This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json) Hash identifier: vKQgcxC5eVq96DM/vhGvTXAZnTEJ5lhIpG4uSfF5PV8= Subject key identifier: E2:34:37:C7:9A:26:CC:73:A2:E3:25:9F:A9:27:E0:CE:62:86:87:C8 Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft Manifest number: 011C Signing time: Sun 25 Jan 2026 04:00:40 +0000 Manifest this update: Sun 25 Jan 2026 04:00:40 +0000 Manifest next update: Sun 01 Feb 2026 04:00:40 +0000 Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: VpvulYB7smLqqPywTvlfPRX0CX/Nz/JybMzjU3mnDvU=) 2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: rttfys3xf5DGoO8xT8j9r6Q4kgJ4GnHSyal9Ka16jwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: Jan 25 04:00:40 2026 GMT Not After : Feb 1 04:00:40 2026 GMT Subject: CN=69759568-fe95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:a8:98:6c:62:90:54:15:ce:e2:16:bd:11: 2a:01:99:46:e6:b7:51:49:3c:78:0f:04:88:08:20: 6a:3a:57:ed:1a:df:dc:6c:1c:27:1a:17:d5:b2:29: 3f:46:f0:a3:3d:b4:9e:4c:02:17:ab:20:4f:92:c8: 9b:1e:43:1b:40:c5:f6:cd:3a:7b:84:cd:3d:e4:84: 30:a3:39:9d:bb:2e:1a:2b:fc:37:33:db:bf:54:b4: e6:45:ad:d5:fe:ae:68:49:e6:22:22:8a:b5:af:e5: 19:1d:df:c4:d6:58:e3:a0:0d:f6:2d:94:a0:62:7c: fb:06:45:2e:84:e9:b1:0b:36:72:3e:fb:c6:e6:08: 74:7d:56:2e:4d:4a:70:3a:16:fc:3e:1f:4a:28:84: 1b:ac:57:39:23:3a:b6:48:55:fa:ae:58:cd:5c:0c: fa:f8:3c:ef:e6:a8:56:a3:7b:4a:e4:0d:6e:a9:07: e2:dd:ea:ee:2b:78:36:f0:90:c8:45:1f:61:c4:b7: eb:71:b9:23:48:d8:83:7f:03:b8:a4:06:4a:b3:06: 55:ae:1d:43:0e:44:79:84:d9:fd:fb:7b:4d:05:9d: 63:1b:90:82:e9:c5:2f:bc:02:ea:ba:94:95:14:0b: 5e:c3:99:9b:06:39:4a:08:00:64:32:19:21:0f:c8: 9b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:34:37:C7:9A:26:CC:73:A2:E3:25:9F:A9:27:E0:CE:62:86:87:C8 X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f7:66:87:56:77:fd:b5:69:5a:92:6d:40:5f:9d:91:99:4c: 38:0b:3e:98:3e:61:69:90:19:ea:ae:69:c1:a0:21:1a:ee:18: 34:e1:49:63:e2:19:8d:d2:1e:6a:ce:7d:e1:a6:6b:43:17:f2: 2e:8f:b2:59:aa:39:5f:f8:79:95:b8:77:f0:30:b9:5e:58:e0: 0f:b5:2e:2e:01:ee:dd:e1:a5:ce:74:9a:98:87:97:25:74:b7: db:64:c6:02:80:1f:76:72:2c:c6:a1:10:29:7e:d4:9b:bd:5f: c5:83:dc:5f:63:c7:84:44:bc:19:2c:d8:e1:f2:87:2c:bd:77: 59:c1:a4:3f:38:9e:13:56:48:35:c4:db:29:b3:37:16:d7:23: bf:74:ff:d5:a8:3c:d7:a6:9c:84:8d:09:02:1b:92:eb:b0:e2: ba:4c:a5:9b:21:29:f7:96:ba:0d:93:40:4b:03:33:8b:0d:c3: 01:9d:8f:66:7e:30:84:c9:a5:e9:11:a6:f1:11:83:f2:17:97: 50:9e:85:af:31:6b:34:11:8b:34:a4:d1:c5:9c:45:0e:fc:9b: 48:17:d1:63:39:aa:d5:3a:8c:db:25:18:9a:84:c8:0b:6e:ef: 8d:fb:f2:e5:6d:8f:d2:58:ad:5d:eb:55:a8:32:4e:c9:48:27: 3e:0b:d8:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyRDExMTAvBgNVBAUTKDhFNTI2MTIzRUY1MkNGODQ5NTU4MjZBMjcyOEEzMzA3 NTdGMUU4MEMwHhcNMjYwMTI1MDQwMDQwWhcNMjYwMjAxMDQwMDQwWjAYMRYwFAYD VQQDDA02OTc1OTU2OC1mZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogComGxikFQVzuIWvREqAZlG5rdRSTx4DwSICCBqOlftGt/cbBwnGhfVsik/ RvCjPbSeTAIXqyBPksibHkMbQMX2zTp7hM095IQwozmduy4aK/w3M9u/VLTmRa3V /q5oSeYiIoq1r+UZHd/E1ljjoA32LZSgYnz7BkUuhOmxCzZyPvvG5gh0fVYuTUpw Ohb8Ph9KKIQbrFc5Izq2SFX6rljNXAz6+Dzv5qhWo3tK5A1uqQfi3eruK3g28JDI RR9hxLfrcbkjSNiDfwO4pAZKswZVrh1DDkR5hNn9+3tNBZ1jG5CC6cUvvALqupSV FAtew5mbBjlKCABkMhkhD8ibiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOI0N8ea JsxzouMln6kn4M5ihofIMB8GA1UdIwQYMBaAFI5SYSPvUs+ElVgmonKKMwdX8egM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJEMS9DRkVCOERBQTQ1 QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0U1ZXQ2FpY29vekIxZng2 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTJEMS9DRkVCOERBQTQ1QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0 U1ZXQ2FpY29vekIxZng2QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx92aHVnf9tWlakm1AX52RmUw4Cz6YPmFpkBnqrmnBoCEa7hg04Ulj 4hmN0h5qzn3hpmtDF/Iuj7JZqjlf+HmVuHfwMLleWOAPtS4uAe7d4aXOdJqYh5cl dLfbZMYCgB92cizGoRApftSbvV/Fg9xfY8eERLwZLNjh8ocsvXdZwaQ/OJ4TVkg1 xNspszcW1yO/dP/VqDzXppyEjQkCG5LrsOK6TKWbISn3lroNk0BLAzOLDcMBnY9m fjCEyaXpEabxEYPyF5dQnoWvMWs0EYs0pNHFnEUO/JtIF9FjOarVOozbJRiahMgL bu+N+/LlbY/SWK1d61WoMk7JSCc+C9j9 -----END CERTIFICATE-----Generated at Sun Jan 25 18:28:53 2026 by rpki-client