This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft File: 5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json) Hash identifier: RK5H2o0F3yE2bY/22E7yLxXcqh4wCY0yEgO7bVEgfzI= Subject key identifier: 23:1D:08:73:0A:E7:91:79:36:7B:73:1F:06:89:9C:5E:D1:0A:F3:12 Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft Manifest number: 015D Signing time: Tue 27 Jan 2026 03:41:00 +0000 Manifest this update: Tue 27 Jan 2026 03:40:59 +0000 Manifest next update: Tue 03 Feb 2026 03:40:59 +0000 Files and hashes: 1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: +U0wiGSlg7hV/MO4q3MgiB0t7CYHlenHy2dPZrCCgfA=) 2: 359CBDB28D0D11EF90882959C4F9AE02.roa (hash: 73Ygy8fRe0dHQxkQy1hZlh4j1TI6ruDgIOxzmdlFu7c=) 3: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: PPgHi4xJDW0BKQRIHTMdssQv8Q8vcJnoqHRhx2Hamts=) 4: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (hash: cnwfSeIwvwV6lWFdzwgrorO9+SXGNy195qZfyMAiJts=) 5: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: 5h9rfOVaMmYvPj2z2Ai85lMHTizuoozbNVPH10IYIS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 03:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Validity Not Before: Jan 27 03:40:59 2026 GMT Not After : Feb 3 03:40:59 2026 GMT Subject: CN=697833cc-08fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7d:7a:27:7b:b4:fc:de:2c:48:0e:f2:8c:48: c9:c6:c7:e4:a9:72:c3:8c:81:38:44:53:af:ea:7c: bd:5d:6a:35:69:5b:96:00:74:0a:2e:a3:b4:c3:52: 05:8d:da:29:a9:c6:37:86:c7:fe:75:4b:25:ae:f1: fa:8a:ef:34:24:a2:37:5c:c0:ea:1f:c1:3f:fa:dc: 7a:f7:f4:81:21:7b:a7:bf:65:26:56:90:49:a1:51: 30:e2:71:79:ac:3f:1a:cc:0d:c9:da:9c:36:04:56: 7d:58:b6:0e:38:0d:0b:5d:39:49:9d:80:17:57:36: a7:a3:63:7b:d3:65:8a:78:ac:47:92:12:5f:7d:c4: 4c:94:d0:de:97:9e:04:a4:fa:45:b4:64:b9:dc:bd: 9e:2f:94:6f:55:34:a2:cf:36:e6:3a:8a:06:f4:60: a2:90:e4:02:e5:13:12:58:00:ef:bb:80:7c:4f:83: ed:89:b5:8b:a7:80:86:25:b9:fd:6b:7a:c1:d1:de: 54:67:32:f3:34:f3:2c:29:85:37:14:04:02:ac:ea: 8d:56:a1:9e:e6:35:b2:df:65:a5:52:bc:f1:23:1c: ac:a9:aa:08:94:d9:0b:63:89:b4:b8:c2:74:fc:2d: 65:47:34:56:3f:70:f7:5d:bd:f7:e4:b4:65:c9:8b: b9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1D:08:73:0A:E7:91:79:36:7B:73:1F:06:89:9C:5E:D1:0A:F3:12 X509v3 Authority Key Identifier: keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:9f:cf:ec:f6:2b:26:9e:1f:ac:d2:46:5c:7c:e0:98:60:7e: e7:0e:21:c1:2a:32:ed:88:de:ff:1b:32:37:74:4e:b7:be:9e: cd:25:74:a8:70:15:96:07:72:53:17:ee:d2:9c:5c:ab:b8:63: 69:06:72:1a:98:24:94:aa:cc:2b:d9:7c:86:57:97:36:a1:c2: 66:86:61:94:7a:be:5d:2b:fc:b3:0b:af:52:ed:1c:a6:91:dd: 3f:7b:5e:00:db:37:20:c1:64:92:55:ba:67:37:ba:1c:05:ae: b3:ec:05:7e:cc:46:6a:12:46:99:01:bf:9d:64:ab:69:59:c9: 78:3e:7e:55:d2:9a:3d:ae:1d:67:7b:75:28:82:bf:f1:40:7f: 6e:02:f1:48:15:32:65:26:6e:ee:7c:67:95:f6:6a:89:5d:ca: d0:ed:07:03:7f:0f:3a:06:86:8f:8d:4d:16:fa:a9:49:00:d4: 6b:2e:b5:8b:58:60:71:cd:d6:9f:24:2d:8e:86:56:81:2f:09: d7:a6:83:49:24:96:c5:e5:08:14:1e:f3:f3:01:c1:1b:cc:0b: 2c:30:fe:d6:46:ae:3d:8c:e1:5b:62:f4:76:81:0d:6c:39:ca: aa:55:f2:5d:c3:84:d3:22:e7:70:60:04:73:46:a8:5f:3e:61: 9e:c9:67:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M3MTExMTAvBgNVBAUTKEU0MjlENDI5RTY2Qjc5N0IzRDhBMUNCRTI0OTE1NzdB REMzOEE0OEUwHhcNMjYwMTI3MDM0MDU5WhcNMjYwMjAzMDM0MDU5WjAYMRYwFAYD VQQDDA02OTc4MzNjYy0wOGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlH16J3u0/N4sSA7yjEjJxsfkqXLDjIE4RFOv6ny9XWo1aVuWAHQKLqO0w1IF jdopqcY3hsf+dUslrvH6iu80JKI3XMDqH8E/+tx69/SBIXunv2UmVpBJoVEw4nF5 rD8azA3J2pw2BFZ9WLYOOA0LXTlJnYAXVzano2N702WKeKxHkhJffcRMlNDel54E pPpFtGS53L2eL5RvVTSizzbmOooG9GCikOQC5RMSWADvu4B8T4PtibWLp4CGJbn9 a3rB0d5UZzLzNPMsKYU3FAQCrOqNVqGe5jWy32WlUrzxIxysqaoIlNkLY4m0uMJ0 /C1lRzRWP3D3Xb335LRlyYu5WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMdCHMK 55F5NntzHwaJnF7RCvMSMB8GA1UdIwQYMBaAFOQp1Cnma3l7PYocviSRV3rcOKSO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzcxMS9DN0QxQjA1NDFF RTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVYczlpaHktSkpGWGV0dzRw STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDblVLZVpyZVhzOWloeS1KSkZYZXR3NHBJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzcxMS9DN0QxQjA1NDFFRTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVY czlpaHktSkpGWGV0dzRwSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHn8/s9ismnh+s0kZcfOCYYH7nDiHBKjLtiN7/GzI3dE63vp7NJXSo cBWWB3JTF+7SnFyruGNpBnIamCSUqswr2XyGV5c2ocJmhmGUer5dK/yzC69S7Rym kd0/e14A2zcgwWSSVbpnN7ocBa6z7AV+zEZqEkaZAb+dZKtpWcl4Pn5V0po9rh1n e3Uogr/xQH9uAvFIFTJlJm7ufGeV9mqJXcrQ7QcDfw86BoaPjU0W+qlJANRrLrWL WGBxzdafJC2OhlaBLwnXpoNJJJbF5QgUHvPzAcEbzAssMP7WRq49jOFbYvR2gQ1s OcqqVfJdw4TTIudwYARzRqhfPmGeyWfO -----END CERTIFICATE-----Generated at Wed Jan 28 21:05:45 2026 by rpki-client