This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json) Hash identifier: +apz0AEtFg/ZOXYGDCNTjn8/7Du0LCwzi521kd17HXs= Subject key identifier: 23:7E:A7:4A:37:AB:9D:77:AE:94:74:1A:19:9B:FA:67:20:5E:42:41 Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Certificate serial: 1188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft Manifest number: 0F25 Signing time: Sat 10 Jan 2026 18:27:02 +0000 Manifest this update: Sat 10 Jan 2026 18:27:01 +0000 Manifest next update: Sat 17 Jan 2026 18:27:01 +0000 Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: ihaG7zejBBHJ7ZIEBRLRKFaQ8GUYaxzKeuZNhEZ0L/4=) 2: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: RJWWol/N3kpabs0RDHnKDFjohXYhNv2bTe01qDy5yFA=) 3: 52DDE6AEB97F11F085A49519C4F9AE02.roa (hash: yOuWRsyltBFagKzqpGS582aWz7h2FY8ZBcuACxag5X4=) 4: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: 2DhSKbqHerwHAcJuXyOqA5Uvz8i+b7ElwkCYt1IMjOk=) 5: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: dENzJEUKeZTxWU/8nd/lAkN4nDmqFnhB+bpqCZU0QcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 18:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4488 (0x1188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Validity Not Before: Jan 10 18:27:01 2026 GMT Not After : Jan 17 18:27:01 2026 GMT Subject: CN=696299f5-d80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:21:c2:30:97:b3:07:db:5c:9e:d3:9e:64:f1: 7c:da:e9:7a:39:9e:42:05:4c:39:ab:13:a7:a5:3c: 86:c3:78:ab:37:98:17:5d:8f:09:70:d3:b5:c6:89: ad:b3:a9:38:0c:25:60:aa:10:de:b6:38:e7:32:13: 1c:64:87:07:7c:65:75:a6:35:e8:15:69:1c:68:24: c2:1b:98:ac:ba:8b:0c:0f:4d:8b:98:65:b9:30:1c: 8d:5b:74:db:ff:70:75:4f:4a:00:92:83:20:01:cb: c8:5d:63:6a:cb:93:4e:50:91:78:b3:fa:5a:80:56: f1:73:fc:04:f1:35:f0:de:9f:8d:de:00:95:0a:d2: 0d:cc:ef:61:cb:1b:b1:63:fa:dc:5f:ea:57:b4:b3: cc:46:37:9c:20:42:66:e8:a8:71:c5:f7:1d:5c:46: 1b:ae:54:68:73:3a:9b:b5:c1:9e:60:76:09:f6:d7: 82:5b:da:92:e8:22:67:9d:d0:7f:b4:2a:c4:49:97: 0f:04:5d:91:93:87:62:d2:29:fb:9c:a2:f2:39:98: 89:1a:d4:93:46:18:bc:14:79:0b:8c:55:69:32:99: 46:6d:58:9e:5a:f4:e9:36:86:38:c7:32:d0:63:ba: c1:d0:91:8c:34:9d:09:4f:a9:20:de:50:c4:f4:7e: e8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7E:A7:4A:37:AB:9D:77:AE:94:74:1A:19:9B:FA:67:20:5E:42:41 X509v3 Authority Key Identifier: keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:3c:42:7a:3b:f3:02:eb:ea:c0:f5:8d:55:71:df:de:71:94: 58:ee:ee:b3:1f:42:a3:74:31:a0:8e:4c:7c:85:1a:c8:55:8c: 9b:47:43:c0:10:10:f7:5f:74:3b:6c:db:5e:a0:d2:2e:72:7f: 1b:4b:f2:42:8e:09:7c:99:50:50:33:32:70:2c:32:d6:e6:3c: 69:72:9c:ce:75:00:f3:03:82:a8:1a:2b:5c:95:56:e3:60:82: e9:14:25:e1:9d:b2:0d:c5:9e:04:c7:91:c7:10:bd:ab:bf:d0: c8:fb:8a:2d:0d:63:b9:8a:50:9a:11:e5:34:1d:36:07:35:fb: bd:f4:4c:48:02:64:84:2f:b2:fc:ee:65:fc:65:73:6b:e6:ee: e9:d3:2c:3d:1c:77:22:87:8c:7f:7e:e6:50:21:7b:26:01:16: c1:90:30:c8:29:e6:52:81:7a:60:79:bf:a9:92:c2:b0:da:b2: fd:de:13:73:9a:d2:4a:28:8c:1b:f4:b8:dc:81:cc:c7:38:3b: 0f:c0:d8:a7:ad:cc:a9:ca:de:a7:ef:a0:95:a0:d7:42:dd:b4: fa:15:9e:76:c0:6e:00:40:11:2a:d1:e5:9b:7c:3f:2c:69:82: 9b:a0:b2:c2:00:cf:c1:be:36:5a:92:fd:a5:33:d2:28:c6:69: 36:c1:a2:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKEZEM0I0RUY4Rjc5QjBBRTEyN0U3MUU0QjZDMTg2OUQ4 MUIyMkU4ODAwHhcNMjYwMTEwMTgyNzAxWhcNMjYwMTE3MTgyNzAxWjAYMRYwFAYD VQQDDA02OTYyOTlmNS1kODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSHCMJezB9tcntOeZPF82ul6OZ5CBUw5qxOnpTyGw3irN5gXXY8JcNO1xomt s6k4DCVgqhDetjjnMhMcZIcHfGV1pjXoFWkcaCTCG5isuosMD02LmGW5MByNW3Tb /3B1T0oAkoMgAcvIXWNqy5NOUJF4s/pagFbxc/wE8TXw3p+N3gCVCtINzO9hyxux Y/rcX+pXtLPMRjecIEJm6KhxxfcdXEYbrlRoczqbtcGeYHYJ9teCW9qS6CJnndB/ tCrESZcPBF2Rk4di0in7nKLyOZiJGtSTRhi8FHkLjFVpMplGbVieWvTpNoY4xzLQ Y7rB0JGMNJ0JT6kg3lDE9H7oGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCN+p0o3 q513rpR0Ghmb+mcgXkJBMB8GA1UdIwQYMBaAFP07Tvj3mwrhJ+ceS2wYadgbIuiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9FMUEzODRBQzMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1RW41eDVMYkJocDJCc2k2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19UdE8tUGViQ3VFbjV4NUxiQmhwMkJzaTZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9FMUEzODRBQzMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1 RW41eDVMYkJocDJCc2k2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXPEJ6O/MC6+rA9Y1Vcd/ecZRY7u6zH0KjdDGgjkx8hRrIVYybR0PA EBD3X3Q7bNteoNIucn8bS/JCjgl8mVBQMzJwLDLW5jxpcpzOdQDzA4KoGitclVbj YILpFCXhnbINxZ4Ex5HHEL2rv9DI+4otDWO5ilCaEeU0HTYHNfu99ExIAmSEL7L8 7mX8ZXNr5u7p0yw9HHcih4x/fuZQIXsmARbBkDDIKeZSgXpgeb+pksKw2rL93hNz mtJKKIwb9LjcgczHODsPwNinrcypyt6n76CVoNdC3bT6FZ52wG4AQBEq0eWbfD8s aYKboLLCAM/BvjZakv2lM9Ioxmk2waKo -----END CERTIFICATE-----Generated at Sun Jan 11 23:04:10 2026 by rpki-client