This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft File: 1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft (raw, json) Hash identifier: a4DupOF+yvgL/d5x8ZPsD108PMaJvQcbuDZ7Lm6HktU= Subject key identifier: D6:E8:0F:F2:F8:2E:C8:CC:3D:73:3E:73:62:84:CB:BE:5B:62:80:3C Authority key identifier: D6:A6:02:93:4A:CB:E4:14:B3:49:A0:15:69:EB:B6:66:1E:54:A2:BC Certificate issuer: /CN=A9171996/serialNumber=D6A602934ACBE414B349A01569EBB6661E54A2BC Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft Manifest number: 33 Signing time: Sun 25 Jan 2026 06:37:10 +0000 Manifest this update: Sun 25 Jan 2026 06:37:09 +0000 Manifest next update: Sun 01 Feb 2026 06:37:09 +0000 Files and hashes: 1: 1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl (hash: 5txbstT82+5PJdw/KgNT6G8tJQVZXMftubkCEBD3Nek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171996, serialNumber=D6A602934ACBE414B349A01569EBB6661E54A2BC Validity Not Before: Jan 25 06:37:09 2026 GMT Not After : Feb 1 06:37:09 2026 GMT Subject: CN=6975ba16-ba87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0d:f0:f1:c8:ec:e5:81:25:17:df:67:27:ce: f7:8c:c1:84:48:e4:98:f7:a4:c0:79:aa:8b:62:bb: e5:c8:3b:1d:05:3a:4f:36:4f:5f:f1:55:41:c7:28: 2a:0c:61:3c:af:79:ba:e8:0d:c1:9a:25:5c:55:ef: ed:95:7e:16:81:c3:7e:bd:cb:9d:23:1f:12:04:0a: 41:02:27:ac:8b:33:8c:17:88:ca:ad:fc:c3:3b:f1: a4:7e:87:78:a9:8a:37:c7:18:29:3b:ce:41:ed:a4: 75:65:4f:2b:34:82:ca:d0:8b:19:99:1e:62:43:b0: d4:11:eb:7c:05:72:7e:d8:a2:63:2d:32:e1:7f:90: 1d:6a:cc:11:4d:3e:8a:16:bf:58:3e:84:09:8a:80: a0:9b:44:b2:90:92:d3:ae:b1:24:2a:6d:43:3b:1a: 91:e6:73:b2:79:8a:7f:b3:2f:92:c0:ab:3c:c2:d0: 9f:86:8f:fb:88:85:07:9c:bd:a4:ca:5c:b3:de:4c: a9:ff:8b:42:7b:70:0f:57:30:95:82:2b:e1:8f:10: 08:b2:f3:46:b3:f4:aa:e6:83:9a:05:95:cf:ec:21: 1c:5a:45:7e:7a:87:3f:68:d3:df:de:f7:ea:f9:3e: cd:00:0b:60:45:37:30:ea:66:ce:fa:8e:f0:6b:56: c7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E8:0F:F2:F8:2E:C8:CC:3D:73:3E:73:62:84:CB:BE:5B:62:80:3C X509v3 Authority Key Identifier: keyid:D6:A6:02:93:4A:CB:E4:14:B3:49:A0:15:69:EB:B6:66:1E:54:A2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:1a:48:7b:8d:cd:bc:da:f3:1f:f6:97:90:89:85:ba:2a:aa: 93:c9:f7:53:a0:fe:f6:20:72:cd:65:05:8b:ee:a8:9e:4a:ae: 