This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft File: RNKGOHOg4Xndk_snhK0EhGYj5-4.mft (raw, json) Hash identifier: Ys7ZG1uqX7HhxY8kLOv1mNAm5jOFdXti8c23Qnx4kvI= Subject key identifier: A3:2D:C4:8C:A9:FC:FF:E5:3A:9D:C5:2F:5F:DB:F7:0B:9B:C4:3B:78 Authority key identifier: 44:D2:86:38:73:A0:E1:79:DD:93:FB:27:84:AD:04:84:66:23:E7:EE Certificate issuer: /CN=A914E4E2/serialNumber=44D2863873A0E179DD93FB2784AD04846623E7EE Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RNKGOHOg4Xndk_snhK0EhGYj5-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft Manifest number: 15 Signing time: Fri 23 Jan 2026 06:59:10 +0000 Manifest this update: Fri 23 Jan 2026 06:59:10 +0000 Manifest next update: Fri 30 Jan 2026 06:59:10 +0000 Files and hashes: 1: RNKGOHOg4Xndk_snhK0EhGYj5-4.crl (hash: Wh31FL+yXlxw4/bNIegssQAGSxHplDv5AIQYDZw+VV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.crl rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RNKGOHOg4Xndk_snhK0EhGYj5-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4E2, serialNumber=44D2863873A0E179DD93FB2784AD04846623E7EE Validity Not Before: Jan 23 06:59:10 2026 GMT Not After : Jan 30 06:59:10 2026 GMT Subject: CN=69731c3e-3681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ba:87:2c:0b:ce:82:9d:b6:86:0b:b7:12:00: 9c:00:0b:9d:36:a5:dc:c4:8f:c7:d4:e0:9a:0f:63: 20:45:7e:6c:21:92:92:e0:12:b0:c1:ac:41:90:2d: 05:d8:eb:76:3d:bf:ed:fd:dd:1b:9b:71:6b:59:c0: 1b:79:72:72:1a:5f:75:9c:5f:d6:d5:98:43:c1:95: c2:36:ff:5b:04:99:e2:b8:ac:af:2c:a8:3b:23:cb: 5b:3b:3e:a7:78:34:18:df:56:6e:f7:95:af:0a:34: 74:74:97:90:d6:8d:fe:50:a2:7d:70:6f:c7:1d:2d: 50:7d:0d:e6:6f:e6:97:9e:f4:e4:44:59:ab:dd:d1: fe:21:b6:df:0a:e0:0f:37:09:88:52:09:35:49:93: 6a:53:4c:f2:c8:bc:31:0f:84:2e:40:83:0e:da:42: 89:b6:88:66:0c:88:27:cc:69:20:8c:d8:15:c0:c2: 47:4c:91:9d:28:41:21:4f:48:ed:30:ef:e2:97:c9: b0:a0:42:a2:8d:9b:64:e9:94:0a:71:77:0d:f7:0f: b1:59:81:e9:7e:61:cd:6a:a0:e6:f1:10:95:a4:f8: af:1f:59:c9:c3:d6:94:ef:b8:d5:81:c7:c0:dc:4a: 59:65:b6:c9:6d:9a:a4:28:e6:07:fe:10:bd:bf:8c: b0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2D:C4:8C:A9:FC:FF:E5:3A:9D:C5:2F:5F:DB:F7:0B:9B:C4:3B:78 X509v3 Authority Key Identifier: keyid:44:D2:86:38:73:A0:E1:79:DD:93:FB:27:84:AD:04:84:66:23:E7:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RNKGOHOg4Xndk_snhK0EhGYj5-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:5f:36:a3:48:93:c7:42:74:5f:84:2f:ce:ef:7e:bb:da:0e: 