This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft File: 9Jo51DCJcORwLfKfHU3PUh8KUTU.mft (raw, json) Hash identifier: n6zbJiqJ5pjBOxvHvAEG/ArHsbvvf1oDq4aErtYfpVg= Subject key identifier: E3:A1:C4:AE:D7:21:50:62:0B:6A:24:43:D3:14:6B:4F:A6:F7:95:E1 Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 Certificate issuer: /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Certificate serial: 0398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft Manifest number: 0392 Signing time: Thu 01 Jan 2026 00:15:24 +0000 Manifest this update: Thu 01 Jan 2026 00:15:23 +0000 Manifest next update: Thu 08 Jan 2026 00:15:23 +0000 Files and hashes: 1: 9Jo51DCJcORwLfKfHU3PUh8KUTU.crl (hash: mj4tXqKV7X4cTjW4ZeezwfVn5vED5orF9ahkLAFnqD8=) 2: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (hash: NOcFLuFaIVJHWaiJ8tb4VlHDCVMgWLAInSiLZFt0/do=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 00:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2258, serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Validity Not Before: Jan 1 00:15:23 2026 GMT Not After : Jan 8 00:15:23 2026 GMT Subject: CN=6955bc9b-6080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:6b:8d:8d:84:41:12:a5:07:da:59:56:7d: 55:2f:eb:0d:f0:a5:19:31:02:d2:37:81:6f:e2:de: 58:b7:3e:79:93:35:6b:16:8f:8c:a6:bf:b7:75:de: 60:c3:ed:34:71:0c:f0:ce:85:89:26:7f:d5:92:09: ea:80:ff:5a:0a:05:ba:ae:5d:eb:3d:f0:c8:f0:6c: e6:c3:18:00:34:f8:ad:92:97:72:ab:98:28:b5:65: 6a:e9:1b:2a:c6:e6:ff:29:70:f6:44:65:7c:bf:8c: db:d0:ae:71:4d:d5:82:dc:06:ee:c9:64:e3:10:1f: 14:e3:3b:1f:ab:5b:ad:7b:5f:1e:7f:5d:0b:ec:6e: fb:56:18:93:44:44:5d:17:5a:fd:72:e4:84:af:08: e2:5f:99:2e:65:be:2c:db:11:74:89:2b:6d:67:c7: a7:09:7e:b2:c2:71:75:07:3b:8a:9d:da:e1:2e:2c: 6b:cf:47:81:a5:a6:42:ce:f7:62:c7:55:33:b3:0a: cb:7c:0e:97:ca:24:48:f3:9c:8d:73:a2:1d:ba:19: ce:46:dc:ba:20:06:8f:ee:40:3c:9c:0e:ad:7e:51: f7:69:93:4e:d5:81:34:0c:d3:3a:76:7d:24:2f:18: f9:3b:9b:bd:c2:42:82:6b:02:c8:ec:59:0f:45:b0: f2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A1:C4:AE:D7:21:50:62:0B:6A:24:43:D3:14:6B:4F:A6:F7:95:E1 X509v3 Authority Key Identifier: keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:b8:fe:fa:e5:54:07:f5:41:fe:6d:cf:0b:24:17:75:4a:fb: d7:30:23:47:6e:ff:4e:dd:88:85:cb:23:68:47:8b:d5:96:95: da:1b:22:45:4a:54:97:37:09:8e:54:2e:9a:41:0e:22:9f:76: 1c:f1:d8:90:de:a2:c0:19:2d:79:f7:bb:f7:d1:dc:7e:42:58: 85:82:1a:2f:a7:19:cc:0a:7e:b9:51:c5:d2:74:bf:9f:b7:e2: 79:16:a0:27:7f:2a:19:d0:12:67:82:09:37:c4:63:7a:42:4d: 3d:dd:7b:dc:42:4b:8e:c1:08:5a:f0:01:1a:69:9a:92:22:e1: 56:95:39:da:59:16:b5:f1:57:ab:de:26:0b:02:10:f5:d3:38: c0:76:68:44:ba:86:ab:3c:b1:08:7c:8c:54:89:9e:66:02:e7: 15:83:a4:41:3c:9f:bc:5a:29:87:3d:bd:e7:02:88:1e:9b:50: ad:50:4a:76:9e:1c:a8:af:cf:6d:50:7c:5a:3a:25:1f:59:95: c9:45:c4:d4:e4:58:d4:c5:2c:5b:9f:84:90:70:f9:42:d7:8b: 79:c1:a1:13:6e:11:12:5f:52:81:c4:4e:49:24:e0:e8:e0:94: 38:e2:23:e6:14:0a:c8:36:62:f5:53:20:7f:cd:73:e2:5e:ff: 1a:8c:d1:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNTgxMTAvBgNVBAUTKEY0OUEzOUQ0MzA4OTcwRTQ3MDJERjI5RjFENERDRjUy MUYwQTUxMzUwHhcNMjYwMTAxMDAxNTIzWhcNMjYwMTA4MDAxNTIzWjAYMRYwFAYD VQQDDA02OTU1YmM5Yi02MDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyO5rjY2EQRKlB9pZVn1VL+sN8KUZMQLSN4Fv4t5Ytz55kzVrFo+Mpr+3dd5g w+00cQzwzoWJJn/VkgnqgP9aCgW6rl3rPfDI8GzmwxgANPitkpdyq5gotWVq6Rsq xub/KXD2RGV8v4zb0K5xTdWC3AbuyWTjEB8U4zsfq1ute18ef10L7G77VhiTRERd F1r9cuSErwjiX5kuZb4s2xF0iSttZ8enCX6ywnF1BzuKndrhLixrz0eBpaZCzvdi x1UzswrLfA6XyiRI85yNc6IduhnORty6IAaP7kA8nA6tflH3aZNO1YE0DNM6dn0k Lxj5O5u9wkKCawLI7FkPRbDybQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOhxK7X IVBiC2okQ9MUa0+m95XhMB8GA1UdIwQYMBaAFPSaOdQwiXDkcC3ynx1Nz1IfClE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI1OC82MzhDMzg0NENB OEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNPUndMZktmSFUzUFVoOEtV VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKbzUxRENKY09Sd0xmS2ZIVTNQVWg4S1VUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI1OC82MzhDMzg0NENBOEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNP UndMZktmSFUzUFVoOEtVVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3uP765VQH9UH+bc8LJBd1SvvXMCNHbv9O3YiFyyNoR4vVlpXaGyJF SlSXNwmOVC6aQQ4in3Yc8diQ3qLAGS1597v30dx+QliFghovpxnMCn65UcXSdL+f t+J5FqAnfyoZ0BJnggk3xGN6Qk093XvcQkuOwQha8AEaaZqSIuFWlTnaWRa18Ver 3iYLAhD10zjAdmhEuoarPLEIfIxUiZ5mAucVg6RBPJ+8WimHPb3nAogem1CtUEp2 nhyor89tUHxaOiUfWZXJRcTU5FjUxSxbn4SQcPlC14t5waETbhESX1KBxE5JJODo 4JQ44iPmFArINmL1UyB/zXPiXv8ajNET -----END CERTIFICATE-----Generated at Thu Jan 1 11:05:02 2026 by rpki-client