This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: YJmZtoExC9I+h9t02COpyWbQSqEt6l85uiUNw5zTz+0= Subject key identifier: E9:7A:02:CE:32:70:E3:F1:43:5E:8F:44:A6:9F:54:56:F5:DC:3A:14 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 01C5 Signing time: Thu 01 Jan 2026 02:34:13 +0000 Manifest this update: Thu 01 Jan 2026 02:34:12 +0000 Manifest next update: Thu 08 Jan 2026 02:34:12 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: 1PbIEGM91mws7nUQmVD6UPW8rtbdTG8ROSGJu4tpRyQ=) 2: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: qRwojUTlxnLhuw/Mk800h2tw73R4wHeoNMLoVaIWLSQ=) 3: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: FSryM40tOFsx9/9SakfMh/QfDHk+qmxC9WGqNR/nxQA=) 4: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: n7d+wfVovpgFh/VPuHK0Be+tZJiAokXkxVBH6z58Cdo=) 5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: O7wU5uPOsDFh8TlK1r/cSTqhuO+kftwlxz4zNibCfJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 02:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Jan 1 02:34:12 2026 GMT Not After : Jan 8 02:34:12 2026 GMT Subject: CN=6955dd25-39d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:35:db:7d:d9:8b:00:ba:65:5a:41:7e:d9: 21:69:25:82:57:13:b4:ef:3b:51:5d:17:4d:19:55: cb:28:e5:ed:98:c2:13:64:99:bd:ad:33:a4:8f:bb: c3:9d:77:c4:a6:97:7a:4f:c5:11:88:3f:6f:eb:4b: 25:36:89:2c:73:f6:44:8a:b0:2a:bf:03:83:d1:bd: cd:1a:a6:ab:ee:56:90:cc:9f:7b:86:f5:27:b1:3d: 24:42:ad:f1:ca:b3:b5:4d:55:cc:7b:c2:37:0d:f3: 44:70:ce:6e:67:57:e2:a8:ba:8a:2d:27:f7:fa:87: 50:88:35:11:f7:e9:43:f5:26:94:fb:89:63:4f:ed: fb:8c:a4:fa:8a:a6:4c:0a:ed:d8:b9:db:f4:a5:1e: 64:fc:52:f5:7a:86:b2:85:14:d6:42:96:20:22:7d: 7a:89:02:6d:a3:87:91:b8:3c:6c:51:2a:97:06:14: 3d:71:d6:f6:b1:01:1d:50:96:2a:62:30:4b:ba:aa: c8:2e:ac:5b:e5:01:47:66:4d:ba:40:af:0c:27:77: e2:3d:e6:a8:b7:14:0b:9b:bb:b5:19:47:09:39:f0: d8:ad:ed:0c:d2:aa:f2:0e:a5:14:a3:13:eb:54:20: 86:df:eb:a9:b9:e8:59:ae:9c:f6:e4:b5:7d:e8:99: 6f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7A:02:CE:32:70:E3:F1:43:5E:8F:44:A6:9F:54:56:F5:DC:3A:14 X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:ad:d0:bb:8d:23:43:53:28:65:9a:50:e8:0e:69:57:a2:33: 74:2b:9e:b4:2f:c4:f3:9d:26:6e:ae:28:a0:ab:fd:75:55:ae: 1d:c5:00:a1:44:bd:80:44:9d:70:08:50:be:f8:9d:c4:33:8f: 22:c4:26:15:c1:d7:c6:39:98:30:a6:2d:80:85:7f:ab:0f:b5: 3b:73:04:e2:2c:73:63:42:f2:b0:46:ec:67:2b:46:58:87:be: 45:f2:c2:c2:80:5a:08:de:66:c8:f6:e5:2f:ce:51:18:81:7a: cb:32:df:18:5d:a6:ea:f8:bc:d1:8f:3c:99:ee:65:64:4b:ba: a2:b4:3d:1d:b3:5e:47:f6:81:76:7a:5b:cd:b3:2f:19:a5:23: 11:74:37:7a:46:18:cb:a7:ea:8a:3a:6d:89:1f:73:da:20:07: f8:49:c2:5e:69:bb:47:6b:9a:3f:53:e4:05:b0:64:6b:f8:02: 07:03:fc:73:ac:fc:1c:00:6b:5f:06:c3:17:d8:1f:a8:33:4f: 9b:2f:ad:a3:a6:d7:47:e4:f9:d7:71:8e:2b:4b:18:fd:f0:54: 21:ad:91:8f:b1:a8:9e:a7:29:f6:41:0d:6b:09:23:3e:b0:92: 23:b6:30:84:6d:d3:43:d8:f4:dd:74:ac:9d:c7:14:46:27:64: 09:04:46:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjYwMTAxMDIzNDEyWhcNMjYwMTA4MDIzNDEyWjAYMRYwFAYD VQQDDA02OTU1ZGQyNS0zOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszU1233ZiwC6ZVpBftkhaSWCVxO07ztRXRdNGVXLKOXtmMITZJm9rTOkj7vD nXfEppd6T8URiD9v60slNoksc/ZEirAqvwOD0b3NGqar7laQzJ97hvUnsT0kQq3x yrO1TVXMe8I3DfNEcM5uZ1fiqLqKLSf3+odQiDUR9+lD9SaU+4ljT+37jKT6iqZM Cu3Yudv0pR5k/FL1eoayhRTWQpYgIn16iQJto4eRuDxsUSqXBhQ9cdb2sQEdUJYq YjBLuqrILqxb5QFHZk26QK8MJ3fiPeaotxQLm7u1GUcJOfDYre0M0qryDqUUoxPr VCCG3+upuehZrpz25LV96JlvKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOl6As4y cOPxQ16PRKafVFb13DoUMB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCErdC7jSNDUyhlmlDoDmlXojN0K560L8TznSZuriigq/11Va4dxQCh RL2ARJ1wCFC++J3EM48ixCYVwdfGOZgwpi2AhX+rD7U7cwTiLHNjQvKwRuxnK0ZY h75F8sLCgFoI3mbI9uUvzlEYgXrLMt8YXabq+LzRjzyZ7mVkS7qitD0ds15H9oF2 elvNsy8ZpSMRdDd6RhjLp+qKOm2JH3PaIAf4ScJeabtHa5o/U+QFsGRr+AIHA/xz rPwcAGtfBsMX2B+oM0+bL62jptdH5PnXcY4rSxj98FQhrZGPsaiepyn2QQ1rCSM+ sJIjtjCEbdND2PTddKydxxRGJ2QJBEZF -----END CERTIFICATE-----Generated at Thu Jan 1 05:44:59 2026 by rpki-client