This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json) Hash identifier: CaTBcYSpJelPGYuHtF0R2cD9X2RHF9tUOZPnPgjOn/w= Subject key identifier: B4:E3:E8:39:A1:05:25:1E:D9:6D:CF:E5:73:ED:CB:50:32:61:69:68 Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D Certificate serial: 102F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft Manifest number: 1020 Signing time: Sat 10 Jan 2026 17:09:02 +0000 Manifest this update: Sat 10 Jan 2026 17:09:01 +0000 Manifest next update: Sat 17 Jan 2026 17:09:01 +0000 Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: Y57L+5YrX817QDi1qEVktMWQtd7S52jaONFw2Uk49QE=) 2: 68DA14E65BB211E9BF474F16C4F9AE02.roa (hash: +yhzJzGn+WxW2d4EtUHBstgfBIaoIoaYoJwg0N+/u2I=) 3: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: bOx/MaRmXB38ne/1h1RZYscRhBFAXmNorXwlc1KE7w8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 17:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4143 (0x102f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D Validity Not Before: Jan 10 17:09:01 2026 GMT Not After : Jan 17 17:09:01 2026 GMT Subject: CN=696287ad-1c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0f:93:68:94:32:72:2a:17:85:49:82:e4:b1: 86:82:d5:f9:5a:84:41:af:34:eb:6a:36:3a:74:23: 3b:10:4c:e4:06:18:6c:a9:83:67:12:85:de:a5:55: d8:de:50:37:7b:c1:e1:d5:7b:56:fb:ed:52:8e:28: 06:d9:ec:8d:88:a1:7c:2e:c6:68:9d:b5:8a:7a:03: f9:37:98:33:aa:47:2a:92:67:ac:53:60:41:f6:75: 9d:3c:1a:39:93:e4:a6:36:b5:55:3a:e9:fd:39:e2: 22:d9:43:66:88:d5:d1:82:97:82:ca:2c:f1:87:1c: 3b:34:1f:ed:a7:c9:cf:5d:a5:ea:d6:5e:63:2e:5e: 56:22:0a:bd:05:40:27:f3:2e:70:10:fc:a2:d6:7e: a2:d3:16:b8:55:40:2e:27:ff:ff:ec:a1:4f:de:d9: 59:b7:55:d3:5b:63:fa:2a:52:29:91:87:dd:71:d1: dd:c6:be:f0:7c:8e:13:5b:bf:bf:36:08:d9:56:d5: f3:a4:69:7f:e5:2c:12:c9:9c:a2:ea:a9:85:28:ba: d3:25:07:83:10:33:02:ba:fa:99:46:7c:c4:4d:d0: ed:c3:a3:c2:c7:5c:57:9b:d2:aa:89:5d:2f:16:42: 2b:76:66:56:00:30:13:83:c4:20:86:44:01:83:2b: 28:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E3:E8:39:A1:05:25:1E:D9:6D:CF:E5:73:ED:CB:50:32:61:69:68 X509v3 Authority Key Identifier: keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:a0:20:5d:9c:15:13:75:97:01:8d:f1:cb:92:89:b9:9a:4b: d2:8a:4e:b7:3e:6f:41:16:18:fd:38:e7:d7:e8:d0:69:11:ee: d1:12:3a:c2:eb:49:f0:09:3d:1d:61:f3:9b:70:8a:7d:b2:57: 81:6b:79:7b:b1:6f:06:cd:c4:8f:8f:06:9d:cd:f5:6c:bd:bf: 94:22:43:fd:2e:10:c1:7d:82:48:19:d4:64:87:73:7a:e5:8e: b8:30:bf:82:68:57:de:dc:c3:70:41:26:f0:bc:90:92:42:89: 9a:7e:4c:dd:4e:66:cf:bb:6a:b4:31:32:91:66:51:2f:76:c7: 3f:9f:09:b5:76:8c:e0:41:14:13:fb:39:34:89:8d:45:0e:e3: fa:39:f8:6e:f8:1e:4f:96:49:85:49:96:78:d3:ea:fc:c2:44: 6d:91:ac:e6:78:16:8c:11:bd:60:6c:55:51:57:f3:31:da:35: 06:eb:97:b4:c4:f3:19:a8:dd:87:2a:07:2a:5a:8a:d6:33:31: db:1d:31:ed:f2:8d:23:cc:fa:9b:77:eb:e4:3a:ea:6c:1a:ee: 85:f7:24:57:49:b2:85:83:04:10:1b:77:49:6e:53:f0:22:0f: 0d:01:ae:af:83:84:ba:ea:19:61:0f:49:15:0f:2d:22:02:07: d2:1e:fc:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKDM5NEVBMDg2ODk1QzZGMTdEOTM2NTQ4QTMyMjM4Qjgy Q0Y3OTI5NEQwHhcNMjYwMTEwMTcwOTAxWhcNMjYwMTE3MTcwOTAxWjAYMRYwFAYD VQQDDA02OTYyODdhZC0xYzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQ+TaJQycioXhUmC5LGGgtX5WoRBrzTrajY6dCM7EEzkBhhsqYNnEoXepVXY 3lA3e8Hh1XtW++1SjigG2eyNiKF8LsZonbWKegP5N5gzqkcqkmesU2BB9nWdPBo5 k+SmNrVVOun9OeIi2UNmiNXRgpeCyizxhxw7NB/tp8nPXaXq1l5jLl5WIgq9BUAn 8y5wEPyi1n6i0xa4VUAuJ///7KFP3tlZt1XTW2P6KlIpkYfdcdHdxr7wfI4TW7+/ NgjZVtXzpGl/5SwSyZyi6qmFKLrTJQeDEDMCuvqZRnzETdDtw6PCx1xXm9KqiV0v FkIrdmZWADATg8QghkQBgysoAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTj6Dmh BSUe2W3P5XPty1AyYWloMB8GA1UdIwQYMBaAFDlOoIaJXG8X2TZUijIji4LPeSlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8xNzQ4ODU1MDVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4ZlpObFNLTWlPTGdzOTVL VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VNmdob2xjYnhmWk5sU0tNaU9MZ3M5NUtVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8xNzQ4ODU1MDVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4 ZlpObFNLTWlPTGdzOTVLVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBoCBdnBUTdZcBjfHLkom5mkvSik63Pm9BFhj9OOfX6NBpEe7REjrC 60nwCT0dYfObcIp9sleBa3l7sW8GzcSPjwadzfVsvb+UIkP9LhDBfYJIGdRkh3N6 5Y64ML+CaFfe3MNwQSbwvJCSQomafkzdTmbPu2q0MTKRZlEvdsc/nwm1dozgQRQT +zk0iY1FDuP6Ofhu+B5PlkmFSZZ40+r8wkRtkazmeBaMEb1gbFVRV/Mx2jUG65e0 xPMZqN2HKgcqWorWMzHbHTHt8o0jzPqbd+vkOupsGu6F9yRXSbKFgwQQG3dJblPw Ig8NAa6vg4S66hlhD0kVDy0iAgfSHvyb -----END CERTIFICATE-----Generated at Mon Jan 12 10:34:51 2026 by rpki-client