This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft File: kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft (raw, json) Hash identifier: KOXAjB6WneLkOmldxnfDg6qRlgxFfTJq+jC61MJ1mRI= Subject key identifier: CA:91:2B:EB:1D:B1:7D:4F:40:D3:DB:82:38:7B:D0:F6:83:76:4C:0B Authority key identifier: 90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 Certificate issuer: /CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Certificate serial: 04C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft Manifest number: 04C7 Signing time: Sat 24 Jan 2026 23:03:43 +0000 Manifest this update: Sat 24 Jan 2026 23:03:43 +0000 Manifest next update: Sat 31 Jan 2026 23:03:43 +0000 Files and hashes: 1: kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl (hash: ytIvl91pAiyENCHWmIQ78dhy5RbQ3TH+dTbUeOdzDCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1223 (0x4c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149106, serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Validity Not Before: Jan 24 23:03:43 2026 GMT Not After : Jan 31 23:03:43 2026 GMT Subject: CN=69754fcf-3f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:45:e9:5e:25:92:6d:ac:c3:36:d8:87:40: 32:40:b5:3b:d6:4e:9a:eb:01:34:87:8e:bc:04:f2: 61:6b:4a:25:34:72:ed:c1:09:39:da:51:57:5c:ab: c1:bf:69:ff:9d:f2:db:40:06:26:65:ae:25:99:f8: e8:ea:16:2b:91:f8:e9:5f:1f:6d:5b:8a:6c:3f:0d: c6:2d:95:bf:43:be:8c:7b:ba:af:23:23:2d:87:5b: fe:ac:8c:ff:56:1c:ba:2b:06:b3:c4:51:39:cc:50: 87:41:1c:1e:85:26:d1:b5:c2:29:2c:68:3f:4b:17: 18:ac:35:90:2e:3e:59:b1:ff:c3:91:b0:8f:40:59: 29:22:63:1b:b6:4a:69:f0:30:5b:cc:a4:c0:a7:c5: 6d:76:9f:b0:02:07:37:6e:e4:9c:95:74:73:bd:23: de:bf:4a:cf:0f:f0:e0:9e:da:12:7f:73:5e:fa:26: 65:50:f4:19:86:bd:f0:ec:17:e8:dd:25:f1:7d:b6: 66:8c:f8:e5:80:f3:b1:bb:1e:78:41:0e:61:7d:4d: 99:c6:b7:1e:9e:5a:7b:71:71:70:a2:85:44:c2:06: 3c:d8:a8:c0:b3:92:b0:7e:ad:4a:91:84:7c:bb:39: 9a:ca:a7:c4:23:64:0f:65:fc:dc:75:c6:05:4e:9e: 51:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:91:2B:EB:1D:B1:7D:4F:40:D3:DB:82:38:7B:D0:F6:83:76:4C:0B X509v3 Authority Key Identifier: keyid:90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:b5:7e:06:cf:8f:5d:ea:af:db:9e:57:6f:7f:67:02:08:7e: b8:aa:13:ed:d7:f4:2d:c4:45:fd:f2:b2:80:27:19:ea:11:93: ab:51:17:19:49:ed:57:bb:39:82:e3:79:5b:01:5e:82:f4:3a: e2:40:76:d1:1e:e5:5d:4a:a8:34:d2:f6:55:29:54:52:13:39: 3e:32:49:d4:78:07:b6:ab:c5:3f:03:a8:c4:a2:96:f2:91:5d: ed:c0:1a:29:94:83:61:12:fd:bc:26:ec:9a:0e:59:dc:4a:00: 8b:51:2b:e1:47:2b:92:df:c0:aa:1b:80:6b:78:4e:a3:19:a8: da:b4:3b:03:55:97:22:48:ed:f0:c6:9e:9f:50:95:2e:03:df: 46:24:46:55:3d:93:8d:85:a9:16:e8:8c:72:3e:13:82:68:42: ae:a6:de:83:e6:d8:c0:94:29:58:22:cc:45:f6:1d:d8:e9:7e: 1e:07:46:68:a0:18:93:dc:63:18:2b:13:6e:73:98:a5:93:64: 19:af:3d:9c:6a:11:d1:d4:8d:3c:df:62:45:e0:e5:64:ed:73: ab:2d:30:79:20:d6:cd:1c:2b:df:6b:a9:8d:c1:dd:cc:17:be: 87:76:f5:e7:f7:b9:8e:3d:63:c5:57:c2:71:94:4b:36:1f:5c: af:2b:26:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkxMDYxMTAvBgNVBAUTKDkwOTQzRUI4RUFENDRDMzZFREM5OTEwMzFCRkY4OEI4 QUI2NTVBMjkwHhcNMjYwMTI0MjMwMzQzWhcNMjYwMTMxMjMwMzQzWjAYMRYwFAYD VQQDDA02OTc1NGZjZi0zZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3ZF6V4lkm2swzbYh0AyQLU71k6a6wE0h468BPJha0olNHLtwQk52lFXXKvB v2n/nfLbQAYmZa4lmfjo6hYrkfjpXx9tW4psPw3GLZW/Q76Me7qvIyMth1v+rIz/ Vhy6KwazxFE5zFCHQRwehSbRtcIpLGg/SxcYrDWQLj5Zsf/DkbCPQFkpImMbtkpp 8DBbzKTAp8Vtdp+wAgc3buSclXRzvSPev0rPD/DgntoSf3Ne+iZlUPQZhr3w7Bfo 3SXxfbZmjPjlgPOxux54QQ5hfU2Zxrcenlp7cXFwooVEwgY82KjAs5Kwfq1KkYR8 uzmayqfEI2QPZfzcdcYFTp5RkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqRK+sd sX1PQNPbgjh70PaDdkwLMB8GA1UdIwQYMBaAFJCUPrjq1Ew27cmRAxv/iLirZVop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTEwNi85NjE3QzA2RTUz NjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVREYnR5WkVER18tSXVLdGxX aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tKUS11T3JVVERidHlaRURHXy1JdUt0bFdpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTEwNi85NjE3QzA2RTUzNjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVRE YnR5WkVER18tSXVLdGxXaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCktX4Gz49d6q/bnldvf2cCCH64qhPt1/QtxEX98rKAJxnqEZOrURcZ Se1XuzmC43lbAV6C9DriQHbRHuVdSqg00vZVKVRSEzk+MknUeAe2q8U/A6jEopby kV3twBoplINhEv28JuyaDlncSgCLUSvhRyuS38CqG4BreE6jGajatDsDVZciSO3w xp6fUJUuA99GJEZVPZONhakW6IxyPhOCaEKupt6D5tjAlClYIsxF9h3Y6X4eB0Zo oBiT3GMYKxNuc5ilk2QZrz2cahHR1I0832JF4OVk7XOrLTB5INbNHCvfa6mNwd3M F76HdvXn97mOPWPFV8JxlEs2H1yvKyZl -----END CERTIFICATE-----Generated at Sun Jan 25 04:32:12 2026 by rpki-client