This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft File: KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft (raw, json) Hash identifier: p1m1AfnpLDZAAGaoPwmAoa8lQ2hl5nsxO4HSrvP+DNw= Subject key identifier: EB:17:79:04:04:15:46:06:42:73:4B:5C:EA:00:79:C7:75:77:62:2E Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0F17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft Manifest number: 0EC7 Signing time: Mon 12 Jan 2026 17:23:24 +0000 Manifest this update: Mon 12 Jan 2026 17:23:24 +0000 Manifest next update: Mon 19 Jan 2026 17:23:24 +0000 Files and hashes: 1: KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl (hash: 7rqprIFue/4lNXzCL7SdNgXLRy/1k3/u70Lqfb4xOlU=) 2: DED77BB2FA2F11EF98728875C4F9AE02.roa (hash: uul2CdaEoquPtSKMLPmrjkbQbRp1WUkF6rtkLx9zg64=) 3: 5915642864AB11EEBFD54F2EC4F9AE02.roa (hash: wbUo+m2N2pVjNOlqoJ9Ve/RDUUkR0+GFezmtrgOfh+0=) 4: 433917A83D8211EEA0E4DD46C4F9AE02.roa (hash: h1piDIbFbu2D+AHr+FNeuVa8V0LAf8dUKVxZfkw96aI=) 5: 40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa (hash: DsQ8k2r18shy7gg+hUBL2SO8HUEFyNSKHtxB+WEbNG4=) 6: 41A09C683D8211EEA0E4DD46C4F9AE02.roa (hash: hPUFimj9BE3+BwwQ7RyTBe4Kb4UDlyO5v1n1M99BRDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3863 (0xf17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Jan 12 17:23:24 2026 GMT Not After : Jan 19 17:23:24 2026 GMT Subject: CN=69652e0c-6273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:89:0a:fe:11:cd:0a:68:a3:36:b4:a2:10: 68:43:1a:2f:c6:33:29:c9:3a:3a:a6:76:18:ae:1a: 7b:64:d8:2c:d4:ca:0d:10:06:95:61:ec:d3:85:5c: dd:68:12:80:ed:67:3a:a4:46:98:36:60:b7:22:08: 2d:7b:95:66:f6:5a:b4:26:8d:ed:cb:41:af:d0:6b: fe:e7:86:71:21:00:5c:b5:6b:7c:f1:04:2a:5f:2b: a8:67:bf:98:55:12:b5:56:58:f3:d9:1d:94:8a:44: 33:bf:e2:10:c6:bc:3f:99:f3:29:a7:e8:d8:1c:b5: 35:9b:d1:78:e7:ad:29:62:dd:49:93:b9:af:d7:1b: 98:5a:f1:18:c1:a1:47:4f:d1:b1:c7:f7:25:23:11: 9a:ac:1d:e0:56:2d:b7:3c:27:c5:f7:2a:2c:91:84: f7:62:6c:13:b3:dc:35:e9:39:3d:3f:fd:30:a8:bc: 9b:7a:d1:a3:72:17:f3:17:5c:fb:5a:ee:5c:fd:18: d0:c7:47:38:52:0c:1e:c5:05:e8:f7:9b:42:5c:e4: 18:8e:d9:67:59:36:e7:ca:53:ba:94:c7:92:87:19: 8d:5b:e3:e8:bd:86:b0:01:30:9a:34:0d:0f:4f:16: 1c:55:3d:0e:be:e1:0a:15:a0:6e:39:fb:da:9d:c8: 23:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:17:79:04:04:15:46:06:42:73:4B:5C:EA:00:79:C7:75:77:62:2E X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:7f:ea:07:54:f3:e8:ea:e9:f4:83:8d:f5:5d:b2:c2:40:99: c1:3c:48:38:01:1e:c8:a7:ba:7a:0c:7e:05:d6:c5:67:9c:8a: f4:0a:cb:2b:79:05:5d:3f:25:cc:8e:4c:b9:79:25:66:60:6f: ce:65:5e:23:ba:63:78:fe:9c:7f:39:c2:f3:40:2d:98:df:fc: 3d:4f:cb:5a:3c:a9:62:59:76:f0:b5:bc:93:3b:41:0e:a8:dc: cc:ae:ab:31:bb:7f:d5:0e:89:91:e5:3e:61:23:2f:4a:eb:e7: 6a:3c:9d:44:23:2b:24:e2:ba:38:ce:26:fa:93:f7:b4:88:7b: ad:cd:48:60:04:61:37:9b:5c:82:b6:97:9a:96:6d:5b:67:55: bb:f5:20:f3:ae:f7:7d:7c:25:22:7d:ac:52:d6:bd:ab:fb:a8: e0:4a:f4:d3:fe:93:4f:23:09:cc:f6:7b:20:e0:3e:f0:bd:24: 68:56:4a:21:b2:04:a7:5c:d2:1d:7d:cd:f1:d0:ca:90:5d:de: 1b:f9:db:1e:d2:66:4d:e9:75:58:5b:6e:f8:00:5d:45:c4:16: 24:98:44:3a:e8:9a:e4:8b:4b:20:75:85:aa:ab:ba:da:37:da: 3b:27:11:93:d0:9d:c5:0f:73:4d:e3:5b:8e:34:f9:55:48:14: 10:3b:d4:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjYwMTEyMTcyMzI0WhcNMjYwMTE5MTcyMzI0WjAYMRYwFAYD VQQDDA02OTY1MmUwYy02MjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqeJCv4RzQpooza0ohBoQxovxjMpyTo6pnYYrhp7ZNgs1MoNEAaVYezThVzd aBKA7Wc6pEaYNmC3Iggte5Vm9lq0Jo3ty0Gv0Gv+54ZxIQBctWt88QQqXyuoZ7+Y VRK1Vljz2R2UikQzv+IQxrw/mfMpp+jYHLU1m9F4560pYt1Jk7mv1xuYWvEYwaFH T9Gxx/clIxGarB3gVi23PCfF9yoskYT3YmwTs9w16Tk9P/0wqLybetGjchfzF1z7 Wu5c/RjQx0c4UgwexQXo95tCXOQYjtlnWTbnylO6lMeShxmNW+PovYawATCaNA0P TxYcVT0OvuEKFaBuOfvancgjhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsXeQQE FUYGQnNLXOoAecd1d2IuMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODY4Qy8zRkI5MzM2OEE5REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2 QmNZN3RXYmlBOFVkeEY0ckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9f+oHVPPo6un0g431XbLCQJnBPEg4AR7Ip7p6DH4F1sVnnIr0Cssr eQVdPyXMjky5eSVmYG/OZV4jumN4/px/OcLzQC2Y3/w9T8taPKliWXbwtbyTO0EO qNzMrqsxu3/VDomR5T5hIy9K6+dqPJ1EIysk4ro4zib6k/e0iHutzUhgBGE3m1yC tpealm1bZ1W79SDzrvd9fCUifaxS1r2r+6jgSvTT/pNPIwnM9nsg4D7wvSRoVkoh sgSnXNIdfc3x0MqQXd4b+dse0mZN6XVYW274AF1FxBYkmEQ66Jrki0sgdYWqq7ra N9o7JxGT0J3FD3NN41uONPlVSBQQO9Ra -----END CERTIFICATE-----Generated at Mon Jan 12 22:59:33 2026 by rpki-client