This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json) Hash identifier: 0lBNjvGcTX1Kcc4nv318AY1uidNH2uXxtayHrMJ9DU4= Subject key identifier: E2:4B:D6:60:9B:52:DF:CF:7C:E9:9B:9A:97:9C:6D:FE:30:29:61:D2 Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Certificate serial: 16A6 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft Manifest number: 169C Signing time: Sat 24 Jan 2026 16:26:25 +0000 Manifest this update: Sat 24 Jan 2026 16:26:25 +0000 Manifest next update: Sat 31 Jan 2026 16:26:25 +0000 Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: akWsax5g24vsbrlElpIk1fUr3oVhDpqQi2QiXBXwRZU=) 2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: LPGhf2+lZ/tfy7iMoJQ9mcHsSA792NuIJHPh9NLe0yI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5798 (0x16a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Validity Not Before: Jan 24 16:26:25 2026 GMT Not After : Jan 31 16:26:25 2026 GMT Subject: CN=6974f2b1-9bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:72:d6:bb:fd:bd:fd:bc:97:1b:93:97:82: 09:a5:93:93:7e:08:58:8f:7f:20:a7:9b:24:a2:23: 0c:b9:ed:63:2b:c4:dc:c1:fc:68:07:23:2e:65:a6: 14:41:21:6f:56:bc:66:bd:a9:5c:af:fb:b5:b9:cf: 95:c6:61:6c:1f:82:fd:b7:a4:ef:a8:6b:17:fc:6b: cb:07:88:29:3b:c6:77:07:5f:18:38:0f:79:ae:20: 27:2d:dc:2d:74:47:53:22:91:c2:0d:d4:e6:14:1b: 2f:f0:1a:f4:04:f9:33:e9:f0:b2:1e:66:78:89:af: 0b:82:df:b8:bf:e1:b0:ae:56:9d:3a:34:9b:c9:b0: fe:70:c2:7c:71:4a:bf:c4:54:5e:d2:07:73:6d:ea: bd:90:d6:f2:3d:d3:4a:06:e9:1e:51:f3:9c:24:ed: b7:8d:17:8b:34:84:32:23:23:31:b3:ad:d9:6b:c9: 7c:46:0b:c2:af:cc:31:23:c0:d2:28:ec:b2:23:30: ca:13:5f:65:2f:fb:a4:8e:d9:58:a5:d6:8c:95:fc: 0a:ae:c8:b9:61:c2:5d:d9:b7:ea:ce:01:ef:a0:22: b0:15:44:15:13:eb:15:53:2a:99:8e:78:7e:fa:b3: 22:e9:02:78:48:73:35:40:be:bd:05:62:4b:37:a8: 47:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4B:D6:60:9B:52:DF:CF:7C:E9:9B:9A:97:9C:6D:FE:30:29:61:D2 X509v3 Authority Key Identifier: keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:9f:61:2a:44:eb:36:30:51:30:82:ec:14:1b:c9:a8:86:06: b1:9d:d7:c7:25:67:e6:51:af:a8:d5:98:94:ec:87:8e:0f:c2: 98:e5:f2:63:ac:84:bf:41:e6:f8:29:2b:e9:da:58:b0:e4:d4: 43:12:78:a7:ea:f8:58:40:bb:af:60:02:fc:09:59:f9:03:07: 06:ef:65:24:64:cb:87:26:fc:42:ea:6e:6a:4a:cb:be:e8:18: d4:ee:93:be:b9:5b:e4:47:fe:63:ca:55:88:9e:2e:eb:5a:2a: 11:42:e9:34:22:79:17:86:a6:c1:9a:f3:b0:f5:fd:f5:f9:7d: de:81:6c:91:53:f1:f9:a9:17:b2:97:28:b0:c5:05:e0:e4:32: 6e:66:5f:ad:ca:c0:b0:dd:f4:25:af:59:71:2c:53:65:1a:3c: 8d:fe:48:d6:90:77:29:5e:db:83:a3:07:ca:14:99:9a:03:03: 28:86:cc:ac:6a:92:61:fb:71:03:52:ce:90:1f:5f:27:a0:bd: d5:76:6b:2d:07:df:5a:44:35:12:c4:78:e9:17:47:3d:39:28: 82:cc:69:d8:1a:02:15:10:0e:ec:33:cb:37:2c:94:2e:95:a1: e0:dd:6c:d6:4b:2d:09:b6:d8:2d:64:5c:df:ed:da:de:7a:29: 5b:bf:32:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx NDI0QzhGN0UwHhcNMjYwMTI0MTYyNjI1WhcNMjYwMTMxMTYyNjI1WjAYMRYwFAYD VQQDDA02OTc0ZjJiMS05YmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstty1rv9vf28lxuTl4IJpZOTfghYj38gp5skoiMMue1jK8TcwfxoByMuZaYU QSFvVrxmvalcr/u1uc+VxmFsH4L9t6TvqGsX/GvLB4gpO8Z3B18YOA95riAnLdwt dEdTIpHCDdTmFBsv8Br0BPkz6fCyHmZ4ia8Lgt+4v+GwrladOjSbybD+cMJ8cUq/ xFRe0gdzbeq9kNbyPdNKBukeUfOcJO23jReLNIQyIyMxs63Za8l8RgvCr8wxI8DS KOyyIzDKE19lL/ukjtlYpdaMlfwKrsi5YcJd2bfqzgHvoCKwFUQVE+sVUyqZjnh+ +rMi6QJ4SHM1QL69BWJLN6hHBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJL1mCb Ut/PfOmbmpecbf4wKWHSMB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2 MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASn2EqROs2MFEwguwUG8mohgaxndfHJWfmUa+o1ZiU7IeOD8KY5fJj rIS/Qeb4KSvp2liw5NRDEnin6vhYQLuvYAL8CVn5AwcG72UkZMuHJvxC6m5qSsu+ 6BjU7pO+uVvkR/5jylWIni7rWioRQuk0InkXhqbBmvOw9f31+X3egWyRU/H5qRey lyiwxQXg5DJuZl+tysCw3fQlr1lxLFNlGjyN/kjWkHcpXtuDowfKFJmaAwMohsys apJh+3EDUs6QH18noL3VdmstB99aRDUSxHjpF0c9OSiCzGnYGgIVEA7sM8s3LJQu laHg3WzWSy0JttgtZFzf7dreeilbvzLJ -----END CERTIFICATE-----Generated at Sun Jan 25 12:40:49 2026 by rpki-client