This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json) Hash identifier: qFFrcl7+06zePlZyK4fu7J/iUhF7ByWDmHBSx9KRSQY= Subject key identifier: 2D:27:38:1E:95:BC:96:D6:54:34:6E:28:43:82:9A:A6:42:2F:D9:2A Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft Manifest number: 01A5 Signing time: Thu 01 Jan 2026 02:54:49 +0000 Manifest this update: Thu 01 Jan 2026 02:54:48 +0000 Manifest next update: Thu 08 Jan 2026 02:54:48 +0000 Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: NBlJvAHxJSEbLCcC8lwdOmVkKV3Zna4iLGgQaHxc+To=) 2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: zgC2BukFvqF6vF8m1zT1OqU7vAyEsCa9SdkeX8vwSl0=) 3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: sUPjSnVrnjmDdoMwCFJp2zuEZdscR4LvuhmHJ1v7ZYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 02:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Validity Not Before: Jan 1 02:54:48 2026 GMT Not After : Jan 8 02:54:48 2026 GMT Subject: CN=6955e1f9-0a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:e5:b2:89:1d:db:e4:b6:3d:08:c7:ab:e5: 62:60:7a:27:b0:76:23:09:cf:88:5c:44:b5:c7:04: 17:0e:75:d3:d2:43:d6:89:e7:fa:17:d7:5b:10:75: d2:2f:96:bd:e8:0c:70:6a:70:4b:66:77:cc:70:84: 01:92:2b:26:30:fe:a8:f7:d5:60:65:bf:33:0b:c8: 99:13:75:29:67:41:b2:77:98:f1:ef:cf:2b:92:58: a4:a9:4d:dc:42:7e:aa:71:7d:b8:de:48:d5:58:1b: 85:47:5b:7e:da:f3:a9:70:14:63:f2:6c:ab:a8:7e: 81:eb:3b:d0:f4:70:2c:b9:1c:35:07:bd:52:dd:42: e0:f0:1e:96:29:e5:ee:b1:89:e6:cc:56:14:d3:4e: d4:6b:b5:c3:ac:6a:3d:34:d1:15:b0:01:da:3e:b5: f2:54:90:75:e1:a4:ee:c9:a1:a1:89:4a:f3:18:58: ef:eb:28:8e:d8:cf:05:c5:2e:54:e5:00:77:e5:61: 95:71:3e:05:9c:4c:4a:35:40:7e:c0:2a:33:ca:e8: c8:71:1b:be:0d:72:00:c4:15:d9:7e:93:ab:5c:84: 30:19:8c:67:da:30:be:86:22:ca:0e:c9:54:e9:e5: 7e:94:95:c1:4c:85:14:38:b6:0b:2a:3f:6d:b1:ee: c7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:27:38:1E:95:BC:96:D6:54:34:6E:28:43:82:9A:A6:42:2F:D9:2A X509v3 Authority Key Identifier: keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:fc:a7:08:3a:bb:2d:37:55:6f:23:54:3e:6b:77:e8:22:a7: 1d:7f:7d:41:33:b2:c4:0c:83:ad:99:be:72:4f:d6:4b:24:f9: 39:4b:64:ea:05:b1:1f:11:7b:23:6b:c8:75:90:22:4d:3f:ab: 70:be:b3:cb:7c:7e:78:24:d1:18:72:f9:a7:8e:6a:93:90:f8: 48:77:1e:bb:0d:f3:0a:fd:1f:b7:51:29:0f:50:10:44:3f:81: 10:79:84:d6:26:bc:34:d4:1e:ea:54:ea:32:70:3e:18:31:a2: 89:d3:d9:10:9c:92:80:45:f6:f3:b7:51:1a:ad:56:da:f0:d1: c6:ba:b4:19:cb:c5:5e:13:6f:8e:39:f9:25:bf:a2:fa:9a:3c: a5:b7:68:bb:ae:02:e7:66:c3:3d:48:99:3e:c2:d9:3b:1f:3b: a0:e3:06:6d:d4:b2:7f:fe:75:d9:e2:5e:26:44:56:20:27:cd: eb:c5:f3:54:2b:82:17:e1:33:e4:4e:5f:05:7f:65:60:04:cc: 69:c9:92:e2:a5:47:5d:71:32:f3:5f:2f:05:6e:fa:06:f6:23: f3:3e:a5:e2:12:75:0e:d1:a3:5f:4f:63:5a:5d:88:0f:66:f8: 78:52:dc:f9:17:05:de:8b:8e:08:97:0f:2a:66:c0:1a:56:e5: dd:aa:16:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1 QTc0NDA5OUQwHhcNMjYwMTAxMDI1NDQ4WhcNMjYwMTA4MDI1NDQ4WjAYMRYwFAYD VQQDDA02OTU1ZTFmOS0wYTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwrlsokd2+S2PQjHq+ViYHonsHYjCc+IXES1xwQXDnXT0kPWief6F9dbEHXS L5a96AxwanBLZnfMcIQBkismMP6o99VgZb8zC8iZE3UpZ0Gyd5jx788rklikqU3c Qn6qcX243kjVWBuFR1t+2vOpcBRj8myrqH6B6zvQ9HAsuRw1B71S3ULg8B6WKeXu sYnmzFYU007Ua7XDrGo9NNEVsAHaPrXyVJB14aTuyaGhiUrzGFjv6yiO2M8FxS5U 5QB35WGVcT4FnExKNUB+wCozyujIcRu+DXIAxBXZfpOrXIQwGYxn2jC+hiLKDslU 6eV+lJXBTIUUOLYLKj9tse7HTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0nOB6V vJbWVDRuKEOCmqZCL9kqMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3 MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu NUVWVWswbGJScnBhZEVDWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU/KcIOrstN1VvI1Q+a3foIqcdf31BM7LEDIOtmb5yT9ZLJPk5S2Tq BbEfEXsja8h1kCJNP6twvrPLfH54JNEYcvmnjmqTkPhIdx67DfMK/R+3USkPUBBE P4EQeYTWJrw01B7qVOoycD4YMaKJ09kQnJKARfbzt1EarVba8NHGurQZy8VeE2+O Ofklv6L6mjylt2i7rgLnZsM9SJk+wtk7Hzug4wZt1LJ//nXZ4l4mRFYgJ83rxfNU K4IX4TPkTl8Ff2VgBMxpyZLipUddcTLzXy8FbvoG9iPzPqXiEnUO0aNfT2NaXYgP Zvh4Utz5FwXei44Ilw8qZsAaVuXdqhb9 -----END CERTIFICATE-----Generated at Thu Jan 1 11:05:00 2026 by rpki-client