This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: TDIpYT96n+3n2IPlNpeUEdMd5ZGzVnXbsG+RMLRujRQ= Subject key identifier: CC:68:C2:9B:7C:0C:D2:97:BB:C5:03:5F:67:E9:8F:38:72:1D:AC:A0 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0A62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0A30 Signing time: Mon 12 Jan 2026 19:17:28 +0000 Manifest this update: Mon 12 Jan 2026 19:17:27 +0000 Manifest next update: Mon 19 Jan 2026 19:17:27 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: J76SR6y1kqy8SWNtb6590NwC3dmKVrtom5s2nri82ZE=) 2: 61FA8E20DCD011F0B585C4234F6F56BC.roa (hash: mNYe4FUja3MrCQuFkjZ9mW3HWoF6dWXAjyDLZL2gjns=) 3: 67921062E4A311F0B966D2274B6F56BC.roa (hash: t+d97wIOWysUeZm6Mwn1/921As4Ai36VDQVdT/Ej2VI=) 4: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: mrdifevaNrjgGPKQ1OBlBf3Ozo1jwgzsiYqzgjiO4VY=) 5: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: grefGbNN/VHvdzizv2NC+EAajk8nYYeMvxNGZRpSLyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 19:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Jan 12 19:17:27 2026 GMT Not After : Jan 19 19:17:27 2026 GMT Subject: CN=696548c8-87ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:1e:7e:20:37:6b:ef:5a:07:93:25:2b:0a: 86:d7:fb:6e:46:a0:9c:c0:9a:70:52:b6:ce:51:f8: 62:63:35:dc:60:63:d1:27:1b:31:69:39:7d:0c:f4: 2d:ff:b1:66:9a:19:e9:a7:e0:94:ad:db:36:a9:66: d2:8f:b4:e8:9b:18:ed:8b:87:f8:1e:d2:b5:3b:eb: 77:8f:94:5f:4a:6d:43:05:b1:7a:19:df:6e:62:77: c8:42:bc:77:a6:30:64:45:40:eb:e5:2b:37:79:d7: 2d:96:9a:8d:9b:fb:9b:86:9a:60:8b:8f:f7:24:d7: 95:51:7c:58:c7:cd:8e:69:9f:5a:87:c2:0a:18:33: ba:b7:78:0c:56:9d:ed:72:d2:8e:d0:84:25:4b:11: b7:02:2c:6a:6d:5c:45:36:37:3d:28:b8:6b:bc:cb: 6d:65:26:8c:2b:02:25:68:61:7d:a7:30:62:9e:55: 00:78:cc:cd:cd:cc:21:8b:a5:33:49:07:f6:3b:b6: 1c:a3:20:31:85:03:f2:88:13:79:58:e0:06:c0:5d: 87:f6:34:93:24:75:27:9a:e7:05:f7:66:3c:a1:e6: e6:31:f0:cc:4c:e7:d8:7e:8f:5f:9c:2a:e6:9f:ab: 98:cb:f1:ab:08:ca:81:99:bf:26:cf:54:6f:89:bf: 65:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:68:C2:9B:7C:0C:D2:97:BB:C5:03:5F:67:E9:8F:38:72:1D:AC:A0 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:75:f4:2c:a4:ce:fc:0e:84:a1:9f:d4:58:54:67:d6:f2:c2: c5:47:5e:9e:61:79:bd:20:33:59:3f:bf:c7:a1:71:3f:06:12: 57:46:26:ac:ca:cc:63:ea:94:ca:ff:b5:fe:11:0f:2b:12:ac: 04:29:88:c8:f1:70:bf:07:01:e7:c7:e0:29:5a:b9:57:3e:a0: bf:39:bf:72:42:a6:25:4b:58:78:b7:f5:b7:5a:b2:e1:56:ab: fe:58:f3:75:2f:5a:d0:be:44:92:58:f5:c9:ff:50:c6:fd:1b: c3:7d:6c:bc:71:6c:1f:db:04:3b:16:03:cf:bc:08:9f:0e:38: 61:eb:71:f6:f5:50:63:bd:ae:d1:0c:e2:96:e0:5a:d6:d1:02: f4:b2:16:5c:54:4e:0a:df:3c:56:34:80:f0:47:23:82:f2:bd: 51:b0:d5:e5:c8:4e:1f:35:e4:00:5a:88:0e:d7:06:f3:18:a9: 5e:50:a4:76:9b:47:cb:2f:8b:6e:cd:0f:98:d1:c7:e0:f0:99: 8c:b4:13:33:79:5e:db:f6:63:6a:80:2e:20:e6:5b:b5:6c:89: dd:e9:09:d0:fb:35:9d:4e:21:8a:e4:97:6b:06:7c:95:f9:70: 1a:74:97:04:59:09:35:10:63:85:42:69:3f:8e:59:fb:b7:a6: 8e:90:5a:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjYwMTEyMTkxNzI3WhcNMjYwMTE5MTkxNzI3WjAYMRYwFAYD VQQDDA02OTY1NDhjOC04N2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6kefiA3a+9aB5MlKwqG1/tuRqCcwJpwUrbOUfhiYzXcYGPRJxsxaTl9DPQt /7Fmmhnpp+CUrds2qWbSj7Tomxjti4f4HtK1O+t3j5RfSm1DBbF6Gd9uYnfIQrx3 pjBkRUDr5Ss3edctlpqNm/ubhppgi4/3JNeVUXxYx82OaZ9ah8IKGDO6t3gMVp3t ctKO0IQlSxG3AixqbVxFNjc9KLhrvMttZSaMKwIlaGF9pzBinlUAeMzNzcwhi6Uz SQf2O7YcoyAxhQPyiBN5WOAGwF2H9jSTJHUnmucF92Y8oebmMfDMTOfYfo9fnCrm n6uYy/GrCMqBmb8mz1Rvib9liwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxowpt8 DNKXu8UDX2fpjzhyHaygMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFdfQspM78DoShn9RYVGfW8sLFR16eYXm9IDNZP7/HoXE/BhJXRias ysxj6pTK/7X+EQ8rEqwEKYjI8XC/BwHnx+ApWrlXPqC/Ob9yQqYlS1h4t/W3WrLh Vqv+WPN1L1rQvkSSWPXJ/1DG/RvDfWy8cWwf2wQ7FgPPvAifDjhh63H29VBjva7R DOKW4FrW0QL0shZcVE4K3zxWNIDwRyOC8r1RsNXlyE4fNeQAWogO1wbzGKleUKR2 m0fLL4tuzQ+Y0cfg8JmMtBMzeV7b9mNqgC4g5lu1bInd6QnQ+zWdTiGK5JdrBnyV +XAadJcEWQk1EGOFQmk/jln7t6aOkFoV -----END CERTIFICATE-----Generated at Tue Jan 13 05:18:38 2026 by rpki-client