This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft File: tU-K0c7KwTb8r0eS6_0A5o6h02g.mft (raw, json) Hash identifier: No+LFbYI8C0AwgNjYbiy+akjhHb9UXxEvpnakiVHJ3M= Subject key identifier: D5:74:32:BB:0D:FD:63:17:33:44:4F:6A:63:1A:59:A5:F1:27:94:78 Authority key identifier: B5:4F:8A:D1:CE:CA:C1:36:FC:AF:47:92:EB:FD:00:E6:8E:A1:D3:68 Certificate issuer: /CN=A91B7DCB/serialNumber=B54F8AD1CECAC136FCAF4792EBFD00E68EA1D368 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft Manifest number: 83 Signing time: Sat 17 Jan 2026 05:43:02 +0000 Manifest this update: Sat 17 Jan 2026 05:43:02 +0000 Manifest next update: Sat 24 Jan 2026 05:43:02 +0000 Files and hashes: 1: tU-K0c7KwTb8r0eS6_0A5o6h02g.crl (hash: Stj4doLhCodXuEv2PK0Ii0koUQ3ViMS1W3Xg32mdDsI=) 2: D470A60E294511F0B1412377C4F9AE02.roa (hash: R5e5Pbe0gCRILBx2wr55E5wPwG2ILhIOGtJI6e+r29g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 05:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=B54F8AD1CECAC136FCAF4792EBFD00E68EA1D368 Validity Not Before: Jan 17 05:43:02 2026 GMT Not After : Jan 24 05:43:02 2026 GMT Subject: CN=696b2166-5cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:ff:ee:b7:a8:99:07:fa:ac:cb:df:b2:64: e7:c6:55:4e:2f:41:f4:08:cf:fe:a0:e4:a0:63:af: de:ca:96:70:dc:c1:25:fb:dc:d0:80:c9:5a:92:a1: c2:b4:5f:1e:09:30:e7:45:c9:83:e5:61:1e:54:ce: 1e:98:5b:a5:16:b3:00:29:18:2b:97:87:31:5e:d7: d9:d0:30:31:de:8d:0b:b9:52:e4:86:ec:51:13:94: d0:60:9d:28:28:73:81:23:ba:11:0b:b7:0a:23:23: 21:9d:f4:41:b5:34:84:37:5b:cb:33:ee:bb:f5:57: ca:dc:2e:fd:cd:b8:fa:5c:08:dc:38:2c:b2:10:b7: 12:1b:d0:9f:31:d6:67:a3:63:74:90:6d:92:44:10: 15:67:6c:40:eb:ff:43:15:f6:c0:55:36:bc:6e:35: 99:08:a5:e3:97:01:fa:a5:82:2a:6a:9c:62:da:ca: 8f:f6:a8:f0:c8:88:cf:d3:b5:85:bc:fd:66:a2:e5: ae:7f:b7:a0:54:16:2d:f8:b0:43:2d:b0:82:48:ed: 88:6e:73:49:b1:2e:d3:e0:6b:cc:8d:a5:fa:56:2e: 24:57:8c:5d:af:e3:5b:d4:6e:7b:42:2f:94:c0:c3: 78:76:d4:c9:94:33:23:32:f7:c9:4e:45:aa:b4:88: 51:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:74:32:BB:0D:FD:63:17:33:44:4F:6A:63:1A:59:A5:F1:27:94:78 X509v3 Authority Key Identifier: keyid:B5:4F:8A:D1:CE:CA:C1:36:FC:AF:47:92:EB:FD:00:E6:8E:A1:D3:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:74:b1:6a:b5:36:45:c5:aa:b2:d8:7d:66:81:aa:86:b0:74: 