This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft File: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft (raw, json) Hash identifier: a9rI3karvoU2NGGHBSVEzAsCOXNsSTpbJW2BKCMLOBE= Subject key identifier: 33:1E:BF:D6:AC:C4:42:88:53:BE:06:66:26:5B:70:80:AE:42:C9:5A Authority key identifier: B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76 Certificate issuer: /CN=A9154FFD/serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft Manifest number: 2F Signing time: Sun 25 Jan 2026 06:39:53 +0000 Manifest this update: Sun 25 Jan 2026 06:39:53 +0000 Manifest next update: Sun 01 Feb 2026 06:39:53 +0000 Files and hashes: 1: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl (hash: ejtEibuefskhMQvKdFYoex9IqolrAuoYkYzbinvVh7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154FFD, serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76 Validity Not Before: Jan 25 06:39:53 2026 GMT Not After : Feb 1 06:39:53 2026 GMT Subject: CN=6975bab9-031f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:44:f8:8f:ed:15:56:4c:d7:59:be:f7:1c:03: 2a:0f:e1:13:1b:c4:c7:32:a3:d2:75:e2:8d:55:f7: e1:b5:4e:89:27:29:4d:20:ee:20:1f:37:06:6c:62: b6:cc:02:5e:f3:cf:fe:9c:cb:ab:b7:89:4f:28:fa: 68:a4:b6:fe:25:32:0f:52:fd:e6:8d:37:c8:50:fd: 2d:d7:79:c0:56:ff:3b:b3:75:9e:48:fa:87:d1:cf: fe:75:e4:30:8e:b1:c6:be:34:a4:ae:08:5d:59:72: 54:d9:55:86:28:ea:30:57:45:ba:0c:85:fa:dd:15: 84:ba:86:9a:a3:f5:06:bb:05:35:7f:b6:39:c7:3f: 7b:05:8f:e3:e0:5a:1a:1f:28:03:fa:2c:e7:26:18: 76:a5:fa:9a:7d:98:76:fc:06:a2:45:4b:63:a3:a9: 5b:a1:4e:6d:74:0e:c1:f4:d3:cd:34:07:6c:ee:84: 2f:9f:0c:0c:1e:07:7c:6f:71:1b:e2:b8:20:c3:53: b8:4a:0e:95:3f:80:99:3e:49:ca:57:87:8d:3d:eb: e8:ad:85:71:71:67:ba:1f:d3:24:bc:f0:a3:ef:6c: ab:85:23:11:65:00:91:08:23:32:e9:61:69:a4:96: fb:9e:ec:d8:41:f7:16:de:b5:bc:14:8e:7f:7d:4b: 56:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1E:BF:D6:AC:C4:42:88:53:BE:06:66:26:5B:70:80:AE:42:C9:5A X509v3 Authority Key Identifier: keyid:B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:d6:ae:62:69:fb:5e:16:69:3d:61:5a:81:7d:78:90:e3:7f: 25:df:e6:38:84:74:1c:82:eb:1f:fd:2a:17:db:d0:48:ff:14: 34:da:67:7b:23:75:bb:55:c5:11:1d:83:8d:60:c4:af:d8:eb: de:88:3f:cb:cb:2d:67:9d:b0:20:5e:cd:27:ac:58:78:c4:62: 7d:9e:4c:67:60:1d:f5:52:b2:09:81:f3:5b:e1:d1:8c:f7:bc: d9:c1:cc:26:b7:6e:b1:dc:a0:20:10:62:f0:d7:d1:d1:87:8b: fa:41:67:20:e8:f0:11:33:a4:6e:21:c5:bd:13:0b:6d:ab:d8: c7:66:05:17:8a:9d:82:7d:59:05:5b:41:ac:20:86:a0:01:f0: 69:86:23:af:cf:7e:92:76:e2:e9:59:bc:98:0e:6f:68:50:52: ae:54:67:09:db:21:10:6d:79:d1:a0:03:a2:0c:62:bd:72:91: 7c:7e:e3:72:4f:d6:d1:d8:6c:3b:82:ce:38:4a:7e:ac:77:30: db:19:a1:fa:ba:08:0c:92:ea:86:62:7f:fc:77:bf:24:28:e4: fe:89:7f:e3:c7:95:72:0d:71:a0:b8:47:b6:00:9f:3f:02:f2: 23:58:cc:bb:d1:48:96:05:35:08:e9:df:55:08:a3:69:64:93: 38:65:75:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NEZGRDExMC8GA1UEBRMoQjY3Q0Q0RjMwQURDMTk1MEI5MkRDMzQ5OEY5QjUzNTI2 NjA1QkY3NjAeFw0yNjAxMjUwNjM5NTNaFw0yNjAyMDEwNjM5NTNaMBgxFjAUBgNV BAMMDTY5NzViYWI5LTAzMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKRPiP7RVWTNdZvvccAyoP4RMbxMcyo9J14o1V9+G1ToknKU0g7iAfNwZsYrbM Al7zz/6cy6u3iU8o+miktv4lMg9S/eaNN8hQ/S3XecBW/zuzdZ5I+ofRz/515DCO sca+NKSuCF1ZclTZVYYo6jBXRboMhfrdFYS6hpqj9Qa7BTV/tjnHP3sFj+PgWhof KAP6LOcmGHal+pp9mHb8BqJFS2OjqVuhTm10DsH00800B2zuhC+fDAweB3xvcRvi uCDDU7hKDpU/gJk+ScpXh4096+ithXFxZ7of0yS88KPvbKuFIxFlAJEIIzLpYWmk lvue7NhB9xbetbwUjn99S1bnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMx6/1qzE QohTvgZmJltwgK5CyVowHwYDVR0jBBgwFoAUtnzU8wrcGVC5LcNJj5tTUmYFv3Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0RkZEL0VFRTY4QzY0QjQ4 ODExRjBBNzQyRjU3RUM0RjlBRTAyL3RuelU4d3JjR1ZDNUxjTkpqNXRUVW1ZRnYz WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdG56VTh3cmNHVkM1TGNOSmo1dFRVbVlGdjNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 RkZEL0VFRTY4QzY0QjQ4ODExRjBBNzQyRjU3RUM0RjlBRTAyL3RuelU4d3JjR1ZD NUxjTkpqNXRUVW1ZRnYzWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANDWrmJp+14WaT1hWoF9eJDjfyXf5jiEdByC6x/9Khfb0Ej/FDTaZ3sj dbtVxREdg41gxK/Y696IP8vLLWedsCBezSesWHjEYn2eTGdgHfVSsgmB81vh0Yz3 vNnBzCa3brHcoCAQYvDX0dGHi/pBZyDo8BEzpG4hxb0TC22r2MdmBReKnYJ9WQVb QawghqAB8GmGI6/PfpJ24ulZvJgOb2hQUq5UZwnbIRBtedGgA6IMYr1ykXx+43JP 1tHYbDuCzjhKfqx3MNsZofq6CAyS6oZif/x3vyQo5P6Jf+PHlXINcaC4R7YAnz8C 8iNYzLvRSJYFNQjp31UIo2lkkzhldUI= -----END CERTIFICATE-----Generated at Sun Jan 25 21:45:07 2026 by rpki-client