This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft File: CkMWPL6xv3mMnOQcHF50ociDesY.mft (raw, json) Hash identifier: rBufKm3sIjAz8eYBIf08fOG5U9Ua7Y+wuyeo+DZZ1Vk= Subject key identifier: 73:3C:63:97:30:88:36:E6:AE:AC:58:76:E6:56:7A:41:3E:25:3F:EA Authority key identifier: 0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6 Certificate issuer: /CN=A91A95C1/serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6 Certificate serial: 02E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft Manifest number: 02E2 Signing time: Thu 01 Jan 2026 00:45:48 +0000 Manifest this update: Thu 01 Jan 2026 00:45:47 +0000 Manifest next update: Thu 08 Jan 2026 00:45:47 +0000 Files and hashes: 1: CkMWPL6xv3mMnOQcHF50ociDesY.crl (hash: ZxXtK/CYyzshxOmGb/Y2ZDsgQpq7nQZJbd0Fwxi9pnw=) 2: DA61302A0F0211EDABBE3C6AC4F9AE02.roa (hash: vW2EZP2Cwb4m+zHwX4dxc62MHLuj24Kv3gEJBseD9aY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 00:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 743 (0x2e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95C1, serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6 Validity Not Before: Jan 1 00:45:47 2026 GMT Not After : Jan 8 00:45:47 2026 GMT Subject: CN=6955c3bc-76a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:2f:3f:ce:09:c3:3a:be:fd:8d:8a:e1:2b: 43:ac:52:a4:17:85:da:90:20:75:3a:04:8c:b9:f4: 1f:a9:98:a8:7e:44:dc:47:7f:21:90:20:b1:2f:9a: 13:79:b2:1f:3a:51:75:68:66:6c:68:21:4c:a2:1c: e6:44:df:57:ba:34:b2:64:07:38:76:6a:4d:4c:ba: af:b2:3c:c0:c7:1e:e6:90:83:d6:db:4e:af:42:65: 7f:ee:0c:9c:d2:6c:da:f0:03:fd:1e:da:00:57:ac: 7a:c4:39:c0:a1:14:cc:d9:6e:84:5a:3b:b9:f3:a4: 08:ad:fa:b1:3f:17:d5:85:3b:05:d7:bb:ac:34:3f: 58:0b:69:d4:b8:a0:30:87:a4:79:f1:43:8b:5b:5a: 33:e7:a4:e3:8d:f7:29:68:ea:9b:67:22:95:e6:dd: e3:55:90:b1:c5:dc:03:0b:7b:f0:72:36:da:e9:aa: 57:34:87:1e:3e:95:fd:4f:ac:00:7f:e7:cc:59:78: b0:0e:34:9a:1b:ef:fb:9d:aa:16:13:2e:5e:95:af: b4:a4:44:16:88:ee:f4:06:61:c1:f5:d4:f7:1a:8d: 56:6a:1c:3b:59:eb:b8:ae:b9:d8:e2:c5:4b:2e:e9: bd:74:4a:a5:9b:bf:13:84:cf:7f:82:69:0c:1f:e5: 6d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3C:63:97:30:88:36:E6:AE:AC:58:76:E6:56:7A:41:3E:25:3F:EA X509v3 Authority Key Identifier: keyid:0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:39:39:88:8a:38:1d:a7:f6:34:f4:f2:d2:eb:d6:7e:11:3e: 24:b2:7b:97:1a:f5:7b:b0:32:30:fc:67:37:a3:b5:db:32:0e: a8:c0:f9:4c:6c:a6:e6:b6:86:e1:75:ea:80:dd:ec:90:9c:98: 70:20:4f:11:f2:95:da:7a:6c:a8:34:8d:c5:24:07:fe:97:34: 5f:c5:d3:85:35:b7:1b:dc:3d:40:96:bd:96:32:cd:33:b3:7f: 0d:62:49:0d:01:29:fa:ee:be:07:5c:25:ae:92:c2:49:0f:da: 7f:22:c0:ca:eb:73:3c:04:f9:3d:9a:1b:20:8f:87:35:db:1a: 69:23:9a:91:79:54:0d:a9:e1:3b:2b:36:b7:d9:0c:22:8a:24: 86:50:40:8b:df:11:35:ed:2f:ec:f2:eb:fe:9d:3e:66:9c:d8: 7b:1d:e2:f2:e8:53:fb:3f:d7:e8:9b:66:27:a7:41:b8:fd:bc: c0:25:ed:f3:07:d7:d1:79:03:89:a4:29:f0:35:70:92:cd:e3: 4b:c2:dd:8e:d6:bb:c7:50:78:45:c6:18:de:28:55:e5:e3:0a: b2:af:cb:0e:22:6e:9e:ba:9f:5a:af:39:e6:df:28:c2:7c:c0: ff:1e:e0:77:7a:65:c0:1e:b4:ce:7a:23:f8:0f:89:f6:58:52: ae:8e:2e:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QzExMTAvBgNVBAUTKDBBNDMxNjNDQkVCMUJGNzk4QzlDRTQxQzFDNUU3NEEx Qzg4MzdBQzYwHhcNMjYwMTAxMDA0NTQ3WhcNMjYwMTA4MDA0NTQ3WjAYMRYwFAYD VQQDDA02OTU1YzNiYy03NmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrkvP84Jwzq+/Y2K4StDrFKkF4XakCB1OgSMufQfqZiofkTcR38hkCCxL5oT ebIfOlF1aGZsaCFMohzmRN9XujSyZAc4dmpNTLqvsjzAxx7mkIPW206vQmV/7gyc 0mza8AP9HtoAV6x6xDnAoRTM2W6EWju586QIrfqxPxfVhTsF17usND9YC2nUuKAw h6R58UOLW1oz56TjjfcpaOqbZyKV5t3jVZCxxdwDC3vwcjba6apXNIcePpX9T6wA f+fMWXiwDjSaG+/7naoWEy5ela+0pEQWiO70BmHB9dT3Go1Wahw7Weu4rrnY4sVL Lum9dEqlm78ThM9/gmkMH+VtIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHM8Y5cw iDbmrqxYduZWekE+JT/qMB8GA1UdIwQYMBaAFApDFjy+sb95jJzkHBxedKHIg3rG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVDMS9DQkU2QkM3NDBG MDAxMUVEQTc0NDA2NkFDNEY5QUUwMi9Da01XUEw2eHYzbU1uT1FjSEY1MG9jaURl c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrTVdQTDZ4djNtTW5PUWNIRjUwb2NpRGVzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVDMS9DQkU2QkM3NDBGMDAxMUVEQTc0NDA2NkFDNEY5QUUwMi9Da01XUEw2eHYz bU1uT1FjSEY1MG9jaURlc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQOTmIijgdp/Y09PLS69Z+ET4ksnuXGvV7sDIw/Gc3o7XbMg6owPlM bKbmtobhdeqA3eyQnJhwIE8R8pXaemyoNI3FJAf+lzRfxdOFNbcb3D1Alr2WMs0z s38NYkkNASn67r4HXCWuksJJD9p/IsDK63M8BPk9mhsgj4c12xppI5qReVQNqeE7 Kza32QwiiiSGUECL3xE17S/s8uv+nT5mnNh7HeLy6FP7P9fom2Ynp0G4/bzAJe3z B9fReQOJpCnwNXCSzeNLwt2O1rvHUHhFxhjeKFXl4wqyr8sOIm6eup9arznm3yjC fMD/HuB3emXAHrTOeiP4D4n2WFKuji7a -----END CERTIFICATE-----Generated at Thu Jan 1 05:47:27 2026 by rpki-client