This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json) Hash identifier: qaSOnUhh41ZOCGzuKo1FAJT3dlp/qbPS0oRdFf+fM7M= Subject key identifier: A5:EF:B1:72:17:34:1D:31:89:DC:84:F3:9F:8E:70:44:A2:6E:2E:82 Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Certificate serial: 3506 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft Manifest number: 3506 Signing time: Sat 24 Jan 2026 14:37:48 +0000 Manifest this update: Sat 24 Jan 2026 14:37:48 +0000 Manifest next update: Sat 31 Jan 2026 14:37:48 +0000 Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: 7VKz3Q48W5a3ezY8/6ZSpFPalEyn6bgumZegRuW7U20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13574 (0x3506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Validity Not Before: Jan 24 14:37:48 2026 GMT Not After : Jan 31 14:37:48 2026 GMT Subject: CN=6974d93c-2008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e0:90:46:fb:bb:d7:15:58:f0:38:ae:82:31: 95:5b:87:d7:11:c5:ae:87:ae:4c:a3:dc:e4:3f:4c: 26:ad:b2:f0:f7:fe:d6:f5:ee:98:94:93:48:8b:88: 5b:0a:3e:bb:7a:39:df:d0:8b:c2:ab:2a:e3:f8:f4: 83:9a:c8:8f:16:dc:34:2a:33:fc:8c:71:45:15:20: 1d:07:43:98:b6:1e:b3:88:96:47:af:ad:d1:fa:33: 65:7c:47:b3:8b:3b:19:b6:fd:93:d0:85:0f:05:b7: 8a:6d:14:1e:ee:a7:3b:53:99:c2:57:09:64:7a:d0: 6d:6b:ca:73:89:c9:a3:af:2e:fa:0e:05:95:ba:12: 78:a0:53:a0:58:8a:31:36:02:9b:88:cf:6a:9d:8c: b3:d0:e8:7f:00:3a:0a:ae:8b:1d:de:0c:33:7a:36: 5a:16:aa:81:dd:62:9e:2a:46:57:61:1f:99:45:b6: 62:20:16:80:8b:ba:08:77:a8:d8:b8:b0:9c:08:c2: f7:10:b1:c1:7d:c3:e3:73:b1:46:a8:35:95:34:7e: 51:88:ad:59:6a:97:64:fa:b4:27:e6:5a:63:01:33: e2:d5:95:64:07:b6:fc:37:1f:01:bb:f2:47:b8:3b: 34:86:53:8e:24:15:f3:1d:67:98:77:83:12:ac:a7: 97:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EF:B1:72:17:34:1D:31:89:DC:84:F3:9F:8E:70:44:A2:6E:2E:82 X509v3 Authority Key Identifier: keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:96:69:8f:46:1a:24:eb:d5:f7:10:37:4f:ed:d3:24:58:39: 74:df:73:f0:df:e5:d2:0b:6d:dd:4e:a4:aa:83:c6:d1:d8:b0: 01:0e:c1:39:9d:79:6e:3d:de:5a:12:99:bc:99:20:90:12:de: 87:82:ff:9e:ad:1a:00:67:e6:43:a7:3d:41:01:2a:b3:17:89: ce:93:ec:0d:dd:79:92:df:07:52:df:11:b1:e3:7d:7a:b1:31: 62:cb:ad:b0:6b:7f:80:c5:18:c9:84:c3:2e:db:c0:cd:be:27: e6:60:b8:a1:a8:2a:4f:e3:32:62:74:61:e1:01:56:f0:4d:94: a6:4e:70:06:77:73:f4:bb:c7:ec:a2:56:80:0f:7c:a8:ca:a3: ba:45:c1:18:24:b5:4f:d4:80:40:16:ea:d7:00:00:83:51:be: 80:2e:80:55:a1:7e:51:82:b1:ad:b2:d4:b9:d9:27:35:b4:e9: 95:21:12:c6:7a:7d:ba:f8:7e:88:57:2b:c7:54:da:57:dc:ff: 43:c6:b3:db:c8:33:18:af:3e:0e:7b:a2:db:18:60:8b:99:37: 7c:a2:75:56:15:30:4f:4f:40:35:0f:57:cf:08:17:55:15:ae: a9:aa:fa:d1:cd:6c:9c:28:d1:17:21:80:b6:fb:b4:e7:af:2c: f1:46:5c:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFFMjgxMTAvBgNVBAUTKEFDMTlDNjZCQzRCMzFDRUI5MzBCQTZBRTBENkVCNzQ3 QjEwQUI2MDYwHhcNMjYwMTI0MTQzNzQ4WhcNMjYwMTMxMTQzNzQ4WjAYMRYwFAYD VQQDDA02OTc0ZDkzYy0yMDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteCQRvu71xVY8DiugjGVW4fXEcWuh65Mo9zkP0wmrbLw9/7W9e6YlJNIi4hb Cj67ejnf0IvCqyrj+PSDmsiPFtw0KjP8jHFFFSAdB0OYth6ziJZHr63R+jNlfEez izsZtv2T0IUPBbeKbRQe7qc7U5nCVwlketBta8pzicmjry76DgWVuhJ4oFOgWIox NgKbiM9qnYyz0Oh/ADoKrosd3gwzejZaFqqB3WKeKkZXYR+ZRbZiIBaAi7oId6jY uLCcCML3ELHBfcPjc7FGqDWVNH5RiK1Zapdk+rQn5lpjATPi1ZVkB7b8Nx8Bu/JH uDs0hlOOJBXzHWeYd4MSrKeXrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXvsXIX NB0xidyE85+OcESibi6CMB8GA1UdIwQYMBaAFKwZxmvEsxzrkwumrg1ut0exCrYG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUUyOC84NDU4QjkxMDFE OEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhPdVRDNmF1RFc2M1I3RUt0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JCbkdhOFN6SE91VEM2YXVEVzYzUjdFS3RnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUUyOC84NDU4QjkxMDFEOEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhP dVRDNmF1RFc2M1I3RUt0Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTlmmPRhok69X3EDdP7dMkWDl033Pw3+XSC23dTqSqg8bR2LABDsE5 nXluPd5aEpm8mSCQEt6Hgv+erRoAZ+ZDpz1BASqzF4nOk+wN3XmS3wdS3xGx4316 sTFiy62wa3+AxRjJhMMu28DNvifmYLihqCpP4zJidGHhAVbwTZSmTnAGd3P0u8fs olaAD3yoyqO6RcEYJLVP1IBAFurXAACDUb6ALoBVoX5RgrGtstS52Sc1tOmVIRLG en26+H6IVyvHVNpX3P9DxrPbyDMYrz4Oe6LbGGCLmTd8onVWFTBPT0A1D1fPCBdV Fa6pqvrRzWycKNEXIYC2+7TnryzxRlz4 -----END CERTIFICATE-----Generated at Sun Jan 25 06:08:55 2026 by rpki-client