This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json) Hash identifier: 8woOdjyAyc+gsI2SJKYHc4Y8igtkKnl2KPtNzFnwsso= Subject key identifier: AA:6B:FD:8F:14:11:DD:65:3A:6D:9D:4A:1C:1F:73:B0:56:C8:7A:4A Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Certificate serial: 0A0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft Manifest number: 09FD Signing time: Thu 08 Jan 2026 19:22:12 +0000 Manifest this update: Thu 08 Jan 2026 19:22:12 +0000 Manifest next update: Thu 15 Jan 2026 19:22:12 +0000 Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: 8pI0p7lvxDHstigmk7vn0EEzKsmbExGla/QloWfBKMY=) 2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: dpLf2qBFe220x5GKZk4KYPgV5wQJtggmyE0D/YCjeAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Jan 2026 19:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2571 (0xa0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Validity Not Before: Jan 8 19:22:12 2026 GMT Not After : Jan 15 19:22:12 2026 GMT Subject: CN=696003e4-608e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:f5:28:6a:c4:35:41:7f:fe:70:1c:22:3c: 01:4a:22:ae:9f:83:a8:04:4a:68:94:d3:f0:78:7d: 46:5c:93:b3:bd:9b:98:2d:ea:09:58:30:87:6b:d0: 96:9e:d4:28:a3:ea:da:ec:65:4e:5d:5e:ed:c0:0c: cc:67:de:f8:9b:c0:72:57:63:dc:d4:f0:a8:ca:20: b5:81:08:c9:08:f8:95:6f:0d:81:f3:02:24:64:26: 17:68:70:fe:46:89:3a:ac:05:15:07:82:5c:34:02: 8f:29:70:2c:d3:d7:8f:c1:20:c6:d0:c7:26:75:db: 8c:90:87:5d:57:b6:fc:74:89:54:55:fb:d6:c8:9e: 53:07:42:77:60:53:a1:8d:ee:e4:a0:93:e9:f0:2b: 5c:e9:e1:4f:b6:fb:d4:0f:f8:6a:e1:08:11:42:dc: 67:1e:77:b4:9f:de:06:78:9a:cd:08:63:00:be:98: 85:7f:69:d7:ea:59:6a:fe:c7:cc:8c:e1:1a:93:69: 88:0f:e7:a4:06:1e:9c:29:e5:5b:92:d5:2d:21:78: 20:5f:ed:10:e4:b2:5b:f9:50:83:e0:9a:0b:7e:bc: d7:6a:bf:9e:c1:55:04:99:91:7f:ce:79:06:ce:88: 13:43:46:33:ae:b0:56:ca:56:a3:6e:19:d4:5c:40: 24:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6B:FD:8F:14:11:DD:65:3A:6D:9D:4A:1C:1F:73:B0:56:C8:7A:4A X509v3 Authority Key Identifier: keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:26:2b:b9:19:14:1e:dd:ca:de:77:3a:64:d3:63:65:a0:bc: 15:d5:36:0c:eb:e3:6a:b1:e4:4a:82:f7:5f:fc:83:c2:5d:3f: 71:65:6b:9f:da:fa:2d:21:56:c6:2c:39:32:f4:2a:82:f1:3c: 46:06:ab:4c:cd:2b:5c:47:e7:7e:f0:79:86:e0:c8:a0:6d:1d: d1:4c:05:c7:36:30:f3:60:66:49:fc:2b:77:2f:79:57:bc:22: fd:ec:fb:3d:7e:07:3b:e8:ea:2f:d8:68:5b:33:68:7e:4a:24: 88:4d:f3:9d:45:5e:8b:6f:ca:2d:8e:db:0d:20:ae:df:24:9d: 33:cd:e2:d7:68:c3:19:a8:9b:2f:23:78:5f:47:98:e8:97:ea: 3c:c7:97:6e:5d:f6:ad:32:77:be:7f:5b:d6:cc:94:14:f6:d4: 6e:10:a2:57:7c:6a:09:65:ec:93:84:b0:eb:15:d7:30:c5:63: 37:f8:ee:84:23:0c:f4:4d:37:7c:3a:e4:5f:63:f3:a7:1a:ea: e0:28:e6:a3:65:f6:ef:28:ec:91:45:63:aa:d3:0f:22:31:86: e8:7a:d7:d5:26:b4:54:4e:3d:82:55:7d:df:bd:f3:6d:6f:a1: 8e:f6:ae:78:c6:1d:4c:b2:e5:79:b4:78:e1:e5:f0:63:13:b0: fe:a7:8b:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyNEYxMTAvBgNVBAUTKDZEQzUyNDgxNjRCQjk1MkU4QjlFRDkyMzlCRTcxMDZB NjNDRUYwNkMwHhcNMjYwMTA4MTkyMjEyWhcNMjYwMTE1MTkyMjEyWjAYMRYwFAYD VQQDDA02OTYwMDNlNC02MDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Yb1KGrENUF//nAcIjwBSiKun4OoBEpolNPweH1GXJOzvZuYLeoJWDCHa9CW ntQoo+ra7GVOXV7twAzMZ974m8ByV2Pc1PCoyiC1gQjJCPiVbw2B8wIkZCYXaHD+ Rok6rAUVB4JcNAKPKXAs09ePwSDG0McmdduMkIddV7b8dIlUVfvWyJ5TB0J3YFOh je7koJPp8Ctc6eFPtvvUD/hq4QgRQtxnHne0n94GeJrNCGMAvpiFf2nX6llq/sfM jOEak2mID+ekBh6cKeVbktUtIXggX+0Q5LJb+VCD4JoLfrzXar+ewVUEmZF/znkG zogTQ0YzrrBWylajbhnUXEAk8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpr/Y8U Ed1lOm2dShwfc7BWyHpKMB8GA1UdIwQYMBaAFG3FJIFku5Uui57ZI5vnEGpjzvBs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI0Ri8zN0MxMTBCODhG NTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xTNkxudGtqbS1jUWFtUE84 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjVWtnV1M3bFM2TG50a2ptLWNRYW1QTzhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI0Ri8zN0MxMTBCODhGNTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xT NkxudGtqbS1jUWFtUE84R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrJiu5GRQe3credzpk02NloLwV1TYM6+NqseRKgvdf/IPCXT9xZWuf 2votIVbGLDky9CqC8TxGBqtMzStcR+d+8HmG4MigbR3RTAXHNjDzYGZJ/Ct3L3lX vCL97Ps9fgc76Oov2GhbM2h+SiSITfOdRV6Lb8otjtsNIK7fJJ0zzeLXaMMZqJsv I3hfR5jol+o8x5duXfatMne+f1vWzJQU9tRuEKJXfGoJZeyThLDrFdcwxWM3+O6E Iwz0TTd8OuRfY/OnGurgKOajZfbvKOyRRWOq0w8iMYboetfVJrRUTj2CVX3fvfNt b6GO9q54xh1MsuV5tHjh5fBjE7D+p4sS -----END CERTIFICATE-----Generated at Fri Jan 9 08:24:30 2026 by rpki-client