This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft File: bODpSXEbID5KyyK2gPP_9H7RbGE.mft (raw, json) Hash identifier: W0oYIGe5xe1edjZuIN6WguwRTqxw8kQ6k2/HJb/Z9As= Subject key identifier: C2:E4:AC:D2:C1:D2:28:47:CD:DE:EF:CD:D7:ED:0F:20:FA:C7:49:32 Authority key identifier: 6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61 Certificate issuer: /CN=A91BDC3F/serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft Manifest number: 0144 Signing time: Sun 11 Jan 2026 03:41:18 +0000 Manifest this update: Sun 11 Jan 2026 03:41:18 +0000 Manifest next update: Sun 18 Jan 2026 03:41:18 +0000 Files and hashes: 1: bODpSXEbID5KyyK2gPP_9H7RbGE.crl (hash: VaJK7r1MpfzlIkDSiIO3IYW1+JOMKN4ggQNrv5yX5pw=) 2: 7980C32AA71B11EFA8320136C4F9AE02.roa (hash: svWCFcB6b/XkbZIPeHevXUk9kvL6MAqPQu9nAp05skM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 03:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC3F, serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61 Validity Not Before: Jan 11 03:41:18 2026 GMT Not After : Jan 18 03:41:18 2026 GMT Subject: CN=69631bde-8897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:f1:21:53:ce:16:49:15:a1:33:85:66:a6: 2c:e9:42:8f:74:c7:5c:e7:ef:c8:06:20:49:f8:97: 5c:9d:c2:53:43:5d:96:9c:d2:7c:1b:c7:b7:c8:ef: e2:c2:80:26:dd:8e:84:da:9a:b3:25:41:2c:24:21: c1:03:30:ba:c1:ee:f9:db:d7:dc:df:7d:f6:0a:5b: 4d:3e:4d:1d:36:39:98:d7:20:17:6c:b7:11:ef:7d: f3:26:4f:af:c5:0f:d2:c1:c7:35:ba:ae:7c:d2:48: 1a:e9:a4:7e:4d:86:d6:50:5a:63:ea:ec:a7:5c:48: 63:18:fc:6d:c7:b3:06:82:ef:fa:a6:7e:16:61:07: f2:82:e4:80:41:3d:f5:cb:ae:48:c0:f4:f3:53:ec: c8:1d:71:af:0c:4f:67:57:e1:80:a2:59:b7:77:b4: e3:30:3d:23:c9:f0:df:e7:e2:b5:f5:f0:6c:23:c7: d1:16:c1:1d:c9:b1:e0:79:4f:84:b7:2a:b5:bf:72: b0:20:e0:f0:c0:6a:de:ca:a0:67:a0:04:63:8d:84: 36:b4:5d:b4:14:9c:52:4e:a5:a3:45:b7:b9:11:03: bb:17:b1:40:40:6f:b2:56:45:3b:bd:ff:aa:70:4d: 64:e4:f4:8e:a7:6f:75:5d:bb:4a:24:59:b0:a4:42: fd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E4:AC:D2:C1:D2:28:47:CD:DE:EF:CD:D7:ED:0F:20:FA:C7:49:32 X509v3 Authority Key Identifier: keyid:6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:00:35:d1:e7:3e:c9:bf:9c:53:2c:c8:c2:e4:77:83:12:bc: a8:b5:3d:3d:c6:a0:8c:a0:6f:0a:3a:39:ad:63:34:4f:28:07: 0b:f8:6c:9e:6a:de:fe:d2:da:10:59:69:2a:08:3c:30:46:c7: 76:00:e8:26:58:74:0f:69:9d:b7:4e:58:c2:e0:5d:dd:5d:33: 5b:e9:70:9c:de:7e:a2:35:b7:65:2f:38:53:79:fe:ab:5b:e3: c4:e6:74:08:55:f9:cf:ca:d6:e9:65:8f:a4:1b:f8:75:e3:10: f2:eb:2b:aa:dc:f5:aa:77:d8:72:42:dc:f1:d2:ac:0e:30:9e: 58:7c:5f:6a:7f:60:fa:61:bd:b4:07:b5:5c:04:1e:36:fe:c3: b5:04:1e:af:d1:6f:08:24:b5:c6:c1:96:e8:ad:fe:90:26:df: f0:9e:e7:ec:f1:cb:c2:9b:8f:b9:1d:ac:e9:81:f7:7a:a4:29: 63:3d:82:2c:03:20:4d:75:8d:cf:fa:77:0d:50:a6:67:08:1a: 30:14:3c:83:ba:43:c6:ec:cb:e7:a0:ef:8b:67:b5:7f:8f:ee: 21:15:ec:6e:4f:61:14:b8:a5:a7:50:b6:a0:a8:7c:42:8c:d6: 85:73:ba:30:59:91:c0:21:a1:a7:bc:48:39:60:2a:c2:e2:6e: 8d:96:26:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDM0YxMTAvBgNVBAUTKDZDRTBFOTQ5NzExQjIwM0U0QUNCMjJCNjgwRjNGRkY0 N0VEMTZDNjEwHhcNMjYwMTExMDM0MTE4WhcNMjYwMTE4MDM0MTE4WjAYMRYwFAYD VQQDDA02OTYzMWJkZS04ODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAza/xIVPOFkkVoTOFZqYs6UKPdMdc5+/IBiBJ+JdcncJTQ12WnNJ8G8e3yO/i woAm3Y6E2pqzJUEsJCHBAzC6we7529fc3332CltNPk0dNjmY1yAXbLcR733zJk+v xQ/Swcc1uq580kga6aR+TYbWUFpj6uynXEhjGPxtx7MGgu/6pn4WYQfyguSAQT31 y65IwPTzU+zIHXGvDE9nV+GAolm3d7TjMD0jyfDf5+K19fBsI8fRFsEdybHgeU+E tyq1v3KwIODwwGreyqBnoARjjYQ2tF20FJxSTqWjRbe5EQO7F7FAQG+yVkU7vf+q cE1k5PSOp291XbtKJFmwpEL9pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLkrNLB 0ihHzd7vzdftDyD6x0kyMB8GA1UdIwQYMBaAFGzg6UlxGyA+SssitoDz//R+0Wxh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREMzRi81Q0U4MTA0NjBF QjAxMUVGODcyRTgxMjdDNEY5QUUwMi9iT0RwU1hFYklENUt5eUsyZ1BQXzlIN1Ji R0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPRHBTWEViSUQ1S3l5SzJnUFBfOUg3UmJHRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REMzRi81Q0U4MTA0NjBFQjAxMUVGODcyRTgxMjdDNEY5QUUwMi9iT0RwU1hFYklE NUt5eUsyZ1BQXzlIN1JiR0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXADXR5z7Jv5xTLMjC5HeDEryotT09xqCMoG8KOjmtYzRPKAcL+Gye at7+0toQWWkqCDwwRsd2AOgmWHQPaZ23TljC4F3dXTNb6XCc3n6iNbdlLzhTef6r W+PE5nQIVfnPytbpZY+kG/h14xDy6yuq3PWqd9hyQtzx0qwOMJ5YfF9qf2D6Yb20 B7VcBB42/sO1BB6v0W8IJLXGwZborf6QJt/wnufs8cvCm4+5Hazpgfd6pCljPYIs AyBNdY3P+ncNUKZnCBowFDyDukPG7MvnoO+LZ7V/j+4hFexuT2EUuKWnULagqHxC jNaFc7owWZHAIaGnvEg5YCrC4m6Nlibh -----END CERTIFICATE-----Generated at Mon Jan 12 13:45:38 2026 by rpki-client