This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft File: YkYyDes0LSw9wa7bkPF2dyt_x38.mft (raw, json) Hash identifier: AP6yS4YwIDV4RwZ81HGkHHtxpRZCrTeQrIM6D+nc/IY= Subject key identifier: 09:0E:82:BB:34:EE:BD:60:BF:87:91:41:9C:E0:72:A3:84:01:7D:3D Authority key identifier: 62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F Certificate issuer: /CN=A911AD1F/serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft Manifest number: 3C Signing time: Fri 23 Jan 2026 06:28:52 +0000 Manifest this update: Fri 23 Jan 2026 06:28:52 +0000 Manifest next update: Fri 30 Jan 2026 06:28:52 +0000 Files and hashes: 1: YkYyDes0LSw9wa7bkPF2dyt_x38.crl (hash: dl2uU1tR6DT0djNUebAwuOIKm5TZt9GWpnSsFdkUN60=) 2: 5CA352A49DAB11F0B1E32C64C4F9AE02.roa (hash: +QKL7YQeAFpSt5nMMIAz5oWErQmX2UUEoZKFT1MpXb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD1F, serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Validity Not Before: Jan 23 06:28:52 2026 GMT Not After : Jan 30 06:28:52 2026 GMT Subject: CN=69731524-43b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:73:ab:f1:8e:31:ba:3d:ba:3b:24:93:b6:f3: a1:7c:21:11:f8:b5:27:a4:8b:f4:04:67:78:54:11: 39:13:a4:a2:58:ca:6f:c2:ee:8c:0e:6a:c6:78:ca: 19:c7:be:3a:66:15:57:f9:7a:b3:30:a6:8c:61:b1: 5e:af:ea:e3:8c:73:24:3f:b3:7e:28:36:71:5e:ef: 8a:60:ae:c7:cf:b2:b6:c0:3d:e4:f5:92:48:cc:59: 89:ec:26:bb:0d:f1:71:08:56:71:f0:2e:8a:2c:02: c4:50:09:7f:19:2f:58:56:f4:ce:00:47:02:06:a5: c7:05:23:3e:8c:e5:77:2e:a3:72:b8:c6:c7:dc:3d: 17:fd:c3:b5:f0:89:67:82:4a:a5:a1:1f:ad:25:bc: 47:4c:1a:0f:d8:79:29:41:29:5e:01:8c:e3:df:4e: da:bb:2a:d2:0e:78:41:2b:fb:6e:87:71:2c:4c:41: ac:54:5d:3f:a6:9f:aa:fe:a0:0d:72:c5:f5:a7:95: b2:50:f7:63:d1:a7:b1:3b:7b:4a:56:6c:97:a5:54: 6c:48:22:e2:3b:b1:ed:0a:c1:6e:97:fb:10:b2:8d: 94:44:bc:36:bb:9e:18:65:27:af:89:61:6e:e2:2e: 47:a7:bd:ec:39:33:11:70:0b:c1:f8:b6:8c:2e:9f: a7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0E:82:BB:34:EE:BD:60:BF:87:91:41:9C:E0:72:A3:84:01:7D:3D X509v3 Authority Key Identifier: keyid:62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:bc:90:6a:af:ee:02:64:cf:15:15:25:e2:15:58:3f:73:63: cc:74:fa:8e:b3:8d:ea:40:c6:7c:11:6f:17:58:0c:25:4b:4f: 8f:c3:c6:34:43:44:4f:db:9f:e1:e0:f4:bc:71:12:84:29:82: 95:b1:49:32:a8:44:57:64:3c:d7:42:29:73:bf:50:25:60:ff: 13:84:84:f5:cd:4f:17:e5:86:f6:63:1f:e6:ed:42:81:8c:22: b5:17:0d:54:98:7d:e8:cb:59:09:dc:4f:17:45:51:28:b8:14: 9a:dc:c1:b5:5c:27:72:af:78:e9:9e:76:26:c4:37:40:f4:51: 0f:12:85:e6:91:f1:11:c2:49:64:b7:23:40:e4:08:82:9f:f5: a2:6f:d6:bc:20:35:93:ad:69:80:39:35:99:59:d7:01:83:11: 53:f4:b0:0f:76:a5:55:ad:52:e3:39:b4:93:e9:02:7a:41:48: a4:1d:55:26:fc:e8:88:9c:24:8a:b6:ab:bb:d5:fd:d0:68:a9: d4:02:f7:53:c4:2b:b8:2e:83:b7:76:2f:ad:fd:77:6d:95:a9: 00:8d:81:3f:10:c4:37:1a:b3:fd:5c:2d:98:92:7f:5c:a4:c7: 3d:b8:c9:37:e4:6e:b1:5f:ed:98:38:66:4b:c1:d1:c8:5e:8f: 34:5d:48:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUQxRjExMC8GA1UEBRMoNjI0NjMyMERFQjM0MkQyQzNEQzFBRURCOTBGMTc2Nzcy QjdGQzc3RjAeFw0yNjAxMjMwNjI4NTJaFw0yNjAxMzAwNjI4NTJaMBgxFjAUBgNV BAMMDTY5NzMxNTI0LTQzYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAc6vxjjG6Pbo7JJO286F8IRH4tSeki/QEZ3hUETkTpKJYym/C7owOasZ4yhnH vjpmFVf5erMwpoxhsV6v6uOMcyQ/s34oNnFe74pgrsfPsrbAPeT1kkjMWYnsJrsN 8XEIVnHwLoosAsRQCX8ZL1hW9M4ARwIGpccFIz6M5Xcuo3K4xsfcPRf9w7XwiWeC SqWhH60lvEdMGg/YeSlBKV4BjOPfTtq7KtIOeEEr+26HcSxMQaxUXT+mn6r+oA1y xfWnlbJQ92PRp7E7e0pWbJelVGxIIuI7se0KwW6X+xCyjZREvDa7nhhlJ6+JYW7i Lkenvew5MxFwC8H4towun6fZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCQ6CuzTu vWC/h5FBnOByo4QBfT0wHwYDVR0jBBgwFoAUYkYyDes0LSw9wa7bkPF2dyt/x38w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRDFGLzE0RDA5QzAyOURB QjExRjBBMUM1QjM2M0M0RjlBRTAyL1lrWXlEZXMwTFN3OXdhN2JrUEYyZHl0X3gz OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWtZeURlczBMU3c5d2E3YmtQRjJkeXRfeDM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB RDFGLzE0RDA5QzAyOURBQjExRjBBMUM1QjM2M0M0RjlBRTAyL1lrWXlEZXMwTFN3 OXdhN2JrUEYyZHl0X3gzOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACm8kGqv7gJkzxUVJeIVWD9zY8x0+o6zjepAxnwRbxdYDCVLT4/DxjRD RE/bn+Hg9LxxEoQpgpWxSTKoRFdkPNdCKXO/UCVg/xOEhPXNTxflhvZjH+btQoGM IrUXDVSYfejLWQncTxdFUSi4FJrcwbVcJ3KveOmedibEN0D0UQ8SheaR8RHCSWS3 I0DkCIKf9aJv1rwgNZOtaYA5NZlZ1wGDEVP0sA92pVWtUuM5tJPpAnpBSKQdVSb8 6IicJIq2q7vV/dBoqdQC91PEK7gug7d2L639d22VqQCNgT8QxDcas/1cLZiSf1yk xz24yTfkbrFf7Zg4ZkvB0chejzRdSJc= -----END CERTIFICATE-----Generated at Sun Jan 25 06:18:33 2026 by rpki-client