This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft File: UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft (raw, json) Hash identifier: 9NeWJ6tVJ37OG2pWijMygp9KztFTHrFHZvaFc/WHvd4= Subject key identifier: 4B:35:EE:A9:31:D3:88:7D:C5:39:53:4C:0F:FF:E0:40:FC:97:EE:0D Authority key identifier: 52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 Certificate issuer: /CN=A916B30C/serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft Manifest number: 017B Signing time: Sun 25 Jan 2026 02:59:08 +0000 Manifest this update: Sun 25 Jan 2026 02:59:08 +0000 Manifest next update: Sun 01 Feb 2026 02:59:08 +0000 Files and hashes: 1: UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl (hash: UHm4Z+qPfV97dKcNxO7XlgXBWHRS7jRC9Vj02H7ZXg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B30C, serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Validity Not Before: Jan 25 02:59:08 2026 GMT Not After : Feb 1 02:59:08 2026 GMT Subject: CN=697586fc-83ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e8:b0:a4:4e:8b:4c:bc:4a:c6:32:4d:2e:0b: 5b:d7:1b:f4:d9:c8:a5:f8:64:b1:1c:11:86:8f:0b: 3b:78:f6:7d:49:fe:7b:9e:9f:4e:d6:d2:be:c3:67: e7:cf:3f:ea:98:74:67:37:e7:1b:87:76:06:39:3d: 23:8c:b9:66:af:ad:41:a6:cd:2d:f9:86:97:f0:22: a1:7d:7b:77:68:75:e3:cc:0c:2d:4f:ee:8f:15:20: cc:1a:58:69:80:c9:ce:00:a3:0e:fd:af:89:e8:15: 34:46:35:5f:56:e8:83:fa:fa:63:7e:a5:c8:8e:0b: f4:17:08:ba:c2:2e:bd:86:fe:ea:c1:ee:17:a1:f6: 5f:5c:e3:01:51:46:1f:e3:73:f5:0b:93:9c:30:b9: 38:21:41:56:f2:dd:7b:12:9a:fc:69:a8:80:09:af: 0d:82:b2:db:1d:e3:44:16:3a:89:cb:ad:b6:03:02: 02:fb:94:49:43:f2:7f:93:3a:ea:fc:b6:f9:ea:f3: e0:62:c4:d8:9b:95:57:5f:d2:3e:56:47:fc:69:ce: e9:0a:75:03:70:02:ba:e0:1b:a9:79:ff:96:09:bf: 5d:e0:20:34:ce:2b:da:c5:ee:48:77:80:24:3e:54: 71:ed:ff:11:3d:57:b3:40:8b:05:3b:99:04:be:58: 38:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:35:EE:A9:31:D3:88:7D:C5:39:53:4C:0F:FF:E0:40:FC:97:EE:0D X509v3 Authority Key Identifier: keyid:52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3a:5b:f9:92:06:64:d8:a6:a7:ed:41:12:ab:3c:89:3e:ea: 00:c1:fa:db:fe:29:fc:5a:43:84:f4:a0:d8:a7:f9:78:64:07: e4:b5:f5:4e:f7:41:c9:a1:6a:08:6a:ba:c3:63:28:a0:be:4d: 64:7e:7a:6f:b5:1d:02:e6:c9:84:7f:f4:b2:31:df:71:4d:22: 56:90:d5:6d:56:65:44:11:20:f0:75:d1:68:4b:fe:54:ed:44: 0a:6d:0f:28:19:ce:16:a3:6a:bc:a7:49:c2:4d:ec:fd:3d:d6: c0:82:2d:32:4d:98:56:2f:a2:af:1b:3a:ca:d0:99:97:5c:0c: 56:b1:06:2a:90:eb:e4:a6:c2:63:10:7b:fb:ff:62:17:27:07: 5d:85:59:cb:a9:a1:cc:cb:fe:90:6b:a9:9f:67:5d:56:50:34: 50:6e:31:b5:5d:6f:48:9a:46:31:06:4b:6c:1a:79:e3:b4:26: ff:31:9a:8f:80:c1:1e:25:6f:4a:ad:c4:d7:16:b7:1f:b4:7c: e7:24:cc:5e:b7:c2:3a:24:c6:4b:af:13:10:24:dd:78:c3:70: 9a:5d:46:01:de:30:ad:6a:9e:c8:cd:a8:33:3e:cd:62:2c:b0: 48:21:a3:d1:3c:f4:b8:d0:6c:2e:fd:74:24:69:19:bf:9a:ab: 95:ae:76:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIzMEMxMTAvBgNVBAUTKDUyQjNFODNCMTYyMUFGQjNEQ0NGMEFDRjY3RjI3RUUw QjFENkM4MzYwHhcNMjYwMTI1MDI1OTA4WhcNMjYwMjAxMDI1OTA4WjAYMRYwFAYD VQQDDA02OTc1ODZmYy04M2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+iwpE6LTLxKxjJNLgtb1xv02cil+GSxHBGGjws7ePZ9Sf57np9O1tK+w2fn zz/qmHRnN+cbh3YGOT0jjLlmr61Bps0t+YaX8CKhfXt3aHXjzAwtT+6PFSDMGlhp gMnOAKMO/a+J6BU0RjVfVuiD+vpjfqXIjgv0Fwi6wi69hv7qwe4XofZfXOMBUUYf 43P1C5OcMLk4IUFW8t17Epr8aaiACa8NgrLbHeNEFjqJy622AwIC+5RJQ/J/kzrq /Lb56vPgYsTYm5VXX9I+Vkf8ac7pCnUDcAK64Bupef+WCb9d4CA0zivaxe5Id4Ak PlRx7f8RPVezQIsFO5kEvlg45QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEs17qkx 04h9xTlTTA//4ED8l+4NMB8GA1UdIwQYMBaAFFKz6DsWIa+z3M8Kz2fyfuCx1sg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMwQy85QTg3NTQzQUIw NUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3UGN6d3JQWl9KLTRMSFd5 RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyUG9PeFlocjdQY3p3clBaX0otNExIV3lEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjMwQy85QTg3NTQzQUIwNUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3 UGN6d3JQWl9KLTRMSFd5RFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6Olv5kgZk2Kan7UESqzyJPuoAwfrb/in8WkOE9KDYp/l4ZAfktfVO 90HJoWoIarrDYyigvk1kfnpvtR0C5smEf/SyMd9xTSJWkNVtVmVEESDwddFoS/5U 7UQKbQ8oGc4Wo2q8p0nCTez9PdbAgi0yTZhWL6KvGzrK0JmXXAxWsQYqkOvkpsJj EHv7/2IXJwddhVnLqaHMy/6Qa6mfZ11WUDRQbjG1XW9ImkYxBktsGnnjtCb/MZqP gMEeJW9KrcTXFrcftHznJMxet8I6JMZLrxMQJN14w3CaXUYB3jCtap7IzagzPs1i LLBIIaPRPPS40Gwu/XQkaRm/mquVrnac -----END CERTIFICATE-----Generated at Sun Jan 25 15:43:00 2026 by rpki-client