This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft File: KWYvUTolTw218H21gZ--rkD3vxU.mft (raw, json) Hash identifier: WN/Byr9TqE1i2K3U+bpShLqv3onafRvZd+L5Z6AvoEc= Subject key identifier: 0F:26:D8:90:3A:D1:0C:D0:A9:1B:29:87:A3:33:24:73:75:A2:EB:A9 Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15 Certificate issuer: /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15 Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft Manifest number: 0348 Signing time: Sun 25 Jan 2026 00:09:07 +0000 Manifest this update: Sun 25 Jan 2026 00:09:07 +0000 Manifest next update: Sun 01 Feb 2026 00:09:07 +0000 Files and hashes: 1: KWYvUTolTw218H21gZ--rkD3vxU.crl (hash: c3iZM9LLOL9kPgf/Xrqm5ZV1vJ/FvgAfQVqaIdSOTL4=) 2: EF6D9D70EBB511ECA410BF6DC4F9AE02.roa (hash: HZusuoH1up8FDoOQyhT/1qoC+ff/aBBAonRcZ28YjMI=) 3: F09C691AEBB511ECA410BF6DC4F9AE02.roa (hash: 3t64o2UXNsxTNPIx1fcvAHHTrkMYu5vuFZ50YkMkLZI=) 4: EFF97098EBB511ECA410BF6DC4F9AE02.roa (hash: 3ncZT46pze+jMf4M4LYzFO82k2evN1uShAP1OkhdIKI=) 5: F123461AEBB511ECA410BF6DC4F9AE02.roa (hash: Eku/YHWxKxpsRX6ogTNh3LDNRp5rXVLPBXYqCNfR56g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15 Validity Not Before: Jan 25 00:09:07 2026 GMT Not After : Feb 1 00:09:07 2026 GMT Subject: CN=69755f23-1804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e0:26:52:46:7d:af:bb:4e:8b:9c:ea:3d:93: 03:76:8c:0d:a3:e7:6f:71:11:56:de:42:20:bc:bc: 57:7a:68:4f:5f:8e:2e:40:7f:c3:9a:3c:a7:5f:c8: 02:b7:bf:38:ac:6e:7c:3b:e3:16:1b:3e:2d:ef:4b: 59:8c:7d:5c:3f:cd:1a:7e:ca:bb:ef:b2:1d:1e:e0: f6:53:98:08:9c:da:ab:85:1d:93:03:d6:80:b9:a6: 28:0f:24:93:94:62:ea:1a:de:d0:4a:7a:fe:98:52: 71:13:94:0e:c3:71:7c:26:d9:df:ef:7d:fd:83:90: ee:f5:ec:2b:b6:48:5d:db:ca:60:9f:19:ea:93:b3: b9:7a:c8:ff:6b:d8:2b:cf:ad:11:46:84:42:57:c5: 24:28:d5:43:97:df:aa:06:e3:23:3b:72:e0:01:bb: 11:6f:d5:4f:7e:4b:06:77:70:37:aa:e3:f4:df:7b: d8:9c:e8:5a:3f:c5:c9:72:3f:dd:23:7e:e8:55:0d: 5f:f0:5d:ab:59:65:eb:a0:25:4b:f1:76:be:0b:94: 1a:b8:ce:a2:17:f7:f9:88:9c:82:ce:3e:4b:0c:87: 99:dd:8b:2a:f3:19:bd:58:cc:fc:d7:79:66:69:ba: 30:df:57:3e:4c:ab:73:34:13:ab:b6:5d:03:c3:55: 9e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:26:D8:90:3A:D1:0C:D0:A9:1B:29:87:A3:33:24:73:75:A2:EB:A9 X509v3 Authority Key Identifier: keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:02:1a:28:12:88:fb:ce:c9:21:cf:0d:58:ce:91:68:bc:96: