This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft File: yYWS4c0LLnYQyEsC5mHL8zb_r10.mft (raw, json) Hash identifier: LYXpVTfDGjvuoLh3ZiunF8Ka4iRCBiIXGpqCWqGRBcg= Subject key identifier: 87:20:D7:C2:CD:36:8A:0B:74:8E:7C:5C:96:40:F3:2B:FE:54:2E:17 Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D Certificate issuer: /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Certificate serial: 085D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft Manifest number: 0857 Signing time: Sat 24 Jan 2026 20:05:06 +0000 Manifest this update: Sat 24 Jan 2026 20:05:05 +0000 Manifest next update: Sat 31 Jan 2026 20:05:05 +0000 Files and hashes: 1: yYWS4c0LLnYQyEsC5mHL8zb_r10.crl (hash: PH6tWfRkJKU0fUKeYoOzlY9fL20l7gcLDe1JojhVu08=) 2: 789C2BD0ECCA11EAAE025C70C4F9AE02.roa (hash: EmQdF5GLB5bUu9T1LF70zLmHofep4YvVxF8l/ylf5kA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2141 (0x85d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168E98, serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Validity Not Before: Jan 24 20:05:05 2026 GMT Not After : Jan 31 20:05:05 2026 GMT Subject: CN=697525f2-3170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:4e:70:82:7d:68:3c:18:2e:f2:b8:eb:54: 51:3f:d2:9e:f4:9a:28:23:30:39:30:b9:d2:1e:01: 4b:0d:92:4e:a3:32:0d:81:03:e3:b4:83:f2:0f:7a: bc:c0:a7:0b:d5:5a:a7:f9:af:12:6a:df:a9:7c:40: e0:2a:00:c9:cf:94:51:c4:4f:97:77:9e:23:90:f4: 37:e1:73:b6:86:48:8d:c9:66:f0:09:e3:16:f9:bf: 8a:b9:f7:8a:05:4e:59:c8:5f:7a:23:e9:ab:62:a6: 2c:ab:38:f1:66:ea:a0:5a:49:ae:a8:9a:04:ea:cb: ce:83:d7:e7:16:fd:bd:8d:24:76:e4:7f:f4:a1:54: 3e:87:49:17:3f:3b:c5:00:2f:66:04:0a:98:f7:c8: 16:d5:5a:16:ff:ee:04:dd:ee:b0:be:28:69:a4:6b: b1:fa:70:48:b1:13:0a:a6:ac:f8:97:8d:52:fe:d4: e5:ec:f1:43:03:95:c4:1f:d3:b6:e6:1e:0a:91:35: 7a:67:01:26:48:46:e9:23:9e:93:fd:be:26:3d:d3: 93:74:15:ae:a2:4f:f5:7f:8a:78:b0:13:06:b1:7b: ec:ca:ab:c5:d3:aa:25:98:e9:76:5f:d4:6e:1a:c8: 6e:bc:a0:32:ed:fe:c7:dd:ea:dd:2b:8a:8d:cb:ae: d0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:20:D7:C2:CD:36:8A:0B:74:8E:7C:5C:96:40:F3:2B:FE:54:2E:17 X509v3 Authority Key Identifier: keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:87:10:cf:4e:77:13:c7:73:78:6b:66:08:eb:80:16:9d:0e: 44:8b:74:aa:30:d2:a2:17:0a:1c:91:00:a8:e6:a4:df:1d:62: 50:ce:7e:d3:f4:b2:1a:11:ab:b0:08:05:e6:34:3a:f4:c0:bf: 98:1a:ae:f9:7d:f1:e4:88:e9:c0:f9:6d:4e:e4:e7:0b:ab:36: 52:ff:c4:8b:e4:56:96:30:8f:a2:ae:0f:7e:24:3d:83:4b:f6: 44:75:ad:19:61:ba:e1:ee:cc:b8:97:4b:ba:ae:fe:e4:36:8b: 5f:94:98:0f:c6:e5:e3:24:62:e9:0a:bf:88:de:1f:bf:ef:0b: bf:7a:82:63:3d:4b:11:bf:e6:fd:09:08:8e:57:1c:60:b0:f5: ad:2b:cb:ee:91:fb:c7:72:22:10:6a:eb:e7:c9:d4:0a:1e:f3: 37:3c:ab:68:50:cb:45:39:29:27:5a:0b:5e:ef:f4:52:6b:03: 60:49:eb:08:57:05:18:18:f6:20:cb:53:6b:24:08:ed:55:ca: 6d:f5:28:cc:96:7f:02:a0:b7:3d:61:6e:d6:15:a1:3c:58:7f: 30:f6:f6:c2:48:c6:06:24:15:29:4d:a6:81:94:a1:2c:2e:61: 7b:ea:35:58:24:b9:1e:ec:6c:4c:ff:c1:82:86:42:d1:69:1f: 4d:ce:32:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhFOTgxMTAvBgNVBAUTKEM5ODU5MkUxQ0QwQjJFNzYxMEM4NEIwMkU2NjFDQkYz MzZGRkFGNUQwHhcNMjYwMTI0MjAwNTA1WhcNMjYwMTMxMjAwNTA1WjAYMRYwFAYD VQQDDA02OTc1MjVmMi0zMTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbVOcIJ9aDwYLvK461RRP9Ke9JooIzA5MLnSHgFLDZJOozINgQPjtIPyD3q8 wKcL1Vqn+a8Sat+pfEDgKgDJz5RRxE+Xd54jkPQ34XO2hkiNyWbwCeMW+b+KufeK BU5ZyF96I+mrYqYsqzjxZuqgWkmuqJoE6svOg9fnFv29jSR25H/0oVQ+h0kXPzvF AC9mBAqY98gW1VoW/+4E3e6wvihppGux+nBIsRMKpqz4l41S/tTl7PFDA5XEH9O2 5h4KkTV6ZwEmSEbpI56T/b4mPdOTdBWuok/1f4p4sBMGsXvsyqvF06olmOl2X9Ru GshuvKAy7f7H3erdK4qNy67QpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcg18LN NooLdI58XJZA8yv+VC4XMB8GA1UdIwQYMBaAFMmFkuHNCy52EMhLAuZhy/M2/69d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEU5OC8wRUIxMkI0MEVD QzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExuWVF5RXNDNW1ITDh6Yl9y MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZV1M0YzBMTG5ZUXlFc0M1bUhMOHpiX3IxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEU5OC8wRUIxMkI0MEVDQzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExu WVF5RXNDNW1ITDh6Yl9yMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXhxDPTncTx3N4a2YI64AWnQ5Ei3SqMNKiFwockQCo5qTfHWJQzn7T 9LIaEauwCAXmNDr0wL+YGq75ffHkiOnA+W1O5OcLqzZS/8SL5FaWMI+irg9+JD2D S/ZEda0ZYbrh7sy4l0u6rv7kNotflJgPxuXjJGLpCr+I3h+/7wu/eoJjPUsRv+b9 CQiOVxxgsPWtK8vukfvHciIQauvnydQKHvM3PKtoUMtFOSknWgte7/RSawNgSesI VwUYGPYgy1NrJAjtVcpt9SjMln8CoLc9YW7WFaE8WH8w9vbCSMYGJBUpTaaBlKEs LmF76jVYJLke7GxM/8GChkLRaR9NzjJA -----END CERTIFICATE-----Generated at Sun Jan 25 08:20:20 2026 by rpki-client