This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft File: kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft (raw, json) Hash identifier: 0GutDJIhNSBElUTIK+dmS6glTsa4J5i6YHrC8MO1aZU= Subject key identifier: B7:A5:22:A9:D2:D0:A1:B6:B1:93:A3:43:E3:6B:D3:AA:99:AB:FA:CE Authority key identifier: 91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E Certificate issuer: /CN=A9179386/serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft Manifest number: 40 Signing time: Sun 25 Jan 2026 06:28:21 +0000 Manifest this update: Sun 25 Jan 2026 06:28:20 +0000 Manifest next update: Sun 01 Feb 2026 06:28:20 +0000 Files and hashes: 1: kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl (hash: d6IgAIRG2VlS8YTkZZjG5QSnXUG3Y33TmVZlQEF0h8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179386, serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E Validity Not Before: Jan 25 06:28:20 2026 GMT Not After : Feb 1 06:28:20 2026 GMT Subject: CN=6975b805-0b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:13:aa:f8:18:1f:a6:44:95:c7:2a:76:ec:f9: b8:88:0d:c0:a3:3b:d7:0c:08:2a:85:14:a8:38:d0: c7:aa:39:f4:e8:19:79:a9:7a:d9:26:24:c7:fc:bb: 2e:62:6f:b6:05:93:71:69:88:bc:4b:f3:86:02:f0: b7:92:85:58:7b:bc:14:57:33:f8:1a:b0:39:fc:44: a2:fd:92:f5:35:5b:b1:24:12:77:30:d6:ab:57:ea: 95:c4:49:dc:97:48:b3:25:a8:32:77:d8:a9:07:65: 83:3c:45:49:09:91:90:18:4d:59:b8:c9:18:68:b6: a9:2c:7a:6b:82:65:ed:f3:a5:cf:cb:55:3a:b9:7f: 26:39:08:96:b7:02:dc:e4:c8:9f:88:ac:fc:7c:04: be:cf:d5:34:2b:a5:b7:5f:d4:c0:2d:ac:b9:a0:2c: 44:40:e6:ea:34:90:a4:0b:0b:b4:44:40:81:9b:d9: cc:03:96:75:03:eb:b3:b8:87:73:74:aa:2c:c1:ce: 92:84:d8:27:89:ed:96:2b:cb:a9:05:ff:b9:3b:71: 85:83:f2:f3:ff:18:7b:61:5b:80:64:50:7c:2b:c4: 30:a8:66:15:a8:53:86:c6:f2:44:f0:1d:fb:a6:1f: d8:70:b2:af:7e:87:62:e9:f1:1c:05:55:4e:a1:c2: eb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A5:22:A9:D2:D0:A1:B6:B1:93:A3:43:E3:6B:D3:AA:99:AB:FA:CE X509v3 Authority Key Identifier: keyid:91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c4:ef:07:ae:33:38:b3:0f:fa:be:72:f8:10:cb:31:72:e1: b6:fe:88:2c:8b:2b:53:fb:6e:bf:2e:85:b1:2a:2f:42:71:11: b8:fc:46:59:e8:8d:e3:94:97:13:54:ca:52:35:50:e2:1a:af: 12:2e:6d:20:ac:35:ba:be:9d:f1:b8:15:a1:0f:18:a3:9a:83: 97:42:c2:06:7d:bc:84:4b:d0:a6:e2:90:63:6a:2b:79:ec:e5: c0:62:fa:d2:44:79:6d:78:c8:1c:11:0a:f9:b0:c5:ba:b0:96: 3d:c8:fe:24:30:21:b0:07:5d:75:9a:65:df:f8:df:66:88:ab: fa:74:d8:8e:e2:09:0d:31:b5:dd:6c:04:f7:0b:8f:30:0f:5a: 4c:a2:4c:4f:d4:b0:dc:4a:04:80:87:f7:19:81:1d:52:9b:4b: 79:ac:6d:79:e4:64:ec:b8:7b:e2:95:66:39:e8:c3:f9:8b:14: 41:df:a7:54:70:80:ad:9f:76:ad:ca:8c:e4:55:28:0f:5a:0c: 53:8c:9e:b0:45:00:5e:c8:13:f1:75:25:0b:98:45:fa:8e:f6: 41:86:cb:69:af:11:64:16:be:28:13:cf:8a:9c:42:35:8c:15: 89:5a:63:0f:29:df:bd:af:d8:93:8c:ca:f8:f7:95:1e:47:05: 5c:04:57:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTM4NjExMC8GA1UEBRMoOTE0RTE4NTQ0Q0NBNEQzMTBBNUU1RjA5MTkwODI5RjY4 RDUxNDA3RTAeFw0yNjAxMjUwNjI4MjBaFw0yNjAyMDEwNjI4MjBaMBgxFjAUBgNV BAMMDTY5NzViODA1LTBiMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjE6r4GB+mRJXHKnbs+biIDcCjO9cMCCqFFKg40MeqOfToGXmpetkmJMf8uy5i b7YFk3FpiLxL84YC8LeShVh7vBRXM/gasDn8RKL9kvU1W7EkEncw1qtX6pXESdyX SLMlqDJ32KkHZYM8RUkJkZAYTVm4yRhotqksemuCZe3zpc/LVTq5fyY5CJa3Atzk yJ+IrPx8BL7P1TQrpbdf1MAtrLmgLERA5uo0kKQLC7REQIGb2cwDlnUD67O4h3N0 qizBzpKE2CeJ7ZYry6kF/7k7cYWD8vP/GHthW4BkUHwrxDCoZhWoU4bG8kTwHfum H9hwsq9+h2Lp8RwFVU6hwuvjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt6UiqdLQ obaxk6ND42vTqpmr+s4wHwYDVR0jBBgwFoAUkU4YVEzKTTEKXl8JGQgp9o1RQH4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5Mzg2LzJFNjU3QkNFOTdF ODExRjBBOUE5NTA2NEM0RjlBRTAyL2tVNFlWRXpLVFRFS1hsOEpHUWdwOW8xUlFI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1U0WVZFektUVEVLWGw4SkdRZ3A5bzFSUUg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 Mzg2LzJFNjU3QkNFOTdFODExRjBBOUE5NTA2NEM0RjlBRTAyL2tVNFlWRXpLVFRF S1hsOEpHUWdwOW8xUlFINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHTE7weuMzizD/q+cvgQyzFy4bb+iCyLK1P7br8uhbEqL0JxEbj8Rlno jeOUlxNUylI1UOIarxIubSCsNbq+nfG4FaEPGKOag5dCwgZ9vIRL0KbikGNqK3ns 5cBi+tJEeW14yBwRCvmwxbqwlj3I/iQwIbAHXXWaZd/432aIq/p02I7iCQ0xtd1s BPcLjzAPWkyiTE/UsNxKBICH9xmBHVKbS3msbXnkZOy4e+KVZjnow/mLFEHfp1Rw gK2fdq3KjORVKA9aDFOMnrBFAF7IE/F1JQuYRfqO9kGGy2mvEWQWvigTz4qcQjWM FYlaYw8p372v2JOMyvj3lR5HBVwEV1Q= -----END CERTIFICATE-----Generated at Sun Jan 25 17:53:51 2026 by rpki-client