c8:4b:1e:6d:32:a9:a0:e6:7c:50:27:0d:4a:12:a4:11:e6:87: 44:f9:af:83:ac:65:f0:5a:51:c9:5a:d9:f0:54:d1:4a:07:eb: 0a:bd:e8:c1:ef:f4:fc:5f:eb:95:82:0b:0b:95:85:fa:34:60: 5e:51:c4:1b:f3:5d:35:a0:f2:fa:e4:84:f2:e7:90:99:39:3a: c0:65:89:18:a9:21:1a:38:36:5c:0f:98:74:5f:c9:91:a4:ea: ee:dc:d2:1e:d6:d1:ed:81:01:eb:9f:14:55:32:d9:2c:03:a7: 1f:6e:7f:ed:0f:65:9c:f6:6c:c0:8e:99:35:61:02:b5:3e:57: 23:0c:9f:ac:5c:20:14:79:e1:61:9a:1d:1c:ae:02:83:94:39: 9e:90:d4:f2:62:30:73:1f:9b:e0:90:b4:17:4d:54:99:bf:7f: c9:67:14:09:69:58:08:89:65:6e:71:01:f0:76:ef:f7:13:48: 75:b8:f1:5b:de:69:1f:70:07:fb:63:67:dd:f3:bc:4b:95:30: 8d:09:22:19:bc:0a:bd:48:2b:c9:55:b3:5e:16:f5:88:25:21: 59:6a:d3:a6:eb:0e:c4:15:6f:f4:1a:98:53:49:ac:8a:08:e0: cc:65:5a:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZDODQxMTAvBgNVBAUTKDI5NjYyRjUxM0EyNTRGMERCNUYwN0RCNTgxOUZCRUFF NDBGN0JGMTUwHhcNMjYwMTI1MDAwOTA3WhcNMjYwMjAxMDAwOTA3WjAYMRYwFAYD VQQDDA02OTc1NWYyMy0xODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjOAmUkZ9r7tOi5zqPZMDdowNo+dvcRFW3kIgvLxXemhPX44uQH/DmjynX8gC t784rG58O+MWGz4t70tZjH1cP80afsq777IdHuD2U5gInNqrhR2TA9aAuaYoDyST lGLqGt7QSnr+mFJxE5QOw3F8Jtnf7339g5Du9ewrtkhd28pgnxnqk7O5esj/a9gr z60RRoRCV8UkKNVDl9+qBuMjO3LgAbsRb9VPfksGd3A3quP033vYnOhaP8XJcj/d I37oVQ1f8F2rWWXroCVL8Xa+C5QauM6iF/f5iJyCzj5LDIeZ3Ysq8xm9WMz813lm abow31c+TKtzNBOrtl0Dw1WemQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8m2JA6 0QzQqRsph6MzJHN1ouupMB8GA1UdIwQYMBaAFClmL1E6JU8NtfB9tYGfvq5A978V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkM4NC8yQTlCQjAyNkVC QjExMUVDODZERTM1NjVDNEY5QUUwMi9LV1l2VVRvbFR3MjE4SDIxZ1otLXJrRDN2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXWXZVVG9sVHcyMThIMjFnWi0tcmtEM3Z4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkM4NC8yQTlCQjAyNkVCQjExMUVDODZERTM1NjVDNEY5QUUwMi9LV1l2VVRvbFR3 MjE4SDIxZ1otLXJrRDN2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuAhooEoj7zskhzw1YzpFovJbISx5tMqmg5nxQJw1KEqQR5odE+a+D rGXwWlHJWtnwVNFKB+sKvejB7/T8X+uVggsLlYX6NGBeUcQb8101oPL65ITy55CZ OTrAZYkYqSEaODZcD5h0X8mRpOru3NIe1tHtgQHrnxRVMtksA6cfbn/tD2Wc9mzA jpk1YQK1PlcjDJ+sXCAUeeFhmh0crgKDlDmekNTyYjBzH5vgkLQXTVSZv3/JZxQJ aVgIiWVucQHwdu/3E0h1uPFb3mkfcAf7Y2fd87xLlTCNCSIZvAq9SCvJVbNeFvWI JSFZatOm6w7EFW/0GphTSayKCODMZVqu -----END CERTIFICATE-----Generated at Sun Jan 25 06:18:01 2026 by rpki-client