This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft File: Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft (raw, json) Hash identifier: LP0gr+s/lhewg0/wtjHkcjM7llQgAgce3T+Ln3UpD3I= Subject key identifier: 72:17:34:35:0E:D1:2E:9C:4D:6F:54:9E:98:37:F9:2D:21:D3:F8:81 Authority key identifier: 09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB Certificate issuer: /CN=A91CBF47/serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft Manifest number: 05 Signing time: Tue 20 Jan 2026 14:31:05 +0000 Manifest this update: Tue 20 Jan 2026 14:31:04 +0000 Manifest next update: Tue 27 Jan 2026 14:31:04 +0000 Files and hashes: 1: Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl (hash: Qmo+j1KciP003Qnw32A1re5WHDtLX1KXXb+WhQWOfJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB Validity Not Before: Jan 20 14:31:04 2026 GMT Not After : Jan 27 14:31:04 2026 GMT Subject: CN=696f91a8-ee4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b9:a7:6f:fd:98:5d:cd:34:3a:57:23:dc:69: 6c:dc:2d:60:de:63:63:16:72:93:e7:e2:29:d9:e1: f7:ff:25:4d:bb:bd:2f:1a:3f:8e:cd:8a:15:3d:40: 7a:74:7f:eb:90:20:c1:10:b3:c0:c2:1d:0a:c1:50: bb:bb:ef:7b:7d:3f:07:22:8a:a7:98:f9:50:41:ca: ca:14:d7:1e:25:5f:dd:8a:c6:2c:14:82:09:ad:5b: 30:f8:9c:b1:d3:9f:73:ce:5b:8d:ac:bd:63:ba:dd: f6:63:7f:d4:28:97:37:73:be:5f:a5:ce:e2:62:63: fb:f9:29:eb:ad:0e:5a:66:99:f1:e2:7e:27:2f:c9: 7a:20:41:47:6b:1c:78:33:bd:02:f2:89:55:d3:0f: fa:07:bb:70:c0:04:d5:e9:d0:e9:50:35:e7:6b:e3: 1a:ab:ec:b3:2e:32:45:7e:30:46:4c:57:a5:db:9c: 8d:bc:ff:5d:91:eb:6b:0e:01:23:73:e1:9e:2c:59: fa:8b:e7:6c:4c:fb:91:30:13:5d:78:56:e7:e1:a9: a5:1a:25:6d:74:38:de:8d:f1:3e:f2:ab:bc:41:25: 68:4e:b2:10:94:66:6a:f9:0d:bc:bb:29:1a:ad:99: a8:1a:b1:cc:6f:27:bc:25:c6:1f:7d:78:ff:fb:2e: 79:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:17:34:35:0E:D1:2E:9C:4D:6F:54:9E:98:37:F9:2D:21:D3:F8:81 X509v3 Authority Key Identifier: keyid:09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e0:e9:b5:78:60:6d:d2:4f:5d:82:20:2d:8c:b2:fb:b9:da: cd:a7:51:eb:a6:ce:13:6b:53:5b:22:1e:c9:d7:19:fb:9d:4b: b8:ce:11:0a:9a:cf:77:cd:99:19:b5:b9:29:40:a4:e8:e8:65: b7:f9:c2:cb:07:bd:5a:60:dd:5c:83:be:8b:3c:e4:96:91:5b: 5a:a1:94:68:7f:32:dd:2a:13:c5:26:da:de:39:62:cd:af:41: 6e:a9:a7:94:ef:79:33:7d:39:7a:cc:a3:0a:cf:28:f0:79:24: 35:fc:2b:75:36:29:0a:32:03:06:f3:59:ce:64:75:56:56:cc: 14:20:66:9b:41:ad:21:a7:39:46:2b:1e:21:b6:d9:51:d0:4b: 95:30:12:f6:4c:14:fe:f9:1c:7f:70:e3:3d:bc:84:a1:d2:a8: 98:ce:c3:ba:f4:61:87:58:77:e4:ce:d2:8a:8b:d8:3e:b7:f2: 41:c3:db:d9:26:df:41:2f:04:3e:83:a3:62:57:c6:e8:c4:81: a1:9f:c1:2f:54:be:0a:47:f1:74:ab:ad:e5:5e:20:47:28:5a: 70:d2:55:b9:2e:32:74:f4:89:0e:b0:3a:e7:ec:f0:bf:50:6b: 26:c2:08:76:58:f6:20:4b:99:b8:c6:ca:97:a3:6f:a5:84:3a: 57:8a:bc:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFD QkY0NzExMC8GA1UEBRMoMDlERDBFQTJEMjAzMTFGNzkzRTQ3NDNGMDg2NUM4NEEw MjQ3M0ZEQjAeFw0yNjAxMjAxNDMxMDRaFw0yNjAxMjcxNDMxMDRaMBgxFjAUBgNV BAMMDTY5NmY5MWE4LWVlNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0uadv/ZhdzTQ6VyPcaWzcLWDeY2MWcpPn4inZ4ff/JU27vS8aP47NihU9QHp0 f+uQIMEQs8DCHQrBULu773t9PwciiqeY+VBBysoU1x4lX92KxiwUggmtWzD4nLHT n3POW42svWO63fZjf9Qolzdzvl+lzuJiY/v5KeutDlpmmfHificvyXogQUdrHHgz vQLyiVXTD/oHu3DABNXp0OlQNedr4xqr7LMuMkV+MEZMV6XbnI28/12R62sOASNz 4Z4sWfqL52xM+5EwE114VufhqaUaJW10ON6N8T7yq7xBJWhOshCUZmr5Dby7KRqt magascxvJ7wlxh99eP/7LnntAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUchc0NQ7R LpxNb1SemDf5LSHT+IEwHwYDVR0jBBgwFoAUCd0OotIDEfeT5HQ/CGXISgJHP9sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCRjQ3LzBERkFFRTQ4RjI4 QjExRjBCM0ZERkU0MjZCNkY1NkJDL0NkME9vdElERWZlVDVIUV9DR1hJU2dKSFA5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvQ2QwT290SURFZmVUNUhRX0NHWElTZ0pIUDlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC RjQ3LzBERkFFRTQ4RjI4QjExRjBCM0ZERkU0MjZCNkY1NkJDL0NkME9vdElERWZl VDVIUV9DR1hJU2dKSFA5cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ7g6bV4YG3ST12CIC2Msvu52s2nUeumzhNrU1siHsnXGfudS7jOEQqa z3fNmRm1uSlApOjoZbf5wssHvVpg3VyDvos85JaRW1qhlGh/Mt0qE8Um2t45Ys2v QW6pp5TveTN9OXrMowrPKPB5JDX8K3U2KQoyAwbzWc5kdVZWzBQgZptBrSGnOUYr HiG22VHQS5UwEvZMFP75HH9w4z28hKHSqJjOw7r0YYdYd+TO0oqL2D638kHD29km 30EvBD6Do2JXxujEgaGfwS9UvgpH8XSrreVeIEcoWnDSVbkuMnT0iQ6wOufs8L9Q aybCCHZY9iBLmbjGypejb6WEOleKvOU= -----END CERTIFICATE-----Generated at Wed Jan 21 07:41:38 2026 by rpki-client