This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json) Hash identifier: GD+jQKhBHftUfIOAax4T3hvHeEHfqwMxjDEp2YHg0ds= Subject key identifier: D7:CE:E6:E4:F3:22:33:27:CC:4E:0F:30:77:37:88:F4:AD:54:04:5D Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Certificate serial: 02EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft Manifest number: 02EC Signing time: Sun 25 Jan 2026 00:27:16 +0000 Manifest this update: Sun 25 Jan 2026 00:27:16 +0000 Manifest next update: Sun 01 Feb 2026 00:27:16 +0000 Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: Z+WTTeiJpL5sydo/tw++5yyG1os12Qad+udVxP5oeYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Validity Not Before: Jan 25 00:27:16 2026 GMT Not After : Feb 1 00:27:16 2026 GMT Subject: CN=69756364-de6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:64:6c:d7:0f:b3:ce:d0:b3:65:1d:5d:78:fe: 20:fa:ce:f2:d2:6c:28:ad:02:52:a4:61:1a:c6:73: cc:a3:57:60:36:1e:23:9e:56:9a:3a:62:9e:f3:31: a8:4d:7a:49:b9:f9:bb:2a:27:11:ff:1b:54:b3:65: 73:a8:a1:65:91:09:4e:58:42:3c:6c:97:97:2d:af: 79:8b:c5:f5:5d:2e:6f:84:6b:5f:8a:98:c8:e4:db: e9:ce:51:86:67:14:e5:c6:42:34:8f:13:a1:b1:9b: b8:a5:3e:a8:91:15:66:3e:d0:3a:5a:35:be:f2:bb: df:1b:36:61:ce:be:b8:95:7a:93:7e:7a:b0:68:4f: 0a:2d:59:c6:cc:75:53:81:63:4d:5b:86:59:cc:f2: 2d:6a:a3:8d:da:8b:97:4c:27:51:76:86:de:4d:09: 39:5a:1b:47:6d:51:40:de:63:06:8c:f1:b8:31:81: ae:2b:14:c9:84:0d:aa:68:95:2c:16:e1:36:72:84: fd:0c:f7:1f:7a:48:e4:f5:2b:40:53:0c:ce:da:ad: 60:c4:11:0b:5f:ad:a8:db:35:b8:ed:b8:dc:2b:d3: 99:fd:10:fa:18:5e:79:bc:d7:2a:11:4b:11:bb:e1: 1c:b2:1e:fd:71:bf:a9:92:24:87:8e:c1:a7:57:c6: a3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CE:E6:E4:F3:22:33:27:CC:4E:0F:30:77:37:88:F4:AD:54:04:5D X509v3 Authority Key Identifier: keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:10:27:64:2e:7f:d8:9b:23:c8:bf:70:fa:c5:2d:b7:3c:2a: c1:d6:e7:27:26:eb:df:e1:36:6a:d2:71:79:04:8f:50:fb:fb: 51:1e:a6:00:04:cf:6d:cf:1e:26:ba:84:9d:9d:b3:fb:86:b1: b4:90:65:bd:77:15:a2:a1:d9:4b:64:48:67:5e:34:b1:09:4b: 1a:90:01:b5:7d:5e:7c:cf:b5:da:c1:95:62:14:96:ec:c0:2d: 3e:fa:97:5e:15:ac:47:ae:c4:e2:82:66:1f:0c:10:54:90:2f: 76:05:22:f5:36:89:15:d1:76:4f:1d:14:6c:4a:cb:82:50:42: e3:ce:e9:1f:78:9e:30:4c:7a:b1:c9:1f:d5:ba:a9:45:87:43: 02:59:da:2e:96:80:00:ec:a1:22:bb:d4:45:26:13:6d:85:2e: df:8e:da:0c:79:a8:a0:b9:30:ba:bf:ea:57:ee:6a:50:2d:34: e5:9f:2c:22:5d:ce:ac:1f:eb:d8:2a:ea:9f:c6:e0:db:01:33: 37:61:a0:f2:ca:6f:af:49:18:00:ec:e5:ac:3c:00:e5:79:83: 33:03:12:ca:69:cf:55:dd:fb:dc:54:ec:ca:5d:9c:08:d5:2a: 9b:91:6d:c8:bf:93:b6:d9:9f:f3:67:23:72:c3:d2:a3:96:92: e3:52:50:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDkwMUE0M0M5QzQ4MDg2NzE3RURCQ0UyNTVDMDJBMkYw MzUzREFBRkEwHhcNMjYwMTI1MDAyNzE2WhcNMjYwMjAxMDAyNzE2WjAYMRYwFAYD VQQDDA02OTc1NjM2NC1kZTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9mRs1w+zztCzZR1deP4g+s7y0mworQJSpGEaxnPMo1dgNh4jnlaaOmKe8zGo TXpJufm7KicR/xtUs2VzqKFlkQlOWEI8bJeXLa95i8X1XS5vhGtfipjI5NvpzlGG ZxTlxkI0jxOhsZu4pT6okRVmPtA6WjW+8rvfGzZhzr64lXqTfnqwaE8KLVnGzHVT gWNNW4ZZzPItaqON2ouXTCdRdobeTQk5WhtHbVFA3mMGjPG4MYGuKxTJhA2qaJUs FuE2coT9DPcfekjk9StAUwzO2q1gxBELX62o2zW47bjcK9OZ/RD6GF55vNcqEUsR u+Ecsh79cb+pkiSHjsGnV8aj4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfO5uTz IjMnzE4PMHc3iPStVARdMB8GA1UdIwQYMBaAFJAaQ8nEgIZxftvOJVwCovA1Par6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81MEMxQkY5MjBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhuRi0yODRsWEFLaThEVTlx dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCcER5Y1NBaG5GLTI4NGxYQUtpOERVOXF2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81MEMxQkY5MjBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhu Ri0yODRsWEFLaThEVTlxdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7ECdkLn/YmyPIv3D6xS23PCrB1ucnJuvf4TZq0nF5BI9Q+/tRHqYA BM9tzx4muoSdnbP7hrG0kGW9dxWiodlLZEhnXjSxCUsakAG1fV58z7XawZViFJbs wC0++pdeFaxHrsTigmYfDBBUkC92BSL1NokV0XZPHRRsSsuCUELjzukfeJ4wTHqx yR/VuqlFh0MCWdouloAA7KEiu9RFJhNthS7fjtoMeaiguTC6v+pX7mpQLTTlnywi Xc6sH+vYKuqfxuDbATM3YaDyym+vSRgA7OWsPADleYMzAxLKac9V3fvcVOzKXZwI 1SqbkW3Iv5O22Z/zZyNyw9KjlpLjUlAL -----END CERTIFICATE-----Generated at Sun Jan 25 12:44:46 2026 by rpki-client