This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft File: oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json) Hash identifier: fTORpLGKnCKL6Gw+WCjuKY9kiLi0IBG6dLk0vDX3m3M= Subject key identifier: 8A:3D:D8:B0:C6:56:B6:FB:A9:A6:A3:1C:10:3C:20:18:8F:9A:CB:F5 Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft Manifest number: 74 Signing time: Mon 19 Jan 2026 06:00:03 +0000 Manifest this update: Mon 19 Jan 2026 06:00:03 +0000 Manifest next update: Mon 26 Jan 2026 06:00:03 +0000 Files and hashes: 1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: 8Ej7b53ggeyukKSQk9cHtydWhl1FCeYgkXe7oI1DrqQ=) 2: C24679DC741211F0808A8240C4F9AE02.roa (hash: 0sz+kpmtwGElJIZS+dbC02B4JWfvDxu2J1QwiI80uIU=) 3: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (hash: ciBVXi3NuZ9007zCdd3QAQNC4sYFdA5GkfUuea4GHXA=) 4: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: BBZhX9HK3NBq65o9RCyGDdGBDo4hsR5Etdc6G3lRbjc=) 5: B015DEC49D0211F0992DA43DC4F9AE02.roa (hash: 1ZtqCzNNxWxSJ7uFzzu6FWZe/QSQ6qrzF6WDQCLLHuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Validity Not Before: Jan 19 06:00:03 2026 GMT Not After : Jan 26 06:00:03 2026 GMT Subject: CN=696dc863-e623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:52:03:32:31:c7:f5:12:f6:c7:9b:33:34: b2:19:fa:20:a9:2d:f1:e4:6a:c3:e4:0b:85:ad:f0: 2b:ea:aa:79:01:1c:52:7b:97:81:8c:45:f6:ef:50: 50:b9:e3:3e:5a:70:d2:e1:53:2e:dd:c6:62:86:b5: ec:75:29:5e:27:32:b6:a8:ff:e0:ca:30:5c:db:e2: b8:b2:1e:2c:54:c0:cc:c7:c6:18:54:0c:3e:76:d6: 8c:bd:9a:78:e7:23:1e:20:ba:05:5a:cd:36:7a:8e: 5d:59:60:51:07:ba:3b:25:39:a1:00:9c:d8:50:db: 2b:21:23:0e:ba:20:8b:7b:44:76:22:33:b2:36:54: bf:7e:36:cb:3e:4b:ff:c7:e2:59:33:10:ba:46:35: d8:90:a0:fb:c2:aa:5d:8d:ee:65:58:1c:0b:cf:b1: 01:50:1a:e1:d4:73:9d:81:92:e5:d2:45:64:e7:72: f0:c5:2f:71:65:fd:2a:5b:bc:40:bb:33:bd:6b:ea: 6e:13:6c:52:50:f3:c4:31:f7:c9:35:2d:76:c7:a5: 62:f6:5e:45:cf:07:6e:75:b0:ea:17:95:82:8f:0a: 4a:b8:e1:8c:57:cf:1a:fb:64:37:e5:92:c3:6a:b5: 1c:af:87:fd:1a:63:1c:a7:88:26:50:e5:22:a4:dc: be:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3D:D8:B0:C6:56:B6:FB:A9:A6:A3:1C:10:3C:20:18:8F:9A:CB:F5 X509v3 Authority Key Identifier: keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:20:74:95:03:f1:c4:e4:02:1f:b3:8b:ec:5e:fd:b7:e1:9c: 