This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json) Hash identifier: fLSllnF7edT1IKvcWDahYIohOZWL4rV1Ce2xOASYn5I= Subject key identifier: 65:3B:7B:62:51:65:EC:1C:C1:F9:8F:E5:48:BA:12:01:2F:B3:4C:70 Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Certificate serial: 0CA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft Manifest number: 0C8B Signing time: Sat 10 Jan 2026 18:07:52 +0000 Manifest this update: Sat 10 Jan 2026 18:07:52 +0000 Manifest next update: Sat 17 Jan 2026 18:07:52 +0000 Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: 1em8i6Njk+gjlWxt6odCs9PpyqtuIdiygh8Pbk+JhTQ=) 2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: Dj1n5Ws5ZOwUHxV0iXhdVuXnGHZDTpjS0z8ntITqHGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 18:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3232 (0xca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Validity Not Before: Jan 10 18:07:52 2026 GMT Not After : Jan 17 18:07:52 2026 GMT Subject: CN=69629578-20cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:af:80:b8:4d:b3:f3:d4:14:06:f4:6b:7d:7d: 91:9c:39:05:5e:f5:f1:d1:df:df:d1:a1:14:ef:76: cd:cb:a3:03:69:7f:a1:68:7c:9c:a3:a0:ae:a3:6d: 55:c8:e6:0e:80:b6:d6:49:b6:91:aa:cb:3e:81:de: 0c:e3:13:f4:87:05:72:13:17:a0:e6:4b:9d:99:b7: 6c:c1:2a:ac:6d:6b:f9:1e:65:52:4b:8e:36:66:ef: e7:8d:9a:46:13:ea:e5:1b:12:59:1c:24:76:77:70: 18:8d:33:83:0a:0d:2f:d0:a1:07:5a:30:90:57:e8: 91:a8:7d:14:9e:27:dd:ff:dc:4c:96:07:ce:90:43: 06:1b:f8:7b:7f:41:fe:71:ba:67:75:a5:fa:de:6f: 52:b4:fc:c9:b2:4a:a2:96:6a:b8:6b:6c:aa:70:39: f7:f7:df:15:1a:7c:c0:37:49:d1:6e:0c:3b:a1:98: 3e:14:e7:45:1e:06:e4:d1:27:19:4f:7b:fb:ef:9c: f4:ea:d9:92:f6:ce:5c:6f:f4:63:38:1b:26:6d:fc: e6:04:57:07:78:5c:91:4c:a9:58:c5:4f:bc:e6:39: be:5d:69:a1:ef:2d:fe:00:24:d2:c5:81:5f:02:d4: 6b:a8:1b:27:75:e3:eb:b5:a2:6e:b2:95:48:a7:fb: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3B:7B:62:51:65:EC:1C:C1:F9:8F:E5:48:BA:12:01:2F:B3:4C:70 X509v3 Authority Key Identifier: keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:92:3d:a1:0d:a7:5b:0f:05:e1:4b:f6:ae:34:4f:34:81:31: ab:16:c3:a1:35:66:08:cc:4e:aa:a5:72:36:d4:7f:c7:9b:73: be:c6:88:42:c6:37:c8:6e:25:b2:b7:ae:fd:df:76:e5:ce:d5: 68:99:9a:9b:bf:20:a1:ab:44:9e:bc:f8:11:a2:e8:60:04:8f: 5a:0c:be:ac:a9:00:a4:48:bc:be:12:7c:6d:46:70:ef:f0:46: 3e:ab:91:86:ca:f8:70:0e:2d:f8:ac:ec:35:c4:34:4b:fd:8e: dd:b9:38:7b:cf:61:07:78:b2:d9:73:11:3b:c6:90:ed:2d:74: 65:e4:c6:ac:fe:0b:67:78:eb:dd:30:0e:f5:2e:0a:56:53:39: b1:49:db:86:ab:07:94:bf:55:b8:22:00:cb:97:91:e4:ac:13: ad:8c:82:01:41:67:e3:7f:77:78:84:a6:5a:0f:cc:c1:3a:75: 01:7f:60:a2:32:c0:59:56:fc:c8:0e:d1:1a:40:31:0b:f2:0a: f9:cf:16:4c:5e:d9:08:2e:92:bf:ad:51:e6:19:ac:6a:19:ee: 4e:8c:29:e6:bc:43:3a:60:72:9e:06:68:87:f4:54:a1:40:d3: 4f:87:30:42:ad:67:e1:1d:33:f8:c4:f6:0b:0b:31:a7:bc:4e: ec:dd:03:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFMEUxMTAvBgNVBAUTKERBQ0E2MzY5OTZFODE5QUExRjk1MURDNjZGRjI5QUQw OTc5QzA1QzgwHhcNMjYwMTEwMTgwNzUyWhcNMjYwMTE3MTgwNzUyWjAYMRYwFAYD VQQDDA02OTYyOTU3OC0yMGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAna+AuE2z89QUBvRrfX2RnDkFXvXx0d/f0aEU73bNy6MDaX+haHyco6Cuo21V yOYOgLbWSbaRqss+gd4M4xP0hwVyExeg5kudmbdswSqsbWv5HmVSS442Zu/njZpG E+rlGxJZHCR2d3AYjTODCg0v0KEHWjCQV+iRqH0Unifd/9xMlgfOkEMGG/h7f0H+ cbpndaX63m9StPzJskqilmq4a2yqcDn3998VGnzAN0nRbgw7oZg+FOdFHgbk0ScZ T3v775z06tmS9s5cb/RjOBsmbfzmBFcHeFyRTKlYxU+85jm+XWmh7y3+ACTSxYFf AtRrqBsndePrtaJuspVIp/tJNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGU7e2JR ZewcwfmP5Ui6EgEvs0xwMB8GA1UdIwQYMBaAFNrKY2mW6BmqH5Udxm/ymtCXnAXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUUwRS80NzJDMzkyMjEw RUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dhb2ZsUjNHYl9LYTBKZWNC Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzcGphWmJvR2FvZmxSM0diX0thMEplY0JjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUUwRS80NzJDMzkyMjEwRUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dh b2ZsUjNHYl9LYTBKZWNCY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAokj2hDadbDwXhS/auNE80gTGrFsOhNWYIzE6qpXI21H/Hm3O+xohC xjfIbiWyt67933blztVomZqbvyChq0SevPgRouhgBI9aDL6sqQCkSLy+EnxtRnDv 8EY+q5GGyvhwDi34rOw1xDRL/Y7duTh7z2EHeLLZcxE7xpDtLXRl5Mas/gtneOvd MA71LgpWUzmxSduGqweUv1W4IgDLl5HkrBOtjIIBQWfjf3d4hKZaD8zBOnUBf2Ci MsBZVvzIDtEaQDEL8gr5zxZMXtkILpK/rVHmGaxqGe5OjCnmvEM6YHKeBmiH9FSh QNNPhzBCrWfhHTP4xPYLCzGnvE7s3QMA -----END CERTIFICATE-----Generated at Mon Jan 12 03:30:25 2026 by rpki-client