This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft File: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft (raw, json) Hash identifier: Ieb91E/pJhPYuZdgOjhr8xeyu4ePYrx4GcBU2ZRnaWc= Subject key identifier: 5F:9A:88:AF:C3:8A:F5:51:E2:30:9B:7A:D2:63:7B:02:0E:55:34:26 Authority key identifier: D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 Certificate issuer: /CN=A91443DC/serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft Manifest number: 012A Signing time: Sun 25 Jan 2026 03:50:10 +0000 Manifest this update: Sun 25 Jan 2026 03:50:09 +0000 Manifest next update: Sun 01 Feb 2026 03:50:09 +0000 Files and hashes: 1: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl (hash: /lhQRe0B1oGAmC6bTU6aw6ScopJKVKTL2ar+x66UZaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC, serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Validity Not Before: Jan 25 03:50:09 2026 GMT Not After : Feb 1 03:50:09 2026 GMT Subject: CN=697592f2-2c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:53:23:d9:51:8d:61:5e:70:35:d6:86:4e:11: 48:66:10:33:8e:8f:66:bd:1d:44:8b:37:a4:8d:68: 44:bf:aa:1b:86:9a:c2:1b:2b:ce:7c:df:46:3c:5f: fa:77:6b:70:2a:0f:35:d2:bc:bf:f5:b0:07:5e:d7: 07:a4:31:37:bf:f9:4d:f9:e0:7f:32:69:d6:a4:81: e1:6f:c1:3f:48:ae:b0:a3:a8:bf:76:19:42:b2:72: 61:33:8a:3b:61:76:87:de:be:f0:ce:fd:15:e8:52: f1:87:2f:13:ab:e1:c6:f6:72:1e:56:24:8a:56:bd: 47:88:44:3d:5e:fe:2f:97:63:a9:f8:c5:b0:5d:66: 81:b0:9d:01:6a:ba:fb:03:e2:b3:bf:e5:fc:84:73: 36:5c:12:a0:c8:c5:7b:42:71:6b:47:20:fb:c1:c6: 82:79:61:ea:f1:ec:f7:f6:63:23:6b:c2:ca:55:ee: 71:da:66:76:37:7a:99:c5:84:91:02:47:34:71:75: b2:04:d5:01:07:67:f2:b2:73:c4:bf:3d:31:55:f0: e7:f5:a2:ed:c5:07:14:46:d2:d2:82:e7:67:f3:54: 71:e8:b6:58:33:43:f0:d8:5b:65:86:02:ee:30:dd: 90:62:3d:19:46:7f:d8:e1:82:10:eb:41:8a:4d:f0: aa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9A:88:AF:C3:8A:F5:51:E2:30:9B:7A:D2:63:7B:02:0E:55:34:26 X509v3 Authority Key Identifier: keyid:D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:a8:3e:4a:0c:24:2a:9d:de:ad:4f:ab:ac:30:98:7d:7d:05: 50:77:20:1f:4a:7d:3c:c3:6b:fa:a3:14:95:69:e9:91:57:a1: 85:12:fe:cc:69:39:c4:e5:35:15:b6:08:60:a2:45:21:33:c9: c5:74:83:bd:9e:b7:5b:51:85:44:9e:6d:b8:7d:b8:07:01:2c: 54:b6:8e:1c:24:e6:22:67:55:2f:e4:d0:3d:b3:9e:5a:5a:4e: ab:18:c5:25:88:20:c4:7b:d2:ec:65:7d:1d:61:e3:18:89:9b: 74:3e:2f:49:ac:5d:c2:ee:48:79:a0:d8:c8:79:1d:9e:72:58: 4a:52:c7:33:77:e9:1e:6b:15:b6:a0:bb:13:14:df:0f:5d:fe: 85:a8:2a:00:db:7f:f2:3f:98:8c:4b:cb:f9:23:1b:c8:43:bb: e6:2c:14:1b:0a:be:c6:fc:2e:88:5c:84:42:c3:28:2d:e1:90: 3d:40:a8:f6:19:91:3f:14:83:0c:79:d4:e2:c9:f1:fc:da:51: 84:38:8d:9c:c6:0d:9f:b9:8e:30:76:8d:70:67:94:82:00:29: 0a:25:f1:89:ee:d7:7d:53:0b:72:82:f3:ba:82:47:47:94:09: a6:2b:d8:1a:3e:34:e2:a4:c7:83:51:71:8b:0b:2b:79:a7:1a: 3e:75:52:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzREMxMTAvBgNVBAUTKEQxOEZGQ0M1MDREMzY5M0Q3RjhBMzhEODZEQzEyRTg4 Q0Q5NjBFNTYwHhcNMjYwMTI1MDM1MDA5WhcNMjYwMjAxMDM1MDA5WjAYMRYwFAYD VQQDDA02OTc1OTJmMi0yYzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVMj2VGNYV5wNdaGThFIZhAzjo9mvR1EizekjWhEv6obhprCGyvOfN9GPF/6 d2twKg810ry/9bAHXtcHpDE3v/lN+eB/MmnWpIHhb8E/SK6wo6i/dhlCsnJhM4o7 YXaH3r7wzv0V6FLxhy8Tq+HG9nIeViSKVr1HiEQ9Xv4vl2Op+MWwXWaBsJ0Barr7 A+Kzv+X8hHM2XBKgyMV7QnFrRyD7wcaCeWHq8ez39mMja8LKVe5x2mZ2N3qZxYSR Akc0cXWyBNUBB2fysnPEvz0xVfDn9aLtxQcURtLSgudn81Rx6LZYM0Pw2FtlhgLu MN2QYj0ZRn/Y4YIQ60GKTfCq+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+aiK/D ivVR4jCbetJjewIOVTQmMB8GA1UdIwQYMBaAFNGP/MUE02k9f4o42G3BLojNlg5W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy9BMDY1RDFFQTMw NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi8wWV84eFFUVGFUMV9pampZYmNFdWlNMldE bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBZXzh4UVRUYVQxX2lqalliY0V1aU0yV0RsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDNEQy9BMDY1RDFFQTMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi8wWV84eFFUVGFU MV9pampZYmNFdWlNMldEbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqqD5KDCQqnd6tT6usMJh9fQVQdyAfSn08w2v6oxSVaemRV6GFEv7M aTnE5TUVtghgokUhM8nFdIO9nrdbUYVEnm24fbgHASxUto4cJOYiZ1Uv5NA9s55a Wk6rGMUliCDEe9LsZX0dYeMYiZt0Pi9JrF3C7kh5oNjIeR2eclhKUsczd+keaxW2 oLsTFN8PXf6FqCoA23/yP5iMS8v5IxvIQ7vmLBQbCr7G/C6IXIRCwygt4ZA9QKj2 GZE/FIMMedTiyfH82lGEOI2cxg2fuY4wdo1wZ5SCACkKJfGJ7td9UwtygvO6gkdH lAmmK9gaPjTipMeDUXGLCyt5pxo+dVJJ -----END CERTIFICATE-----Generated at Sun Jan 25 15:43:14 2026 by rpki-client