This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft File: CmH1ryEJpoNhH7ogbyCM7-NImCE.mft (raw, json) Hash identifier: oCsKEwQs6MjeZFm/oSIk+8aOfg+bNgsR9QHjSJyKe/0= Subject key identifier: 5F:DD:DE:F6:29:4D:D9:4B:E6:FB:ED:14:F7:2A:CB:F5:2D:A6:48:29 Authority key identifier: 0A:61:F5:AF:21:09:A6:83:61:1F:BA:20:6F:20:8C:EF:E3:48:98:21 Certificate issuer: /CN=A91559AC/serialNumber=0A61F5AF2109A683611FBA206F208CEFE3489821 Certificate serial: 0AFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmH1ryEJpoNhH7ogbyCM7-NImCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft Manifest number: 0B82 Signing time: Tue 06 Jan 2026 18:55:38 +0000 Manifest this update: Tue 06 Jan 2026 18:55:37 +0000 Manifest next update: Tue 13 Jan 2026 18:55:37 +0000 Files and hashes: 1: CmH1ryEJpoNhH7ogbyCM7-NImCE.crl (hash: iPQAE0FLb6fku7nFOyrasRrllVLZz2bT36jeFm04aJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.crl rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmH1ryEJpoNhH7ogbyCM7-NImCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 18:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2811 (0xafb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91559AC, serialNumber=0A61F5AF2109A683611FBA206F208CEFE3489821 Validity Not Before: Jan 6 18:55:37 2026 GMT Not After : Jan 13 18:55:37 2026 GMT Subject: CN=695d5aa9-675c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:81:81:b5:40:10:84:4f:ab:08:82:15:d7:15: 88:b0:cf:e6:12:e0:ba:64:bc:1a:9a:d9:3b:82:fd: 09:24:b4:c6:4b:8a:2a:3e:06:c5:10:a6:4e:5a:3b: 68:67:fb:76:8f:d9:a0:27:c0:01:97:c6:38:30:b6: b4:13:71:04:91:be:3f:8b:f8:84:59:4c:a6:3b:47: 97:e4:ad:43:d5:77:f2:2d:f3:1e:32:08:56:f0:10: c9:cf:4e:11:8d:ae:66:32:38:50:ee:8c:f4:b3:52: 8e:09:95:2d:ec:03:96:5f:80:6a:03:28:3a:98:14: 30:a9:b3:fd:a7:db:dd:86:28:ed:ea:61:49:8c:f2: 05:f6:5d:c9:8b:27:b0:68:bb:91:03:d7:ac:d9:df: 8c:43:7b:68:37:ae:50:61:4c:3a:e7:20:3c:12:f4: c9:e0:2e:d3:76:6a:48:4b:4b:af:76:f7:47:00:0c: 4d:a2:05:07:d2:18:9a:94:e6:83:50:a6:e1:39:a3: 28:12:d3:d0:52:2f:70:ca:57:4a:48:1c:fc:49:a5: b4:b1:8a:df:e4:e7:e4:10:f2:06:0a:b0:8b:10:fa: 84:47:3c:ca:c5:9d:d3:93:fc:49:c0:c0:51:92:46: de:9b:84:4c:ea:09:09:77:3f:b3:d2:66:7a:f5:ef: 5a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DD:DE:F6:29:4D:D9:4B:E6:FB:ED:14:F7:2A:CB:F5:2D:A6:48:29 X509v3 Authority Key Identifier: