This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft File: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft (raw, json) Hash identifier: iIinIXhY1d/CExfQmtqG95EpNib/s/pL5jsDLAo1mBA= Subject key identifier: AD:66:FC:52:52:4C:1F:72:AC:A0:97:03:D5:1C:45:F5:5B:95:27:2C Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 Certificate issuer: /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Certificate serial: 0524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft Manifest number: 051F Signing time: Mon 12 Jan 2026 22:44:31 +0000 Manifest this update: Mon 12 Jan 2026 22:44:31 +0000 Manifest next update: Mon 19 Jan 2026 22:44:31 +0000 Files and hashes: 1: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl (hash: cv9J8s6E0fqctppcuBBzGtJ7mxOrSJZ+r8hdNTxqd3U=) 2: BA7E6B1A30B911EC974C3830C4F9AE02.roa (hash: DlfXyvIdL0s+0tBp2hXjHGEv5V90Epcx4LrbGdX7dDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 22:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8790, serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Validity Not Before: Jan 12 22:44:31 2026 GMT Not After : Jan 19 22:44:31 2026 GMT Subject: CN=6965794f-94f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e7:cf:76:5f:0a:d4:97:a2:08:52:ac:fe:95: 84:80:3e:69:c8:53:0e:d0:16:1a:c7:a3:2e:ca:7c: a1:53:af:db:69:89:d5:8c:b9:6a:1a:60:53:5f:0c: c0:ee:c2:fa:75:a7:ff:98:1e:f0:b6:03:ae:e7:ea: 95:7a:26:86:c9:d1:e3:d9:89:45:e7:84:e8:1a:2e: 2e:f9:30:d8:84:e4:7d:99:1a:53:2a:73:58:67:1f: c8:5f:a0:f7:33:19:c2:1e:e7:70:88:07:ee:e6:12: f0:46:9c:ce:a3:66:92:8c:b1:fb:f5:52:0e:29:7a: 10:47:a2:0e:aa:6d:0c:16:b5:f3:96:2e:06:22:ff: 9b:3e:25:3b:46:43:82:8b:28:31:a2:56:4c:f1:0f: 1c:bb:5f:ee:ac:9e:4f:aa:85:62:93:9d:83:5b:2d: 89:1f:48:bb:79:3e:92:e7:62:bf:2d:79:b0:48:ab: 77:c3:ce:1c:84:2b:cc:bb:b2:41:a0:83:d2:50:00: dd:83:0c:d3:26:02:89:10:f6:80:54:5b:cb:df:99: 70:53:6b:f2:9b:3d:43:58:cd:8e:37:ca:b7:73:d7: f7:32:f1:7c:ab:fa:13:61:04:8b:70:03:f0:a0:e1: ce:7f:50:a1:ca:cb:b3:0b:30:78:22:0d:25:89:8e: e6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:66:FC:52:52:4C:1F:72:AC:A0:97:03:D5:1C:45:F5:5B:95:27:2C X509v3 Authority Key Identifier: keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:dd:ce:93:72:12:66:9d:62:ae:df:c7:3d:c5:00:a6:18:84: 68:84:f4:38:4c:d4:91:c7:cc:6d:ad:76:fa:74:d7:7b:f3:10: 23:9b:82:70:f2:30:d7:75:49:e1:8c:74:e4:7a:70:87:8f:f6: 1d:18:82:56:47:96:56:16:40:28:54:6f:40:bc:ff:f9:57:e8: 5d:8e:b2:b3:94:77:a6:f2:25:c1:f3:d5:45:dd:9b:00:5d:3b: b5:bd:11:82:cc:ca:42:8e:4c:d4:41:27:0e:56:65:2c:ff:40: a9:d0:ce:a5:9f:d0:22:93:80:fe:f1:69:c7:f8:68:af:08:ce: f5:be:69:49:63:93:b0:bb:11:b6:dc:1c:52:69:1c:19:3c:44: 55:fc:4c:ea:6b:b5:18:35:f8:77:b0:35:23:cb:f7:4e:ca:ee: a1:e9:3f:26:dd:02:6c:87:21:7d:85:ab:94:57:cf:f5:f1:c6: 18:76:6e:17:5b:f6:ae:26:f7:f7:da:3f:6e:91:bc:7c:3d:27: f0:3e:e5:c6:05:e3:d9:78:f1:2b:a8:39:9d:24:a1:91:68:b3: d6:ed:b4:33:00:0f:08:f6:b9:22:33:c8:27:e0:45:68:19:64: 60:7a:c6:a5:a5:34:23:ad:d2:b4:48:84:54:f3:7a:48:4a:2e: 76:a0:1b:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg3OTAxMTAvBgNVBAUTKEU1QTRENEY5NTYwQjVCNUM1QzVGRTREMDYxQjRCODgx QzhEMjIzNTIwHhcNMjYwMTEyMjI0NDMxWhcNMjYwMTE5MjI0NDMxWjAYMRYwFAYD VQQDDA02OTY1Nzk0Zi05NGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwufPdl8K1JeiCFKs/pWEgD5pyFMO0BYax6MuynyhU6/baYnVjLlqGmBTXwzA 7sL6daf/mB7wtgOu5+qVeiaGydHj2YlF54ToGi4u+TDYhOR9mRpTKnNYZx/IX6D3 MxnCHudwiAfu5hLwRpzOo2aSjLH79VIOKXoQR6IOqm0MFrXzli4GIv+bPiU7RkOC iygxolZM8Q8cu1/urJ5PqoVik52DWy2JH0i7eT6S52K/LXmwSKt3w84chCvMu7JB oIPSUADdgwzTJgKJEPaAVFvL35lwU2vymz1DWM2ON8q3c9f3MvF8q/oTYQSLcAPw oOHOf1ChysuzCzB4Ig0liY7mTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1m/FJS TB9yrKCXA9UcRfVblScsMB8GA1UdIwQYMBaAFOWk1PlWC1tcXF/k0GG0uIHI0iNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODc5MC8zM0ZFMzYyNjMw QjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcxeGNYLVRRWWJTNGdjalNJ MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVhVFUtVllMVzF4Y1gtVFFZYlM0Z2NqU0kxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODc5MC8zM0ZFMzYyNjMwQjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcx eGNYLVRRWWJTNGdjalNJMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK3c6TchJmnWKu38c9xQCmGIRohPQ4TNSRx8xtrXb6dNd78xAjm4Jw 8jDXdUnhjHTkenCHj/YdGIJWR5ZWFkAoVG9AvP/5V+hdjrKzlHem8iXB89VF3ZsA XTu1vRGCzMpCjkzUQScOVmUs/0Cp0M6ln9Aik4D+8WnH+GivCM71vmlJY5OwuxG2 3BxSaRwZPERV/Ezqa7UYNfh3sDUjy/dOyu6h6T8m3QJshyF9hauUV8/18cYYdm4X W/auJvf32j9ukbx8PSfwPuXGBePZePErqDmdJKGRaLPW7bQzAA8I9rkiM8gn4EVo GWRgesalpTQjrdK0SIRU83pISi52oBvG -----END CERTIFICATE-----Generated at Tue Jan 13 07:03:33 2026 by rpki-client