This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft File: 9US5wrG96hw7N0NIuNFeNn5qD0I.mft (raw, json) Hash identifier: MdiYMSFcPjK1OvSBdxYOvnf9R45GBABntu6bL3Z5EEg= Subject key identifier: D1:03:4D:20:3F:FC:51:23:8D:1B:5D:10:15:9D:5C:E2:B3:32:AB:FC Authority key identifier: F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42 Certificate issuer: /CN=A91139AB/serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42 Certificate serial: 07D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft Manifest number: 09AA Signing time: Sat 24 Jan 2026 20:40:11 +0000 Manifest this update: Sat 24 Jan 2026 20:40:11 +0000 Manifest next update: Sat 31 Jan 2026 20:40:11 +0000 Files and hashes: 1: 9US5wrG96hw7N0NIuNFeNn5qD0I.crl (hash: vdnxgOSyCpZsQaI21kql7fRAnP1NDi+gUFi73j1HlHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2000 (0x7d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91139AB, serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42 Validity Not Before: Jan 24 20:40:11 2026 GMT Not After : Jan 31 20:40:11 2026 GMT Subject: CN=69752e2b-1335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:43:13:fd:09:34:8d:be:db:99:e9:8a:c2: 23:80:88:7a:fe:4e:53:e7:32:4e:56:ef:d3:b3:4d: f3:f1:7a:f0:7c:08:33:86:b2:9a:aa:27:04:3f:44: a5:e7:3f:9b:89:db:a5:36:e2:8a:8a:af:b0:ad:bd: 3d:a1:25:45:a6:51:69:d6:76:f1:53:8e:d7:3b:c9: 09:72:81:fa:f8:34:77:92:f6:b8:7a:9d:bd:a4:7f: f6:6a:76:95:9a:b3:0f:14:25:80:a1:5a:e3:b3:54: bc:09:81:4b:b3:0d:08:dd:9e:4f:32:95:d9:48:d4: b7:e5:52:b1:7a:df:6a:cf:c6:ae:88:ee:d2:2f:b2: 75:82:fd:49:9c:d3:f7:86:f9:09:3e:89:25:4c:c7: aa:cd:24:be:4c:6a:93:44:5a:4f:68:39:ba:e9:13: 9f:02:84:b2:fc:7f:a7:24:42:34:62:f7:46:1f:d9: fb:c9:5f:c4:2f:11:14:17:64:a0:1d:cc:42:38:63: 6e:27:03:d0:47:7e:a4:ac:fd:36:c2:9a:76:54:35: 49:f1:9f:92:17:3a:2f:9b:da:c3:06:d1:e7:98:d6: b1:8c:16:a9:fc:f5:a0:f9:aa:dd:83:d7:c0:53:ff: 07:54:03:d8:17:37:08:94:a4:35:82:9d:e3:cc:38: 41:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:03:4D:20:3F:FC:51:23:8D:1B:5D:10:15:9D:5C:E2:B3:32:AB:FC X509v3 Authority Key Identifier: keyid:F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:ae:b8:ec:06:e1:68:9e:24:0a:9b:32:f4:73:72:e2:aa:e1: df:d4:3b:ec:13:72:72:7b:0a:fc:48:3c:52:ea:0a:b4:2f:8f: c9:45:b3:de:bd:f9:d2:29:ba:32:27:a2:19:4d:08:bc:2d:63: 80:34:ae:f6:3d:5e:50:42:8b:e8:ff:a0:c6:de:10:81:53:4f: b1:b7:96:2c:fe:cb:b4:e6:8c:79:6a:11:e0:c8:6f:45:a1:f6: e6:95:73:62:ac:90:e6:22:e5:43:d6:6f:4e:9f:21:0f:c2:b5: 5c:0d:c7:08:e5:8f:c1:b8:f9:69:a7:70:d9:29:4f:37:69:3a: db:26:ed:d4:a2:d6:af:01:5d:f3:36:63:9e:ae:b0:65:e6:ca: 99:a4:30:e3:59:00:6c:e2:41:a3:ec:2b:2e:4c:76:40:1e:cc: 45:94:70:8e:e5:45:89:7a:67:c9:8e:a3:4d:91:25:33:18:4d: 43:23:ab:b4:b1:90:64:20:8a:51:2e:f4:e2:63:20:44:56:bd: c9:20:8c:b8:73:b2:1b:7b:a4:53:df:10:7f:90:f2:fc:d2:5f: 2c:60:0b:55:5a:83:cd:d5:e6:90:46:94:72:92:00:17:7a:7a: ec:e3:44:14:c3:82:8d:99:fe:6a:e6:fa:68:18:42:8b:63:94: 7c:06:c4:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM5QUIxMTAvBgNVBAUTKEY1NDRCOUMyQjFCREVBMUMzQjM3NDM0OEI4RDE1RTM2 N0U2QTBGNDIwHhcNMjYwMTI0MjA0MDExWhcNMjYwMTMxMjA0MDExWjAYMRYwFAYD VQQDDA02OTc1MmUyYi0xMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/FDE/0JNI2+25npisIjgIh6/k5T5zJOVu/Ts03z8XrwfAgzhrKaqicEP0Sl 5z+bidulNuKKiq+wrb09oSVFplFp1nbxU47XO8kJcoH6+DR3kva4ep29pH/2anaV mrMPFCWAoVrjs1S8CYFLsw0I3Z5PMpXZSNS35VKxet9qz8auiO7SL7J1gv1JnNP3 hvkJPoklTMeqzSS+TGqTRFpPaDm66ROfAoSy/H+nJEI0YvdGH9n7yV/ELxEUF2Sg HcxCOGNuJwPQR36krP02wpp2VDVJ8Z+SFzovm9rDBtHnmNaxjBap/PWg+ardg9fA U/8HVAPYFzcIlKQ1gp3jzDhBSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEDTSA/ /FEjjRtdEBWdXOKzMqv8MB8GA1UdIwQYMBaAFPVEucKxveocOzdDSLjRXjZ+ag9C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzlBQi8xNThENDkwNjI1 NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi85VVM1d3JHOTZodzdOME5JdU5GZU5uNXFE MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVUzV3ckc5Nmh3N04wTkl1TkZlTm41cUQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzlBQi8xNThENDkwNjI1NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi85VVM1d3JHOTZo dzdOME5JdU5GZU5uNXFEMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmrrjsBuFoniQKmzL0c3LiquHf1DvsE3Jyewr8SDxS6gq0L4/JRbPe vfnSKboyJ6IZTQi8LWOANK72PV5QQovo/6DG3hCBU0+xt5Ys/su05ox5ahHgyG9F ofbmlXNirJDmIuVD1m9OnyEPwrVcDccI5Y/BuPlpp3DZKU83aTrbJu3UotavAV3z NmOerrBl5sqZpDDjWQBs4kGj7CsuTHZAHsxFlHCO5UWJemfJjqNNkSUzGE1DI6u0 sZBkIIpRLvTiYyBEVr3JIIy4c7Ibe6RT3xB/kPL80l8sYAtVWoPN1eaQRpRykgAX enrs40QUw4KNmf5q5vpoGEKLY5R8BsT7 -----END CERTIFICATE-----Generated at Sun Jan 25 08:14:13 2026 by rpki-client