This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft File: jKig9ls44oUnna2vt9k_eFFssRg.mft (raw, json) Hash identifier: eHpZISAf4Jpw/BOaLuLkzOEYUA0jIYNFtvzf8KdOjoY= Subject key identifier: E0:CB:C5:E7:CB:88:E2:26:30:E7:A6:18:97:02:B9:D1:31:F6:91:0A Authority key identifier: 8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 Certificate issuer: /CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Certificate serial: 02F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft Manifest number: 02F8 Signing time: Sun 25 Jan 2026 00:24:19 +0000 Manifest this update: Sun 25 Jan 2026 00:24:18 +0000 Manifest next update: Sun 01 Feb 2026 00:24:18 +0000 Files and hashes: 1: jKig9ls44oUnna2vt9k_eFFssRg.crl (hash: K3a4a+cKDF0J9ZoTfw6CryP364b5gAukT9bVCiOD1NI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 760 (0x2f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Validity Not Before: Jan 25 00:24:18 2026 GMT Not After : Feb 1 00:24:18 2026 GMT Subject: CN=697562b3-f98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:6f:f2:d9:fc:0c:5c:9a:3f:3d:8d:5b:5c: 15:dd:e2:c1:b5:fa:ae:9b:6e:d0:d6:42:dc:a7:62: c8:2c:c9:45:4e:a9:2f:5d:91:4f:d1:35:86:46:7b: ca:b7:ab:ba:d7:33:b6:18:82:36:bc:ab:3b:c3:d2: f6:dc:a4:af:3a:f6:ed:79:a7:07:1a:43:a5:3b:1f: b2:ef:5d:64:17:bc:76:23:4b:24:03:42:1e:8d:c6: 80:a3:6c:6b:cc:ab:cf:f1:53:6a:79:ac:1c:4d:15: 73:db:72:cb:1f:85:32:1f:6a:34:f5:ea:51:ad:f6: 53:0f:f0:bd:cf:f0:d7:56:a1:b2:80:8e:b8:b3:bd: 7f:0d:76:bb:63:60:30:bb:53:88:ff:72:0e:d0:75: 66:f4:3d:59:a9:e2:b4:7d:11:3d:de:74:2f:67:8f: e1:ca:ef:e8:54:26:ce:b5:6e:93:38:fc:83:a7:2d: 9f:d2:b8:30:14:f9:ab:ad:c0:49:db:41:af:90:80: 6b:2d:61:00:b9:11:5a:df:fe:84:dc:b4:3e:7a:a6: 39:9d:7b:89:98:b7:4d:70:7d:4f:14:c9:e1:0f:9a: 85:cc:dc:e5:70:2b:5e:8f:c3:11:8f:df:a7:e0:6c: 13:7d:b0:19:18:d4:aa:c6:9b:69:f6:84:5b:33:bb: 14:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CB:C5:E7:CB:88:E2:26:30:E7:A6:18:97:02:B9:D1:31:F6:91:0A X509v3 Authority Key Identifier: keyid:8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:af:12:1e:11:29:d2:8a:17:ad:97:a6:61:90:54:fa:2b:fe: 81:df:3d:bb:89:da:5c:84:bf:f3:58:da:c0:a1:3e:4b:2a:51: 45:3a:2d:3c:72:ab:32:2d:97:be:c8:39:4f:56:d4:c6:62:9a: 1b:98:62:e5:fe:10:36:70:12:33:fd:a1:f7:0b:33:da:1a:96: b8:f4:26:b1:c8:d0:9c:ea:20:7c:a8:4a:4f:bd:86:3e:47:0e: 60:e3:61:26:ab:bc:46:6a:6b:15:1a:bf:54:5e:86:29:99:ed: 27:4d:f3:41:6e:92:4a:cb:30:8b:21:aa:ed:55:28:b3:98:f1: 51:33:74:c5:b3:59:74:80:c6:5a:aa:18:32:86:52:67:1c:6d: dc:f6:f7:b7:7e:05:83:4b:0b:cc:b7:d2:28:1b:34:ba:f5:e1: 44:a7:ca:5a:23:ad:52:31:b3:b5:38:0a:1b:34:3c:73:00:19: 28:7c:bb:28:4e:b8:c5:08:60:80:5f:58:ec:da:67:36:29:d9: 45:10:28:3d:5f:85:88:e9:73:85:5f:d4:d3:11:d2:d1:c4:a2: e5:bd:2a:f5:b9:74:ef:95:87:3f:32:f9:94:64:3a:66:85:f3: 46:50:4b:b5:3c:a4:bb:9f:1f:a5:94:88:9b:3e:f6:af:f0:8d: 3e:23:b3:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKDhDQThBMEY2NUIzOEUyODUyNzlEQURBRkI3RDkzRjc4 NTE2Q0IxMTgwHhcNMjYwMTI1MDAyNDE4WhcNMjYwMjAxMDAyNDE4WjAYMRYwFAYD VQQDDA02OTc1NjJiMy1mOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsJv8tn8DFyaPz2NW1wV3eLBtfqum27Q1kLcp2LILMlFTqkvXZFP0TWGRnvK t6u61zO2GII2vKs7w9L23KSvOvbteacHGkOlOx+y711kF7x2I0skA0IejcaAo2xr zKvP8VNqeawcTRVz23LLH4UyH2o09epRrfZTD/C9z/DXVqGygI64s71/DXa7Y2Aw u1OI/3IO0HVm9D1ZqeK0fRE93nQvZ4/hyu/oVCbOtW6TOPyDpy2f0rgwFPmrrcBJ 20GvkIBrLWEAuRFa3/6E3LQ+eqY5nXuJmLdNcH1PFMnhD5qFzNzlcCtej8MRj9+n 4GwTfbAZGNSqxptp9oRbM7sUgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODLxefL iOImMOemGJcCudEx9pEKMB8GA1UdIwQYMBaAFIyooPZbOOKFJ52tr7fZP3hRbLEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zQURFNzFCMjA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRvVW5uYTJ2dDlrX2VGRnNz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pLaWc5bHM0NG9Vbm5hMnZ0OWtfZUZGc3NSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zQURFNzFCMjA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRv VW5uYTJ2dDlrX2VGRnNzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBprxIeESnSihetl6ZhkFT6K/6B3z27idpchL/zWNrAoT5LKlFFOi08 cqsyLZe+yDlPVtTGYpobmGLl/hA2cBIz/aH3CzPaGpa49CaxyNCc6iB8qEpPvYY+ Rw5g42Emq7xGamsVGr9UXoYpme0nTfNBbpJKyzCLIartVSizmPFRM3TFs1l0gMZa qhgyhlJnHG3c9ve3fgWDSwvMt9IoGzS69eFEp8paI61SMbO1OAobNDxzABkofLso TrjFCGCAX1js2mc2KdlFECg9X4WI6XOFX9TTEdLRxKLlvSr1uXTvlYc/MvmUZDpm hfNGUEu1PKS7nx+llIibPvav8I0+I7Pt -----END CERTIFICATE-----Generated at Sun Jan 25 06:10:37 2026 by rpki-client