0a:7d:69:83:6a:cd:fb:a7:fd:98:a9:3c:1a:e3:91:17:b2:07: a7:e1:01:48:f7:38:9d:ac:62:17:0b:0d:b6:22:21:fc:7d:a2: e5:74:c8:1d:ca:d0:6c:69:c3:14:13:23:6a:b1:82:64:fa:c7: f5:08:36:13:a9:17:c3:e6:b3:e8:24:60:9a:1b:2b:0a:47:40: bc:10:8f:7f:7f:e7:8f:66:56:b7:26:0f:1b:6a:d4:1b:02:35: 20:b4:bc:4d:5d:70:a1:b3:3b:d4:66:07:10:ee:7b:fa:8d:c9: be:28:80:33:16:84:d2:dd:10:a0:2b:c3:7d:92:a4:a5:7a:e5: f2:a9:e8:3a:02:2a:e2:25:26:84:d4:e0:b4:b7:89:19:e6:91: 18:52:53:e5:6d:19:a4:71:c2:c3:2f:8f:ac:1c:37:34:f2:f2: 4d:9e:ac:ac:aa:0c:bf:80:11:3a:1e:ce:d4:a7:28:b2:2e:2a: 42:35:c7:b0:49:cb:12:16:fc:e2:d4:2d:21:1b:02:3b:89:fa: 8b:b0:12:54:7c:f0:3c:04:d8:43:9f:9c:ba:f0:c6:13:ca:7b: fb:5d:34:47:e2:64:36:1c:ae:67:c1:dc:e5:56:ea:d3:44:bf: eb:5a:da:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTRFMjExMC8GA1UEBRMoNDREMjg2Mzg3M0EwRTE3OUREOTNGQjI3ODRBRDA0ODQ2 NjIzRTdFRTAeFw0yNjAxMjMwNjU5MTBaFw0yNjAxMzAwNjU5MTBaMBgxFjAUBgNV BAMMDTY5NzMxYzNlLTM2ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOuocsC86CnbaGC7cSAJwAC502pdzEj8fU4JoPYyBFfmwhkpLgErDBrEGQLQXY 63Y9v+393RubcWtZwBt5cnIaX3WcX9bVmEPBlcI2/1sEmeK4rK8sqDsjy1s7Pqd4 NBjfVm73la8KNHR0l5DWjf5Qon1wb8cdLVB9DeZv5pee9OREWavd0f4htt8K4A83 CYhSCTVJk2pTTPLIvDEPhC5Agw7aQom2iGYMiCfMaSCM2BXAwkdMkZ0oQSFPSO0w 7+KXybCgQqKNm2TplApxdw33D7FZgel+Yc1qoObxEJWk+K8fWcnD1pTvuNWBx8Dc SllltsltmqQo5gf+EL2/jLC5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoy3EjKn8 /+U6ncUvX9v3C5vEO3gwHwYDVR0jBBgwFoAURNKGOHOg4Xndk/snhK0EhGYj5+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNEUyLzRCREVGNUQ2REFG QTExRjA5QUY2MTYyMDdDRDM2NDFEL1JOS0dPSE9nNFhuZGtfc25oSzBFaEdZajUt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUk5LR09IT2c0WG5ka19zbmhLMEVoR1lqNS00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NEUyLzRCREVGNUQ2REFGQTExRjA5QUY2MTYyMDdDRDM2NDFEL1JOS0dPSE9nNFhu ZGtfc25oSzBFaEdZajUtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJtfNqNIk8dCdF+EL87vfrvaDgp9aYNqzfun/ZipPBrjkReyB6fhAUj3 OJ2sYhcLDbYiIfx9ouV0yB3K0GxpwxQTI2qxgmT6x/UINhOpF8Pms+gkYJobKwpH QLwQj39/549mVrcmDxtq1BsCNSC0vE1dcKGzO9RmBxDue/qNyb4ogDMWhNLdEKAr w32SpKV65fKp6DoCKuIlJoTU4LS3iRnmkRhSU+VtGaRxwsMvj6wcNzTy8k2erKyq DL+AEToeztSnKLIuKkI1x7BJyxIW/OLULSEbAjuJ+ouwElR88DwE2EOfnLrwxhPK e/tdNEfiZDYcrmfB3OVW6tNEv+ta2sQ= -----END CERTIFICATE-----Generated at Sun Jan 25 05:55:01 2026 by rpki-client