This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft File: KiZlwxQeS_P9LwBKrimlmHETod8.mft (raw, json) Hash identifier: c481VtwOyeG/QDLJ0416Px9zElfN54oi6mHt2WjqUug= Subject key identifier: 69:8E:29:9F:5E:0E:03:6F:09:43:4E:C4:40:F6:4E:AC:85:F7:97:87 Authority key identifier: 2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF Certificate issuer: /CN=A911972D/serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF Certificate serial: 0401 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft Manifest number: 03FB Signing time: Sat 24 Jan 2026 23:41:54 +0000 Manifest this update: Sat 24 Jan 2026 23:41:54 +0000 Manifest next update: Sat 31 Jan 2026 23:41:54 +0000 Files and hashes: 1: KiZlwxQeS_P9LwBKrimlmHETod8.crl (hash: RPNG79TKOZ4OTLnM/nb85qZB1pzkr8rjEW3jwx9/Qwc=) 2: B067CCDCA8C511EC8F560C42C4F9AE02.roa (hash: 3k13Zb4rUCPiQVhmHXmV79sBuRx9W6om0fkw2CRWuLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1025 (0x401) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911972D, serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF Validity Not Before: Jan 24 23:41:54 2026 GMT Not After : Jan 31 23:41:54 2026 GMT Subject: CN=697558c2-3a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8e:88:68:b8:52:a0:ac:6f:e1:c6:35:be:d7: ce:ab:2b:55:a1:77:c1:bf:be:b2:44:70:e9:05:30: 36:4c:89:e3:1c:1d:4f:cc:58:8c:26:eb:08:10:c9: c4:b6:bf:e1:75:11:9c:64:0f:32:0d:2b:e1:20:49: 31:fe:b0:54:2f:44:c4:6e:bb:19:b4:1b:b3:1f:c4: 60:dd:0a:c1:0e:04:25:fa:c8:16:7e:5b:94:36:5a: b9:7b:a6:03:31:e9:f5:d3:25:be:f8:24:23:0a:a1: 5d:a3:ec:40:5e:9c:54:ee:2c:de:55:66:69:82:27: ba:b7:6e:08:73:46:0e:e7:2b:37:c0:f9:bd:dc:6a: d1:67:05:5c:c8:fd:e8:32:cc:95:f4:35:ce:7d:05: 28:2a:8a:c4:e5:1f:c5:51:0a:b2:c2:e0:8a:b4:4b: 93:b8:bd:e9:42:5d:fd:33:e5:9f:26:d2:16:3d:d9: 86:4c:63:d4:42:38:cb:be:cf:d1:43:be:17:5b:82: 37:28:ec:22:89:24:33:c7:d3:0c:65:20:0e:20:0d: b6:f0:76:d2:c5:f0:f8:9d:20:43:67:97:c8:24:3d: 12:f7:30:4a:d9:d0:62:fd:91:24:cb:1e:cf:d5:63: 5f:63:9b:10:dc:3c:40:bc:fc:f4:c7:2c:73:49:c8: ff:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8E:29:9F:5E:0E:03:6F:09:43:4E:C4:40:F6:4E:AC:85:F7:97:87 X509v3 Authority Key Identifier: keyid:2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:5e:d0:19:06:3c:84:48:a1:ab:4d:a1:84:b1:33:ca:c9:d7: a5:04:7c:b0:ce:45:38:ee:15:fb:55:88:06:48:b7:f4:42:00: 96:16:11:c3:70:71:db:e9:84:7d:61:ad:c0:9d:cd:97:20:9d: ae:c6:d1:bc:bd:c2:4b:b8:e0:cc:30:0d:08:14:79:63:8c:02: 17:08:75:86:b3:37:aa:7e:fd:5a:78:da:73:95:c8:cb:9b:b1: a5:09:66:74:67:8d:11:96:6f:d3:5d:bd:dd:8e:a1:7c:32:be: 8a:cb:2c:5c:5f:ca:16:6b:b3:aa:db:ce:c7:cb:14:3c:fe:08: 92:df:18:5f:29:50:40:43:3d:e0:25:76:af:35:0f:cf:a4:27: d0:52:9e:a1:6e:0f:7b:ab:52:55:de:46:a5:51:97:61:3f:c1: b8:8d:f6:93:05:ca:62:e0:af:29:be:9f:93:f3:5d:c8:a9:49: 2e:1d:0f:51:77:f7:fb:8a:62:57:d3:94:f9:d1:f3:18:c5:37: 7d:b2:6a:e0:ca:08:1b:d5:4b:71:56:75:3f:ef:61:94:31:ce: f3:39:d7:81:56:ee:4e:04:fa:2b:16:c9:eb:3d:91:55:e1:b3: 05:52:6a:1c:ec:c1:2b:8f:cb:48:5c:d4:5c:c4:ed:b1:85:d5: 2f:6a:cf:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3MkQxMTAvBgNVBAUTKDJBMjY2NUMzMTQxRTRCRjNGRDJGMDA0QUFFMjlBNTk4 NzExM0ExREYwHhcNMjYwMTI0MjM0MTU0WhcNMjYwMTMxMjM0MTU0WjAYMRYwFAYD VQQDDA02OTc1NThjMi0zYTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlY6IaLhSoKxv4cY1vtfOqytVoXfBv76yRHDpBTA2TInjHB1PzFiMJusIEMnE tr/hdRGcZA8yDSvhIEkx/rBUL0TEbrsZtBuzH8Rg3QrBDgQl+sgWfluUNlq5e6YD Men10yW++CQjCqFdo+xAXpxU7izeVWZpgie6t24Ic0YO5ys3wPm93GrRZwVcyP3o MsyV9DXOfQUoKorE5R/FUQqywuCKtEuTuL3pQl39M+WfJtIWPdmGTGPUQjjLvs/R Q74XW4I3KOwiiSQzx9MMZSAOIA228HbSxfD4nSBDZ5fIJD0S9zBK2dBi/ZEkyx7P 1WNfY5sQ3DxAvPz0xyxzScj/IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmOKZ9e DgNvCUNOxED2TqyF95eHMB8GA1UdIwQYMBaAFComZcMUHkvz/S8ASq4ppZhxE6Hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTcyRC85OUVFOTUwQ0E2 ODIxMUVDQjRFM0VDM0FDNEY5QUUwMi9LaVpsd3hRZVNfUDlMd0JLcmltbG1IRVRv ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tpWmx3eFFlU19QOUx3QktyaW1sbUhFVG9kOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTcyRC85OUVFOTUwQ0E2ODIxMUVDQjRFM0VDM0FDNEY5QUUwMi9LaVpsd3hRZVNf UDlMd0JLcmltbG1IRVRvZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgXtAZBjyESKGrTaGEsTPKydelBHywzkU47hX7VYgGSLf0QgCWFhHD cHHb6YR9Ya3Anc2XIJ2uxtG8vcJLuODMMA0IFHljjAIXCHWGszeqfv1aeNpzlcjL m7GlCWZ0Z40Rlm/TXb3djqF8Mr6KyyxcX8oWa7Oq287HyxQ8/giS3xhfKVBAQz3g JXavNQ/PpCfQUp6hbg97q1JV3kalUZdhP8G4jfaTBcpi4K8pvp+T813IqUkuHQ9R d/f7imJX05T50fMYxTd9smrgyggb1UtxVnU/72GUMc7zOdeBVu5OBPorFsnrPZFV 4bMFUmoc7MErj8tIXNRcxO2xhdUvas+L -----END CERTIFICATE-----Generated at Sun Jan 25 07:52:50 2026 by rpki-client