This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft File: 1mk-41xy689CY8aYRW2C9o5xT1w.mft (raw, json) Hash identifier: GYMryFLt9fc5deBEveVH3/ZYl/ygH+313NmufL0w7Sw= Subject key identifier: AD:6A:95:9D:F5:77:B0:34:8D:CA:CE:8E:EA:9C:20:10:2C:D8:F6:BC Authority key identifier: D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C Certificate issuer: /CN=A916EF5E/serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Certificate serial: 09FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft Manifest number: 09FA Signing time: Sat 24 Jan 2026 16:25:19 +0000 Manifest this update: Sat 24 Jan 2026 16:25:18 +0000 Manifest next update: Sat 31 Jan 2026 16:25:18 +0000 Files and hashes: 1: 1mk-41xy689CY8aYRW2C9o5xT1w.crl (hash: OIIpNMVtClNE52aD5PKBXlOyFMjYJA+Phq/b+6OEluI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2554 (0x9fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Validity Not Before: Jan 24 16:25:18 2026 GMT Not After : Jan 31 16:25:18 2026 GMT Subject: CN=6974f26f-868a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:30:2a:ac:67:77:d5:9a:a8:ef:87:91:68:27: e6:79:3d:e5:6a:d3:84:9e:f3:01:f5:ad:6f:b4:61: a2:7f:f3:51:24:9f:3a:a8:c8:2d:37:aa:f3:63:86: 48:b7:95:c2:0b:9f:32:5b:ac:4d:94:59:60:4e:e9: b9:ab:fd:2d:ae:95:f4:70:f6:eb:a2:44:ee:8b:72: c5:c1:f5:bd:2c:39:71:a4:13:30:30:01:0a:b7:95: e4:c7:ba:dc:57:31:27:2d:b1:36:0e:b5:5b:c9:1a: e2:ee:bc:fb:aa:91:a6:53:ab:8c:23:87:99:7c:26: 75:87:8b:ea:1e:ef:d8:7d:e8:ff:06:eb:90:48:95: 68:f1:94:27:9a:23:ea:53:11:b4:45:56:02:61:26: 77:85:43:ef:17:33:74:c1:66:fd:41:fa:5b:76:6e: 26:65:25:59:db:35:6b:64:0f:51:5b:9b:db:6b:61: 70:a3:ba:6a:11:4b:7a:45:15:d6:7c:02:c2:51:19: 67:18:17:04:2f:85:e0:3b:67:3b:e0:94:fe:86:ff: 67:9f:67:81:7c:28:4b:44:48:b9:43:86:62:bd:b8: 85:9a:3c:ca:c7:1a:62:8b:a5:c4:09:4e:8b:59:ee: 88:61:27:ab:0b:cd:44:cc:e2:82:97:82:eb:79:f6: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6A:95:9D:F5:77:B0:34:8D:CA:CE:8E:EA:9C:20:10:2C:D8:F6:BC X509v3 Authority Key Identifier: keyid:D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:56:da:bc:7a:7c:2f:0b:bc:c2:b3:85:51:6e:dd:2e:23:1a: be:27:2b:9e:0b:4d:74:8a:2d:ff:46:fb:cc:73:fb:3b:f2:af: 4f:b5:d3:9f:5a:2f:9d:be:f0:be:26:d4:08:98:5b:f1:99:d4: 5a:34:a7:3a:ce:50:44:6a:b5:f4:d4:76:48:d3:0e:1f:08:f8: d6:3f:af:df:1b:12:e0:53:4f:c1:7e:72:d6:04:fc:78:da:af: f7:5d:56:5f:da:7f:a7:60:7a:89:d1:9f:34:fb:e8:02:57:3e: 4e:46:54:da:33:c0:e5:d2:3d:e5:e6:94:31:0f:35:c2:93:79: 94:6f:50:c3:f5:45:3f:0d:33:a3:60:c5:4c:75:46:f5:cf:86: 6d:40:e3:15:d7:b5:d1:d8:13:86:3b:0b:62:00:ef:11:77:9a: c8:81:47:e0:ed:ef:fc:6d:63:cc:17:07:4e:8c:71:c1:f2:ba: 20:45:c9:49:1f:eb:ca:04:dc:5e:26:ee:ac:f1:d9:70:83:ce: fa:87:9f:bc:89:c5:02:57:9d:ce:1b:47:cd:b5:96:14:35:a1: 60:77:36:86:2f:f5:ae:88:a5:d3:d4:a8:3d:e6:98:9f:b2:9c: f1:38:55:47:3d:81:52:86:e7:90:e5:75:a6:85:96:f5:b1:a1: 27:61:a6:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKEQ2NjkzRUUzNUM3MkVCQ0Y0MjYzQzY5ODQ1NkQ4MkY2 OEU3MTRGNUMwHhcNMjYwMTI0MTYyNTE4WhcNMjYwMTMxMTYyNTE4WjAYMRYwFAYD VQQDDA02OTc0ZjI2Zi04NjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjAqrGd31Zqo74eRaCfmeT3latOEnvMB9a1vtGGif/NRJJ86qMgtN6rzY4ZI t5XCC58yW6xNlFlgTum5q/0trpX0cPbrokTui3LFwfW9LDlxpBMwMAEKt5Xkx7rc VzEnLbE2DrVbyRri7rz7qpGmU6uMI4eZfCZ1h4vqHu/Yfej/BuuQSJVo8ZQnmiPq UxG0RVYCYSZ3hUPvFzN0wWb9Qfpbdm4mZSVZ2zVrZA9RW5vba2Fwo7pqEUt6RRXW fALCURlnGBcEL4XgO2c74JT+hv9nn2eBfChLREi5Q4ZivbiFmjzKxxpii6XECU6L We6IYSerC81EzOKCl4LrefYnKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1qlZ31 d7A0jcrOjuqcIBAs2Pa8MB8GA1UdIwQYMBaAFNZpPuNccuvPQmPGmEVtgvaOcU9c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS8yQ0U0OTRDMDhG OTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4OUNZOGFZUlcyQzlvNXhU MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFtay00MXh5Njg5Q1k4YVlSVzJDOW81eFQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS8yQ0U0OTRDMDhGOTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4 OUNZOGFZUlcyQzlvNXhUMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANVtq8enwvC7zCs4VRbt0uIxq+JyueC010ii3/RvvMc/s78q9PtdOf Wi+dvvC+JtQImFvxmdRaNKc6zlBEarX01HZI0w4fCPjWP6/fGxLgU0/BfnLWBPx4 2q/3XVZf2n+nYHqJ0Z80++gCVz5ORlTaM8Dl0j3l5pQxDzXCk3mUb1DD9UU/DTOj YMVMdUb1z4ZtQOMV17XR2BOGOwtiAO8Rd5rIgUfg7e/8bWPMFwdOjHHB8rogRclJ H+vKBNxeJu6s8dlwg876h5+8icUCV53OG0fNtZYUNaFgdzaGL/WuiKXT1Kg95pif spzxOFVHPYFShueQ5XWmhZb1saEnYaZZ -----END CERTIFICATE-----Generated at Mon Jan 26 02:09:31 2026 by rpki-client