This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft File: o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json) Hash identifier: WBnxVRY6soRqf8CFPJMHZAE2nR7gH2SoB9piU5KDw84= Subject key identifier: 22:16:98:EF:E5:E6:DB:38:E5:02:D5:82:8C:1E:16:4F:0C:7A:D4:81 Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15 Certificate issuer: /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft Manifest number: E7 Signing time: Fri 09 Jan 2026 04:44:26 +0000 Manifest this update: Fri 09 Jan 2026 04:44:26 +0000 Manifest next update: Fri 16 Jan 2026 04:44:26 +0000 Files and hashes: 1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: 8r0cM21iWQ2P8UA7EIysj9S0xbpgP9NlOTj44RKPzug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Jan 2026 04:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827C5, serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15 Validity Not Before: Jan 9 04:44:26 2026 GMT Not After : Jan 16 04:44:26 2026 GMT Subject: CN=696087aa-c97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e2:1e:46:d2:da:a1:8a:a7:61:a0:e7:d8:59: cf:6e:09:8e:37:da:4b:fc:c3:10:b1:18:2f:f7:1e: 8d:12:32:32:93:bf:eb:15:07:98:d7:b1:44:b3:08: 7e:f0:0f:15:53:b0:44:94:70:b9:97:5d:ba:5a:49: f6:4d:89:c3:f7:6f:f9:15:7c:cf:f5:1a:82:b4:ab: 71:a0:84:26:4c:3a:c1:b5:91:29:68:c2:46:49:3b: 0d:e0:24:05:5e:05:59:ac:45:63:c1:73:ef:97:ad: ec:f5:5d:58:e4:73:a4:7e:10:3f:02:89:86:a6:6c: 9b:e3:ff:03:f3:92:61:64:0c:c9:f7:5e:e9:26:19: c0:f1:fe:69:70:55:50:68:66:0a:15:70:4b:41:7f: bc:99:59:e0:48:6e:28:f9:11:05:63:86:53:b3:56: c8:9c:fc:a0:f5:d0:d0:75:a2:43:c3:68:97:f6:a9: b8:ea:72:f2:97:17:f1:3e:91:49:ef:29:3c:f3:87: e8:77:07:18:9d:cf:e6:69:2a:ea:4b:ed:95:03:43: d1:67:87:eb:1a:13:5a:5c:98:af:d1:96:cf:5a:d7: 02:22:ad:74:57:e8:67:7e:12:e0:10:8c:02:97:d6: e8:e9:7a:59:65:1f:30:76:06:4d:f9:02:7f:84:72: 84:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:16:98:EF:E5:E6:DB:38:E5:02:D5:82:8C:1E:16:4F:0C:7A:D4:81 X509v3 Authority Key Identifier: keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:74:ee:28:b8:49:96:da:06:87:1a:7f:a0:e2:61:ea:4d:b7: 40:34:c9:d8:3d:38:19:f6:3e:02:64:ba:cf:16:2c:ba:aa:6e: 74:c1:5c:93:ce:5a:ea:87:61:42:96:e4:28:a5:3c:9d:41:48: 6b:19:27:2a:b6:f2:96:21:94:4e:22:e0:3b:63:d8:fc:27:c3: 8e:0b:5d:b0:8f:03:d4:35:e6:37:51:eb:af:42:e5:d7:32:b7: 9a:06:d8:0a:e0:91:67:54:23:5c:85:6c:6f:72:f8:37:19:29: a2:63:38:6d:49:27:db:81:c8:6b:c8:19:42:e1:5d:df:bd:a8: 2c:2d:05:e5:b3:2e:92:48:b9:bd:78:cc:40:7a:f4:f1:74:c2: fb:0b:83:e5:e3:aa:c4:0b:4d:11:db:79:86:00:a0:68:b5:2d: f6:4f:20:02:72:01:98:13:e0:06:15:fe:20:45:0d:6a:c1:d2: 68:d2:0c:4b:5b:4a:bf:23:9a:56:d9:63:5e:45:ab:3a:cf:cb: 95:f7:b0:99:51:1d:07:82:15:2a:ef:35:77:cd:4a:e1:99:c3: 65:ad:d2:16:8b:50:96:51:32:12:50:04:61:25:09:49:26:bc: 0d:0b:9f:e1:a1:63:bc:19:ec:24:38:d8:c7:b7:6a:b2:43:00: 67:a8:40:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3QzUxMTAvBgNVBAUTKEEzOTg3MTQ2MjZGODdBQ0VCRTVGNkZEMDFFNTA3MDE5 MTVBQTdEMTUwHhcNMjYwMTA5MDQ0NDI2WhcNMjYwMTE2MDQ0NDI2WjAYMRYwFAYD VQQDDA02OTYwODdhYS1jOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7OIeRtLaoYqnYaDn2FnPbgmON9pL/MMQsRgv9x6NEjIyk7/rFQeY17FEswh+ 8A8VU7BElHC5l126Wkn2TYnD92/5FXzP9RqCtKtxoIQmTDrBtZEpaMJGSTsN4CQF XgVZrEVjwXPvl63s9V1Y5HOkfhA/AomGpmyb4/8D85JhZAzJ917pJhnA8f5pcFVQ aGYKFXBLQX+8mVngSG4o+REFY4ZTs1bInPyg9dDQdaJDw2iX9qm46nLylxfxPpFJ 7yk884fodwcYnc/maSrqS+2VA0PRZ4frGhNaXJiv0ZbPWtcCIq10V+hnfhLgEIwC l9bo6XpZZR8wdgZN+QJ/hHKEUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIWmO/l 5ts45QLVgoweFk8MetSBMB8GA1UdIwQYMBaAFKOYcUYm+HrOvl9v0B5QcBkVqn0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdDNS9EOUFBQjgyQzhB RDkxMUVGOTgxQzgyODNDNEY5QUUwMi9vNWh4UmliNGVzNi1YMl9RSGxCd0dSV3Fm UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL281aHhSaWI0ZXM2LVgyX1FIbEJ3R1JXcWZSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdDNS9EOUFBQjgyQzhBRDkxMUVGOTgxQzgyODNDNEY5QUUwMi9vNWh4UmliNGVz Ni1YMl9RSGxCd0dSV3FmUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwdO4ouEmW2gaHGn+g4mHqTbdANMnYPTgZ9j4CZLrPFiy6qm50wVyT zlrqh2FCluQopTydQUhrGScqtvKWIZROIuA7Y9j8J8OOC12wjwPUNeY3UeuvQuXX MreaBtgK4JFnVCNchWxvcvg3GSmiYzhtSSfbgchryBlC4V3fvagsLQXlsy6SSLm9 eMxAevTxdML7C4Pl46rEC00R23mGAKBotS32TyACcgGYE+AGFf4gRQ1qwdJo0gxL W0q/I5pW2WNeRas6z8uV97CZUR0HghUq7zV3zUrhmcNlrdIWi1CWUTISUARhJQlJ JrwNC5/hoWO8GewkONjHt2qyQwBnqEDB -----END CERTIFICATE-----Generated at Fri Jan 9 07:46:30 2026 by rpki-client