This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json) Hash identifier: +fAo8QfOqwzdxQB1bqTHOxVrDqXR5jTUBhQD7vJZ+I4= Subject key identifier: 6B:F5:75:5D:CB:2A:C4:1B:F0:CB:F3:C5:13:1E:AC:BC:49:71:0E:02 Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Certificate serial: 04CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft Manifest number: 04C4 Signing time: Sat 10 Jan 2026 23:05:43 +0000 Manifest this update: Sat 10 Jan 2026 23:05:43 +0000 Manifest next update: Sat 17 Jan 2026 23:05:43 +0000 Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: KD1rn7tmlRHFqSN781RRMMYfk3NuKjTX/HPKn+CLS8I=) 2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: 7OgpQvkBU6+tUiHR/xeuBjYzt4Evz4MreUzB4Ql4bWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 23:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39A9, serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Validity Not Before: Jan 10 23:05:43 2026 GMT Not After : Jan 17 23:05:43 2026 GMT Subject: CN=6962db47-6983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3a:e0:3f:00:e7:5b:a3:77:07:55:2a:c5:2b: 37:df:0f:29:3e:3c:72:9d:26:43:6d:d0:e9:64:fb: 54:cf:ba:72:2c:6e:b7:55:63:df:8a:59:b3:c1:a2: d9:27:0d:b7:5c:8f:1e:61:a4:ab:98:cd:c4:1e:bd: dd:79:4d:a8:f1:d1:f2:8d:91:76:4a:94:8a:1b:ef: 6e:61:e3:fe:07:04:10:07:de:53:1d:2f:72:91:e9: 39:c4:fb:ca:94:94:c3:22:54:91:f4:1d:23:1b:95: 8a:bd:1b:43:c2:2b:80:68:27:46:d7:8d:60:47:7d: 33:d6:ab:9e:c6:7c:01:f2:5f:60:65:81:59:7d:49: 04:26:5c:1c:23:59:f3:a3:2a:88:db:a7:51:e2:79: 27:67:1f:1e:f8:c5:98:74:60:4a:ca:f6:e7:9a:27: 45:9e:59:65:3a:ab:68:cf:c3:e9:fd:a6:b9:29:bc: c1:85:38:e2:d7:0d:75:45:3d:74:45:ce:3a:3e:48: 35:76:9e:fc:cb:03:56:1f:be:ab:72:9b:ae:4d:5a: 3e:e0:73:4c:ff:28:3d:0c:34:c4:f8:00:33:98:31: a6:25:d5:41:ae:ee:df:d0:d3:5a:c4:10:a1:dc:d2: fd:bb:75:14:e3:a3:2f:2b:04:6f:bf:a0:a0:36:6f: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F5:75:5D:CB:2A:C4:1B:F0:CB:F3:C5:13:1E:AC:BC:49:71:0E:02 X509v3 Authority Key Identifier: keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:be:af:8b:13:d4:98:8b:17:6c:f9:18:31:5a:1c:98:0d:45: b6:45:cc:bb:07:26:9d:20:f8:39:de:3e:51:67:0d:67:17:88: 1e:5f:b8:31:90:f9:e1:9e:e1:e6:a5:44:89:5f:7e:22:0b:f8: 43:66:fd:ec:80:4b:e4:e4:32:ff:6d:8e:e7:59:05:87:db:9d: a5:e4:2e:1c:6a:7b:0c:ce:f3:f7:0b:d2:18:17:5a:52:9c:39: 26:ff:27:8f:33:c6:6e:f8:e3:d1:05:fc:a6:82:1e:76:3a:4b: d9:de:5d:67:62:e5:c4:ea:11:c1:a8:a1:c7:d7:e4:7b:3a:dd: 93:9a:fb:ce:ca:ea:59:c1:71:0f:19:dc:f6:c3:86:fa:4f:07: 6a:30:c2:91:b5:66:6d:4e:66:7c:77:fa:4b:8b:8a:a8:cc:67: f2:9f:d8:e8:cb:1b:ef:a3:d8:f3:62:4c:33:5e:e6:c0:56:42: 69:fb:a3:6f:50:ac:72:1a:e9:90:26:df:79:d2:3b:7f:38:36: f9:c6:63:74:e5:23:83:37:fd:58:cb:98:df:33:51:47:4b:37: 2f:d9:1b:97:75:a7:d1:68:06:23:2f:78:cc:43:07:d8:bd:0c: 76:b9:95:1f:cf:d8:63:2b:7d:3f:37:7e:c4:10:be:a7:05:8a: 48:d8:d9:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE QjY4OEZFNTMwHhcNMjYwMTEwMjMwNTQzWhcNMjYwMTE3MjMwNTQzWjAYMRYwFAYD VQQDDA02OTYyZGI0Ny02OTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjrgPwDnW6N3B1UqxSs33w8pPjxynSZDbdDpZPtUz7pyLG63VWPfilmzwaLZ Jw23XI8eYaSrmM3EHr3deU2o8dHyjZF2SpSKG+9uYeP+BwQQB95THS9ykek5xPvK lJTDIlSR9B0jG5WKvRtDwiuAaCdG141gR30z1quexnwB8l9gZYFZfUkEJlwcI1nz oyqI26dR4nknZx8e+MWYdGBKyvbnmidFnlllOqtoz8Pp/aa5KbzBhTji1w11RT10 Rc46Pkg1dp78ywNWH76rcpuuTVo+4HNM/yg9DDTE+AAzmDGmJdVBru7f0NNaxBCh 3NL9u3UU46MvKwRvv6CgNm/bgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGv1dV3L KsQb8MvzxRMerLxJcQ4CMB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2 NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlBOS81MjU0ODZCODU2NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdF b0lrakZwVFBnNG5iYUlfbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3vq+LE9SYixds+RgxWhyYDUW2Rcy7ByadIPg53j5RZw1nF4geX7gx kPnhnuHmpUSJX34iC/hDZv3sgEvk5DL/bY7nWQWH252l5C4cansMzvP3C9IYF1pS nDkm/yePM8Zu+OPRBfymgh52OkvZ3l1nYuXE6hHBqKHH1+R7Ot2TmvvOyupZwXEP Gdz2w4b6TwdqMMKRtWZtTmZ8d/pLi4qozGfyn9joyxvvo9jzYkwzXubAVkJp+6Nv UKxyGumQJt950jt/ODb5xmN05SODN/1Yy5jfM1FHSzcv2RuXdafRaAYjL3jMQwfY vQx2uZUfz9hjK30/N37EEL6nBYpI2Nmh -----END CERTIFICATE-----Generated at Mon Jan 12 13:08:36 2026 by rpki-client