This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft File: dmH1l-po7_TJKXNjm7Z11_A5CXE.mft (raw, json) Hash identifier: loRc4s48SIaFBOBWPaNtpDnlNgnLiNiMP1o8jOZV/yQ= Subject key identifier: 55:52:BD:4E:FC:C8:E8:7F:B9:FA:74:50:B2:63:02:26:40:A3:CD:0D Authority key identifier: 76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71 Certificate issuer: /CN=A91EA176/serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971 Certificate serial: 067D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft Manifest number: 066B Signing time: Sat 10 Jan 2026 21:53:49 +0000 Manifest this update: Sat 10 Jan 2026 21:53:48 +0000 Manifest next update: Sat 17 Jan 2026 21:53:48 +0000 Files and hashes: 1: dmH1l-po7_TJKXNjm7Z11_A5CXE.crl (hash: Ao3dXneAA4qOxVZeb5JUpjH1/gQDG4LqAp02dexP4lM=) 2: 6595CE9CB29011EBBBF4F548C4F9AE02.roa (hash: 6WTlAebSNT3dRwlxKbzoaSgBI3lIZqiUGPWCDMJw06Q=) 3: 10123D12E34E11ECB9CB283EC4F9AE02.roa (hash: 79HGgLT4UvpWXoWIU4dQI1xmx9s6FLe8XfJ4mBLvcew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 21:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA176, serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971 Validity Not Before: Jan 10 21:53:48 2026 GMT Not After : Jan 17 21:53:48 2026 GMT Subject: CN=6962ca6d-0c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:8a:a3:0b:8a:0b:18:2b:39:36:9d:a8:48: c5:a5:9a:ce:ef:41:21:ec:8d:da:c9:ec:b2:92:73: b8:98:5c:ec:f7:9a:d2:f8:9a:1d:a4:6f:62:89:3e: 77:ef:a8:76:26:bd:47:db:00:df:ec:9a:24:51:fd: 59:6f:87:1e:18:2d:51:8f:50:01:8b:fd:97:fb:a9: 97:85:13:4c:64:ea:f7:65:84:9d:36:18:9b:6c:ea: f9:27:d3:17:d2:1f:c2:57:6f:71:dd:9f:4b:ec:7c: 05:d2:a4:32:f2:39:a7:ad:91:98:55:82:58:e7:7f: 5f:07:c0:99:f5:2b:a3:3b:78:60:ca:01:5b:1c:62: 36:4e:84:8e:27:e4:4e:fb:f1:33:24:08:e9:dd:3d: 9c:f8:51:a1:82:ab:9a:c3:60:e1:ae:92:f3:bc:47: b2:75:82:42:a9:3f:05:c7:6f:1e:29:90:dc:dd:b1: 3f:27:5c:a4:9f:c8:da:bb:6f:b9:b7:c5:af:9e:9a: b2:70:d5:ea:63:ca:56:65:22:ce:3c:5e:7d:21:c3: 41:64:18:a8:b5:46:c3:c1:56:76:d9:6f:87:cd:79: bd:07:64:a3:70:c6:bd:95:d0:b9:c0:ba:5b:66:60: da:77:78:b9:f5:b1:ab:8e:fe:1f:57:53:10:c7:81: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:52:BD:4E:FC:C8:E8:7F:B9:FA:74:50:B2:63:02:26:40:A3:CD:0D X509v3 Authority Key Identifier: keyid:76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:db:8f:4b:4f:ab:0a:57:81:11:61:1f:ef:a4:a0:be:29:a8: 76:55:77:1e:7c:13:b7:8f:4b:b3:9f:27:19:68:59:0f:97:53: 76:d5:2c:28:59:67:a4:6a:aa:c4:07:e5:b3:7e:a5:1e:c9:52: 73:5f:3c:31:66:14:e9:c5:57:6c:43:60:0f:0d:e8:11:53:81: 89:a4:af:32:bf:e0:dc:bc:cd:e0:5d:8a:8e:1f:47:eb:1c:16: e4:b8:5e:4b:f6:64:fa:68:84:e2:b0:c9:6f:bf:92:4f:88:b1: 16:0c:a7:8b:53:99:61:4c:2c:61:b9:79:09:35:21:65:d1:d9: 78:fd:a2:de:29:b2:cb:92:0a:e7:c6:01:8b:2b:eb:57:55:8f: 44:83:3e:15:7a:6f:d7:ba:b3:5b:80:e4:5d:fa:8b:82:00:f0: e0:71:87:ca:61:9c:de:d8:5f:d2:ea:62:ca:3b:bd:7b:02:2b: 3a:3e:55:0d:62:5f:39:17:db:e2:6d:94:b6:3e:4b:a2:bf:ee: 4a:04:57:89:c5:de:ba:eb:e5:29:6f:af:87:68:c5:23:82:6b: 3d:e7:11:f9:ab:ce:c0:e4:d2:d7:ec:cb:37:8a:94:87:73:38: ae:54:32:64:14:c5:d4:03:8d:78:c0:5b:b1:14:44:9f:88:fc: 81:e9:7f:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExNzYxMTAvBgNVBAUTKDc2NjFGNTk3RUE2OEVGRjRDOTI5NzM2MzlCQjY3NUQ3 RjAzOTA5NzEwHhcNMjYwMTEwMjE1MzQ4WhcNMjYwMTE3MjE1MzQ4WjAYMRYwFAYD VQQDDA02OTYyY2E2ZC0wYzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlWKowuKCxgrOTadqEjFpZrO70Eh7I3ayeyyknO4mFzs95rS+JodpG9iiT53 76h2Jr1H2wDf7JokUf1Zb4ceGC1Rj1ABi/2X+6mXhRNMZOr3ZYSdNhibbOr5J9MX 0h/CV29x3Z9L7HwF0qQy8jmnrZGYVYJY539fB8CZ9SujO3hgygFbHGI2ToSOJ+RO +/EzJAjp3T2c+FGhgquaw2DhrpLzvEeydYJCqT8Fx28eKZDc3bE/J1ykn8jau2+5 t8WvnpqycNXqY8pWZSLOPF59IcNBZBiotUbDwVZ22W+HzXm9B2SjcMa9ldC5wLpb ZmDad3i59bGrjv4fV1MQx4GGBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVSvU78 yOh/ufp0ULJjAiZAo80NMB8GA1UdIwQYMBaAFHZh9ZfqaO/0ySlzY5u2ddfwOQlx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE3Ni9BREQzQUVDRUIy OEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdfVEpLWE5qbTdaMTFfQTVD WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RtSDFsLXBvN19USktYTmptN1oxMV9BNUNYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE3Ni9BREQzQUVDRUIyOEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdf VEpLWE5qbTdaMTFfQTVDWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb249LT6sKV4ERYR/vpKC+Kah2VXcefBO3j0uznycZaFkPl1N21Swo WWekaqrEB+WzfqUeyVJzXzwxZhTpxVdsQ2APDegRU4GJpK8yv+DcvM3gXYqOH0fr HBbkuF5L9mT6aITisMlvv5JPiLEWDKeLU5lhTCxhuXkJNSFl0dl4/aLeKbLLkgrn xgGLK+tXVY9Egz4Vem/XurNbgORd+ouCAPDgcYfKYZze2F/S6mLKO717Ais6PlUN Yl85F9vibZS2Pkuiv+5KBFeJxd666+Upb6+HaMUjgms95xH5q87A5NLX7Ms3ipSH cziuVDJkFMXUA414wFuxFESfiPyB6X+W -----END CERTIFICATE-----Generated at Mon Jan 12 10:59:09 2026 by rpki-client