This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft File: 5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json) Hash identifier: TdsJPQTI5YdXCWj+of5rHAhFJ2hG8RkvlY8TXBMZM2E= Subject key identifier: 5F:22:E7:4A:FD:9B:BD:21:E5:82:1D:CC:3D:7D:AD:13:6E:E4:35:AE Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 Certificate issuer: /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft Manifest number: 30 Signing time: Sat 17 Jan 2026 06:34:42 +0000 Manifest this update: Sat 17 Jan 2026 06:34:42 +0000 Manifest next update: Sat 24 Jan 2026 06:34:42 +0000 Files and hashes: 1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: LB1s88dTQd8LYL3w4/2xNoKgmw1Pv9qsBp5GIk/s3+0=) 2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: Vrxbp4tg7Ch8ynxq67uyQgBvWF4QcT0YiwQ07xaqChg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Validity Not Before: Jan 17 06:34:42 2026 GMT Not After : Jan 24 06:34:42 2026 GMT Subject: CN=696b2d82-d789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:00:f8:a6:6f:88:23:8d:7c:f5:d1:4a:6f: 01:89:9b:29:1a:71:2c:61:fc:b5:33:07:1d:a6:fb: 4c:83:f8:12:2b:b0:66:26:98:6b:9d:a5:23:c2:3d: 00:f3:76:e4:a5:05:ca:db:5b:13:5b:9c:d4:cb:a0: 6d:e8:78:ac:b4:47:4e:8d:aa:9f:be:b1:fa:00:84: 83:ed:95:8d:ff:eb:34:7a:df:87:f0:0a:ae:b4:d6: b1:5e:c2:33:1a:b2:14:68:55:9c:be:5a:ba:97:81: ca:7a:24:ed:32:16:a8:8b:e2:8c:3c:e9:2a:d8:d8: c8:a1:cf:30:53:f4:db:01:29:b0:7e:94:d8:a2:c8: d7:f7:84:c5:6e:e8:0d:0f:51:63:38:94:b3:25:72: 9d:b2:a1:1f:60:eb:3b:e7:b9:9b:d1:4f:f1:1f:7a: ee:9e:b7:9c:09:63:19:83:33:1f:04:db:b0:1d:bd: c5:14:74:1c:6e:c9:5a:4c:45:fe:1a:36:c9:9c:d4: ae:86:01:41:e8:be:e8:05:c3:a9:7b:39:20:9e:2c: 1e:24:07:0f:bf:81:79:28:c7:df:e2:c4:cc:53:de: 46:40:e4:c1:f6:fb:13:5f:05:50:93:86:62:5d:5b: a4:d6:30:4c:ce:66:cb:7e:ac:a4:59:7f:34:58:e1: 09:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:22:E7:4A:FD:9B:BD:21:E5:82:1D:CC:3D:7D:AD:13:6E:E4:35:AE X509v3 Authority Key Identifier: keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fe:10:c0:20:ed:22:75:f6:56:8d:09:0a:24:6d:eb:e1:f6: 20:e4:6b:6c:5f:30:f4:90:9a:34:27:78:31:5e:de:d9:e2:3d: d8:e8:d1:ca:17:69:b3:7e:0a:b7:dd:30:c8:d8:0b:6c:ec:61: 86:fe:eb:b8:af:20:91:4d:d5:b6:c5:71:c9:72:3d:3e:f8:06: 6a:d7:f7:05:d6:9f:f6:02:bd:81:76:33:c8:87:c3:3b:63:6b: a3:51:68:0f:bd:12:6e:aa:66:67:3d:69:48:da:cc:59:90:03: d5:df:39:54:bc:40:38:d5:ba:2b:09:d3:57:d7:29:1f:08:44: 70:86:20:44:16:0b:6f:41:11:6a:03:58:a0:43:dd:66:19:d6: 43:ef:d9:a4:69:ba:ba:39:73:2b:ff:21:bc:18:cb:da:c3:91: 32:fb:b0:2e:01:1d:d8:fa:bc:3f:a4:08:c0:99:7f:02:58:b4: a6:b3:36:d3:92:8c:f2:5e:a3:0b:04:0e:25:53:92:8d:3b:47: 57:26:8c:47:28:29:52:27:20:cd:e4:61:5d:70:82:f4:c3:1c: 93:58:80:23:01:8e:b1:fd:ec:e8:a6:b7:4f:24:0a:ab:6d:7b: c2:7b:67:6f:b8:c2:32:35:63:36:b9:bc:71:49:77:d6:4b:af: 6f:0d:d2:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzRBNzExMC8GA1UEBRMoRTQyRjVERUYyNjU5QjVFN0ZBMjcwMzc2OEU5NDg3RUZE QzU5NUJCMDAeFw0yNjAxMTcwNjM0NDJaFw0yNjAxMjQwNjM0NDJaMBgxFjAUBgNV BAMMDTY5NmIyZDgyLWQ3ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1JwD4pm+II4189dFKbwGJmykacSxh/LUzBx2m+0yD+BIrsGYmmGudpSPCPQDz duSlBcrbWxNbnNTLoG3oeKy0R06Nqp++sfoAhIPtlY3/6zR634fwCq601rFewjMa shRoVZy+WrqXgcp6JO0yFqiL4ow86SrY2MihzzBT9NsBKbB+lNiiyNf3hMVu6A0P UWM4lLMlcp2yoR9g6zvnuZvRT/Efeu6et5wJYxmDMx8E27AdvcUUdBxuyVpMRf4a Nsmc1K6GAUHovugFw6l7OSCeLB4kBw+/gXkox9/ixMxT3kZA5MH2+xNfBVCThmJd W6TWMEzOZst+rKRZfzRY4QnlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXyLnSv2b vSHlgh3MPX2tE27kNa4wHwYDVR0jBBgwFoAU5C9d7yZZtef6JwN2jpSH79xZW7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNEE3L0ZBOThGQjNFQUI0 NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVmNkp3TjJqcFNINzl4Wlc3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNUM5ZDd5Wlp0ZWY2SndOMmpwU0g3OXhaVzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND NEE3L0ZBOThGQjNFQUI0NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVm Nkp3TjJqcFNINzl4Wlc3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG3+EMAg7SJ19laNCQokbevh9iDka2xfMPSQmjQneDFe3tniPdjo0coX abN+CrfdMMjYC2zsYYb+67ivIJFN1bbFcclyPT74BmrX9wXWn/YCvYF2M8iHwztj a6NRaA+9Em6qZmc9aUjazFmQA9XfOVS8QDjVuisJ01fXKR8IRHCGIEQWC29BEWoD WKBD3WYZ1kPv2aRpuro5cyv/IbwYy9rDkTL7sC4BHdj6vD+kCMCZfwJYtKazNtOS jPJeowsEDiVTko07R1cmjEcoKVInIM3kYV1wgvTDHJNYgCMBjrH97Oimt08kCqtt e8J7Z2+4wjI1Yza5vHFJd9ZLr28N0mg= -----END CERTIFICATE-----Generated at Sun Jan 18 03:15:26 2026 by rpki-client