This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft File: hhIZKNm0AeMdansgbrAWLThuBHI.mft (raw, json) Hash identifier: /ikr4BaIwZNT6cmtfwl9AgJGcYWsgi9Y11C0DTzpx8M= Subject key identifier: A0:6B:D6:0E:E6:B4:35:AC:70:5A:23:BA:AA:DA:1C:62:12:FA:6B:38 Authority key identifier: 86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72 Certificate issuer: /CN=A91B8C6C/serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft Manifest number: 15 Signing time: Fri 16 Jan 2026 15:01:55 +0000 Manifest this update: Fri 16 Jan 2026 15:01:54 +0000 Manifest next update: Fri 23 Jan 2026 15:01:54 +0000 Files and hashes: 1: hhIZKNm0AeMdansgbrAWLThuBHI.crl (hash: Imng6qTeLj5wDIBRAL7fYCcWEyRF7xEgpgE393pfG+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.crl rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 15:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C6C, serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472 Validity Not Before: Jan 16 15:01:54 2026 GMT Not After : Jan 23 15:01:54 2026 GMT Subject: CN=696a52e3-3160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:37:51:d9:c9:05:f7:48:94:f7:b3:6d:c0:14: 9e:5a:70:26:5e:29:b6:53:8a:58:82:60:21:12:4b: f7:fe:e2:b2:7c:81:b7:85:ef:29:7d:de:d0:19:b3: 6c:da:c9:19:6d:c1:6c:66:fe:58:a6:7a:12:3d:ee: 51:a3:5d:72:18:67:64:84:b8:a0:e4:64:50:1a:08: b7:e4:43:f8:93:d2:ef:97:84:05:d7:46:52:cf:06: fc:ac:c2:a7:18:93:0f:8b:80:f0:38:4a:35:30:1a: 55:50:3c:91:e6:d0:9c:38:62:d8:f0:48:f1:3b:4d: 79:42:c2:06:3c:fb:92:5d:24:f0:4d:f7:99:36:a9: 55:ad:84:ca:3b:e9:a5:a1:26:75:88:c8:b6:5f:02: 64:02:55:4a:48:c5:9e:b6:cf:98:08:c3:48:ec:82: 2c:ce:5d:7d:00:10:f4:f0:b3:04:e4:3f:09:06:04: 21:a1:19:d8:5e:c6:6c:98:fd:a4:62:fe:6a:80:37: d6:ac:0b:05:fa:5e:07:dc:15:c6:59:c8:a7:40:60: 36:ba:c9:05:73:25:3f:cf:e4:50:f6:b7:62:37:d2: 90:82:af:ed:35:48:f1:e4:09:bb:c2:cb:93:f9:b9: 8c:25:7a:82:a6:12:42:20:25:5d:10:e4:63:e1:7b: b5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6B:D6:0E:E6:B4:35:AC:70:5A:23:BA:AA:DA:1C:62:12:FA:6B:38 X509v3 Authority Key Identifier: keyid:86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:6a:f3:05:4a:8b:67:34:6a:f0:08:8b:cd:7e:ea:10:84:89: 1a:3b:64:bf:4c:a7:c6:6c:de:cc:87:7e:a2:83:aa:26:ce:75: f5:6b:ca:33:ed:6d:5d:34:c8:2f:ed:65:d0:50:3b:9f:8d:8e: 1e:dc:b9:60:41:b4:5e:06:96:48:6f:1a:e6:73:f0:f5:7d:ff: 8c:bc:5f:62:9a:13:94:6f:75:b5:29:18:ce:a6:af:a0:4d:5f: ee:24:b2:8a:eb:1a:0a:b4:fc:cb:05:c2:af:a3:eb:b8:3c:9a: 9b:74:30:40:5b:a5:2e:75:11:b8:f4:12:8d:2e:6e:b7:88:e2: cb:b4:7a:7f:23:f3:20:c3:71:f5:1a:13:d3:e8:76:a8:de:51: 18:55:e0:50:90:37:8f:fa:64:8d:ad:e4:bb:4a:d4:3d:40:e5: 1e:12:c7:16:45:51:5e:77:9d:e8:b6:94:1f:0e:55:fc:43:c2: 1d:8d:29:88:f9:e6:0b:0c:79:b1:13:73:b3:93:84:f6:a0:14: 00:1f:d4:46:96:89:4b:1e:ac:a8:7a:00:f3:e3:7d:69:f5:dc: ab:12:ff:df:c5:40:28:3b:0c:52:9c:e2:82:14:f1:a8:e1:16: c8:46:6f:f7:dd:d9:f3:71:f2:11:c2:b7:ff:82:c6:c0:6c:d0: 00:ea:7e:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEM2QzExMC8GA1UEBRMoODYxMjE5MjhEOUI0MDFFMzFENkE3QjIwNkVCMDE2MkQz ODZFMDQ3MjAeFw0yNjAxMTYxNTAxNTRaFw0yNjAxMjMxNTAxNTRaMBgxFjAUBgNV BAMMDTY5NmE1MmUzLTMxNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSN1HZyQX3SJT3s23AFJ5acCZeKbZTiliCYCESS/f+4rJ8gbeF7yl93tAZs2za yRltwWxm/limehI97lGjXXIYZ2SEuKDkZFAaCLfkQ/iT0u+XhAXXRlLPBvyswqcY kw+LgPA4SjUwGlVQPJHm0Jw4YtjwSPE7TXlCwgY8+5JdJPBN95k2qVWthMo76aWh JnWIyLZfAmQCVUpIxZ62z5gIw0jsgizOXX0AEPTwswTkPwkGBCGhGdhexmyY/aRi /mqAN9asCwX6XgfcFcZZyKdAYDa6yQVzJT/P5FD2t2I30pCCr+01SPHkCbvCy5P5 uYwleoKmEkIgJV0Q5GPhe7UbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoGvWDua0 NaxwWiO6qtocYhL6azgwHwYDVR0jBBgwFoAUhhIZKNm0AeMdansgbrAWLThuBHIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QzZDLzMwQTU0RjZDRDY1 RjExRjBCMDZGRDhBMjBBQjQzRTEzL2hoSVpLTm0wQWVNZGFuc2dickFXTFRodUJI SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaGhJWktObTBBZU1kYW5zZ2JyQVdMVGh1QkhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QzZDLzMwQTU0RjZDRDY1RjExRjBCMDZGRDhBMjBBQjQzRTEzL2hoSVpLTm0wQWVN ZGFuc2dickFXTFRodUJISS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIVq8wVKi2c0avAIi81+6hCEiRo7ZL9Mp8Zs3syHfqKDqibOdfVryjPt bV00yC/tZdBQO5+Njh7cuWBBtF4GlkhvGuZz8PV9/4y8X2KaE5RvdbUpGM6mr6BN X+4ksorrGgq0/MsFwq+j67g8mpt0MEBbpS51Ebj0Eo0ubreI4su0en8j8yDDcfUa E9PodqjeURhV4FCQN4/6ZI2t5LtK1D1A5R4SxxZFUV53nei2lB8OVfxDwh2NKYj5 5gsMebETc7OThPagFAAf1EaWiUserKh6APPjfWn13KsS/9/FQCg7DFKc4oIU8ajh FshGb/fd2fNx8hHCt/+CxsBs0ADqfhI= -----END CERTIFICATE-----Generated at Sun Jan 18 03:12:01 2026 by rpki-client