3f:d9:4c:d4:1f:4b:36:b9:88:fe:c7:5b:95:1a:7a:8e:a5:3f: 43:9e:a3:28:6c:6d:81:53:d3:56:3a:58:f9:42:b6:43:4c:72: e3:17:e9:10:ff:cf:4b:52:a9:72:68:e6:f7:ce:ee:f2:15:e8: 5a:16:af:8b:70:3d:e7:66:fc:4a:05:20:64:73:f8:09:79:b1: cf:e6:0e:55:d5:21:b3:42:81:58:91:15:9c:ce:6d:d4:d2:5c: f7:6c:19:8a:62:5d:47:0f:7d:51:c3:e9:3c:f0:71:03:c3:70: 41:c2:89:8c:45:f4:ef:9f:63:51:7c:74:27:9d:68:01:0e:7e: 54:ac:f7:23:47:d1:87:64:2d:52:29:48:82:49:4c:3c:e1:ea: 6f:d3:1a:62:5a:b3:18:ce:ea:53:78:03:fe:22:86:a1:1a:e1: a8:e4:0e:a7:28:43:06:a0:38:80:8b:4c:8a:ec:47:44:7a:b2: a9:c8:53:b9:6e:5f:32:fb:5e:bd:55:2d:91:1b:d9:cb:09:29: 05:25:92:47:56:4e:cf:42:2e:35:39:39:f9:ee:ed:a0:14:88: 14:5c:99:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MTk5NjExMC8GA1UEBRMoRDZBNjAyOTM0QUNCRTQxNEIzNDlBMDE1NjlFQkI2NjYx RTU0QTJCQzAeFw0yNjAxMjUwNjM3MDlaFw0yNjAyMDEwNjM3MDlaMBgxFjAUBgNV BAMMDTY5NzViYTE2LWJhODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiDfDxyOzlgSUX32cnzveMwYRI5Jj3pMB5qotiu+XIOx0FOk82T1/xVUHHKCoM YTyvebroDcGaJVxV7+2VfhaBw369y50jHxIECkECJ6yLM4wXiMqt/MM78aR+h3ip ijfHGCk7zkHtpHVlTys0gsrQixmZHmJDsNQR63wFcn7YomMtMuF/kB1qzBFNPooW v1g+hAmKgKCbRLKQktOusSQqbUM7GpHmc7J5in+zL5LAqzzC0J+Gj/uIhQecvaTK XLPeTKn/i0J7cA9XMJWCK+GPEAiy80az9Krmg5oFlc/sIRxaRX56hz9o09/e9+r5 Ps0AC2BFNzDqZs76jvBrVsebAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1ugP8vgu yMw9cz5zYoTLvltigDwwHwYDVR0jBBgwFoAU1qYCk0rL5BSzSaAVaeu2Zh5Uorww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxOTk2L0I4Q0Q3MzRFQUU2 NzExRjBCNTM0RjYyNkM0RjlBRTAyLzFxWUNrMHJMNUJTelNhQVZhZXUyWmg1VW9y dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMXFZQ2swckw1QlN6U2FBVmFldTJaaDVVb3J3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx OTk2L0I4Q0Q3MzRFQUU2NzExRjBCNTM0RjYyNkM0RjlBRTAyLzFxWUNrMHJMNUJT elNhQVZhZXUyWmg1VW9ydy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMgaSHuNzbza8x/2l5CJhboqqpPJ91Og/vYgcs1lBYvuqJ5Krj/ZTNQf Sza5iP7HW5Uaeo6lP0OeoyhsbYFT01Y6WPlCtkNMcuMX6RD/z0tSqXJo5vfO7vIV 6FoWr4twPedm/EoFIGRz+Al5sc/mDlXVIbNCgViRFZzObdTSXPdsGYpiXUcPfVHD 6TzwcQPDcEHCiYxF9O+fY1F8dCedaAEOflSs9yNH0YdkLVIpSIJJTDzh6m/TGmJa sxjO6lN4A/4ihqEa4ajkDqcoQwagOICLTIrsR0R6sqnIU7luXzL7Xr1VLZEb2csJ KQUlkkdWTs9CLjU5Ofnu7aAUiBRcmf0= -----END CERTIFICATE-----Generated at Sun Jan 25 10:45:04 2026 by rpki-client