This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft File: 24aQ9k5_gyrPw6am6EIdQXfIlPY.mft (raw, json) Hash identifier: H/sO6uq825f25h4IUZxuWOwjXH1ZSrYCajwXZhj/5uw= Subject key identifier: 6C:B2:73:8A:C5:C6:DB:7A:08:A8:24:AF:7C:ED:97:0E:D2:B0:DF:A9 Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 Certificate issuer: /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft Manifest number: 01EA Signing time: Thu 01 Jan 2026 02:12:40 +0000 Manifest this update: Thu 01 Jan 2026 02:12:39 +0000 Manifest next update: Thu 08 Jan 2026 02:12:39 +0000 Files and hashes: 1: 24aQ9k5_gyrPw6am6EIdQXfIlPY.crl (hash: 0TrOcFzU7HtKij8R9JLe/c8HKXN8VSeFdLXdqLxp2i8=) 2: 6B5723D8F89F11ED8F29921CC4F9AE02.roa (hash: SdXEUbD7bDMQhTYpbl9h+rsPxGL65X2f3Ma+s3etM2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 02:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FAA, serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Validity Not Before: Jan 1 02:12:39 2026 GMT Not After : Jan 8 02:12:39 2026 GMT Subject: CN=6955d818-a906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:b6:23:ae:66:34:02:9b:dc:31:25:fe:b6: c9:f3:ca:58:ba:31:9a:16:b2:35:5c:78:3f:de:bf: e2:ec:de:6b:ec:d5:fe:d2:67:30:d9:89:3f:87:c2: b3:de:10:4b:dc:b0:f1:a9:69:65:8b:00:be:c6:82: 1d:06:02:9d:c0:e2:6e:b1:ab:bc:27:a6:ac:53:64: f7:d4:35:e5:e5:d0:d2:9d:b3:db:2f:6d:04:4e:d7: ae:43:a8:22:28:93:28:27:9d:69:1b:e8:e5:d1:03: 32:ca:8b:0e:aa:38:1d:c4:34:52:ae:1e:73:14:39: 03:8d:3f:72:87:f5:9a:42:a2:5b:40:b7:68:c5:55: a3:ca:ce:ac:2a:12:59:10:c4:a4:1a:ad:4f:e7:85: 78:6d:d9:6f:b4:d1:e2:1e:27:eb:1f:c1:54:64:c0: 05:95:1d:7f:4e:4f:b6:85:6a:53:b7:4a:de:b3:ce: b9:19:df:a7:83:f9:d4:87:28:70:f7:c4:02:b7:e8: 08:76:2f:36:bd:25:3a:ae:dc:13:d1:ca:0d:4f:36: e3:25:ef:90:78:0c:e1:b8:2b:09:94:d9:89:80:80: 2b:b1:9a:af:fb:d7:43:26:6d:e9:db:a6:91:d8:5e: 71:8c:3c:f8:27:19:2d:7c:59:6e:3c:c9:06:80:e4: a1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B2:73:8A:C5:C6:DB:7A:08:A8:24:AF:7C:ED:97:0E:D2:B0:DF:A9 X509v3 Authority Key Identifier: keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:26:15:2b:5f:eb:0b:46:d4:8d:73:ec:22:5d:e4:e3:2b:34: 21:b2:35:53:c4:d4:70:e9:52:00:5b:47:6b:f4:32:68:11:2c: d3:7a:3a:93:d4:cb:2a:5d:e5:f7:4b:22:b5:3b:e5:00:79:74: ba:94:16:cf:9a:95:f5:a8:9c:db:59:f9:57:25:c3:36:b0:b6: 4b:41:6c:aa:09:b5:8c:f8:94:ea:f8:e3:97:08:06:ed:49:5e: 12:29:4c:59:9e:5d:08:65:c2:b1:20:3c:11:08:d4:47:e6:12: 3f:25:e5:c0:65:62:01:dd:79:ac:b9:ed:17:a3:cf:eb:e2:bd: 61:81:71:16:ce:86:48:6a:fa:4f:1f:6f:20:39:6f:85:1b:3e: e6:c3:9b:e8:91:1e:00:c2:dd:21:6d:ce:8d:9f:c5:24:12:da: 9a:5d:68:82:e7:9f:a4:9b:58:9e:21:30:38:bd:78:66:14:ba: 72:4d:22:f5:58:35:4d:a6:e9:b3:2a:30:d0:ca:af:f5:ce:24: 88:8c:13:dd:67:63:45:96:21:8f:dc:40:49:b2:da:56:49:c1: 28:fe:94:64:ca:44:9a:8b:04:ea:31:75:2e:f9:61:da:c6:35: 80:1c:d5:7c:4b:c3:21:4a:2e:79:d9:87:02:ae:c3:a8:d9:27: 91:0a:53:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQUExMTAvBgNVBAUTKERCODY5MEY2NEU3RjgzMkFDRkMzQTZBNkU4NDIxRDQx NzdDODk0RjYwHhcNMjYwMTAxMDIxMjM5WhcNMjYwMTA4MDIxMjM5WjAYMRYwFAYD VQQDDA02OTU1ZDgxOC1hOTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/q2I65mNAKb3DEl/rbJ88pYujGaFrI1XHg/3r/i7N5r7NX+0mcw2Yk/h8Kz 3hBL3LDxqWlliwC+xoIdBgKdwOJusau8J6asU2T31DXl5dDSnbPbL20ETteuQ6gi KJMoJ51pG+jl0QMyyosOqjgdxDRSrh5zFDkDjT9yh/WaQqJbQLdoxVWjys6sKhJZ EMSkGq1P54V4bdlvtNHiHifrH8FUZMAFlR1/Tk+2hWpTt0res865Gd+ng/nUhyhw 98QCt+gIdi82vSU6rtwT0coNTzbjJe+QeAzhuCsJlNmJgIArsZqv+9dDJm3p26aR 2F5xjDz4JxktfFluPMkGgOShFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyyc4rF xtt6CKgkr3ztlw7SsN+pMB8GA1UdIwQYMBaAFNuGkPZOf4Mqz8OmpuhCHUF3yJT2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZBQS9GRTEwMUNDQ0Y4 OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5clB3NmFtNkVJZFFYZkls UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI0YVE5azVfZ3lyUHc2YW02RUlkUVhmSWxQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZBQS9GRTEwMUNDQ0Y4OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5 clB3NmFtNkVJZFFYZklsUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgJhUrX+sLRtSNc+wiXeTjKzQhsjVTxNRw6VIAW0dr9DJoESzTejqT 1MsqXeX3SyK1O+UAeXS6lBbPmpX1qJzbWflXJcM2sLZLQWyqCbWM+JTq+OOXCAbt SV4SKUxZnl0IZcKxIDwRCNRH5hI/JeXAZWIB3Xmsue0Xo8/r4r1hgXEWzoZIavpP H28gOW+FGz7mw5vokR4Awt0hbc6Nn8UkEtqaXWiC55+km1ieITA4vXhmFLpyTSL1 WDVNpumzKjDQyq/1ziSIjBPdZ2NFliGP3EBJstpWScEo/pRkykSaiwTqMXUu+WHa xjWAHNV8S8MhSi552YcCrsOo2SeRClN/ -----END CERTIFICATE-----Generated at Thu Jan 1 14:25:45 2026 by rpki-client