This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft File: 5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json) Hash identifier: dy/+vN52bM4hvPBqfTkW0/sS4lxhsXqsGbn/jf+d2EI= Subject key identifier: 06:FE:36:08:FA:76:33:98:D1:4B:E9:ED:B7:41:09:E5:99:D0:07:38 Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft Manifest number: 0155 Signing time: Sun 11 Jan 2026 03:47:50 +0000 Manifest this update: Sun 11 Jan 2026 03:47:50 +0000 Manifest next update: Sun 18 Jan 2026 03:47:50 +0000 Files and hashes: 1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: aiEt8ziYdPl29Fuem5l4DfJRTVJOezxvyQ9chomh3hc=) 2: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: PPgHi4xJDW0BKQRIHTMdssQv8Q8vcJnoqHRhx2Hamts=) 3: 359CBDB28D0D11EF90882959C4F9AE02.roa (hash: 73Ygy8fRe0dHQxkQy1hZlh4j1TI6ruDgIOxzmdlFu7c=) 4: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: 5h9rfOVaMmYvPj2z2Ai85lMHTizuoozbNVPH10IYIS0=) 5: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (hash: cnwfSeIwvwV6lWFdzwgrorO9+SXGNy195qZfyMAiJts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 03:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Validity Not Before: Jan 11 03:47:50 2026 GMT Not After : Jan 18 03:47:50 2026 GMT Subject: CN=69631d66-b3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:db:dc:9d:da:70:0d:19:1e:ea:90:6d:37:ed: 74:45:69:92:57:e6:72:86:9d:0c:b8:e1:c1:f7:9d: f9:c7:31:95:09:d3:11:0f:0e:68:08:2e:bb:c7:3f: f7:a8:02:fb:22:2b:59:b4:3f:d3:1f:fe:00:f7:5e: c1:17:f2:ba:74:39:d0:38:26:87:a4:ba:e0:62:79: b5:d6:ac:99:1d:12:e0:55:ab:40:41:90:12:fa:f4: a4:50:cc:67:ae:37:05:76:be:e8:f9:24:0b:47:b7: bc:12:c8:fd:1b:65:f9:b2:13:18:d3:59:cd:07:61: 5c:81:38:49:cc:17:01:6f:3f:b5:2b:01:dc:ab:b9: 76:8e:fd:b8:9d:46:ab:07:5d:0e:97:a6:22:fd:7b: 19:b1:30:65:3f:a6:ff:ba:20:49:83:6e:2b:18:fb: 89:70:b6:d5:e1:28:cd:ef:dc:ce:b6:5d:c1:4a:87: ac:6a:68:88:fa:83:e3:84:6c:f5:b2:f2:53:86:01: 00:8b:ed:26:0d:c7:a5:62:c5:c3:52:d5:b1:b4:4b: ca:a1:eb:c5:4f:2a:9f:9d:58:b4:a4:73:81:c4:f4: 58:80:bf:0e:1f:53:b2:44:9f:fc:21:f0:f2:19:88: 0e:48:fd:d8:df:65:8e:0f:c2:16:c3:13:fa:fd:ee: f0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FE:36:08:FA:76:33:98:D1:4B:E9:ED:B7:41:09:E5:99:D0:07:38 X509v3 Authority Key Identifier: keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:bd:89:3f:43:75:ac:50:e9:d5:34:fe:46:61:c8:3d:f5:8a: 92:74:30:8f:e0:2f:b5:5d:a3:7e:fb:c4:b9:16:5b:26:f8:e3: 65:af:de:73:c8:6d:44:cb:e4:c4:19:27:e5:86:b9:e9:23:b7: 18:b7:1c:ea:c6:5f:f0:8a:3a:87:2c:31:7e:c4:58:61:04:c6: c6:f7:6f:4e:f2:03:c8:03:83:80:0e:fb:61:9d:64:b3:02:d0: 95:6c:d6:ef:db:a4:43:7e:e9:97:7f:27:1b:b1:3f:69:75:79: a7:2f:27:81:36:ea:5b:68:3f:fa:1c:08:6e:00:ec:30:8d:d2: 91:17:22:5a:55:b6:2b:e1:49:4e:ad:64:b3:36:29:cb:57:ce: fa:8a:b0:25:7a:7b:12:58:57:4c:8f:3c:3a:83:a4:fa:a5:19: 24:e2:0d:ba:25:c4:7d:6f:71:76:dd:e0:bf:df:8c:4d:22:35: fa:99:48:1c:7b:2e:ca:08:d7:7e:b3:fc:d9:90:da:24:ff:78: 55:8f:f9:e7:44:1f:23:a6:1b:8c:d7:54:d4:10:14:07:fe:a6: 3e:7f:92:89:2e:3c:5e:93:ca:3a:cf:4f:a5:1d:78:db:52:b9: 7f:26:b2:11:7e:ed:6b:89:85:21:36:ea:80:af:56:72:bc:fe: 7e:32:53:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M3MTExMTAvBgNVBAUTKEU0MjlENDI5RTY2Qjc5N0IzRDhBMUNCRTI0OTE1NzdB REMzOEE0OEUwHhcNMjYwMTExMDM0NzUwWhcNMjYwMTE4MDM0NzUwWjAYMRYwFAYD VQQDDA02OTYzMWQ2Ni1iM2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodvcndpwDRke6pBtN+10RWmSV+Zyhp0MuOHB9535xzGVCdMRDw5oCC67xz/3 qAL7IitZtD/TH/4A917BF/K6dDnQOCaHpLrgYnm11qyZHRLgVatAQZAS+vSkUMxn rjcFdr7o+SQLR7e8Esj9G2X5shMY01nNB2FcgThJzBcBbz+1KwHcq7l2jv24nUar B10Ol6Yi/XsZsTBlP6b/uiBJg24rGPuJcLbV4SjN79zOtl3BSoesamiI+oPjhGz1 svJThgEAi+0mDcelYsXDUtWxtEvKoevFTyqfnVi0pHOBxPRYgL8OH1OyRJ/8IfDy GYgOSP3Y32WOD8IWwxP6/e7wqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAb+Ngj6 djOY0Uvp7bdBCeWZ0Ac4MB8GA1UdIwQYMBaAFOQp1Cnma3l7PYocviSRV3rcOKSO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzcxMS9DN0QxQjA1NDFF RTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVYczlpaHktSkpGWGV0dzRw STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDblVLZVpyZVhzOWloeS1KSkZYZXR3NHBJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzcxMS9DN0QxQjA1NDFFRTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVY czlpaHktSkpGWGV0dzRwSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKvYk/Q3WsUOnVNP5GYcg99YqSdDCP4C+1XaN++8S5Flsm+ONlr95z yG1Ey+TEGSflhrnpI7cYtxzqxl/wijqHLDF+xFhhBMbG929O8gPIA4OADvthnWSz AtCVbNbv26RDfumXfycbsT9pdXmnLyeBNupbaD/6HAhuAOwwjdKRFyJaVbYr4UlO rWSzNinLV876irAlensSWFdMjzw6g6T6pRkk4g26JcR9b3F23eC/34xNIjX6mUgc ey7KCNd+s/zZkNok/3hVj/nnRB8jphuM11TUEBQH/qY+f5KJLjxek8o6z0+lHXjb Url/JrIRfu1riYUhNuqAr1ZyvP5+MlNh -----END CERTIFICATE-----Generated at Mon Jan 12 05:59:55 2026 by rpki-client