This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft File: jPXBj4McqRLIk_4OjnMjU7YKbtI.mft (raw, json) Hash identifier: wILA6zVEdcJAzqoHBH4+NirtPSkz/CdEv3cxc9Lm6iQ= Subject key identifier: C7:13:65:FB:1B:5E:B4:6A:EE:C1:6B:68:A3:79:72:56:43:2C:EB:BA Authority key identifier: 8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2 Certificate issuer: /CN=A91201EE/serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft Manifest number: 17 Signing time: Fri 23 Jan 2026 06:57:18 +0000 Manifest this update: Fri 23 Jan 2026 06:57:17 +0000 Manifest next update: Fri 30 Jan 2026 06:57:17 +0000 Files and hashes: 1: jPXBj4McqRLIk_4OjnMjU7YKbtI.crl (hash: mL1reN7m5xSr3JoeOXCv1bf5+kAi7M4MX/uCbbK3ATA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91201EE, serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2 Validity Not Before: Jan 23 06:57:17 2026 GMT Not After : Jan 30 06:57:17 2026 GMT Subject: CN=69731bce-4846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:ce:df:7d:06:fb:c7:4e:5d:cb:6b:5b:ca: 97:bc:8c:01:e0:01:4a:2a:97:7f:2c:32:49:7a:46: 0d:ad:91:d2:37:20:f7:68:26:ae:b2:5e:60:b9:ce: ef:d2:dd:c4:43:4e:83:59:3f:43:15:60:56:35:5b: 74:60:df:fd:37:6d:c7:e9:7b:0d:ba:10:10:40:90: 5a:fb:fa:56:72:6b:f6:b3:a2:c3:cd:6e:4a:60:9e: fd:d5:bf:e8:c1:09:df:86:ff:bd:56:2d:37:61:88: e8:e6:8f:1f:c7:e6:5c:9e:a9:17:0f:4b:e9:93:ad: c8:36:8c:a1:38:05:3e:8e:fc:b1:78:c4:4c:29:dd: 66:8c:0b:3e:54:68:14:2a:c8:9b:5e:9f:02:27:44: 3d:cc:f1:de:ac:0c:7f:1d:29:3f:56:3c:4a:9c:53: bb:e8:33:90:90:52:88:49:e1:16:5e:58:71:5b:68: e9:3d:f9:e9:07:c7:e5:eb:8f:dc:fb:ae:53:b0:aa: 14:c5:11:fe:0a:42:e8:60:a4:fe:e4:ff:fc:5c:a1: 0e:40:bf:1f:e1:da:db:8e:70:16:bf:b0:63:50:dc: 1a:bc:1f:b7:d5:f1:48:91:73:b6:45:a7:5c:e8:85: f5:2e:ba:b9:1e:16:5e:6a:68:83:69:59:cc:93:cf: 52:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:13:65:FB:1B:5E:B4:6A:EE:C1:6B:68:A3:79:72:56:43:2C:EB:BA X509v3 Authority Key Identifier: keyid:8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0f:2c:ce:77:c3:3c:d3:f1:85:cb:6c:97:e4:a6:ae:74:63: a2:3b:26:8f:fb:64:e0:fb:31:a2:44:6f:00:0d:59:be:98:a5: 47:46:b5:f8:2b:df:b6:e6:43:5e:ef:bd:ca:81:57:1e:8a:4f: b7:32:28:4d:84:4a:3c:0d:f4:4c:0e:11:db:71:6a:9b:d7:87: 20:a4:e4:f4:a2:25:79:0f:ac:23:61:55:25:bc:e2:67:ff:70: ff:98:14:5c:2f:bf:d0:85:ed:5f:97:16:1c:a1:69:02:1b:d9: a2:5e:f8:10:14:43:a2:dd:3b:84:8f:32:46:99:13:04:71:73: 3b:90:f8:82:38:c1:82:ae:45:f5:ac:07:6f:d7:b0:e4:2f:aa: ef:77:83:02:60:34:e6:bc:c3:b9:d6:0e:eb:61:19:fc:f1:32: c2:2f:7a:3f:da:73:18:ff:29:61:65:66:04:ad:82:f4:5a:bb: 8e:86:2f:d3:79:c3:4c:70:01:59:aa:33:83:f6:6f:ce:cc:8f: e1:d9:e7:99:fa:5a:65:bb:24:71:b4:78:8d:11:60:17:f9:7f: 1a:de:74:88:c6:39:03:e4:46:88:13:8a:8d:a4:53:29:82:60: 6b:b6:d5:c4:26:d3:82:d7:35:b0:7a:bd:64:51:21:0c:30:d5: 54:88:b6:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDFFRTExMC8GA1UEBRMoOENGNUMxOEY4MzFDQTkxMkM4OTNGRTBFOEU3MzIzNTNC NjBBNkVEMjAeFw0yNjAxMjMwNjU3MTdaFw0yNjAxMzAwNjU3MTdaMBgxFjAUBgNV BAMMDTY5NzMxYmNlLTQ4NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG287ffQb7x05dy2tbype8jAHgAUoql38sMkl6Rg2tkdI3IPdoJq6yXmC5zu/S 3cRDToNZP0MVYFY1W3Rg3/03bcfpew26EBBAkFr7+lZya/azosPNbkpgnv3Vv+jB Cd+G/71WLTdhiOjmjx/H5lyeqRcPS+mTrcg2jKE4BT6O/LF4xEwp3WaMCz5UaBQq yJtenwInRD3M8d6sDH8dKT9WPEqcU7voM5CQUohJ4RZeWHFbaOk9+ekHx+Xrj9z7 rlOwqhTFEf4KQuhgpP7k//xcoQ5Avx/h2tuOcBa/sGNQ3Bq8H7fV8UiRc7ZFp1zo hfUuurkeFl5qaINpWcyTz1J/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxxNl+xte tGruwWtoo3lyVkMs67owHwYDVR0jBBgwFoAUjPXBj4McqRLIk/4OjnMjU7YKbtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwMUVFL0Q2MEM3MDAyRDc0 RjExRjBCNTg3MTRCQzZERDM2NDFEL2pQWEJqNE1jcVJMSWtfNE9qbk1qVTdZS2J0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvalBYQmo0TWNxUkxJa180T2puTWpVN1lLYnRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw MUVFL0Q2MEM3MDAyRDc0RjExRjBCNTg3MTRCQzZERDM2NDFEL2pQWEJqNE1jcVJM SWtfNE9qbk1qVTdZS2J0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABIPLM53wzzT8YXLbJfkpq50Y6I7Jo/7ZOD7MaJEbwANWb6YpUdGtfgr 37bmQ17vvcqBVx6KT7cyKE2ESjwN9EwOEdtxapvXhyCk5PSiJXkPrCNhVSW84mf/ cP+YFFwvv9CF7V+XFhyhaQIb2aJe+BAUQ6LdO4SPMkaZEwRxczuQ+II4wYKuRfWs B2/XsOQvqu93gwJgNOa8w7nWDuthGfzxMsIvej/acxj/KWFlZgStgvRau46GL9N5 w0xwAVmqM4P2b87Mj+HZ55n6WmW7JHG0eI0RYBf5fxredIjGOQPkRogTio2kUymC YGu21cQm04LXNbB6vWRRIQww1VSItjA= -----END CERTIFICATE-----Generated at Sun Jan 25 02:48:00 2026 by rpki-client