This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft File: 89pR_oC82pcIdSXiBGIeqfVXQZk.mft (raw, json) Hash identifier: sKI0I++u96LtGocM9eGk6ttoVeax8U5TiQfYJJfS6GE= Subject key identifier: 3D:10:83:30:50:CB:1D:66:83:82:6A:38:9D:FF:50:EB:7A:21:AC:90 Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99 Certificate issuer: /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199 Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft Manifest number: 021B Signing time: Sun 25 Jan 2026 01:52:37 +0000 Manifest this update: Sun 25 Jan 2026 01:52:36 +0000 Manifest next update: Sun 01 Feb 2026 01:52:36 +0000 Files and hashes: 1: 89pR_oC82pcIdSXiBGIeqfVXQZk.crl (hash: F0gNWvFEZsCEE+MsSFc26PSX8hmLiYoibQInL5joUWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CDA, serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199 Validity Not Before: Jan 25 01:52:36 2026 GMT Not After : Feb 1 01:52:36 2026 GMT Subject: CN=69757764-8291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:16:82:a5:3b:f1:82:93:0a:45:75:f8:e7:74: a7:9a:ce:7c:5f:f3:ce:78:e0:e4:0f:67:cc:05:ca: 9f:d7:16:15:34:02:2d:7a:e1:81:af:38:07:1d:21: f0:44:67:6a:1d:a6:a2:ca:a9:3c:a0:66:67:f7:f2: 6d:96:09:81:0f:99:6f:75:c3:b8:17:16:95:68:f3: 93:c5:bf:d5:c5:aa:35:46:56:7d:ce:5f:d6:ac:9a: c5:cb:3e:75:6a:bc:3e:f6:9b:02:5a:b4:19:95:64: 88:9a:19:d7:f5:39:c0:66:bb:34:8f:06:e0:93:a5: d1:ad:e2:b8:66:36:77:a1:05:08:c7:f1:81:63:f2: ce:54:b4:d2:5a:07:b5:16:5a:fd:ee:a4:8e:fb:83: b5:1f:1f:cd:72:51:a6:1f:fc:5f:b1:ba:4b:9a:bf: fe:5f:9e:1d:19:79:20:10:6c:d4:22:f2:2f:46:13: 93:b1:88:79:fe:66:97:bf:8b:1e:7d:07:92:03:5b: 2b:db:8e:f7:d1:09:73:b3:67:6f:2d:d6:f8:b2:f1: c0:99:2c:b0:77:09:66:d5:ae:c5:e9:df:4d:30:e1: 81:41:9c:93:58:a5:ab:46:c4:c4:05:21:a6:76:74: 3e:37:fb:ae:d5:a2:73:f7:80:34:08:db:a0:63:97: 6e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:10:83:30:50:CB:1D:66:83:82:6A:38:9D:FF:50:EB:7A:21:AC:90 X509v3 Authority Key Identifier: keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:13:01:03:bd:39:00:f3:0f:f0:77:0e:bd:cd:5a:ef:3c:03: 6d:34:6c:c1:a4:6e:ce:c0:59:24:ad:49:71:c1:ae:6b:c5:4e: ba:74:30:eb:a7:f5:3c:48:53:3e:92:a2:e2:94:ed:b1:b8:c1: f2:b6:77:12:8c:79:cc:69:1a:24:f9:b6:ac:44:47:73:b0:9b: 0c:b7:ca:7a:ea:82:ee:2b:87:19:d3:08:e5:91:cb:ad:48:45: 8d:ec:87:ba:50:f2:9f:b6:9d:49:1b:c4:b1:f1:23:2f:bc:98: 2e:11:52:b4:fb:4f:2d:64:57:97:12:ad:c5:8c:81:43:85:3e: 45:d1:bb:db:d7:f0:22:d6:ab:da:3e:9e:a4:e2:08:7d:09:c7: 76:cc:6f:0f:ea:a1:84:a5:21:b4:3e:6f:5d:1d:9b:d1:1c:b0: 98:0d:b5:ee:47:07:b6:14:90:df:40:a2:c9:fd:e0:94:05:50: 88:71:ca:70:a0:d4:45:47:fd:15:a8:a4:c3:bb:cc:1c:ff:4b: 2f:ec:ac:51:aa:74:b8:40:1d:9e:6b:42:ab:50:74:26:53:3c: 12:cc:bf:1c:59:f8:b5:11:14:f9:03:41:09:f7:29:0c:6c:61: 0a:9e:0a:17:cc:28:a7:7f:4f:3d:fc:40:98:48:80:5b:b4:e6: db:8c:e7:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDREExMTAvBgNVBAUTKEYzREE1MUZFODBCQ0RBOTcwODc1MjVFMjA0NjIxRUE5 RjU1NzQxOTkwHhcNMjYwMTI1MDE1MjM2WhcNMjYwMjAxMDE1MjM2WjAYMRYwFAYD VQQDDA02OTc1Nzc2NC04MjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4haCpTvxgpMKRXX453Snms58X/POeODkD2fMBcqf1xYVNAIteuGBrzgHHSHw RGdqHaaiyqk8oGZn9/JtlgmBD5lvdcO4FxaVaPOTxb/Vxao1RlZ9zl/WrJrFyz51 arw+9psCWrQZlWSImhnX9TnAZrs0jwbgk6XRreK4ZjZ3oQUIx/GBY/LOVLTSWge1 Flr97qSO+4O1Hx/NclGmH/xfsbpLmr/+X54dGXkgEGzUIvIvRhOTsYh5/maXv4se fQeSA1sr24730Qlzs2dvLdb4svHAmSywdwlm1a7F6d9NMOGBQZyTWKWrRsTEBSGm dnQ+N/uu1aJz94A0CNugY5dubQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0QgzBQ yx1mg4JqOJ3/UOt6IayQMB8GA1UdIwQYMBaAFPPaUf6AvNqXCHUl4gRiHqn1V0GZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NEQS80OUIyN0Q4QTA1 NEQxMUVFOURGQzE2MjRDNEY5QUUwMi84OXBSX29DODJwY0lkU1hpQkdJZXFmVlhR WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5cFJfb0M4MnBjSWRTWGlCR0llcWZWWFFaay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NEQS80OUIyN0Q4QTA1NEQxMUVFOURGQzE2MjRDNEY5QUUwMi84OXBSX29DODJw Y0lkU1hpQkdJZXFmVlhRWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJEwEDvTkA8w/wdw69zVrvPANtNGzBpG7OwFkkrUlxwa5rxU66dDDr p/U8SFM+kqLilO2xuMHytncSjHnMaRok+basREdzsJsMt8p66oLuK4cZ0wjlkcut SEWN7Ie6UPKftp1JG8Sx8SMvvJguEVK0+08tZFeXEq3FjIFDhT5F0bvb1/Ai1qva Pp6k4gh9Ccd2zG8P6qGEpSG0Pm9dHZvRHLCYDbXuRwe2FJDfQKLJ/eCUBVCIccpw oNRFR/0VqKTDu8wc/0sv7KxRqnS4QB2ea0KrUHQmUzwSzL8cWfi1ERT5A0EJ9ykM bGEKngoXzCinf089/ECYSIBbtObbjOdf -----END CERTIFICATE-----Generated at Sun Jan 25 10:42:37 2026 by rpki-client