This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft File: rt-KIRgobseQH6KolLlMoQCj_Xg.mft (raw, json) Hash identifier: pcTFUmThfaNpD5bNTmRwmsCYx9uojGfzzkC6eV/vc2U= Subject key identifier: 4E:4F:2F:7E:81:4D:3F:99:2F:44:D2:44:1A:59:7B:6B:32:72:3C:1A Authority key identifier: AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78 Certificate issuer: /CN=A91B13FE/serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft Manifest number: 67 Signing time: Sat 17 Jan 2026 06:01:08 +0000 Manifest this update: Sat 17 Jan 2026 06:01:07 +0000 Manifest next update: Sat 24 Jan 2026 06:01:07 +0000 Files and hashes: 1: rt-KIRgobseQH6KolLlMoQCj_Xg.crl (hash: RssEFP/X1imUo8X70/e1cL6bnM9vz18YkwdSHloiQkQ=) 2: 077331D0564511F09ED8993AC4F9AE02.roa (hash: UUG92P2AWbXaMrK3iyqoTf0N43jcCkwVZ/K5MaIHibg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13FE, serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78 Validity Not Before: Jan 17 06:01:07 2026 GMT Not After : Jan 24 06:01:07 2026 GMT Subject: CN=696b25a4-129c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a7:83:35:00:e3:3e:d2:62:74:6a:80:55:fa: 8c:92:35:f0:d9:33:5e:43:90:ee:2e:fe:c4:19:28: 88:b9:fc:ad:12:81:5f:c8:68:bf:8b:18:67:60:d2: b7:60:3b:ee:61:d8:f6:96:7b:64:26:c0:5f:be:df: 1e:fd:72:47:16:a0:28:a4:41:4f:e5:16:73:4a:3a: fc:7d:24:31:b5:d4:7d:bf:2b:6e:bb:e3:af:97:9d: 14:e6:f9:fa:3e:2d:31:d1:65:84:b8:bb:d0:3e:00: 09:e6:ce:39:70:be:e8:8f:f7:f8:0a:d2:97:c2:18: c6:b8:9e:a5:e0:b4:56:fa:08:24:ee:37:d9:e5:9f: 5d:c8:20:d5:f3:22:fd:a3:b2:37:9e:e2:31:85:77: 44:8e:fd:e9:b5:6d:01:c8:7c:91:f1:f4:38:47:3b: 40:4d:65:e5:d0:f7:54:fc:78:d3:28:3e:e4:fe:02: 16:dc:47:8a:4a:dc:e0:5b:8f:1d:56:c0:0a:c0:52: 0b:1f:74:38:81:86:80:aa:df:25:56:69:bd:51:8c: a6:c0:21:39:2b:9a:6d:9e:ee:ed:e0:c3:9b:0f:b2: b5:8c:f4:ff:2d:e6:71:a9:6b:be:e2:92:f1:0f:a6: ae:a8:09:0b:e9:2e:f2:4c:e8:45:73:a3:88:9f:9f: 10:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4F:2F:7E:81:4D:3F:99:2F:44:D2:44:1A:59:7B:6B:32:72:3C:1A X509v3 Authority Key Identifier: keyid:AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e4:42:7f:e1:9d:24:f0:67:4c:b8:10:08:e4:6e:37:6d:11:9c: 65:f9:7b:90:80:a7:a4:5c:e8:d8:c1:35:6a:71:ef:01:96:87: 7b:bb:79:77:50:2a:30:54:75:fc:5a:2d:5d:29:a6:39:60:d3: 59:c3:61:1c:b0:5c:f7:21:e7:e1:3e:83:59:4d:c8:a8:89:7d: e3:e4:84:dd:f3:20:f5:a6:f6:86:b8:00:b4:3d:3b:5e:b5:e7: 4c:29:b8:40:7c:97:27:ba:45:69:48:4f:01:0b:72:da:97:8c: 1f:36:6b:d4:1d:b9:7b:d7:e0:70:a4:b8:b5:57:aa:2a:05:1d: f1:fa:98:f6:04:29:3c:e3:e4:2c:9b:92:8a:8e:c3:00:01:48: 05:b6:f4:d4:8b:6e:f7:a4:04:c0:c7:18:7e:6e:e3:b2:a8:3a: 89:26:5c:e3:69:09:ce:65:d2:c0:3c:a0:ec:e0:d6:cd:7f:58: 7b:18:f0:35:98:d9:8b:93:bb:c8:9b:78:95:86:75:80:53:43: 7d:bd:0a:db:3e:9e:86:6c:33:7c:d0:47:ca:99:60:f4:d0:ee: 83:f2:ad:c7:bd:09:6b:53:db:d3:72:35:30:c5:5d:49:c7:66: d7:24:7b:72:4a:d0:b8:d2:26:5e:3e:e5:f1:b7:38:1b:74:16: d6:ef:7c:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNGRTExMC8GA1UEBRMoQUVERjhBMjExODI4NkVDNzkwMUZBMkE4OTRCOTRDQTEw MEEzRkQ3ODAeFw0yNjAxMTcwNjAxMDdaFw0yNjAxMjQwNjAxMDdaMBgxFjAUBgNV BAMMDTY5NmIyNWE0LTEyOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdp4M1AOM+0mJ0aoBV+oySNfDZM15DkO4u/sQZKIi5/K0SgV/IaL+LGGdg0rdg O+5h2PaWe2QmwF++3x79ckcWoCikQU/lFnNKOvx9JDG11H2/K26746+XnRTm+fo+ LTHRZYS4u9A+AAnmzjlwvuiP9/gK0pfCGMa4nqXgtFb6CCTuN9nln13IINXzIv2j sjee4jGFd0SO/em1bQHIfJHx9DhHO0BNZeXQ91T8eNMoPuT+AhbcR4pK3OBbjx1W wArAUgsfdDiBhoCq3yVWab1RjKbAITkrmm2e7u3gw5sPsrWM9P8t5nGpa77ikvEP pq6oCQvpLvJM6EVzo4ifnxDrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTk8vfoFN P5kvRNJEGll7azJyPBowHwYDVR0jBBgwFoAUrt+KIRgobseQH6KolLlMoQCj/Xgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0ZFLzk2NkQ3MUVBNTY0 MzExRjBCMTYyN0ExNUM0RjlBRTAyL3J0LUtJUmdvYnNlUUg2S29sTGxNb1FDal9Y Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnQtS0lSZ29ic2VRSDZLb2xMbE1vUUNqX1hnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0ZFLzk2NkQ3MUVBNTY0MzExRjBCMTYyN0ExNUM0RjlBRTAyL3J0LUtJUmdvYnNl UUg2S29sTGxNb1FDal9YZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAORCf+GdJPBnTLgQCORuN20RnGX5e5CAp6Rc6NjBNWpx7wGWh3u7eXdQ KjBUdfxaLV0ppjlg01nDYRywXPch5+E+g1lNyKiJfePkhN3zIPWm9oa4ALQ9O161 50wpuEB8lye6RWlITwELctqXjB82a9QduXvX4HCkuLVXqioFHfH6mPYEKTzj5Cyb koqOwwABSAW29NSLbvekBMDHGH5u47KoOokmXONpCc5l0sA8oOzg1s1/WHsY8DWY 2YuTu8ibeJWGdYBTQ329Cts+noZsM3zQR8qZYPTQ7oPyrce9CWtT29NyNTDFXUnH Ztcke3JK0LjSJl4+5fG3OBt0FtbvfA8= -----END CERTIFICATE-----Generated at Sun Jan 18 08:18:36 2026 by rpki-client