This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft File: Aonh4IK22hq6VVKEDAyrAsKjt04.mft (raw, json) Hash identifier: neI1ZkH7rV0HA2ZavnNiZNUPJDnuOJ31qI9ZoZqxub8= Subject key identifier: BA:9D:27:8A:68:31:C1:A0:C0:70:6F:DA:5F:7E:09:13:D5:A7:48:64 Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E Certificate issuer: /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft Manifest number: 0523 Signing time: Sat 24 Jan 2026 23:43:24 +0000 Manifest this update: Sat 24 Jan 2026 23:43:24 +0000 Manifest next update: Sat 31 Jan 2026 23:43:24 +0000 Files and hashes: 1: Aonh4IK22hq6VVKEDAyrAsKjt04.crl (hash: DMB4Xt36Nw2mn79ZOxD2uiedfWX6NKLzUo6r5ax3L70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70, serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E Validity Not Before: Jan 24 23:43:24 2026 GMT Not After : Jan 31 23:43:24 2026 GMT Subject: CN=6975591c-c623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ee:b2:51:0e:26:44:2e:26:c8:35:a9:f0:92: 5d:82:c0:ec:35:b8:4c:b8:45:65:fa:74:e8:2e:0d: 79:21:b6:32:7a:28:2c:c5:16:99:a4:42:e9:2a:ad: 8e:20:d2:e7:b1:9e:c0:3c:95:b9:30:f4:03:46:48: 3c:0e:a3:8d:ae:96:f3:a0:38:ea:b3:a7:5a:24:bb: 83:b3:95:cc:77:68:44:21:fa:21:bd:5a:f0:65:78: 2b:9f:df:31:ea:76:dc:4c:26:78:5f:80:8e:c6:46: d5:61:f1:5e:5e:46:db:83:09:46:1b:34:e8:8e:18: 0a:2b:4a:e3:e1:88:50:64:6e:37:ea:b0:5d:6b:85: 28:75:ef:f9:16:8f:8c:ad:83:73:47:85:5e:65:15: ce:a8:40:d0:b7:02:d6:11:66:7a:ce:1e:06:be:e8: b8:9f:8c:8c:29:a2:8c:9f:9e:f3:47:bd:27:56:af: dd:16:48:df:a0:7b:49:d8:f5:3e:26:a0:21:a9:35: 45:41:a3:18:f2:aa:2d:9b:c8:01:4b:db:72:0d:99: bb:69:a8:fc:a5:35:46:eb:ca:70:14:27:d9:9b:f4: e4:5c:77:f6:39:75:6b:b4:59:36:03:b3:91:33:58: cd:25:19:a9:00:03:e6:42:1c:13:81:12:16:c2:13: 7f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9D:27:8A:68:31:C1:A0:C0:70:6F:DA:5F:7E:09:13:D5:A7:48:64 X509v3 Authority Key Identifier: keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:58:7b:d2:ae:f8:28:8f:4e:e3:32:e1:e5:8d:dc:f8:de:89: 98:72:03:ca:43:ec:65:f7:5d:19:e1:9b:33:78:58:7a:88:1e: 37:a9:de:b2:71:9d:df:d0:1a:f5:2e:51:8d:96:e9:4a:03:33: c6:58:cd:e7:63:44:d4:b3:19:fa:9c:08:8f:45:19:3f:f7:9c: 7f:ce:86:d0:00:37:2b:a1:aa:b3:6d:30:13:f8:f0:43:cf:28: 7b:ee:ab:4a:91:63:25:63:4a:d8:59:8e:2a:f6:d5:4a:eb:6a: e6:84:32:26:e9:01:6b:87:1a:9d:22:1a:2e:45:0d:53:5c:34: 9f:71:1c:64:e6:2b:a1:5e:57:ea:36:fe:b8:de:9d:3b:f7:dd: 20:b1:5e:f2:0d:7b:97:2d:c8:52:eb:5e:54:31:7c:39:31:14: 2e:6c:8f:e1:b5:61:a1:f7:01:af:4d:06:fc:71:ed:7a:9c:8e: de:19:4c:65:d5:74:8a:a6:35:03:36:68:5d:35:03:2d:2b:be: 54:4f:35:40:85:c2:c3:ec:23:9c:2f:6d:7f:03:33:d6:ca:cf: 8e:3e:a0:02:59:e3:30:8c:6d:99:9f:10:0c:6b:81:5c:ea:fe: a5:e0:4b:5a:22:17:04:4a:05:48:30:4c:b0:3a:07:49:9b:ba: 1a:db:a3:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDNzAxMTAvBgNVBAUTKDAyODlFMUUwODJCNkRBMUFCQTU1NTI4NDBDMENBQjAy QzJBM0I3NEUwHhcNMjYwMTI0MjM0MzI0WhcNMjYwMTMxMjM0MzI0WjAYMRYwFAYD VQQDDA02OTc1NTkxYy1jNjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqe6yUQ4mRC4myDWp8JJdgsDsNbhMuEVl+nToLg15IbYyeigsxRaZpELpKq2O INLnsZ7APJW5MPQDRkg8DqONrpbzoDjqs6daJLuDs5XMd2hEIfohvVrwZXgrn98x 6nbcTCZ4X4COxkbVYfFeXkbbgwlGGzTojhgKK0rj4YhQZG436rBda4Uode/5Fo+M rYNzR4VeZRXOqEDQtwLWEWZ6zh4Gvui4n4yMKaKMn57zR70nVq/dFkjfoHtJ2PU+ JqAhqTVFQaMY8qotm8gBS9tyDZm7aaj8pTVG68pwFCfZm/TkXHf2OXVrtFk2A7OR M1jNJRmpAAPmQhwTgRIWwhN/UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqdJ4po McGgwHBv2l9+CRPVp0hkMB8GA1UdIwQYMBaAFAKJ4eCCttoaulVShAwMqwLCo7dO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEM3MC84MkJDODRFRUFD NjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9Bb25oNElLMjJocTZWVktFREF5ckFzS2p0 MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Fvbmg0SUsyMmhxNlZWS0VEQXlyQXNLanQwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEM3MC84MkJDODRFRUFDNjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9Bb25oNElLMjJo cTZWVktFREF5ckFzS2p0MDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaWHvSrvgoj07jMuHljdz43omYcgPKQ+xl910Z4ZszeFh6iB43qd6y cZ3f0Br1LlGNlulKAzPGWM3nY0TUsxn6nAiPRRk/95x/zobQADcroaqzbTAT+PBD zyh77qtKkWMlY0rYWY4q9tVK62rmhDIm6QFrhxqdIhouRQ1TXDSfcRxk5iuhXlfq Nv643p07990gsV7yDXuXLchS615UMXw5MRQubI/htWGh9wGvTQb8ce16nI7eGUxl 1XSKpjUDNmhdNQMtK75UTzVAhcLD7COcL21/AzPWys+OPqACWeMwjG2ZnxAMa4Fc 6v6l4EtaIhcESgVIMEywOgdJm7oa26Oo -----END CERTIFICATE-----Generated at Sun Jan 25 07:59:07 2026 by rpki-client