88:69:23:7e:a3:09:71:e3:60:39:d3:84:82:2c:70:8e:d2:49: 14:c7:c3:53:56:f4:64:f4:3b:af:81:3c:97:3e:07:f7:ae:82: 89:3d:9f:97:2f:03:15:8d:95:ac:53:92:32:e6:ae:0a:2d:e9: 7f:87:94:9c:8c:d5:75:bb:c3:f6:b9:97:b1:9a:25:93:bf:0a: c4:cc:7f:91:44:0d:6d:c8:84:2c:c3:21:22:7d:ec:55:85:53: b0:5d:6c:63:11:20:da:3d:8e:ef:41:0d:06:8e:cd:44:97:36: 10:8a:af:d5:f6:d4:b0:a3:98:45:13:21:74:71:74:ba:c3:62: b0:21:84:41:a1:da:c9:42:05:6d:8a:37:8d:f3:3c:47:28:38: 7c:8b:b8:a8:8f:79:28:a8:64:8e:c9:ee:f9:b6:77:61:7c:8c: 41:a1:38:46:c1:30:b6:84:78:05:d5:61:c0:58:4d:5a:48:58: 3f:8a:98:2a:d5:f0:13:ee:b8:4a:64:a2:79:39:c8:dd:c4:dc: 85:bf:f4:2d:ab:6f:ac:26:ca:9d:63:10:5e:92:58:6f:29:09: 97:90:2f:23:7b:76:f1:96:06:fc:13:19:1b:59:68:16:56:76: 80:bf:71:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzVCQzExMC8GA1UEBRMoQTE0NTI0MUQ5ODMwQUYyNEE3MTU2NzM1MTI1NUVDOEU3 RUQ1M0VGRTAeFw0yNjAxMTkwNjAwMDNaFw0yNjAxMjYwNjAwMDNaMBgxFjAUBgNV BAMMDTY5NmRjODYzLWU2MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCujVIDMjHH9RL2x5szNLIZ+iCpLfHkasPkC4Wt8CvqqnkBHFJ7l4GMRfbvUFC5 4z5acNLhUy7dxmKGtex1KV4nMrao/+DKMFzb4riyHixUwMzHxhhUDD521oy9mnjn Ix4gugVazTZ6jl1ZYFEHujslOaEAnNhQ2yshIw66IIt7RHYiM7I2VL9+Nss+S//H 4lkzELpGNdiQoPvCql2N7mVYHAvPsQFQGuHUc52BkuXSRWTncvDFL3Fl/SpbvEC7 M71r6m4TbFJQ88Qx98k1LXbHpWL2XkXPB251sOoXlYKPCkq44YxXzxr7ZDflksNq tRyvh/0aYxyniCZQ5SKk3L5/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUij3YsMZW tvuppqMcEDwgGI+ay/UwHwYDVR0jBBgwFoAUoUUkHZgwrySnFWc1ElXsjn7VPv4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNUJDLzcxRTVEOEJFNTlG MjExRjBCNEZBRTk1RkM0RjlBRTAyL29VVWtIWmd3cnlTbkZXYzFFbFhzam43VlB2 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1VVa0haZ3dyeVNuRldjMUVsWHNqbjdWUHY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NUJDLzcxRTVEOEJFNTlGMjExRjBCNEZBRTk1RkM0RjlBRTAyL29VVWtIWmd3cnlT bkZXYzFFbFhzam43VlB2NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD4gdJUD8cTkAh+zi+xe/bfhnIhpI36jCXHjYDnThIIscI7SSRTHw1NW 9GT0O6+BPJc+B/eugok9n5cvAxWNlaxTkjLmrgot6X+HlJyM1XW7w/a5l7GaJZO/ CsTMf5FEDW3IhCzDISJ97FWFU7BdbGMRINo9ju9BDQaOzUSXNhCKr9X21LCjmEUT IXRxdLrDYrAhhEGh2slCBW2KN43zPEcoOHyLuKiPeSioZI7J7vm2d2F8jEGhOEbB MLaEeAXVYcBYTVpIWD+KmCrV8BPuuEpkonk5yN3E3IW/9C2rb6wmyp1jEF6SWG8p CZeQLyN7dvGWBvwTGRtZaBZWdoC/cV8= -----END CERTIFICATE-----Generated at Tue Jan 20 01:24:37 2026 by rpki-client