This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft File: kbKJkWte97NoabO6gQwkWzZOQ8A.mft (raw, json) Hash identifier: vuvGuukFICIdHd8DjcbpnTRSdSMpoEAnL1AYA0YlK+A= Subject key identifier: D6:C7:E0:62:86:19:A3:AC:15:16:84:FB:DC:59:BB:E4:D7:D7:29:66 Authority key identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 Certificate issuer: /CN=A91B2D56/serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft Manifest number: 21 Signing time: Sat 17 Jan 2026 06:46:15 +0000 Manifest this update: Sat 17 Jan 2026 06:46:15 +0000 Manifest next update: Sat 24 Jan 2026 06:46:15 +0000 Files and hashes: 1: kbKJkWte97NoabO6gQwkWzZOQ8A.crl (hash: rQ5f1e5nucOw6blsQm7T6O+atmXjsoytm7saKEvfDUo=) 2: 436251B0C52311F0A1118818C4F9AE02.roa (hash: uZ9eyof3QzVDzi9BWRf2zBi6dJBoVZqfZeDAKMhvj2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Validity Not Before: Jan 17 06:46:15 2026 GMT Not After : Jan 24 06:46:15 2026 GMT Subject: CN=696b3037-730e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a0:66:32:ae:14:11:9f:88:dd:8f:2c:e0:a9: 9b:d8:a1:96:0d:5e:31:19:64:c9:28:3a:8a:1c:d9: e7:75:96:ff:4d:7f:d0:a4:79:fe:49:e4:44:7e:c4: 95:ab:d3:8c:3a:32:20:8a:e7:ef:c5:e0:30:1e:be: 7b:a5:08:5f:69:40:b2:56:c0:06:99:80:cf:18:6e: 17:ab:a1:6a:95:5f:0d:c9:8d:9a:ce:ed:05:db:84: de:a7:e5:ce:c4:6b:c0:97:2b:5c:48:0f:d1:8b:c9: 8d:f5:c2:2f:7c:df:0c:d4:08:89:95:4e:a2:8e:e7: 9a:66:51:27:c8:ee:94:d7:fc:c4:b8:72:26:b8:bc: a9:4e:c5:46:23:d1:42:e3:00:bf:85:97:0b:27:90: b4:64:c2:58:df:6f:87:b6:af:c9:b1:53:c0:37:b4: d7:72:59:9f:13:9f:75:f5:15:7a:e4:bc:1e:43:a3: f9:ae:8e:c2:8c:27:05:96:51:e1:85:c3:2a:7b:74: be:87:db:37:d7:36:b1:04:9f:07:19:b3:65:cd:e7: 98:fe:1b:f6:1c:af:65:0d:7e:e7:b9:df:48:fc:11: b5:ef:94:22:56:b9:1f:21:90:3e:3c:b5:94:0e:72: 20:31:30:c9:33:97:83:5f:cd:85:f7:db:2d:b0:14: 6a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C7:E0:62:86:19:A3:AC:15:16:84:FB:DC:59:BB:E4:D7:D7:29:66 X509v3 Authority Key Identifier: keyid:91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0d:5a:d0:25:ec:c3:68:7c:cc:d9:87:74:f7:d5:ce:6c:63: 29:63:c1:44:3d:c1:9c:ff:a3:87:a7:c8:a0:c1:f0:6a:8c:ad: 39:cc:84:c5:5b:07:9b:ee:ed:ce:38:96:d6:f9:d6:9f:c5:df: 29:68:35:db:97:74:ac:ad:c8:90:81:e4:28:33:00:e3:91:4a: 78:d7:7a:70:c7:20:2e:75:01:2b:54:4f:10:e7:dd:48:5d:cf: 81:c2:a0:2e:87:7a:fa:63:0c:9e:e3:e3:c1:8a:46:c2:9a:77: e0:ba:3f:d0:43:6c:55:a4:5f:55:3e:87:65:da:30:6d:d9:94: 17:19:c4:d9:f5:e8:32:a3:8c:b3:18:67:26:10:4d:c8:10:58: 9f:7b:2d:9f:eb:a0:a1:80:c7:aa:9a:f2:08:36:5c:b1:3f:35: 1f:c8:3f:e8:94:5f:bf:68:13:84:63:f4:92:f0:cb:d0:99:37: 48:ab:eb:96:49:8e:1c:1f:1d:0b:96:5e:50:0a:37:37:14:b6: f5:e4:c9:1b:e4:5a:43:0b:e1:54:a5:e1:4b:27:a2:19:e6:25: 6c:e7:74:40:00:de:72:98:63:9a:f4:1f:dd:8e:6c:f7:10:7a: 6b:83:69:ce:20:d7:5e:e1:5d:78:bd:9c:57:56:a5:30:54:52: d9:39:37:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkQ1NjExMC8GA1UEBRMoOTFCMjg5OTE2QjVFRjdCMzY4NjlCM0JBODEwQzI0NUIz NjRFNDNDMDAeFw0yNjAxMTcwNjQ2MTVaFw0yNjAxMjQwNjQ2MTVaMBgxFjAUBgNV BAMMDTY5NmIzMDM3LTczMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvoGYyrhQRn4jdjyzgqZvYoZYNXjEZZMkoOooc2ed1lv9Nf9Ckef5J5ER+xJWr 04w6MiCK5+/F4DAevnulCF9pQLJWwAaZgM8YbheroWqVXw3JjZrO7QXbhN6n5c7E a8CXK1xID9GLyY31wi983wzUCImVTqKO55pmUSfI7pTX/MS4cia4vKlOxUYj0ULj AL+FlwsnkLRkwljfb4e2r8mxU8A3tNdyWZ8Tn3X1FXrkvB5Do/mujsKMJwWWUeGF wyp7dL6H2zfXNrEEnwcZs2XN55j+G/Ycr2UNfue530j8EbXvlCJWuR8hkD48tZQO ciAxMMkzl4NfzYX32y2wFGrRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1sfgYoYZ o6wVFoT73Fm75NfXKWYwHwYDVR0jBBgwFoAUkbKJkWte97NoabO6gQwkWzZOQ8Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDU2L0VEQkJERkQ4QzUy MjExRjA4N0M3QjIxN0M0RjlBRTAyL2tiS0prV3RlOTdOb2FiTzZnUXdrV3paT1E4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2JLSmtXdGU5N05vYWJPNmdRd2tXelpPUThBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RDU2L0VEQkJERkQ4QzUyMjExRjA4N0M3QjIxN0M0RjlBRTAyL2tiS0prV3RlOTdO b2FiTzZnUXdrV3paT1E4QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI8NWtAl7MNofMzZh3T31c5sYyljwUQ9wZz/o4enyKDB8GqMrTnMhMVb B5vu7c44ltb51p/F3yloNduXdKytyJCB5CgzAOORSnjXenDHIC51AStUTxDn3Uhd z4HCoC6HevpjDJ7j48GKRsKad+C6P9BDbFWkX1U+h2XaMG3ZlBcZxNn16DKjjLMY ZyYQTcgQWJ97LZ/roKGAx6qa8gg2XLE/NR/IP+iUX79oE4Rj9JLwy9CZN0ir65ZJ jhwfHQuWXlAKNzcUtvXkyRvkWkML4VSl4UsnohnmJWzndEAA3nKYY5r0H92ObPcQ emuDac4g117hXXi9nFdWpTBUUtk5N8E= -----END CERTIFICATE-----Generated at Sun Jan 18 03:17:32 2026 by rpki-client