This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft File: 5OTCQkd4XDQv81kH9-EcSrs5i4M.mft (raw, json) Hash identifier: HXfbWFoyRgd25PEuX5RTBfmgwhQ9BYO3L178y9JWSfk= Subject key identifier: 02:2F:C7:43:38:87:7B:63:4B:17:8D:F4:30:43:78:51:11:34:06:21 Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 Certificate issuer: /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft Manifest number: 9A Signing time: Sat 17 Jan 2026 05:32:54 +0000 Manifest this update: Sat 17 Jan 2026 05:32:53 +0000 Manifest next update: Sat 24 Jan 2026 05:32:53 +0000 Files and hashes: 1: 5OTCQkd4XDQv81kH9-EcSrs5i4M.crl (hash: O6LPL84BhcVcx3n396JLEmsIXp8r+om2don6yAgvjKA=) 2: 212E0B520DFE11F0B266963AC4F9AE02.roa (hash: dDhbAceYPTZoJoEOB7Q4AGN3lBigI7VE7UVJ4rk45bI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 05:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Validity Not Before: Jan 17 05:32:53 2026 GMT Not After : Jan 24 05:32:53 2026 GMT Subject: CN=696b1f06-f084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:54:75:5f:36:11:72:b0:11:99:28:84:e2: 15:a0:ba:4d:e2:a3:0d:d6:bb:ec:f9:25:39:65:db: 21:b9:1c:f3:50:f6:81:b1:b5:02:1a:37:90:01:8c: b8:20:48:35:d6:83:67:2c:42:db:1c:4f:71:b8:5b: a2:8e:ef:d5:88:a5:ae:47:7e:8d:b1:40:ed:69:34: ad:b7:88:50:91:b3:bf:61:c5:15:9b:47:d6:1c:2d: 25:58:38:af:a2:0c:d2:cd:ae:6a:ee:12:ef:f8:61: 88:97:aa:cd:ba:1f:54:c2:00:b4:0a:ac:08:37:18: dd:04:bc:e6:f1:19:92:ce:71:42:56:8b:a6:fb:bb: 26:06:6a:64:5b:15:88:a0:07:85:eb:6c:69:e8:5f: 8c:43:1b:6c:fa:9e:b0:fd:5b:5f:2e:ba:0c:44:8d: 89:22:f8:7c:2a:e9:95:79:47:71:ea:5d:fc:6e:73: e5:8b:be:6b:27:03:6b:5e:ad:31:33:54:1d:b4:92: 83:6d:a9:2e:a2:27:27:a2:ae:e3:85:75:64:4a:ec: 01:3e:7a:93:80:40:aa:b0:ab:96:e9:b6:d5:9f:e1: 05:9d:6c:8d:60:a1:ba:d1:95:24:3c:bf:b3:d9:05: 7a:e7:f7:ee:06:5b:9c:2c:96:ea:08:26:d3:00:c8: de:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2F:C7:43:38:87:7B:63:4B:17:8D:F4:30:43:78:51:11:34:06:21 X509v3 Authority Key Identifier: keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:67:15:92:a0:0c:b5:63:3f:d3:99:e7:04:d1:1e:75:53:cc: 23:dd:e6:30:96:b1:5b:99:a0:b7:8f:c2:86:0d:c2:be:9c:37: 3e:e2:11:3c:a7:4e:78:01:05:c2:8f:91:5a:f5:c8:f3:0e:bc: 28:ad:d5:1d:81:28:92:17:d7:b7:72:c1:fa:e8:01:2e:be:49: b5:85:2a:ba:c3:1d:91:97:9a:bb:49:8c:80:d7:fd:e1:c4:57: aa:f2:25:69:85:3d:dd:0b:f7:d2:88:33:fc:72:f5:09:6a:7e: 9d:c7:48:d5:a5:e0:c6:31:87:8b:09:f4:00:a9:e1:7a:2e:05: 00:a5:db:56:3d:1f:88:68:99:c3:6e:df:e1:e1:79:08:49:dd: e3:0e:0c:e2:f0:2e:a7:43:8a:4f:26:ef:d5:01:ff:d2:42:1a: 56:3b:34:98:96:fa:c7:49:81:24:b1:0c:8b:91:4c:65:56:5b: d3:54:29:9e:6d:51:c5:6b:08:5a:38:50:02:c1:81:e1:a6:ff: 52:5d:fa:3d:ad:53:48:cf:fc:02:d0:5c:12:78:d9:b8:a2:cb: 6a:fe:de:3a:c2:7d:a0:d4:d0:ab:d2:ca:84:4e:4a:52:a3:11: ed:18:15:31:1e:e5:e8:90:46:26:31:ab:a8:6a:07:52:18:99: 1b:c0:63:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1RjExMTAvBgNVBAUTKEU0RTRDMjQyNDc3ODVDMzQyRkYzNTkwN0Y3RTExQzRB QkIzOThCODMwHhcNMjYwMTE3MDUzMjUzWhcNMjYwMTI0MDUzMjUzWjAYMRYwFAYD VQQDDA02OTZiMWYwNi1mMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cZUdV82EXKwEZkohOIVoLpN4qMN1rvs+SU5ZdshuRzzUPaBsbUCGjeQAYy4 IEg11oNnLELbHE9xuFuiju/ViKWuR36NsUDtaTStt4hQkbO/YcUVm0fWHC0lWDiv ogzSza5q7hLv+GGIl6rNuh9UwgC0CqwINxjdBLzm8RmSznFCVoum+7smBmpkWxWI oAeF62xp6F+MQxts+p6w/VtfLroMRI2JIvh8KumVeUdx6l38bnPli75rJwNrXq0x M1QdtJKDbakuoicnoq7jhXVkSuwBPnqTgECqsKuW6bbVn+EFnWyNYKG60ZUkPL+z 2QV65/fuBlucLJbqCCbTAMjelwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIvx0M4 h3tjSxeN9DBDeFERNAYhMB8GA1UdIwQYMBaAFOTkwkJHeFw0L/NZB/fhHEq7OYuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVGMS82MjIwNjMzQzBE RkMxMUYwQTFEOTgwNTNDNEY5QUUwMi81T1RDUWtkNFhEUXY4MWtIOS1FY1NyczVp NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVPVENRa2Q0WERRdjgxa0g5LUVjU3JzNWk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVGMS82MjIwNjMzQzBERkMxMUYwQTFEOTgwNTNDNEY5QUUwMi81T1RDUWtkNFhE UXY4MWtIOS1FY1NyczVpNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0ZxWSoAy1Yz/TmecE0R51U8wj3eYwlrFbmaC3j8KGDcK+nDc+4hE8 p054AQXCj5Fa9cjzDrwordUdgSiSF9e3csH66AEuvkm1hSq6wx2Rl5q7SYyA1/3h xFeq8iVphT3dC/fSiDP8cvUJan6dx0jVpeDGMYeLCfQAqeF6LgUApdtWPR+IaJnD bt/h4XkISd3jDgzi8C6nQ4pPJu/VAf/SQhpWOzSYlvrHSYEksQyLkUxlVlvTVCme bVHFawhaOFACwYHhpv9SXfo9rVNIz/wC0FwSeNm4ostq/t46wn2g1NCr0sqETkpS oxHtGBUxHuXokEYmMauoagdSGJkbwGMD -----END CERTIFICATE-----Generated at Sun Jan 18 03:16:27 2026 by rpki-client