This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json) Hash identifier: vHEdZG9GvXo9qk0ckY+d8HS91CS6YFveqArdcWcb/1k= Subject key identifier: 6D:95:08:1B:9D:F9:CF:FD:BD:5B:0F:A1:BA:81:E3:7D:BA:CC:51:FB Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Certificate serial: 0D92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft Manifest number: 0D84 Signing time: Sun 04 Jan 2026 17:34:18 +0000 Manifest this update: Sun 04 Jan 2026 17:34:17 +0000 Manifest next update: Sun 11 Jan 2026 17:34:17 +0000 Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: zH+jyRbNyG8QFeG7GiVR9/GY/ohMen18bfjAWE5G8Bk=) 2: 3C46581E96C411F0AA8A5D32C4F9AE02.roa (hash: jEIejTZE4y5/nDEgx6mik+hQ7BxADqtxZpUBPhdWvAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Jan 2026 17:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3474 (0xd92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Validity Not Before: Jan 4 17:34:17 2026 GMT Not After : Jan 11 17:34:17 2026 GMT Subject: CN=695aa49a-7047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:53:e8:cd:1d:b3:5f:21:df:02:18:b2:90:d9: 69:70:d0:55:5e:43:25:40:db:88:86:93:6c:04:14: d2:f5:50:aa:27:f4:d6:71:43:36:14:8b:4a:4a:5e: 45:3b:e9:d5:12:26:34:6d:62:87:6c:f3:8e:72:db: 8d:c5:91:7d:77:40:86:fc:50:86:86:15:88:21:44: 8e:5a:67:f1:8d:f7:65:44:3a:a3:91:da:fb:5d:ed: c2:cf:07:cf:fe:67:c0:7b:32:c8:36:f0:6b:ec:56: 5f:d2:d1:d6:34:01:fb:df:d2:03:69:5d:20:96:44: fe:91:30:16:29:ec:98:e3:9d:fa:7a:73:fb:70:4a: 8c:e6:a4:73:f9:b3:bf:ce:fe:36:f9:ea:0e:fc:88: 21:0c:65:4a:4c:a6:a9:b8:c1:27:4d:a0:88:1b:5b: fc:95:16:d5:ab:cd:3d:8d:f5:a8:7d:34:15:f9:8e: d7:b4:ca:fa:99:8a:0d:41:6e:3a:c8:55:a7:ca:11: 8b:0a:d1:70:01:d4:8f:8c:d4:50:1f:5c:b1:57:de: 01:2c:f0:8c:6d:15:d0:3f:2b:7a:f7:27:37:a6:b2: e2:d1:f2:24:25:db:15:1b:26:0b:0f:6e:bf:f8:e5: 7d:05:c7:bf:44:1d:36:58:14:de:17:e3:3a:37:4f: 66:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:95:08:1B:9D:F9:CF:FD:BD:5B:0F:A1:BA:81:E3:7D:BA:CC:51:FB X509v3 Authority Key Identifier: keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:5c:75:06:49:98:15:a3:34:48:ac:b9:8f:dc:21:bc:41:8b: f9:8c:80:23:e2:6c:9d:27:41:f0:9b:24:96:b9:65:95:d0:c9: f4:dd:41:e2:ff:a4:97:05:11:59:8a:a3:58:45:96:69:2b:f3: 51:bc:e3:06:c1:e0:72:2f:d4:19:fe:14:c8:ec:d9:e6:77:b2: d4:7f:b0:b2:48:7c:1c:44:a7:67:c9:fe:35:6b:65:e0:32:3f: cb:18:2c:58:c5:5e:59:b5:d1:90:7d:dd:ec:00:6d:33:eb:24: a2:7a:b8:a9:22:32:25:95:28:a0:0b:9a:84:1e:00:8f:68:d8: 7a:66:00:5a:ee:38:d7:ec:3a:a9:89:e8:9e:2b:59:1a:0a:55: f1:d2:31:94:ae:3d:8e:e4:62:fd:bb:5f:2c:12:5e:97:02:e1: e5:67:06:dc:b2:74:8d:ae:71:8b:fc:db:a1:17:b1:46:99:88: c0:a3:ca:00:c6:12:8a:04:50:ca:32:4e:62:f3:a2:f0:53:9a: 6d:d1:40:b8:b7:ed:46:49:4c:17:0d:5c:97:0b:4c:57:8c:b1: 5f:68:23:0f:d4:84:6e:f2:9b:73:c9:6d:f3:4f:ef:95:88:b9: 1a:68:fb:c3:e5:e5:b0:fe:a5:03:10:9f:60:1a:52:df:0f:32: a3:ed:30:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQTYxMTAvBgNVBAUTKEQyNkRGQ0M0NTlDNTMxQzUwNDk4MDM2Q0M2Q0U2NzA2 QjgwNjE3NTIwHhcNMjYwMTA0MTczNDE3WhcNMjYwMTExMTczNDE3WjAYMRYwFAYD VQQDDA02OTVhYTQ5YS03MDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA71PozR2zXyHfAhiykNlpcNBVXkMlQNuIhpNsBBTS9VCqJ/TWcUM2FItKSl5F O+nVEiY0bWKHbPOOctuNxZF9d0CG/FCGhhWIIUSOWmfxjfdlRDqjkdr7Xe3CzwfP /mfAezLINvBr7FZf0tHWNAH739IDaV0glkT+kTAWKeyY4536enP7cEqM5qRz+bO/ zv42+eoO/IghDGVKTKapuMEnTaCIG1v8lRbVq809jfWofTQV+Y7XtMr6mYoNQW46 yFWnyhGLCtFwAdSPjNRQH1yxV94BLPCMbRXQPyt69yc3prLi0fIkJdsVGyYLD26/ +OV9Bce/RB02WBTeF+M6N09mbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2VCBud +c/9vVsPobqB4326zFH7MB8GA1UdIwQYMBaAFNJt/MRZxTHFBJgDbMbOZwa4BhdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURBNi9EQjE4QjhFNkRE REYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1jVUVtQU5zeHM1bkJyZ0dG MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtMzh4Rm5GTWNVRW1BTnN4czVuQnJnR0YxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURBNi9EQjE4QjhFNkREREYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1j VUVtQU5zeHM1bkJyZ0dGMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACXHUGSZgVozRIrLmP3CG8QYv5jIAj4mydJ0HwmySWuWWV0Mn03UHi /6SXBRFZiqNYRZZpK/NRvOMGweByL9QZ/hTI7Nnmd7LUf7CySHwcRKdnyf41a2Xg Mj/LGCxYxV5ZtdGQfd3sAG0z6ySieripIjIllSigC5qEHgCPaNh6ZgBa7jjX7Dqp ieieK1kaClXx0jGUrj2O5GL9u18sEl6XAuHlZwbcsnSNrnGL/NuhF7FGmYjAo8oA xhKKBFDKMk5i86LwU5pt0UC4t+1GSUwXDVyXC0xXjLFfaCMP1IRu8ptzyW3zT++V iLkaaPvD5eWw/qUDEJ9gGlLfDzKj7TBV -----END CERTIFICATE-----Generated at Mon Jan 5 03:05:26 2026 by rpki-client