84:46:24:1c:1a:b7:3d:8b:89:dc:a9:18:df:47:c6:19:86:11: 1b:91:f5:ab:47:b5:95:26:4e:2a:3a:98:31:48:87:ee:75:82: 7b:95:a3:6a:72:86:f2:0d:87:a9:f9:d3:db:3f:d0:89:e2:44: 2b:42:58:8d:f7:92:3a:f3:cb:c4:3e:be:87:e3:72:26:42:39: cc:ae:31:f6:c8:2c:7d:87:0c:eb:45:30:74:b3:c7:6c:25:62: 00:4b:c4:4a:79:23:e6:2a:b7:6e:36:4e:c4:58:4d:b5:0e:02: f8:2a:8f:ec:e7:df:ec:66:4c:2e:6e:97:46:6f:fa:d4:48:7f: 9d:6c:bc:5e:d5:67:23:c7:a4:e1:39:c7:e2:45:29:d0:bb:c6: 76:f6:65:87:17:60:36:61:74:a4:ad:ac:f6:5f:08:67:69:9c: 00:06:5a:4e:70:df:70:5b:ba:92:e1:34:05:87:de:b7:63:9d: 7a:cf:fc:d9:f7:cf:c0:79:d1:8a:83:75:21:92:c1:77:49:22: 6e:3b:52:cb:dc:cd:7d:22:0e:f8:57:bd:7b:ca:15:14:55:05: 2d:2f:8e:83:6e:ae:91:dd:fc:24:58:6b:53:cd:33:72:78:84: c0:66:15:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEQ0IxMTAvBgNVBAUTKEI1NEY4QUQxQ0VDQUMxMzZGQ0FGNDc5MkVCRkQwMEU2 OEVBMUQzNjgwHhcNMjYwMTE3MDU0MzAyWhcNMjYwMTI0MDU0MzAyWjAYMRYwFAYD VQQDDA02OTZiMjE2Ni01Y2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubP/7reomQf6rMvfsmTnxlVOL0H0CM/+oOSgY6/eypZw3MEl+9zQgMlakqHC tF8eCTDnRcmD5WEeVM4emFulFrMAKRgrl4cxXtfZ0DAx3o0LuVLkhuxRE5TQYJ0o KHOBI7oRC7cKIyMhnfRBtTSEN1vLM+679VfK3C79zbj6XAjcOCyyELcSG9CfMdZn o2N0kG2SRBAVZ2xA6/9DFfbAVTa8bjWZCKXjlwH6pYIqapxi2sqP9qjwyIjP07WF vP1mouWuf7egVBYt+LBDLbCCSO2IbnNJsS7T4GvMjaX6Vi4kV4xdr+Nb1G57Qi+U wMN4dtTJlDMjMvfJTkWqtIhRcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNV0MrsN /WMXM0RPamMaWaXxJ5R4MB8GA1UdIwQYMBaAFLVPitHOysE2/K9Hkuv9AOaOodNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0RDQi9GODNBQzQ5NDI5 NDQxMUYwQUUxQUJDNzRDNEY5QUUwMi90VS1LMGM3S3dUYjhyMGVTNl8wQTVvNmgw MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RVLUswYzdLd1RiOHIwZVM2XzBBNW82aDAyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0RDQi9GODNBQzQ5NDI5NDQxMUYwQUUxQUJDNzRDNEY5QUUwMi90VS1LMGM3S3dU YjhyMGVTNl8wQTVvNmgwMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATdLFqtTZFxaqy2H1mgaqGsHSERiQcGrc9i4ncqRjfR8YZhhEbkfWr R7WVJk4qOpgxSIfudYJ7laNqcobyDYep+dPbP9CJ4kQrQliN95I688vEPr6H43Im QjnMrjH2yCx9hwzrRTB0s8dsJWIAS8RKeSPmKrduNk7EWE21DgL4Ko/s59/sZkwu bpdGb/rUSH+dbLxe1Wcjx6ThOcfiRSnQu8Z29mWHF2A2YXSkraz2XwhnaZwABlpO cN9wW7qS4TQFh963Y516z/zZ98/AedGKg3UhksF3SSJuO1LL3M19Ig74V717yhUU VQUtL46Dbq6R3fwkWGtTzTNyeITAZhX4 -----END CERTIFICATE-----Generated at Sun Jan 18 22:09:10 2026 by rpki-client