keyid:0A:61:F5:AF:21:09:A6:83:61:1F:BA:20:6F:20:8C:EF:E3:48:98:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmH1ryEJpoNhH7ogbyCM7-NImCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:d6:b5:78:79:55:5e:4b:3b:0c:f8:f1:68:ec:bc:80:47:b5: 2f:4a:a3:3e:d0:55:f2:07:c8:16:db:b7:38:05:ed:9e:df:63: 28:a2:09:04:f0:13:35:74:65:e0:75:32:e7:bb:39:27:86:08: f7:3f:82:10:68:e8:05:a5:26:50:3f:41:e0:56:8a:b6:90:21: 68:6b:71:99:52:27:7c:7e:d3:3e:05:00:bb:b4:18:ff:21:6a: 5c:b0:1c:f7:d6:50:67:8a:da:19:04:8d:8c:04:3a:fa:d6:6a: 38:bd:6a:ba:90:12:4d:39:c9:95:fa:41:72:fb:e7:58:2e:2b: 7d:19:5a:24:f1:38:e5:4f:28:80:2c:25:d4:b2:c9:0d:65:83: 56:94:9d:77:53:c3:da:cf:92:a7:1f:6b:d3:9b:8a:88:15:6d: 01:2f:ca:e5:a9:51:9d:67:dd:b2:b6:ca:fd:3b:18:85:c4:72: 7a:d7:db:ea:a4:c0:95:11:80:e9:00:7b:12:85:8b:4d:a8:80: 1d:3a:7f:24:9d:f7:21:cd:33:f9:58:b3:21:14:ff:02:b7:a6: 55:57:01:50:8b:9d:07:5c:41:3d:21:84:44:87:92:71:b0:29: c8:a0:c5:66:a6:c8:ec:a9:e6:c9:0e:ed:7f:94:d2:41:9f:b0: 44:07:2b:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NTU5QUMxMTAvBgNVBAUTKDBBNjFGNUFGMjEwOUE2ODM2MTFGQkEyMDZGMjA4Q0VG RTM0ODk4MjEwHhcNMjYwMTA2MTg1NTM3WhcNMjYwMTEzMTg1NTM3WjAYMRYwFAYD VQQDDA02OTVkNWFhOS02NzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoGBtUAQhE+rCIIV1xWIsM/mEuC6ZLwamtk7gv0JJLTGS4oqPgbFEKZOWjto Z/t2j9mgJ8ABl8Y4MLa0E3EEkb4/i/iEWUymO0eX5K1D1XfyLfMeMghW8BDJz04R ja5mMjhQ7oz0s1KOCZUt7AOWX4BqAyg6mBQwqbP9p9vdhijt6mFJjPIF9l3Jiyew aLuRA9es2d+MQ3toN65QYUw65yA8EvTJ4C7TdmpIS0uvdvdHAAxNogUH0hialOaD UKbhOaMoEtPQUi9wyldKSBz8SaW0sYrf5OfkEPIGCrCLEPqERzzKxZ3Tk/xJwMBR kkbem4RM6gkJdz+z0mZ69e9aGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/d3vYp TdlL5vvtFPcqy/UtpkgpMB8GA1UdIwQYMBaAFAph9a8hCaaDYR+6IG8gjO/jSJgh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTlBQy9DMDYxMzUxNjVG OEQxMUVBQjUwMEJENjRDNEY5QUUwMi9DbUgxcnlFSnBvTmhIN29nYnlDTTctTklt Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtSDFyeUVKcG9OaEg3b2dieUNNNy1OSW1DRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTlBQy9DMDYxMzUxNjVGOEQxMUVBQjUwMEJENjRDNEY5QUUwMi9DbUgxcnlFSnBv TmhIN29nYnlDTTctTkltQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg1rV4eVVeSzsM+PFo7LyAR7UvSqM+0FXyB8gW27c4Be2e32MoogkE 8BM1dGXgdTLnuzknhgj3P4IQaOgFpSZQP0HgVoq2kCFoa3GZUid8ftM+BQC7tBj/ IWpcsBz31lBnitoZBI2MBDr61mo4vWq6kBJNOcmV+kFy++dYLit9GVok8TjlTyiA LCXUsskNZYNWlJ13U8Paz5KnH2vTm4qIFW0BL8rlqVGdZ92ytsr9OxiFxHJ619vq pMCVEYDpAHsShYtNqIAdOn8knfchzTP5WLMhFP8Ct6ZVVwFQi50HXEE9IYREh5Jx sCnIoMVmpsjsqebJDu1/lNJBn7BEBytZ -----END CERTIFICATE-----Generated at Thu Jan 8 11:29:45 2026 by rpki-client