This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft File: jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft (raw, json) Hash identifier: CEqWKw7K5FmttUQksYSveTCvVZseEG8Yly8bpxl9EjY= Subject key identifier: 61:6B:D9:B8:18:EE:23:81:AA:C8:DC:1C:F3:11:BB:93:74:79:1A:30 Authority key identifier: 8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 Certificate issuer: /CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft Manifest number: 024E Signing time: Fri 09 Jan 2026 00:58:44 +0000 Manifest this update: Fri 09 Jan 2026 00:58:43 +0000 Manifest next update: Fri 16 Jan 2026 00:58:43 +0000 Files and hashes: 1: jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl (hash: QSL093amyF3KyNDvszIK7iyTbNUHB9Gvwcy4uJsqHXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Jan 2026 00:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91684D0, serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Validity Not Before: Jan 9 00:58:43 2026 GMT Not After : Jan 16 00:58:43 2026 GMT Subject: CN=696052c4-b10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0b:f6:8e:f5:bf:5e:7b:4a:39:53:a8:2c:2e: 88:9d:2b:cb:3e:f0:c7:bf:29:c0:3e:97:66:82:8c: 47:f5:ac:84:69:9c:ef:4a:9d:c6:e3:6b:ce:f5:06: 13:c8:f4:c1:61:fb:d5:8d:48:65:cc:59:33:b1:a6: e3:d0:e4:9f:46:4b:91:2b:77:61:b5:2e:91:c2:6b: 49:5a:ef:39:30:9c:b2:50:9b:9d:49:bb:d3:b6:89: 10:1b:68:80:7d:59:5e:62:85:1e:48:0d:92:dc:17: 95:14:5e:6f:a9:9c:7d:08:13:32:ff:c1:1e:68:53: bd:74:c8:1e:50:02:a0:88:5f:2f:f7:6e:f3:1d:3e: a8:bc:7c:2e:2b:b7:e9:29:ff:65:33:0e:69:af:b2: 92:82:f0:5a:bb:4f:09:3a:39:91:09:44:88:da:2a: 33:80:6f:8b:a4:5e:4b:cf:2c:1f:47:1e:91:91:3a: 11:f3:bd:1f:64:e9:22:40:0b:76:a6:24:0a:e8:d0: d1:7f:d9:a1:f0:45:e3:e8:41:a1:0e:51:d4:aa:a3: 2f:df:c9:26:f0:ad:47:97:22:a6:d4:fa:47:69:61: 49:3a:8a:a5:98:68:08:34:e5:24:63:6d:01:12:e7: aa:83:47:07:a1:7c:6a:b8:64:b6:ef:d5:1d:78:28: c0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6B:D9:B8:18:EE:23:81:AA:C8:DC:1C:F3:11:BB:93:74:79:1A:30 X509v3 Authority Key Identifier: keyid:8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:ed:62:bc:08:75:2a:8b:be:6e:f9:2a:53:18:38:22:cc:65: 2d:7e:d8:10:90:da:ef:b3:1b:11:96:c7:02:fc:27:4b:f4:a7: 19:f5:4c:4d:15:d4:b4:a3:9a:5f:e1:73:66:55:13:b5:a1:69: 60:2e:b3:ad:27:08:ac:93:28:df:4d:87:85:29:4d:68:bf:a1: 2e:42:67:e1:c8:1c:69:2e:f0:20:f6:dc:55:8d:8f:6c:21:c7: b4:a6:f8:5f:8e:86:f1:6c:96:f1:2e:fa:52:32:a4:3f:a1:df: 92:3b:ef:fd:45:39:2c:87:45:1e:3c:54:7a:20:dc:79:33:64: 03:29:d6:0e:5c:e2:9d:5e:51:3b:60:96:1f:b5:63:2e:67:ea: f5:8b:d7:05:8a:e3:2f:3a:b7:6c:bd:35:fa:48:15:9f:32:a4: 32:95:b2:2c:81:79:45:4c:cf:f2:39:81:5a:e4:22:f4:64:e4: 8b:e1:1f:47:4d:68:b6:a4:7a:d0:12:d0:04:af:42:30:95:60: a7:f7:09:94:3c:89:60:d5:a8:ce:95:6b:64:54:08:ac:e0:9a: 2c:a8:a0:1e:d5:89:4f:e9:05:53:62:2f:cc:73:a4:c9:52:84: 3f:b8:5c:9c:c5:58:6f:06:cd:dc:15:8c:e2:d6:1d:8c:4c:63: a1:99:cb:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0RDAxMTAvBgNVBAUTKDhDREEwODRFMjNENUI3NTA5QUEzQTkyREFDQTBCMUFE QzlEOUZCNDgwHhcNMjYwMTA5MDA1ODQzWhcNMjYwMTE2MDA1ODQzWjAYMRYwFAYD VQQDDA02OTYwNTJjNC1iMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngv2jvW/XntKOVOoLC6InSvLPvDHvynAPpdmgoxH9ayEaZzvSp3G42vO9QYT yPTBYfvVjUhlzFkzsabj0OSfRkuRK3dhtS6RwmtJWu85MJyyUJudSbvTtokQG2iA fVleYoUeSA2S3BeVFF5vqZx9CBMy/8EeaFO9dMgeUAKgiF8v927zHT6ovHwuK7fp Kf9lMw5pr7KSgvBau08JOjmRCUSI2iozgG+LpF5LzywfRx6RkToR870fZOkiQAt2 piQK6NDRf9mh8EXj6EGhDlHUqqMv38km8K1HlyKm1PpHaWFJOoqlmGgINOUkY20B Eueqg0cHoXxquGS279UdeCjAywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFr2bgY 7iOBqsjcHPMRu5N0eRowMB8GA1UdIwQYMBaAFIzaCE4j1bdQmqOpLaygsa3J2ftI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EQ0NENThCNjVF OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQxQ2FvNmt0cktDeHJjblot MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOb0lUaVBWdDFDYW82a3RyS0N4cmNuWi0wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODREMC9EQ0NENThCNjVFOEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQx Q2FvNmt0cktDeHJjblotMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC07WK8CHUqi75u+SpTGDgizGUtftgQkNrvsxsRlscC/CdL9KcZ9UxN FdS0o5pf4XNmVRO1oWlgLrOtJwiskyjfTYeFKU1ov6EuQmfhyBxpLvAg9txVjY9s Ice0pvhfjobxbJbxLvpSMqQ/od+SO+/9RTksh0UePFR6INx5M2QDKdYOXOKdXlE7 YJYftWMuZ+r1i9cFiuMvOrdsvTX6SBWfMqQylbIsgXlFTM/yOYFa5CL0ZOSL4R9H TWi2pHrQEtAEr0IwlWCn9wmUPIlg1ajOlWtkVAis4JosqKAe1YlP6QVTYi/Mc6TJ UoQ/uFycxVhvBs3cFYzi1h2MTGOhmcuT -----END CERTIFICATE-----Generated at Fri Jan 9 16:05:09 2026 by rpki-client