This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft File: rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json) Hash identifier: iaGgDA32MQJfLx6sWwuIJvPW1uWD7UUQPvvZkVH+Pfo= Subject key identifier: 40:EF:1F:C5:67:02:10:DC:4F:48:DA:3B:74:20:E1:F7:6E:56:E9:72 Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 Certificate issuer: /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft Manifest number: 0164 Signing time: Sun 25 Jan 2026 03:15:27 +0000 Manifest this update: Sun 25 Jan 2026 03:15:27 +0000 Manifest next update: Sun 01 Feb 2026 03:15:27 +0000 Files and hashes: 1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: r4fp3NpSFjyLU6fh+2p7KqxspYeHFZbxs/xC51kKUvY=) 2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: p/CKDmdi14SpnAXglq6STJnT5JwJ1Aph3AE4B1BxPGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF, serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Validity Not Before: Jan 25 03:15:27 2026 GMT Not After : Feb 1 03:15:27 2026 GMT Subject: CN=69758acf-3aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:7f:69:6f:29:50:ab:c6:8d:56:2b:2c:e1: 5e:41:3a:1e:d8:93:ec:f2:ca:73:bb:b9:25:b4:9a: 87:b8:06:05:b2:b4:cb:4f:23:69:b8:75:bb:4d:40: 3b:f8:b8:9d:0f:26:8b:44:56:c2:8d:10:0a:1a:dc: c9:ea:9f:ba:10:fc:07:fe:a8:5d:1b:43:31:d8:de: c2:7c:e2:a3:61:24:dc:39:73:b1:2a:62:38:69:ea: 35:b3:a7:4b:56:e8:8c:5f:a6:10:c1:e7:04:6d:7b: 51:58:e6:98:6d:b6:0a:c0:de:3e:9f:d6:4d:6a:ec: 85:a7:a6:9b:06:16:17:d6:f6:3d:6c:d8:dd:67:5c: 82:51:81:87:86:e3:04:ec:ae:e0:4f:46:36:00:4e: f3:76:fd:af:d2:f9:d8:25:ea:34:c2:0d:bf:58:03: ca:bf:2d:47:a2:d8:98:0b:a8:8a:fa:1f:d9:44:5c: f3:6d:7f:71:39:cc:e7:fd:82:bc:e0:85:bb:da:47: b7:67:61:ea:01:ea:66:87:fe:c7:d0:7b:28:91:e1: 34:15:c6:ad:f7:05:9a:5b:b7:e5:1a:fb:24:68:b6: 55:4a:e4:e0:6d:f0:22:5b:b9:19:e3:33:43:07:b6: d9:5b:ea:de:5b:e2:f5:93:37:4c:89:c7:0a:c6:9d: 21:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EF:1F:C5:67:02:10:DC:4F:48:DA:3B:74:20:E1:F7:6E:56:E9:72 X509v3 Authority Key Identifier: keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:f3:de:e4:f3:fa:88:49:b7:ee:b8:36:10:98:a0:e6:02:bf: ee:a7:ec:87:da:66:91:a7:22:4e:df:9d:70:ca:6c:e5:d5:3e: b9:76:5e:05:01:9b:f1:55:3c:ce:25:a4:78:96:68:ad:a6:03: 44:c2:88:66:42:a2:5a:66:fa:e6:52:05:2a:fe:00:39:25:d1: be:a5:67:0b:72:e3:1c:1d:aa:34:60:b8:4a:6f:78:6e:bf:78: 9c:38:64:5c:49:24:6d:56:79:50:ce:d9:8f:36:5e:3d:71:7c: 58:a2:41:c0:e7:4a:de:95:34:7f:71:eb:1d:2c:72:ab:9f:de: 08:6c:01:9c:f9:27:60:f6:b0:ff:ce:fd:1b:07:7a:4f:e8:cb: f7:7d:55:fe:ee:36:f3:26:72:63:11:63:50:38:67:5c:63:58: de:6c:25:af:21:7e:e0:a3:68:f0:fa:fc:a9:0e:13:f7:01:04: f1:b2:bc:0f:b6:12:72:c0:af:2b:ab:e2:2a:8f:4e:dd:db:1b: d0:da:49:32:6a:be:b3:04:d5:a9:41:a8:ae:3a:a5:bc:b3:c0: e5:9a:df:5a:73:fe:94:a9:7b:45:e5:55:36:40:1f:7b:46:b8: 62:ea:28:cf:dd:a9:f8:02:51:54:da:cb:4f:24:41:6d:2b:22: 85:d0:79:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEFEMTYxMjQwRTk3QTMyRDEwMzA5OUJBNzhBMDI4Q0Qw OUY1RjVCOTMwHhcNMjYwMTI1MDMxNTI3WhcNMjYwMjAxMDMxNTI3WjAYMRYwFAYD VQQDDA02OTc1OGFjZi0zYWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAund/aW8pUKvGjVYrLOFeQToe2JPs8spzu7kltJqHuAYFsrTLTyNpuHW7TUA7 +LidDyaLRFbCjRAKGtzJ6p+6EPwH/qhdG0Mx2N7CfOKjYSTcOXOxKmI4aeo1s6dL VuiMX6YQwecEbXtRWOaYbbYKwN4+n9ZNauyFp6abBhYX1vY9bNjdZ1yCUYGHhuME 7K7gT0Y2AE7zdv2v0vnYJeo0wg2/WAPKvy1HotiYC6iK+h/ZRFzzbX9xOczn/YK8 4IW72ke3Z2HqAepmh/7H0HsokeE0Fcat9wWaW7flGvskaLZVSuTgbfAiW7kZ4zND B7bZW+reW+L1kzdMiccKxp0hqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDvH8Vn AhDcT0jaO3Qg4fduVulyMB8GA1UdIwQYMBaAFK0WEkDpejLRAwmbp4oCjNCfX1uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9BRUY3MDQ5MEQ5 QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10RURDWnVuaWdLTTBKOWZX NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JSWVNRT2w2TXRFRENadW5pZ0tNMEo5Zlc1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9BRUY3MDQ5MEQ5QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10 RURDWnVuaWdLTTBKOWZXNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi897k8/qISbfuuDYQmKDmAr/up+yH2maRpyJO351wymzl1T65dl4F AZvxVTzOJaR4lmitpgNEwohmQqJaZvrmUgUq/gA5JdG+pWcLcuMcHao0YLhKb3hu v3icOGRcSSRtVnlQztmPNl49cXxYokHA50relTR/cesdLHKrn94IbAGc+Sdg9rD/ zv0bB3pP6Mv3fVX+7jbzJnJjEWNQOGdcY1jebCWvIX7go2jw+vypDhP3AQTxsrwP thJywK8rq+Iqj07d2xvQ2kkyar6zBNWpQaiuOqW8s8Dlmt9ac/6UqXtF5VU2QB97 Rrhi6ijP3an4AlFU2stPJEFtKyKF0HnQ -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:39 2026 by rpki-client