This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: EzhdQBd4nTcrR1GkMSXSTBsDBWOjGSIZgJBWXv7QpB8= Subject key identifier: F6:D3:79:4C:01:49:FB:2A:7C:59:41:14:8C:DA:DF:0E:FD:80:CF:3A Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: 0158 Signing time: Sun 11 Jan 2026 03:34:13 +0000 Manifest this update: Sun 11 Jan 2026 03:34:12 +0000 Manifest next update: Sun 18 Jan 2026 03:34:12 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: aJctmBw0tM2xVrare3v6ItuNCSu7/lLo4DIHyaggMww=) 2: B7B28B24B29611F091864D65C4F9AE02.roa (hash: R+HTfU3ExQBNMZ+axibvvpKJt+DXstKCKz/X+iou2Bc=) 3: 1E5C2C5AB29611F09FBA3C5FC4F9AE02.roa (hash: HO455dnGSFFv71vVWjqwuOo42txHTtv1EfogsEGoJTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 03:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: Jan 11 03:34:12 2026 GMT Not After : Jan 18 03:34:12 2026 GMT Subject: CN=69631a35-cdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:ce:0d:75:ec:90:7e:09:b1:c6:ad:00:36: 10:b3:e6:f7:3e:67:73:a8:e9:9f:df:82:ce:e7:e5: fe:02:d9:82:dd:ef:91:0f:34:d4:d0:82:e3:15:44: 7d:88:14:43:62:56:03:95:a3:21:90:64:20:07:e9: d3:17:68:d0:54:31:37:64:89:28:4d:ee:6e:57:5a: 74:a5:f0:86:4c:0e:77:6c:fc:24:dc:d3:05:33:e3: b0:8d:4c:64:c0:76:ce:dc:fa:05:94:fb:7d:86:c5: fa:03:68:bb:1f:dd:89:0a:1a:7d:3d:40:fd:0e:0d: 9f:b7:38:12:0f:87:6f:4b:9f:4a:70:df:53:3b:88: aa:7f:0e:de:49:4f:39:96:b4:74:6b:b0:2e:dd:7a: 72:88:77:e9:3f:9d:13:c6:3b:ce:79:fb:47:29:02: 85:e4:bf:1d:5d:27:9e:15:70:cd:32:92:dc:8a:71: e5:b6:d5:3c:a5:e0:66:92:5e:f2:45:42:06:22:06: 29:33:8f:52:db:b2:bf:1c:1c:68:b0:4c:18:ce:5f: 62:e0:4e:bd:73:7d:9b:f0:0a:df:3a:9f:86:c7:9c: 61:67:62:c7:95:e1:47:72:68:19:5f:b5:40:30:77: 41:b4:19:73:87:41:a5:20:2b:d6:9d:69:d4:92:8d: 4d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D3:79:4C:01:49:FB:2A:7C:59:41:14:8C:DA:DF:0E:FD:80:CF:3A X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:5c:03:35:6a:6b:64:d5:08:ee:0b:bc:e1:64:c0:9d:cf:cc: 05:e3:d8:2c:08:52:f2:a1:ac:c0:0c:5f:b7:bd:b6:ad:a6:db: d1:54:c8:39:ef:6b:19:77:9b:6c:1e:c9:5b:ed:e7:d2:50:ce: 2c:48:81:34:3f:16:44:ba:53:23:04:c1:f1:52:ee:b0:c8:ad: aa:04:14:cb:cc:7a:5c:1c:ac:20:44:a9:da:64:7f:c0:6b:6a: d5:86:2e:a7:3d:c7:31:a8:f6:73:5e:1c:db:63:44:b9:ea:48: 62:73:d8:ed:94:34:25:5a:27:81:d8:c9:89:5e:6b:b2:dd:25: b7:0d:1b:ff:90:b1:1b:bd:33:55:c6:69:c9:93:cc:26:48:60: 91:d3:97:e0:9c:b5:fa:3a:de:b6:c7:f8:0f:3d:24:6d:55:fe: 7a:f2:69:fd:ea:1b:a5:71:fe:04:d7:89:48:31:8f:65:75:02: 9e:f7:81:62:22:cd:00:30:f5:b5:07:92:a0:63:1a:04:8d:03: 0b:d7:60:b6:02:d5:1b:38:19:f1:eb:7a:fe:7e:5e:ab:6b:bc: 6d:49:d7:04:a0:8a:02:d2:1f:39:c4:88:49:22:fb:d2:8b:c9: b2:15:28:ec:9a:eb:0d:fd:0c:c8:6d:90:96:25:12:72:3d:f0: 89:98:84:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjYwMTExMDMzNDEyWhcNMjYwMTE4MDMzNDEyWjAYMRYwFAYD VQQDDA02OTYzMWEzNS1jZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl3vODXXskH4JscatADYQs+b3PmdzqOmf34LO5+X+AtmC3e+RDzTU0ILjFUR9 iBRDYlYDlaMhkGQgB+nTF2jQVDE3ZIkoTe5uV1p0pfCGTA53bPwk3NMFM+OwjUxk wHbO3PoFlPt9hsX6A2i7H92JChp9PUD9Dg2ftzgSD4dvS59KcN9TO4iqfw7eSU85 lrR0a7Au3XpyiHfpP50TxjvOeftHKQKF5L8dXSeeFXDNMpLcinHlttU8peBmkl7y RUIGIgYpM49S27K/HBxosEwYzl9i4E69c32b8ArfOp+Gx5xhZ2LHleFHcmgZX7VA MHdBtBlzh0GlICvWnWnUko1NXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbTeUwB SfsqfFlBFIza3w79gM86MB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByXAM1amtk1QjuC7zhZMCdz8wF49gsCFLyoazADF+3vbatptvRVMg5 72sZd5tsHslb7efSUM4sSIE0PxZEulMjBMHxUu6wyK2qBBTLzHpcHKwgRKnaZH/A a2rVhi6nPccxqPZzXhzbY0S56khic9jtlDQlWieB2MmJXmuy3SW3DRv/kLEbvTNV xmnJk8wmSGCR05fgnLX6Ot62x/gPPSRtVf568mn96hulcf4E14lIMY9ldQKe94Fi Is0AMPW1B5KgYxoEjQML12C2AtUbOBnx63r+fl6ra7xtSdcEoIoC0h85xIhJIvvS i8myFSjsmusN/QzIbZCWJRJyPfCJmISo -----END CERTIFICATE-----Generated at Sun Jan 11 23:39:27 2026 by rpki-client