This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: oM/vfDEb/a5cJikjQbz2C7KRs3G5mH5jupsK4Pa7xrU= Subject key identifier: C9:9E:F2:4E:BD:67:44:A0:0E:D1:00:4E:F8:05:3E:D7:56:71:1C:9F Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 3531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 3513 Signing time: Thu 08 Jan 2026 14:51:22 +0000 Manifest this update: Thu 08 Jan 2026 14:51:21 +0000 Manifest next update: Thu 15 Jan 2026 14:51:21 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: yW13T6leSaEYB+gWIvTeV0K9N1JfgnbRNuH5vky+mok=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: mYoYyr1o64AZsjx2x5gA3CLCgmfiA6pfIdBA+yYc62o=) 3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: BiN0k39VUnPLhlKViMIRm8mbjvoQycrvLT233B9KH/Y=) 4: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: jD/7/ehRzXn+r7A8PWs0CNNR/EbOe0oKdg7xk/UAFqU=) 5: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: xQvW4YZqb4bpCHiKIuihyp10lyfUE3gYXiSNZp52O44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Jan 2026 14:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13617 (0x3531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Jan 8 14:51:21 2026 GMT Not After : Jan 15 14:51:21 2026 GMT Subject: CN=695fc46a-c65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:d2:60:6d:fd:2a:1b:10:ce:20:2a:9a:af: af:9b:8e:80:57:fa:37:aa:3e:8b:43:02:4a:1b:3e: 41:4c:92:31:54:ee:d0:61:69:be:e1:30:c7:a4:2e: 79:98:ec:2a:fa:dc:5c:90:e1:13:42:d0:e6:96:31: d0:0f:e8:b4:ac:ca:3d:dd:f6:38:cc:81:3d:89:79: d1:03:4a:c2:fa:a4:02:bc:f3:59:71:4b:2f:d6:75: 05:84:e7:ab:3b:0b:b5:8e:cd:3f:82:7d:72:d0:40: c4:86:26:27:4f:f5:7c:7a:67:79:55:74:f3:98:42: 6a:29:55:85:8b:78:39:ca:63:19:a2:82:46:9c:fd: d9:95:d5:e1:53:5b:ef:cf:44:da:8c:6f:94:71:9b: 77:f6:85:ff:5c:58:56:fd:06:3d:85:34:70:89:3c: 12:2d:99:8f:ae:99:53:7b:0b:5a:b5:d4:77:21:79: c9:5c:04:e5:ba:35:bb:07:b0:d7:61:77:d8:40:d6: af:02:a6:bd:9b:08:dd:2f:2b:f3:3b:1d:89:6a:c8: 16:5c:3a:2a:b4:95:a4:3a:b8:87:f7:85:da:c2:32: 31:e8:fb:35:35:b9:82:70:75:07:f7:45:6c:2f:73: 49:01:06:15:cc:c5:bd:a5:84:fe:64:7a:84:90:26: cb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9E:F2:4E:BD:67:44:A0:0E:D1:00:4E:F8:05:3E:D7:56:71:1C:9F X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a6:b7:f2:2a:2b:50:2b:8d:54:95:06:41:73:10:f9:96:ad: ff:d9:be:de:d0:d9:9a:2f:92:65:27:ef:54:ef:91:73:cb:02: 4a:4d:e9:3f:44:f0:bd:81:22:1a:cf:a6:7a:76:47:ba:b6:7b: 38:e2:ef:ef:40:b2:68:d0:9c:b0:b4:1a:8d:a8:98:5c:69:bd: ef:2e:3b:1e:06:cc:54:fb:fa:4e:42:d6:1f:6f:35:b6:d8:3a: 75:b6:a9:e0:1f:0d:6c:db:b2:9a:ce:ff:db:c4:8c:e5:51:ef: 0c:1a:56:a6:0d:70:21:05:86:41:d3:a4:64:4c:74:36:b2:64: 21:03:07:05:ef:49:1a:6e:8c:d0:b1:92:e9:0f:12:e0:d5:99: ae:bd:a0:76:82:f0:b2:8d:85:60:52:0c:ab:83:84:4f:fc:8b: f8:26:43:1b:2b:13:be:6a:4b:5f:76:d6:ae:55:af:17:0b:d6: 82:de:df:e9:10:ae:e8:3c:7e:0c:0c:4d:b0:84:b3:75:0b:21: 73:08:3a:75:4d:b0:2a:34:89:64:3a:4e:be:83:3e:c0:0b:09: 99:35:a6:34:91:44:4a:e0:a5:39:e7:64:31:ef:ab:e8:a4:b4: 75:81:4b:91:d5:dc:b6:66:17:11:3b:9e:3f:13:9f:9a:5d:3d: c8:19:cd:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjYwMTA4MTQ1MTIxWhcNMjYwMTE1MTQ1MTIxWjAYMRYwFAYD VQQDDA02OTVmYzQ2YS1jNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxW/SYG39KhsQziAqmq+vm46AV/o3qj6LQwJKGz5BTJIxVO7QYWm+4TDHpC55 mOwq+txckOETQtDmljHQD+i0rMo93fY4zIE9iXnRA0rC+qQCvPNZcUsv1nUFhOer Owu1js0/gn1y0EDEhiYnT/V8emd5VXTzmEJqKVWFi3g5ymMZooJGnP3ZldXhU1vv z0TajG+UcZt39oX/XFhW/QY9hTRwiTwSLZmPrplTewtatdR3IXnJXATlujW7B7DX YXfYQNavAqa9mwjdLyvzOx2JasgWXDoqtJWkOriH94XawjIx6Ps1NbmCcHUH90Vs L3NJAQYVzMW9pYT+ZHqEkCbL5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMme8k69 Z0SgDtEATvgFPtdWcRyfMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArprfyKitQK41UlQZBcxD5lq3/2b7e0NmaL5JlJ+9U75FzywJKTek/ RPC9gSIaz6Z6dke6tns44u/vQLJo0JywtBqNqJhcab3vLjseBsxU+/pOQtYfbzW2 2Dp1tqngHw1s27Kazv/bxIzlUe8MGlamDXAhBYZB06RkTHQ2smQhAwcF70kabozQ sZLpDxLg1ZmuvaB2gvCyjYVgUgyrg4RP/Iv4JkMbKxO+aktfdtauVa8XC9aC3t/p EK7oPH4MDE2whLN1CyFzCDp1TbAqNIlkOk6+gz7ACwmZNaY0kURK4KU552Qx76vo pLR1gUuR1dy2ZhcRO54/E5+aXT3IGc0t -----END CERTIFICATE-----Generated at Fri Jan 9 00:53:20 2026 by rpki-client