This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft File: YCgZkDDJlCoUSqFr-zB450H27CM.mft (raw, json) Hash identifier: TuWKh7A4g2o/h+SHMlM2NQEQi9qPbumVK8/WWlO23cM= Subject key identifier: BE:9A:EC:AC:25:32:01:91:ED:CE:1A:6E:89:42:2D:A0:B1:2B:F3:26 Authority key identifier: 60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23 Certificate issuer: /CN=A9175D4F/serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23 Certificate serial: 0A81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft Manifest number: 0A71 Signing time: Sat 24 Jan 2026 19:04:55 +0000 Manifest this update: Sat 24 Jan 2026 19:04:54 +0000 Manifest next update: Sat 31 Jan 2026 19:04:54 +0000 Files and hashes: 1: YCgZkDDJlCoUSqFr-zB450H27CM.crl (hash: 7NmgK3jRbS+nHG5aP2P4Y9IOFfVcSn642n9KqwmQfdY=) 2: 5C1CF19EA9C011EABAAB4624C4F9AE02.roa (hash: 6/x/Fge5uH5YfUQOVxF7eyYbzP45tBqEPaICPxzEb2c=) 3: 5D2B0616A9C011EABAAB4624C4F9AE02.roa (hash: WJcxZE//v/qgwM5L8UFDfgSzlZEjCMButWifhGqcTAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2689 (0xa81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175D4F, serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23 Validity Not Before: Jan 24 19:04:54 2026 GMT Not After : Jan 31 19:04:54 2026 GMT Subject: CN=697517d7-8733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:d4:99:4c:fc:13:ad:ff:86:f8:62:bf:05: 30:7d:76:ea:b9:e2:ab:96:2b:a5:1e:b6:dc:54:30: 4d:57:40:53:b6:c1:81:31:20:09:a1:f1:77:78:f8: 08:41:55:ab:a6:ac:75:f4:ff:e5:1b:34:72:ef:60: 65:a3:dc:d8:64:6d:c3:05:54:9f:f3:54:dc:6e:b9: 96:b2:63:4b:f8:de:a4:f3:76:f3:b8:a6:11:83:37: 04:e5:e9:eb:d5:e2:0d:e7:2e:60:5f:df:44:2b:7a: ee:ec:ff:b7:28:ee:bd:2b:6b:39:56:ba:0b:dd:de: 09:2e:67:4d:57:db:14:13:2c:20:34:19:11:eb:d2: 24:38:e7:0a:d8:45:a2:14:b0:bf:97:2a:b2:be:2a: 68:d3:42:5f:3f:f1:df:bb:8d:e6:19:8f:94:11:79: c5:d0:60:22:c3:df:3b:19:1e:47:05:05:4b:6f:0b: ed:5d:fa:c9:ec:87:59:8a:2f:f0:ab:58:c3:24:94: b2:12:39:d0:fd:15:02:32:ec:a3:5e:14:47:0a:38: 43:b1:42:73:45:01:d2:1f:3e:ec:8f:ae:06:aa:87: 02:e2:17:e2:09:b9:11:f6:32:95:8f:6c:4c:e2:83: 7a:08:9d:3f:f0:30:0a:ce:2a:82:ea:ea:95:fa:39: a7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9A:EC:AC:25:32:01:91:ED:CE:1A:6E:89:42:2D:A0:B1:2B:F3:26 X509v3 Authority Key Identifier: keyid:60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c5:b8:41:05:be:40:21:d1:b6:2e:47:73:19:5b:93:82:a7: 