This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft File: hYu8kCwHf24DE67cSds25v7yNLI.mft (raw, json) Hash identifier: i+ooo5KHTB7QWxS1n7Biq8DzaDQVs8FMofLg/clBdGQ= Subject key identifier: 86:66:40:9B:EB:26:C6:C2:F4:90:F6:61:D7:90:A7:AD:BF:32:3D:AB Authority key identifier: 85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2 Certificate issuer: /CN=A91DE334/serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft Manifest number: 06 Signing time: Mon 05 Jan 2026 06:59:03 +0000 Manifest this update: Mon 05 Jan 2026 06:59:03 +0000 Manifest next update: Mon 12 Jan 2026 06:59:03 +0000 Files and hashes: 1: hYu8kCwHf24DE67cSds25v7yNLI.crl (hash: /tq/qj+fTUVyLUw6JfoODD6/Kb7G/6iJDrhh7RjgSpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 06:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE334, serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2 Validity Not Before: Jan 5 06:59:03 2026 GMT Not After : Jan 12 06:59:03 2026 GMT Subject: CN=695b6137-b687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:28:f2:b7:9a:bb:14:6e:6c:0c:39:60:ed:0b: 0f:43:91:36:5e:46:a3:b8:b8:07:ba:f1:28:89:a9: e9:88:a5:c5:21:da:bc:fc:38:f1:dd:2f:f7:fd:c3: e0:3b:af:29:8b:36:86:3e:e8:e3:39:cf:ac:4b:8b: b3:6e:af:85:1f:9c:5d:0e:28:9f:38:d7:89:53:31: 42:b8:df:2f:e2:38:74:71:44:16:9f:85:1d:e1:6b: de:b2:1b:42:b2:1d:bd:2c:5c:fa:c8:bb:56:42:53: e5:cc:7d:7a:d9:26:c5:37:4d:d6:b5:d7:a1:48:ef: 78:52:45:84:51:a0:de:9d:56:21:2c:be:47:ea:a4: 96:f3:7f:51:b8:25:7b:c5:bc:c7:b9:bc:03:d7:d8: 60:81:e7:ee:e2:4d:ff:b6:c1:56:cf:26:26:57:a3: ab:42:3d:d4:0a:bf:64:8f:28:3d:d8:4b:c0:18:68: db:60:6f:ff:46:71:e1:bf:34:ba:df:f8:f3:f9:f6: 40:bc:87:13:ad:8a:43:b3:71:8b:2e:80:e0:ab:97: 48:64:37:d4:31:5d:62:f6:fa:6d:7c:f8:ca:c9:ea: ed:1f:a3:8d:ae:ba:20:e4:4b:80:b6:c4:26:9a:1b: af:67:60:80:9f:f7:08:9b:c8:55:40:5d:f5:61:86: 5a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:66:40:9B:EB:26:C6:C2:F4:90:F6:61:D7:90:A7:AD:BF:32:3D:AB X509v3 Authority Key Identifier: keyid:85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9f:0a:6b:19:84:2b:c3:9e:22:26:c0:42:13:ed:92:ac:3b: 7a:2d:c5:8b:94:c6:6c:37:76:4b:a4:9e:9f:dd:df:db:46:3c: d0:5e:52:9b:00:e6:36:8a:5b:f5:a9:8f:82:d3:80:01:81:e5: f1:25:28:b6:15:d0:e3:e3:b9:bd:ab:02:92:bd:45:f1:ef:7f: 9c:6c:92:b2:bc:fa:66:75:39:00:eb:b1:99:e5:e2:d3:63:d1: 42:19:60:ee:86:15:71:07:d1:07:26:de:dd:6c:42:de:a0:ca: 7c:49:a3:75:fd:ef:ca:2f:34:e4:74:76:20:9f:a5:2a:ff:26: 82:10:69:cd:9b:47:99:8a:b1:f6:77:d4:dc:57:46:e4:37:83: 94:7c:30:57:f7:45:e2:14:fd:be:92:f6:02:2e:17:8d:0e:e6: 49:f9:77:e7:4f:6e:e3:50:b1:66:c1:91:3f:af:14:d6:cb:34: 5b:ac:af:84:da:b8:4f:e7:f6:6a:4c:a3:8d:48:23:a1:38:b8: 7e:fe:66:e3:83:2e:71:0a:47:4b:7d:73:cf:a7:77:d4:01:33: b0:01:3e:12:5f:13:43:31:51:81:78:d6:4d:06:2b:7b:6e:4d: 36:ee:8c:f8:bd:c9:43:99:26:28:64:b1:ef:99:a4:77:75:5b: da:a8:62:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE RTMzNDExMC8GA1UEBRMoODU4QkJDOTAyQzA3N0Y2RTAzMTNBRURDNDlEQjM2RTZG RUYyMzRCMjAeFw0yNjAxMDUwNjU5MDNaFw0yNjAxMTIwNjU5MDNaMBgxFjAUBgNV BAMMDTY5NWI2MTM3LWI2ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVKPK3mrsUbmwMOWDtCw9DkTZeRqO4uAe68SiJqemIpcUh2rz8OPHdL/f9w+A7 rymLNoY+6OM5z6xLi7Nur4UfnF0OKJ8414lTMUK43y/iOHRxRBafhR3ha96yG0Ky Hb0sXPrIu1ZCU+XMfXrZJsU3Tda116FI73hSRYRRoN6dViEsvkfqpJbzf1G4JXvF vMe5vAPX2GCB5+7iTf+2wVbPJiZXo6tCPdQKv2SPKD3YS8AYaNtgb/9GceG/NLrf +PP59kC8hxOtikOzcYsugOCrl0hkN9QxXWL2+m18+MrJ6u0fo42uuiDkS4C2xCaa G69nYICf9wibyFVAXfVhhlrPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhmZAm+sm xsL0kPZh15Cnrb8yPaswHwYDVR0jBBgwFoAUhYu8kCwHf24DE67cSds25v7yNLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMzM0L0M1MTI2Q0NFRTU3 OTExRjA4MzZFRUFBMTQxNkY1NkJDL2hZdThrQ3dIZjI0REU2N2NTZHMyNXY3eU5M SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFl1OGtDd0hmMjRERTY3Y1NkczI1djd5TkxJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF MzM0L0M1MTI2Q0NFRTU3OTExRjA4MzZFRUFBMTQxNkY1NkJDL2hZdThrQ3dIZjI0 REU2N2NTZHMyNXY3eU5MSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB+fCmsZhCvDniImwEIT7ZKsO3otxYuUxmw3dkuknp/d39tGPNBeUpsA 5jaKW/Wpj4LTgAGB5fElKLYV0OPjub2rApK9RfHvf5xskrK8+mZ1OQDrsZnl4tNj 0UIZYO6GFXEH0Qcm3t1sQt6gynxJo3X978ovNOR0diCfpSr/JoIQac2bR5mKsfZ3 1NxXRuQ3g5R8MFf3ReIU/b6S9gIuF40O5kn5d+dPbuNQsWbBkT+vFNbLNFusr4Ta uE/n9mpMo41II6E4uH7+ZuODLnEKR0t9c8+nd9QBM7ABPhJfE0MxUYF41k0GK3tu TTbujPi9yUOZJihkse+ZpHd1W9qoYnA= -----END CERTIFICATE-----Generated at Wed Jan 7 06:34:52 2026 by rpki-client