This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft File: bKayrB3RewFNtsdnJ50Ixm5O_AU.mft (raw, json) Hash identifier: 4YZn4RHU/vbFpkNF5RcH+TcGjPYirsuj6a0jYR2Jh34= Subject key identifier: 8B:EE:10:1D:1E:44:22:73:55:48:F2:D5:6F:85:A0:2B:C3:98:90:DD Authority key identifier: 6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05 Certificate issuer: /CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05 Certificate serial: 101E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft Manifest number: 0FF6 Signing time: Sun 18 Jan 2026 17:09:52 +0000 Manifest this update: Sun 18 Jan 2026 17:09:51 +0000 Manifest next update: Sun 25 Jan 2026 17:09:51 +0000 Files and hashes: 1: bKayrB3RewFNtsdnJ50Ixm5O_AU.crl (hash: 2pCKx5e4TNLdNtkYoUVQrZaVOgfxt8wa8achq2ZAihQ=) 2: 5FB07B1421CF11EBA0C85857C4F9AE02.roa (hash: OmYQIIbzZk6dmH6VxHcDDfUOUOfBGcECAJW72iuPNeI=) 3: 425BF5FE7A4711EBAD125258C4F9AE02.roa (hash: OQe13tIv3uovK7+LLI22t0SruIOPUw/wbyXtMiDbVn4=) 4: FD22BBAE231F11EB99F53580C4F9AE02.roa (hash: XXa6SJA5QTgmd2S25JSyBGpv+kardlTpnYOCPB9Kf1Y=) 5: 61A85BEE21CF11EBA0C85857C4F9AE02.roa (hash: FEdMa9ZJBaoWQIx6djE/7tcciw4VTrjU3qrHgN23mo8=) 6: A850C476026E11EBB2E0E72FC4F9AE02.roa (hash: MUbgi1W9az5Y+OqycFqv9bQ0JgxdrpLfybU7ZdOSDHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4126 (0x101e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6B4, serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05 Validity Not Before: Jan 18 17:09:51 2026 GMT Not After : Jan 25 17:09:51 2026 GMT Subject: CN=696d13df-1c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:51:fb:23:32:20:e9:fd:dd:0f:39:b2:0f:fa: 1f:0f:2c:54:db:0c:84:54:d7:fd:6e:7c:0f:e9:65: 45:a5:2a:d0:4c:38:74:84:a0:df:ae:17:94:6d:fe: 55:05:58:02:02:de:90:d0:84:74:8e:90:5d:f4:26: b4:b4:3e:3b:6b:7e:65:51:9b:05:04:bd:c0:5d:e0: f7:e3:26:ac:8f:11:39:91:15:30:59:7c:6c:46:cc: 58:e0:04:72:d3:69:dd:ed:e0:39:a5:87:13:98:0a: 85:a9:9b:c0:95:5e:b1:cf:2b:df:7d:e6:04:cf:fe: 7d:a9:71:c1:f7:b0:d7:be:0a:99:6f:f1:3b:d8:a6: c3:24:19:3b:e3:0e:e1:5f:0a:70:6e:ea:07:2c:f6: 98:39:43:99:29:4f:f6:2f:df:c6:82:0e:86:9d:06: c4:3b:8d:b3:3f:e3:14:6b:b5:c9:53:9d:0d:03:ea: 38:09:60:55:37:bf:2d:ce:97:c4:5a:9b:75:cf:e9: 38:49:5d:73:e4:6a:69:e6:44:f5:73:f9:ae:c6:0e: c5:ba:4d:ba:eb:2d:2e:e6:da:6c:4a:12:f7:32:c6: ca:ec:ff:16:06:96:8a:0b:1b:85:7d:f3:54:e9:dc: c2:0d:52:3e:8c:5a:87:31:a8:23:d6:dc:3f:57:26: ac:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EE:10:1D:1E:44:22:73:55:48:F2:D5:6F:85:A0:2B:C3:98:90:DD