67:48:b5:2f:3e:45:bf:3f:5e:2e:03:39:a2:10:eb:0d:40:a6: 6f:4f:d4:98:05:55:c8:61:75:6c:28:7f:46:10:15:bb:be:df: f5:61:3b:1c:06:72:c4:41:19:2c:63:bc:8a:67:cf:ec:91:21: e2:30:aa:ca:11:e4:c7:de:8d:86:25:b3:db:b9:3e:26:4d:c2: 50:c6:db:bb:37:d2:3e:bb:3b:2d:0d:41:a2:a8:b5:5d:f6:75: 69:44:a6:29:84:f3:a2:ab:cb:8b:04:6a:aa:ba:79:52:67:34: 0d:ee:41:8d:55:09:58:f3:59:af:b7:d4:09:2b:6c:1d:92:73: af:93:4b:27:86:40:8a:cf:3a:60:55:52:65:07:b9:9b:1b:4e: 67:02:c5:5d:6e:e1:c7:72:f2:7e:ec:6c:fd:7f:5b:b0:ff:9e: 75:b3:de:12:5b:05:73:4c:2c:26:21:65:1c:1c:81:de:fa:19: 49:80:21:63:83:dc:b1:4e:9e:54:ff:15:9d:79:f5:85:9a:78: ba:6d:9f:73:ba:29:7e:f2:7e:19:fc:65:94:b2:48:79:10:b1: 34:a3:8e:de:b0:6c:be:15:dd:09:cf:8c:c4:05:72:b9:47:f4: 48:63:f2:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVENEYxMTAvBgNVBAUTKDYwMjgxOTkwMzBDOTk0MkExNDRBQTE2QkZCMzA3OEU3 NDFGNkVDMjMwHhcNMjYwMTI0MTkwNDU0WhcNMjYwMTMxMTkwNDU0WjAYMRYwFAYD VQQDDA02OTc1MTdkNy04NzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtTUmUz8E63/hvhivwUwfXbqueKrliulHrbcVDBNV0BTtsGBMSAJofF3ePgI QVWrpqx19P/lGzRy72Blo9zYZG3DBVSf81TcbrmWsmNL+N6k83bzuKYRgzcE5enr 1eIN5y5gX99EK3ru7P+3KO69K2s5VroL3d4JLmdNV9sUEywgNBkR69IkOOcK2EWi FLC/lyqyvipo00JfP/Hfu43mGY+UEXnF0GAiw987GR5HBQVLbwvtXfrJ7IdZii/w q1jDJJSyEjnQ/RUCMuyjXhRHCjhDsUJzRQHSHz7sj64GqocC4hfiCbkR9jKVj2xM 4oN6CJ0/8DAKziqC6uqV+jmnvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6a7Kwl MgGR7c4abolCLaCxK/MmMB8GA1UdIwQYMBaAFGAoGZAwyZQqFEqha/sweOdB9uwj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUQ0Ri81ODVGNEQwRTc4 NzkxMUVBQUVCQTNCMzhDNEY5QUUwMi9ZQ2daa0RESmxDb1VTcUZyLXpCNDUwSDI3 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDZ1prRERKbENvVVNxRnItekI0NTBIMjdDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUQ0Ri81ODVGNEQwRTc4NzkxMUVBQUVCQTNCMzhDNEY5QUUwMi9ZQ2daa0RESmxD b1VTcUZyLXpCNDUwSDI3Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+xbhBBb5AIdG2LkdzGVuTgqdnSLUvPkW/P14uAzmiEOsNQKZvT9SY BVXIYXVsKH9GEBW7vt/1YTscBnLEQRksY7yKZ8/skSHiMKrKEeTH3o2GJbPbuT4m TcJQxtu7N9I+uzstDUGiqLVd9nVpRKYphPOiq8uLBGqqunlSZzQN7kGNVQlY81mv t9QJK2wdknOvk0snhkCKzzpgVVJlB7mbG05nAsVdbuHHcvJ+7Gz9f1uw/551s94S WwVzTCwmIWUcHIHe+hlJgCFjg9yxTp5U/xWdefWFmni6bZ9zuil+8n4Z/GWUskh5 ELE0o47esGy+Fd0Jz4zEBXK5R/RIY/Ly -----END CERTIFICATE-----Generated at Sun Jan 25 04:34:42 2026 by rpki-client