This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft File: 0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json) Hash identifier: dpVNiKH3cswyrC73h5MXm9MLMBNxWsbKZSQtt9T8i8g= Subject key identifier: 2E:7C:C5:9B:87:00:EA:7E:96:F9:91:37:0B:87:9F:84:DF:01:65:32 Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft Manifest number: 0118 Signing time: Sun 11 Jan 2026 04:03:30 +0000 Manifest this update: Sun 11 Jan 2026 04:03:30 +0000 Manifest next update: Sun 18 Jan 2026 04:03:30 +0000 Files and hashes: 1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: 7FcOSqYpC2Wj8TrX9v6AwfzJVKi5B2JlQH53SDQLNNQ=) 2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: Gd34BZHumVDMQlkFxhkn9zZUBjwQGIsnWxDTTynzeE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 04:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Validity Not Before: Jan 11 04:03:30 2026 GMT Not After : Jan 18 04:03:30 2026 GMT Subject: CN=69632112-c9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:6d:55:e1:75:82:64:b4:02:8b:aa:5c:2a: 70:82:7e:90:6b:4f:1b:5c:2a:ee:4f:f2:7e:dd:f3: 1e:99:68:1e:35:0b:7e:2f:03:3c:51:1c:05:46:35: c3:30:43:51:82:c0:f7:5d:a4:26:f5:c1:48:3e:24: a2:80:8a:ce:d8:3e:27:a2:8d:3a:04:cd:0c:ae:2d: 34:3a:0e:63:bf:24:c3:4f:09:3f:34:63:a8:38:d4: 6b:20:aa:9b:b9:b6:a1:76:34:00:f7:67:8f:26:96: 5b:1b:6a:b1:5b:20:0b:32:62:1f:8c:8f:df:64:c3: c3:0c:32:83:e7:13:db:df:a3:a5:da:f8:3e:2d:2a: 8f:33:ed:99:25:26:b4:4e:f0:2e:41:d9:30:e6:2a: 4c:e3:15:8d:ea:82:3e:0b:f6:e9:85:2b:c4:45:a1: f8:97:96:0c:a3:76:d2:80:74:7e:22:c0:dd:0d:d1: cb:0b:5d:e3:4c:1f:26:45:82:15:cd:91:3c:85:8a: c5:02:8d:06:79:fa:28:f9:7e:06:6d:34:49:a7:eb: 67:35:66:ef:27:fd:34:24:21:1c:f3:57:fa:76:7b: 1f:8f:da:78:1d:42:99:3a:9f:0c:de:ad:cf:77:6b: 3b:74:2f:51:ca:60:23:0f:de:b8:39:5c:f9:4f:33: d4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7C:C5:9B:87:00:EA:7E:96:F9:91:37:0B:87:9F:84:DF:01:65:32 X509v3 Authority Key Identifier: keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:be:20:0f:5c:c8:77:b7:87:9d:4e:a9:5c:41:b9:08:77:50: 3b:72:ce:d4:93:43:01:7d:7b:3f:af:78:46:a2:94:ed:73:1b: 73:b3:8c:ff:11:ea:cb:ed:95:b7:04:3a:e2:e9:d9:27:ac:ef: 2e:4b:ff:40:78:8e:e6:23:2e:66:73:bc:b7:74:87:c9:7e:f8: 63:b3:24:b5:46:80:f7:54:6b:e7:52:95:ff:b6:b5:40:18:36: de:77:ae:3d:2b:66:e8:d3:fa:c8:52:42:02:57:f6:98:68:b6: 5e:7f:c7:b2:4f:6c:ee:b3:00:b5:5f:d9:62:f8:20:bd:3b:7b: 73:47:41:93:44:4f:20:96:4b:d8:5a:a8:64:b1:b5:78:7d:87: 41:65:66:47:02:3c:c4:c4:a2:a1:0f:4a:41:48:10:0f:9f:d5: d0:ca:be:f5:c9:3c:0b:07:b3:a6:03:2f:65:05:3c:5e:fe:10: 12:88:05:4c:2e:4f:61:8d:f7:95:fb:c4:ff:1b:79:b7:1a:c9: 99:bd:9b:c8:f2:9c:ce:a8:73:bb:c5:fa:9e:5f:98:51:19:b9: ca:a3:71:82:54:e6:3d:fd:73:0a:da:a6:fe:be:08:11:c0:92: 55:e6:a2:96:6a:e1:90:f6:41:49:42:3d:85:78:cf:7c:d8:57: 76:45:59:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEODgxMTAvBgNVBAUTKEQwOTlFRUE5RjVDREI2RkU0QzZFRjk4RThEOENGMzM2 NEI5RDYyNjEwHhcNMjYwMTExMDQwMzMwWhcNMjYwMTE4MDQwMzMwWjAYMRYwFAYD VQQDDA02OTYzMjExMi1jOWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4JtVeF1gmS0AouqXCpwgn6Qa08bXCruT/J+3fMemWgeNQt+LwM8URwFRjXD MENRgsD3XaQm9cFIPiSigIrO2D4noo06BM0Mri00Og5jvyTDTwk/NGOoONRrIKqb ubahdjQA92ePJpZbG2qxWyALMmIfjI/fZMPDDDKD5xPb36Ol2vg+LSqPM+2ZJSa0 TvAuQdkw5ipM4xWN6oI+C/bphSvERaH4l5YMo3bSgHR+IsDdDdHLC13jTB8mRYIV zZE8hYrFAo0Gefoo+X4GbTRJp+tnNWbvJ/00JCEc81f6dnsfj9p4HUKZOp8M3q3P d2s7dC9RymAjD964OVz5TzPUHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC58xZuH AOp+lvmRNwuHn4TfAWUyMB8GA1UdIwQYMBaAFNCZ7qn1zbb+TG75jo2M8zZLnWJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQ4OC9COTg2RDkxQTQz MTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2NU1idm1Pall6ek5rdWRZ bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBKbnVxZlhOdHY1TWJ2bU9qWXp6Tmt1ZFltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQ4OC9COTg2RDkxQTQzMTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2 NU1idm1Pall6ek5rdWRZbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIviAPXMh3t4edTqlcQbkId1A7cs7Uk0MBfXs/r3hGopTtcxtzs4z/ EerL7ZW3BDri6dknrO8uS/9AeI7mIy5mc7y3dIfJfvhjsyS1RoD3VGvnUpX/trVA GDbed649K2bo0/rIUkICV/aYaLZef8eyT2zuswC1X9li+CC9O3tzR0GTRE8glkvY WqhksbV4fYdBZWZHAjzExKKhD0pBSBAPn9XQyr71yTwLB7OmAy9lBTxe/hASiAVM Lk9hjfeV+8T/G3m3GsmZvZvI8pzOqHO7xfqeX5hRGbnKo3GCVOY9/XMK2qb+vggR wJJV5qKWauGQ9kFJQj2FeM982Fd2RVmu -----END CERTIFICATE-----Generated at Sun Jan 11 21:07:29 2026 by rpki-client