X509v3 Authority Key Identifier: keyid:6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9e:31:e7:4a:79:3d:04:91:75:bc:20:58:03:7b:5b:db:23: a8:a3:63:7e:f8:aa:7d:a4:fc:fb:0f:90:a0:a8:ba:53:4b:10: 09:f7:8a:69:48:27:12:74:c4:02:01:63:8f:fb:66:e7:1b:75: e6:94:6c:15:74:40:53:92:1c:fa:68:23:d2:d7:43:a4:94:bd: 49:79:3d:32:90:ad:b4:cc:24:4b:f0:4b:7a:64:db:5f:a7:3a: ed:8e:4a:d4:62:de:10:e3:31:39:87:75:4d:7c:42:91:8a:5a: 84:61:32:b4:d5:d7:28:8e:11:61:27:94:7f:c3:0f:16:f1:f6: 39:58:45:5b:ed:3a:9c:ec:a8:73:af:4b:16:e5:a9:3b:30:2d: 54:d0:3f:0a:12:64:1b:88:78:43:fb:1d:5f:02:a2:34:84:58: 66:0e:95:f9:be:57:3c:13:b7:a4:ca:b3:5e:a7:92:d2:5e:e3: 2d:32:71:1a:b1:25:27:97:10:67:70:d9:5c:ac:1e:77:37:f9: 62:35:97:28:8a:50:9f:5a:fd:75:03:40:a7:bd:31:a8:9f:35: b2:a8:76:a8:28:4e:8f:52:0d:f0:ab:4b:6e:b7:0a:d0:24:00: 08:f7:d5:0e:b2:9c:76:58:37:8c:42:a0:c3:ec:7e:dc:7a:4d: 55:38:b9:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2QjQxMTAvBgNVBAUTKDZDQTZCMkFDMUREMTdCMDE0REI2Qzc2NzI3OUQwOEM2 NkU0RUZDMDUwHhcNMjYwMTE4MTcwOTUxWhcNMjYwMTI1MTcwOTUxWjAYMRYwFAYD VQQDDA02OTZkMTNkZi0xYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjVH7IzIg6f3dDzmyD/ofDyxU2wyEVNf9bnwP6WVFpSrQTDh0hKDfrheUbf5V BVgCAt6Q0IR0jpBd9Ca0tD47a35lUZsFBL3AXeD34yasjxE5kRUwWXxsRsxY4ARy 02nd7eA5pYcTmAqFqZvAlV6xzyvffeYEz/59qXHB97DXvgqZb/E72KbDJBk74w7h XwpwbuoHLPaYOUOZKU/2L9/Ggg6GnQbEO42zP+MUa7XJU50NA+o4CWBVN78tzpfE Wpt1z+k4SV1z5Gpp5kT1c/muxg7Fuk266y0u5tpsShL3MsbK7P8WBpaKCxuFffNU 6dzCDVI+jFqHMagj1tw/VyasTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvuEB0e RCJzVUjy1W+FoCvDmJDdMB8GA1UdIwQYMBaAFGymsqwd0XsBTbbHZyedCMZuTvwF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZCNC83MjZGNTFDMjYz RjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3Rk50c2RuSjUwSXhtNU9f QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLYXlyQjNSZXdGTnRzZG5KNTBJeG01T19BVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZCNC83MjZGNTFDMjYzRjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3 Rk50c2RuSjUwSXhtNU9fQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfnjHnSnk9BJF1vCBYA3tb2yOoo2N++Kp9pPz7D5CgqLpTSxAJ94pp SCcSdMQCAWOP+2bnG3XmlGwVdEBTkhz6aCPS10OklL1JeT0ykK20zCRL8Et6ZNtf pzrtjkrUYt4Q4zE5h3VNfEKRilqEYTK01dcojhFhJ5R/ww8W8fY5WEVb7Tqc7Khz r0sW5ak7MC1U0D8KEmQbiHhD+x1fAqI0hFhmDpX5vlc8E7ekyrNep5LSXuMtMnEa sSUnlxBncNlcrB53N/liNZcoilCfWv11A0CnvTGonzWyqHaoKE6PUg3wq0tutwrQ JAAI99UOspx2WDeMQqDD7H7cek1VOLmE -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:59 2026 by rpki-client