This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft File: CUyLxdrczZwvs89F0UZN7s86HGA.mft (raw, json) Hash identifier: cX1L7JZRiYHv5WJJ6YDxCsmN47f6NTmlmgS7rz27TNY= Subject key identifier: 90:2B:49:78:DD:75:29:43:C6:25:F4:56:CF:76:69:F2:F4:08:CD:A0 Authority key identifier: 09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60 Certificate issuer: /CN=A9164164/serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft Manifest number: E1 Signing time: Sun 25 Jan 2026 04:43:32 +0000 Manifest this update: Sun 25 Jan 2026 04:43:31 +0000 Manifest next update: Sun 01 Feb 2026 04:43:31 +0000 Files and hashes: 1: CUyLxdrczZwvs89F0UZN7s86HGA.crl (hash: oyu++be4AyqhsWhCaHsYkjbF7AHzKBHJaSFrPJny/os=) 2: F1B3D754A18211EFA2B7E923C4F9AE02.roa (hash: GeRlBiJyqWGh6f479lh81CoGyQx83e/65TjpivC7USM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164164, serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60 Validity Not Before: Jan 25 04:43:31 2026 GMT Not After : Feb 1 04:43:31 2026 GMT Subject: CN=69759f74-e9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a8:0f:1a:62:1c:80:f1:0e:f5:22:28:f0:b4: 6b:e8:ea:76:b1:22:11:dc:71:dc:09:f5:f6:58:2f: 83:2b:47:d1:c9:ba:8f:05:d0:2a:68:c7:5b:7e:57: 1d:65:76:0b:e2:12:c4:76:ef:5a:e1:95:eb:f0:0b: 31:94:6d:e6:5a:5b:32:c9:31:a6:0b:de:67:78:b5: e2:03:a0:f2:a3:ce:f1:11:f7:f9:2d:f9:6a:e1:35: 0a:c1:b6:ac:2e:e0:f2:ab:ed:1f:00:c8:67:45:0a: 39:89:de:ed:7e:32:b6:ea:70:00:69:80:b3:2a:97: cb:28:5b:b8:88:e8:37:07:14:7b:9e:8c:14:f0:fa: 7d:bb:ba:43:44:54:b5:c3:ef:02:1b:6d:10:b8:e4: c0:26:60:d6:da:70:b3:55:38:8e:f5:e8:2a:4c:42: 49:41:6d:88:45:55:15:3e:a5:f3:93:91:b9:e0:91: 66:29:db:9a:59:c6:69:c2:45:4d:29:a1:1e:a4:7f: a6:b5:2b:90:29:b5:91:4d:7b:c4:da:8f:4a:ec:16: 0e:b7:a9:3f:de:8e:cf:d5:9d:66:be:0d:e8:93:fe: d2:10:0d:a2:cd:f5:26:6a:b6:8a:a6:75:be:e4:91: 7b:f8:a3:d3:8b:bc:49:cd:a7:4c:e1:fc:f4:38:9b: 75:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2B:49:78:DD:75:29:43:C6:25:F4:56:CF:76:69:F2:F4:08:CD:A0 X509v3 Authority Key Identifier: keyid:09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:09:49:ce:7f:97:bf:95:6c:6a:7b:b4:72:d2:84:dd:9f:b2: 39:c4:93:cd:39:30:1a:1c:b4:f6:9c:9c:22:c1:5e:3c:33:91: f8:b1:83:9d:b1:f3:f8:bf:ec:a2:6e:84:68:af:9d:fe:ac:f8: 32:ea:de:9e:31:fd:f8:48:04:3f:20:30:a0:f1:72:1b:0e:85: 63:06:f4:57:e1:d0:af:71:4d:11:d1:60:82:51:9b:4f:41:43: 12:8f:9f:e9:2a:30:cf:eb:0d:b0:fc:e6:e5:29:59:ac:74:5a: a5:66:5a:6a:cb:18:0e:bc:2c:f8:f6:e6:29:fc:8c:c7:ad:fb: d1:5b:14:fd:5c:88:30:f5:12:15:37:83:4a:5d:89:0b:aa:86: ab:df:bd:f4:6e:54:12:00:9d:fd:ac:f6:72:d0:9b:aa:3e:4d: df:27:e7:fa:bc:be:c6:f6:fa:46:df:08:d1:6b:3d:25:7e:bf: 03:78:1c:c2:07:75:84:53:f4:0f:e2:29:19:56:a0:5c:d7:57: 9d:d8:c1:c7:45:a8:87:62:1f:bd:7e:28:bc:47:c1:7e:ca:9c: 59:72:f1:1d:c0:07:89:1f:8c:73:82:0a:9b:ec:31:53:b4:ac: ba:ff:cc:84:47:39:68:d6:45:6b:7d:50:12:4c:09:02:97:a5: 87:ee:9b:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQxNjQxMTAvBgNVBAUTKDA5NEM4QkM1REFEQ0NEOUMyRkIzQ0Y0NUQxNDY0REVF Q0YzQTFDNjAwHhcNMjYwMTI1MDQ0MzMxWhcNMjYwMjAxMDQ0MzMxWjAYMRYwFAYD VQQDDA02OTc1OWY3NC1lOWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKgPGmIcgPEO9SIo8LRr6Op2sSIR3HHcCfX2WC+DK0fRybqPBdAqaMdbflcd ZXYL4hLEdu9a4ZXr8AsxlG3mWlsyyTGmC95neLXiA6Dyo87xEff5Lflq4TUKwbas LuDyq+0fAMhnRQo5id7tfjK26nAAaYCzKpfLKFu4iOg3BxR7nowU8Pp9u7pDRFS1 w+8CG20QuOTAJmDW2nCzVTiO9egqTEJJQW2IRVUVPqXzk5G54JFmKduaWcZpwkVN KaEepH+mtSuQKbWRTXvE2o9K7BYOt6k/3o7P1Z1mvg3ok/7SEA2izfUmaraKpnW+ 5JF7+KPTi7xJzadM4fz0OJt1FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJArSXjd dSlDxiX0Vs92afL0CM2gMB8GA1UdIwQYMBaAFAlMi8Xa3M2cL7PPRdFGTe7POhxg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDE2NC9BRTcyMjg5Q0Ex ODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9DVXlMeGRyY3pad3ZzODlGMFVaTjdzODZI R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVeUx4ZHJjelp3dnM4OUYwVVpON3M4NkhHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDE2NC9BRTcyMjg5Q0ExODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9DVXlMeGRyY3pa d3ZzODlGMFVaTjdzODZIR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0CUnOf5e/lWxqe7Ry0oTdn7I5xJPNOTAaHLT2nJwiwV48M5H4sYOd sfP4v+yiboRor53+rPgy6t6eMf34SAQ/IDCg8XIbDoVjBvRX4dCvcU0R0WCCUZtP QUMSj5/pKjDP6w2w/OblKVmsdFqlZlpqyxgOvCz49uYp/IzHrfvRWxT9XIgw9RIV N4NKXYkLqoar3730blQSAJ39rPZy0JuqPk3fJ+f6vL7G9vpG3wjRaz0lfr8DeBzC B3WEU/QP4ikZVqBc11ed2MHHRaiHYh+9fii8R8F+ypxZcvEdwAeJH4xzggqb7DFT tKy6/8yERzlo1kVrfVASTAkCl6WH7pvh -----END CERTIFICATE-----Generated at Sun Jan 25 07:52:55 2026 by rpki-client