This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: ktgYLoZ2sT6Cw8WXX0YRJ4c/HQpouLHaC4tiiYJPWRc= Subject key identifier: D3:FD:35:08:71:DF:51:2F:AF:32:C2:0F:59:A2:42:9A:80:8C:54:5B Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 09A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 09A2 Signing time: Sat 24 Jan 2026 19:25:49 +0000 Manifest this update: Sat 24 Jan 2026 19:25:49 +0000 Manifest next update: Sat 31 Jan 2026 19:25:49 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: 1eLUpjL3dk/5MRRHK+5V1C7FAeaqT4qOkE22BcxbO8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2466 (0x9a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Validity Not Before: Jan 24 19:25:49 2026 GMT Not After : Jan 31 19:25:49 2026 GMT Subject: CN=69751cbd-a43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d9:7b:4e:8f:84:30:e3:10:d5:1a:69:02:4c: 48:24:0a:96:fd:cb:d2:51:60:ad:11:ad:15:eb:38: 76:17:3f:4b:92:7f:cb:85:c5:73:ff:94:ed:87:79: 4f:ac:55:d5:70:02:d3:12:6d:05:7e:8f:77:25:92: 6f:f6:a8:38:40:7a:b9:3b:63:c7:62:c3:28:44:d9: 2c:04:b8:e2:f6:41:11:21:3f:c4:d8:19:3b:80:9e: d0:70:73:0a:fd:81:ed:b6:4b:9b:69:41:f0:79:2e: 90:7c:20:3b:e3:55:91:bf:cf:a3:03:6e:18:77:7d: 27:4b:67:7d:c7:7f:20:ad:2c:ee:0a:b5:db:0b:a1: 84:c2:0e:a2:cc:86:5a:1f:d2:83:7a:b7:61:bd:21: 68:a5:f9:2b:0c:48:2e:b8:38:3b:d2:87:2a:1c:ff: 49:79:79:1e:60:48:05:13:7d:80:f0:14:5e:3f:79: 02:a0:98:93:79:60:55:7b:3e:f5:93:c3:09:9d:a2: 27:80:51:ed:03:40:2e:1d:07:27:b5:58:de:9c:d6: 2f:9d:84:c4:48:37:2b:8d:29:b7:26:02:e2:52:8b: 6b:e4:23:9e:8a:0f:b2:ae:9c:8f:13:e9:83:b7:04: f8:38:33:2a:f5:e2:32:32:90:f0:b6:ad:3b:66:4c: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FD:35:08:71:DF:51:2F:AF:32:C2:0F:59:A2:42:9A:80:8C:54:5B X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:4f:8d:7f:b7:6d:0a:8e:e4:f8:b6:33:4e:a0:3d:f6:d0:f6: 28:1d:e4:e4:35:16:60:24:63:dc:13:b9:a8:34:76:24:5a:9f: 4a:37:86:be:74:3c:0f:72:dd:14:fc:83:c9:48:df:98:d5:c1: 45:47:1a:18:05:bb:ec:40:03:a6:c3:e1:0c:1b:5a:7e:e8:28: 53:3b:fe:99:77:47:fd:19:13:40:4f:3e:62:b4:c3:6b:8a:66: 88:39:0c:bd:6b:da:89:b3:3d:cd:08:48:5e:9b:0a:f6:b3:fc: f0:82:c9:b8:64:22:6f:fa:82:d2:ba:16:54:0c:66:43:b3:c6: 91:cd:c1:9e:b8:b3:ce:1e:f6:e3:7d:83:7e:37:ab:48:88:2c: f6:7d:c8:5f:ab:a0:43:dd:f7:6b:35:97:d7:43:5b:25:f5:06: 77:17:c8:99:e6:77:14:32:76:ce:bf:b0:5f:53:0f:30:a2:1c: 90:6c:d3:79:aa:a7:f5:fd:50:27:5c:37:15:37:59:25:4f:41: ac:54:ee:6b:62:c4:79:bc:2c:7a:51:0f:4e:e0:16:a7:83:52: 1f:fe:35:70:38:2c:59:4c:9a:f0:f6:a5:06:08:62:ee:39:66: 89:1b:a5:72:df:6b:8c:d1:89:95:12:0d:14:e1:ed:6d:96:3d: 83:c3:29:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjYwMTI0MTkyNTQ5WhcNMjYwMTMxMTkyNTQ5WjAYMRYwFAYD VQQDDA02OTc1MWNiZC1hNDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdl7To+EMOMQ1RppAkxIJAqW/cvSUWCtEa0V6zh2Fz9Lkn/LhcVz/5Tth3lP rFXVcALTEm0Ffo93JZJv9qg4QHq5O2PHYsMoRNksBLji9kERIT/E2Bk7gJ7QcHMK /YHttkubaUHweS6QfCA741WRv8+jA24Yd30nS2d9x38grSzuCrXbC6GEwg6izIZa H9KDerdhvSFopfkrDEguuDg70ocqHP9JeXkeYEgFE32A8BReP3kCoJiTeWBVez71 k8MJnaIngFHtA0AuHQcntVjenNYvnYTESDcrjSm3JgLiUotr5COeig+yrpyPE+mD twT4ODMq9eIyMpDwtq07Zkx/ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNP9NQhx 31EvrzLCD1miQpqAjFRbMB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCT41/t20KjuT4tjNOoD320PYoHeTkNRZgJGPcE7moNHYkWp9KN4a+ dDwPct0U/IPJSN+Y1cFFRxoYBbvsQAOmw+EMG1p+6ChTO/6Zd0f9GRNATz5itMNr imaIOQy9a9qJsz3NCEhemwr2s/zwgsm4ZCJv+oLSuhZUDGZDs8aRzcGeuLPOHvbj fYN+N6tIiCz2fchfq6BD3fdrNZfXQ1sl9QZ3F8iZ5ncUMnbOv7BfUw8wohyQbNN5 qqf1/VAnXDcVN1klT0GsVO5rYsR5vCx6UQ9O4Bang1If/jVwOCxZTJrw9qUGCGLu OWaJG6Vy32uM0YmVEg0U4e1tlj2Dwyns -----END CERTIFICATE-----Generated at Sun Jan 25 10:54:49 2026 by rpki-client