9:e7:37:7c:b3:f0:9a:1a:16: ed:df:cb:5c:43:d7:a5:21:42:5b:52:38:46:e3:70: 50:d7:1b:92:c6:69:f1:3b:36:05:46:59:89:43:e2: 7c:c1:ca:57:94:29:8e:3a:5c:a4:ba:a6:f6:03:b1: 5a:a2:c9:23:c5:a3:82:4b:2b:9c:11:e8:77:9a:93: 52:e4:c1:51:29:45:84:98:66:d4:80:1b:bd:07:00: 76:e2:76:2a:76:06:02:cd:13:39:a6:f5:66:48:e1: 21:fd:d6:40:3a:b9:87:13:22:6a:6b:0a:2b:74:37: 19:13:cc:72:c7:80:56:f5:b9:3a:02:06:a5:9b:2d: c8:55:33:e2:91:b3:72:1b:bb:69:5b:db:07:32:d6: 72:89:7e:88:76:f1:5f:93:d8:0e:4f:81:30:5e:e2: ad:ac:2c:46:22:bb:13:cf:22:7b:78:92:b5:16:00: c0:ea:f0:2d:f4:9d:19:82:42:f5:3b:fd:d3:dd:be: 3b:62:99:c7:65:f3:32:7f:f4:c6:5d:c6:2d:20:55: 00:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4E:3A:4E:C8:9D:FD:79:EE:30:63:50:E5:83:B4:92:3D:69:D3:B1 X509v3 Authority Key Identifier: keyid:51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:22:e2:af:56:19:5c:d2:af:91:14:d6:d1:bf:5b:23:87:a5: 09:54:af:ff:ef:a7:1d:cb:a2:db:8c:44:3e:a7:0a:72:7f:eb: 48:c0:a7:57:65:9b:12:75:4c:a4:aa:76:33:b2:84:d1:8f:63: 24:33:ba:c2:55:37:25:51:47:4c:55:f8:2e:c6:63:16:0c:80: c7:53:a0:3d:d3:b7:c8:9e:fa:dd:29:f1:a2:b3:ce:1a:ee:66: 49:12:23:f3:d4:6b:e6:be:e0:82:05:9f:82:04:4a:1e:50:90: b9:0c:da:7f:20:50:6a:1d:ca:1b:65:46:1e:81:e5:b2:d3:01: 2b:b7:50:c4:72:27:5f:86:1c:f9:ad:59:25:27:09:d8:9d:a3: f4:9b:ff:59:49:d2:60:a7:06:06:fc:50:7e:31:ec:0b:14:5f: 6f:56:7e:8f:a8:20:f8:88:8c:11:50:fa:b7:89:ec:fe:7d:29: 45:62:15:3c:04:64:70:30:4a:05:87:0f:08:47:a1:ae:dd:78: e5:24:ac:13:5d:86:52:87:69:dc:11:b7:cf:e6:27:90:76:d8: 43:55:44:0e:37:c4:58:1f:fb:c2:65:a8:b7:18:e6:3f:45:94: 42:02:9d:ac:1e:64:da:9e:fa:72:ad:5d:32:3a:3e:34:78:ef: 22:c6:c5:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NENDMzExMC8GA1UEBRMoNTFGRTYxREM2NTMzNkRBOEZERDlCQzQ5N0JGQTVGOUUy MzJFMENDNjAeFw0yNjAxMTkwNjQ4MDBaFw0yNjAxMjYwNjQ4MDBaMBgxFjAUBgNV BAMMDTY5NmRkM2ExLWU4MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4cUsiEgrholYabE7ZLFmwsm7x1WUbfDHW3DGJXc++EQcayxoaJ2nHvOT9REbR zcD63NnnN3yz8JoaFu3fy1xD16UhQltSOEbjcFDXG5LGafE7NgVGWYlD4nzByleU KY46XKS6pvYDsVqiySPFo4JLK5wR6Heak1LkwVEpRYSYZtSAG70HAHbidip2BgLN Ezmm9WZI4SH91kA6uYcTImprCit0NxkTzHLHgFb1uToCBqWbLchVM+KRs3Ibu2lb 2wcy1nKJfoh28V+T2A5PgTBe4q2sLEYiuxPPInt4krUWAMDq8C30nRmCQvU7/dPd vjtimcdl8zJ/9MZdxi0gVQB9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiU46Tsid /XnuMGNQ5YO0kj1p07EwHwYDVR0jBBgwFoAUUf5h3GUzbaj92bxJe/pfniMuDMYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0Q0MzLzg5ODk5QjlDQ0I2 MDExRjA5RjlFRUYwRkM0RjlBRTAyL1VmNWgzR1V6YmFqOTJieEplX3BmbmlNdURN WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVWY1aDNHVXpiYWo5MmJ4SmVfcGZuaU11RE1ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 Q0MzLzg5ODk5QjlDQ0I2MDExRjA5RjlFRUYwRkM0RjlBRTAyL1VmNWgzR1V6YmFq OTJieEplX3BmbmlNdURNWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIwi4q9WGVzSr5EU1tG/WyOHpQlUr//vpx3LotuMRD6nCnJ/60jAp1dl mxJ1TKSqdjOyhNGPYyQzusJVNyVRR0xV+C7GYxYMgMdToD3Tt8ie+t0p8aKzzhru ZkkSI/PUa+a+4IIFn4IESh5QkLkM2n8gUGodyhtlRh6B5bLTASu3UMRyJ1+GHPmt WSUnCdido/Sb/1lJ0mCnBgb8UH4x7AsUX29Wfo+oIPiIjBFQ+reJ7P59KUViFTwE ZHAwSgWHDwhHoa7deOUkrBNdhlKHadwRt8/mJ5B22ENVRA43xFgf+8JlqLcY5j9F lEICnaweZNqe+nKtXTI6PjR47yLGxd4= -----END CERTIFICATE-----Generated at Tue Jan 20 04:34:38 2026 by rpki-client