This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft File: RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft (raw, json) Hash identifier: Ze73MWyhvXZCfJCrvMDawAVohl/gfNzre230vIrFgP0= Subject key identifier: 37:C5:17:EE:17:4D:23:54:37:52:89:E7:82:C2:44:98:BC:46:D1:35 Authority key identifier: 45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 Certificate issuer: /CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Certificate serial: 1EC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft Manifest number: 1EB1 Signing time: Sat 10 Jan 2026 15:52:05 +0000 Manifest this update: Sat 10 Jan 2026 15:52:05 +0000 Manifest next update: Sat 17 Jan 2026 15:52:05 +0000 Files and hashes: 1: RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl (hash: oFXgJdq9QE6aFwunweCwmTwRX20JPD0rAN4N15ZdFMg=) 2: 3F1BB7A09BC011EF995CBB11C4F9AE02.roa (hash: mRSrFQVK1lxi7kaf/Tg/yKK2xAIdzAD5dKtw/S+mItk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 15:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7879 (0x1ec7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6833, serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Validity Not Before: Jan 10 15:52:05 2026 GMT Not After : Jan 17 15:52:05 2026 GMT Subject: CN=696275a5-f377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:35:d1:72:3f:5e:bf:49:b7:23:6d:02:8c:6f: d9:fc:57:6a:43:b8:c2:83:cc:5b:b7:36:98:32:84: 87:62:4a:ca:22:34:0b:99:41:07:0a:83:fa:07:cd: d1:36:7c:a8:02:cc:26:6d:30:c9:a4:74:1a:68:f5: 34:88:61:e9:4c:bb:84:ee:1e:ac:ff:42:29:5e:f2: a7:f3:af:41:63:1f:e4:b2:f1:56:d3:0b:b9:a5:3e: ec:5b:32:86:f6:83:01:cd:82:d6:56:72:42:c0:f2: e6:90:ec:16:cd:dc:8b:d8:f9:11:1e:da:b8:a9:68: 64:7e:45:d2:d8:0b:02:78:54:9b:9d:2c:ae:23:e5: 56:85:92:45:b6:c8:f6:cd:78:de:91:5d:b3:2a:22: a8:56:db:73:d5:c8:8f:31:12:e1:5b:f4:b2:f1:af: 6a:cb:82:62:0e:aa:4a:e6:cb:d7:ef:d3:af:69:e2: ee:2b:03:6f:3a:e3:68:6c:ba:ab:9e:67:64:c8:90: 0e:c6:4a:9f:4e:b6:38:65:b2:bb:44:d9:0b:b7:61: b4:cb:bc:e5:9e:92:76:ae:b4:18:23:11:88:26:2f: d4:ac:0b:9d:4f:f8:81:9b:87:14:f3:96:72:39:7c: 6c:a1:a1:a0:1e:bf:78:12:1c:cc:a1:63:53:bc:d4: 8a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C5:17:EE:17:4D:23:54:37:52:89:E7:82:C2:44:98:BC:46:D1:35 X509v3 Authority Key Identifier: keyid:45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:89:90:af:79:a0:82:a6:06:94:10:3b:bc:c5:01:b1:3b:0f: 86:f7:62:f4:c6:15:02:4f:dc:3a:17:03:4c:9c:b7:eb:b6:c8: ff:87:52:37:5a:f1:f8:2b:31:2a:b3:b6:a3:12:ad:41:21:cb: 1b:65:e4:75:12:16:e9:04:cc:b1:af:20:5a:f5:2c:68:df:df: e4:8d:93:d6:37:ee:4c:3b:15:41:33:e2:fa:b9:b7:34:13:4b: 5c:4b:0c:3f:b4:37:41:6f:5c:1b:42:53:f5:bd:e7:9d:2a:a6: 0e:72:33:8a:96:d5:2d:84:50:6a:a6:51:9f:dc:04:28:fc:11: b3:8d:d9:ad:35:37:37:c0:07:78:94:bf:b8:96:67:5d:59:0a: e0:c2:79:bf:6f:36:41:0b:17:5f:fd:29:77:f9:14:35:a2:ef: 47:c4:9e:aa:54:ac:61:a7:51:7d:e9:e3:d9:e3:f6:ee:88:72: fb:ff:4f:e0:86:76:85:19:78:2e:e0:70:ad:4b:bb:cb:ce:c7: 6a:ce:04:3a:00:10:77:46:72:74:52:e6:5c:b1:6e:59:09:99: 34:1c:c1:f2:23:4a:60:39:18:e9:df:eb:75:73:19:8c:62:1a: 90:3b:22:85:bb:41:81:82:eb:9a:72:78:66:92:21:c4:a4:d0: db:c1:3f:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MzMxMTAvBgNVBAUTKDQ1QzgwOEE4QUNERTI0QUM5NjEzRTAxQTQ5NTk2MTAw RUQ1RThDRjEwHhcNMjYwMTEwMTU1MjA1WhcNMjYwMTE3MTU1MjA1WjAYMRYwFAYD VQQDDA02OTYyNzVhNS1mMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTXRcj9ev0m3I20CjG/Z/FdqQ7jCg8xbtzaYMoSHYkrKIjQLmUEHCoP6B83R NnyoAswmbTDJpHQaaPU0iGHpTLuE7h6s/0IpXvKn869BYx/ksvFW0wu5pT7sWzKG 9oMBzYLWVnJCwPLmkOwWzdyL2PkRHtq4qWhkfkXS2AsCeFSbnSyuI+VWhZJFtsj2 zXjekV2zKiKoVttz1ciPMRLhW/Sy8a9qy4JiDqpK5svX79OvaeLuKwNvOuNobLqr nmdkyJAOxkqfTrY4ZbK7RNkLt2G0y7zlnpJ2rrQYIxGIJi/UrAudT/iBm4cU85Zy OXxsoaGgHr94EhzMoWNTvNSK+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfFF+4X TSNUN1KJ54LCRJi8RtE1MB8GA1UdIwQYMBaAFEXICKis3iSslhPgGklZYQDtXozx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgzMy9GM0Q0ODBFQzgz QjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpLeVdFLUFhU1ZsaEFPMWVq UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjZ0lxS3plSkt5V0UtQWFTVmxoQU8xZWpQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgzMy9GM0Q0ODBFQzgzQjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpL eVdFLUFhU1ZsaEFPMWVqUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxiZCveaCCpgaUEDu8xQGxOw+G92L0xhUCT9w6FwNMnLfrtsj/h1I3 WvH4KzEqs7ajEq1BIcsbZeR1EhbpBMyxryBa9Sxo39/kjZPWN+5MOxVBM+L6ubc0 E0tcSww/tDdBb1wbQlP1veedKqYOcjOKltUthFBqplGf3AQo/BGzjdmtNTc3wAd4 lL+4lmddWQrgwnm/bzZBCxdf/Sl3+RQ1ou9HxJ6qVKxhp1F96ePZ4/buiHL7/0/g hnaFGXgu4HCtS7vLzsdqzgQ6ABB3RnJ0UuZcsW5ZCZk0HMHyI0pgORjp3+t1cxmM YhqQOyKFu0GBguuacnhmkiHEpNDbwT+R -----END CERTIFICATE-----Generated at Sun Jan 11 23:07:05 2026 by rpki-client