This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft File: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json) Hash identifier: U0mNYQT4pC6QchWO/tzb5U+buF9XQ7zfsxk7kF8L+Zo= Subject key identifier: 1F:85:7C:3E:E9:9A:B0:F1:3C:0D:BA:A0:AD:FC:EB:36:C0:AF:F9:9A Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 Certificate issuer: /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Certificate serial: 08C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft Manifest number: 26EE Signing time: Sat 24 Jan 2026 16:05:26 +0000 Manifest this update: Sat 24 Jan 2026 16:05:26 +0000 Manifest next update: Sat 31 Jan 2026 16:05:26 +0000 Files and hashes: 1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: /EhIZzexToem+xrPmWMk53XMY1COCue+2CfGur9oww4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2245 (0x8c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Validity Not Before: Jan 24 16:05:26 2026 GMT Not After : Jan 31 16:05:26 2026 GMT Subject: CN=6974edc6-ccc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a3:4a:50:99:52:b8:2e:4b:65:ff:5f:71:17: d3:8f:c1:12:6c:d3:b9:a2:84:16:24:aa:fb:be:cb: 0b:a1:b1:62:4a:ec:79:7d:f4:01:5b:83:ad:e4:e0: ca:e9:12:bd:33:cb:fd:26:d7:f8:e6:9a:32:fc:01: b7:73:e9:35:87:f2:dc:57:dd:c3:b7:7c:fd:7e:1a: 9d:33:66:d6:52:b9:72:27:f4:dd:cb:b5:a9:bd:f4: 31:98:8a:34:c8:89:00:0d:d6:00:f0:70:df:ab:4d: 4d:7f:85:c2:3a:ae:03:c0:44:7b:78:f9:1a:2f:00: 05:42:8e:91:29:37:0c:c4:44:d0:7a:b2:f5:20:29: 95:ab:b8:3f:50:28:c5:48:7b:a5:41:a5:21:59:ad: 61:ca:42:05:e1:73:45:66:cd:a3:3b:79:78:8e:6e: d4:97:5f:82:cf:00:ac:5d:83:41:97:f1:a7:a9:ab: b2:f2:39:57:1a:28:6e:01:4f:0c:35:48:73:e8:9f: a8:31:b6:cb:ab:21:08:4a:62:b8:57:0e:3c:a3:e9: 92:1c:87:fd:44:76:20:6d:fd:1f:e1:32:d8:a4:5f: be:c7:5a:68:42:2c:06:44:1d:b4:c5:1b:32:86:ff: 14:a8:ec:d1:91:41:ea:54:42:78:79:52:d5:5f:33: 06:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:85:7C:3E:E9:9A:B0:F1:3C:0D:BA:A0:AD:FC:EB:36:C0:AF:F9:9A X509v3 Authority Key Identifier: keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:85:2d:cb:2a:80:ca:56:75:4b:78:13:93:58:c4:c2:dc:35: 0b:c9:2d:b4:d3:22:54:83:62:d7:30:6d:c2:7f:cb:3a:eb:7b: 0f:f3:90:f7:26:db:d8:59:23:e2:bd:89:cb:d3:92:c1:d5:45: bd:f6:42:8d:d4:b9:e6:a9:c4:4c:9f:9b:71:58:0f:7e:a5:17: 75:f9:6c:69:4e:03:05:e8:a1:4e:ce:2f:b3:17:b2:de:a5:f6: 0f:82:ab:1f:a4:43:2a:1b:6c:82:d4:0b:4a:b6:34:8e:fc:f9: 03:3c:2f:aa:ed:8f:55:ad:67:92:9c:67:0b:aa:ff:f0:db:61: 76:c2:62:f8:85:02:eb:49:3b:66:71:d2:11:0f:ee:77:ed:8c: 6f:46:62:d7:9e:00:82:be:4c:17:9a:29:5c:b0:7a:b3:14:fe: 1d:ce:9c:ba:a4:43:10:b0:6e:46:9e:bb:fc:0e:e9:2b:01:b7: bb:10:f1:d4:f2:a9:b5:5f:81:fb:a5:a3:ca:01:34:7f:13:74: 32:ef:08:63:b9:26:8d:f1:c7:ea:9e:09:f0:43:f8:81:5c:e3: 56:87:8c:6d:fe:ff:89:e8:2b:66:82:15:77:46:4b:76:cf:54: d7:4a:5a:73:cb:b6:3b:b9:26:0c:0d:67:df:32:b9:95:6d:ef: 83:12:ad:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKERFNzhGN0JENTkyNEE4MDY3NDkwQkZCRDMyRTQ3RTdG RkFCNjc3MjAwHhcNMjYwMTI0MTYwNTI2WhcNMjYwMTMxMTYwNTI2WjAYMRYwFAYD VQQDDA02OTc0ZWRjNi1jY2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKNKUJlSuC5LZf9fcRfTj8ESbNO5ooQWJKr7vssLobFiSux5ffQBW4Ot5ODK 6RK9M8v9Jtf45poy/AG3c+k1h/LcV93Dt3z9fhqdM2bWUrlyJ/Tdy7WpvfQxmIo0 yIkADdYA8HDfq01Nf4XCOq4DwER7ePkaLwAFQo6RKTcMxETQerL1ICmVq7g/UCjF SHulQaUhWa1hykIF4XNFZs2jO3l4jm7Ul1+CzwCsXYNBl/Gnqauy8jlXGihuAU8M NUhz6J+oMbbLqyEISmK4Vw48o+mSHIf9RHYgbf0f4TLYpF++x1poQiwGRB20xRsy hv8UqOzRkUHqVEJ4eVLVXzMGKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+FfD7p mrDxPA26oK386zbAr/maMB8GA1UdIwQYMBaAFN54971ZJKgGdJC/vTLkfn/6tncg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FBWjBrTC05TXVSLWZfcTJk eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajN2VmtrcUFaMGtMLTlNdVItZl9xMmR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FB WjBrTC05TXVSLWZfcTJkeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjhS3LKoDKVnVLeBOTWMTC3DULyS200yJUg2LXMG3Cf8s663sP85D3 JtvYWSPivYnL05LB1UW99kKN1LnmqcRMn5txWA9+pRd1+WxpTgMF6KFOzi+zF7Le pfYPgqsfpEMqG2yC1AtKtjSO/PkDPC+q7Y9VrWeSnGcLqv/w22F2wmL4hQLrSTtm cdIRD+537YxvRmLXngCCvkwXmilcsHqzFP4dzpy6pEMQsG5Gnrv8DukrAbe7EPHU 8qm1X4H7paPKATR/E3Qy7whjuSaN8cfqngnwQ/iBXONWh4xt/v+J6CtmghV3Rkt2 z1TXSlpzy7Y7uSYMDWffMrmVbe+DEq1R -----END CERTIFICATE-----Generated at Sun Jan 25 02:58:55 2026 by rpki-client