This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft File: ko35XOma_Fud5gHm6GQDwNiRUp8.mft (raw, json) Hash identifier: HXF7xnXgiD/0eZDHA/I8CJkUbwnu6szjCH1c0Pc2DeQ= Subject key identifier: EF:F6:FC:B4:C9:CE:EC:A4:D1:8C:E8:58:05:C9:0B:D4:40:3D:79:B2 Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F Certificate issuer: /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft Manifest number: 23 Signing time: Sat 17 Jan 2026 06:44:11 +0000 Manifest this update: Sat 17 Jan 2026 06:44:11 +0000 Manifest next update: Sat 24 Jan 2026 06:44:11 +0000 Files and hashes: 1: ko35XOma_Fud5gHm6GQDwNiRUp8.crl (hash: 4Y+LAsTfxaSe6MPYkSY2mmsdSJxgm8v+yIgkdyOy55U=) 2: 1F97E6A8C09811F095581A59C4F9AE02.roa (hash: VG6bVeH+ffAxXWctOl/ryqAQ1yfBVnBqI0p3XqeQf2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Validity Not Before: Jan 17 06:44:11 2026 GMT Not After : Jan 24 06:44:11 2026 GMT Subject: CN=696b2fbb-fe3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:f3:31:f9:8b:33:0a:64:c5:d1:64:6d:f5: e1:55:8b:c5:bc:1c:52:d2:77:8c:34:99:e5:b0:bb: d6:c1:f0:fd:84:63:62:9f:f6:ac:29:7e:5e:0a:8f: 1d:bc:79:fd:14:54:49:c2:f6:45:ff:3f:c7:8d:7d: e8:4d:77:d5:2b:e1:cc:a7:28:fa:20:9b:79:7e:2b: 88:df:e2:2b:17:1a:c4:34:cd:e7:6f:0a:da:a2:18: 6c:56:bf:a3:47:5a:ce:e9:55:ed:3b:73:87:4f:42: fb:ed:d1:c0:0e:2e:d9:94:c5:07:71:a1:a6:a0:cf: fd:ab:f2:ff:de:c2:f1:23:84:27:33:5d:21:b2:fc: b5:2d:10:93:e5:4e:3f:3e:ce:17:39:00:7c:4d:e5: aa:20:5d:eb:19:f4:aa:17:2f:d0:ad:eb:db:4b:c2: d6:32:e8:d7:ec:43:a5:cc:55:c6:d8:9a:8d:b9:c6: 5f:ec:21:5f:83:84:ab:07:17:cb:f3:07:62:5c:87: 7d:59:17:ae:a2:0f:57:78:9f:27:dc:a4:82:7d:62: 42:9f:ae:fe:57:ce:f2:9f:bc:7f:05:76:dd:c2:8a: df:7a:cb:cd:e3:90:91:45:0a:ed:0d:73:71:db:d8: 12:a8:15:39:c7:3e:09:83:43:51:3d:dc:d2:1e:c0: 2e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F6:FC:B4:C9:CE:EC:A4:D1:8C:E8:58:05:C9:0B:D4:40:3D:79:B2 X509v3 Authority Key Identifier: keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:90:69:10:2f:b5:a5:2c:99:4f:3c:d8:98:0d:c9:fe:d0:b3: f4:92:22:9b:e2:96:80:7d:d6:ea:a2:df:50:48:e1:48:6c:d4: 21:b3:bb:a0:44:39:96:66:25:27:31:fa:bc:e7:ae:dd:8a:03: 6a:f5:d4:d8:8c:ae:ff:3c:04:ad:ad:da:97:bc:6a:53:28:1c: 23:e4:a0:79:01:58:7d:0b:0b:1e:fb:c1:5b:4f:2b:94:b9:2d: fe:dc:d7:c4:ca:7e:7d:8b:62:d2:1a:7e:cb:d0:a3:3d:b9:5d: b1:07:65:40:be:c0:0f:1b:26:5f:4e:d7:e0:6e:c5:21:ff:50: df:b7:c6:32:ca:a6:bb:8b:ab:a6:3c:c3:52:57:dc:14:9f:9d: 85:2e:0f:46:92:87:7e:28:ff:53:5f:bc:bf:f6:7a:f5:c3:78: c3:d8:b6:3c:ec:9f:0c:8f:a7:27:a0:0b:98:15:27:fc:58:e7: 8e:08:d7:21:01:e3:46:de:0a:55:c0:04:c7:36:ea:17:2a:ad: e0:85:ee:fd:9d:22:8b:b2:2c:9a:69:82:6c:46:b1:3d:9d:f1: b2:3b:40:b5:70:c6:e8:c7:54:5a:a7:4a:2f:6f:3a:19:97:c7: c2:c1:8e:c8:66:af:a1:44:2b:10:e9:f6:37:5a:1a:33:d7:0a: c6:4e:36:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUE0NDExMC8GA1UEBRMoOTI4REY5NUNFOTlBRkM1QjlERTYwMUU2RTg2NDAzQzBE ODkxNTI5RjAeFw0yNjAxMTcwNjQ0MTFaFw0yNjAxMjQwNjQ0MTFaMBgxFjAUBgNV BAMMDTY5NmIyZmJiLWZlM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn8fMx+YszCmTF0WRt9eFVi8W8HFLSd4w0meWwu9bB8P2EY2Kf9qwpfl4Kjx28 ef0UVEnC9kX/P8eNfehNd9Ur4cynKPogm3l+K4jf4isXGsQ0zedvCtqiGGxWv6NH Ws7pVe07c4dPQvvt0cAOLtmUxQdxoaagz/2r8v/ewvEjhCczXSGy/LUtEJPlTj8+ zhc5AHxN5aogXesZ9KoXL9Ct69tLwtYy6NfsQ6XMVcbYmo25xl/sIV+DhKsHF8vz B2Jch31ZF66iD1d4nyfcpIJ9YkKfrv5XzvKfvH8Fdt3Cit96y83jkJFFCu0Nc3Hb 2BKoFTnHPgmDQ1E93NIewC4tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7/b8tMnO 7KTRjOhYBckL1EA9ebIwHwYDVR0jBBgwFoAUko35XOma/Fud5gHm6GQDwNiRUp8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QTQ0L0Q2OTJFMUNBQzA4 MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1ZDVnSG02R1FEd05pUlVw OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva28zNVhPbWFfRnVkNWdIbTZHUUR3TmlSVXA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QTQ0L0Q2OTJFMUNBQzA4MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1 ZDVnSG02R1FEd05pUlVwOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACCQaRAvtaUsmU882JgNyf7Qs/SSIpviloB91uqi31BI4Uhs1CGzu6BE OZZmJScx+rznrt2KA2r11NiMrv88BK2t2pe8alMoHCPkoHkBWH0LCx77wVtPK5S5 Lf7c18TKfn2LYtIafsvQoz25XbEHZUC+wA8bJl9O1+BuxSH/UN+3xjLKpruLq6Y8 w1JX3BSfnYUuD0aSh34o/1NfvL/2evXDeMPYtjzsnwyPpyegC5gVJ/xY544I1yEB 40beClXABMc26hcqreCF7v2dIouyLJppgmxGsT2d8bI7QLVwxujHVFqnSi9vOhmX x8LBjshmr6FEKxDp9jdaGjPXCsZONp0= -----END CERTIFICATE-----Generated at Sun Jan 18 07:45:23 2026 by rpki-client