This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft File: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft (raw, json) Hash identifier: Q/NuFgf46hgpKhtwNbmUQSVeGbwoLNW0Al8wDK9+El4= Subject key identifier: CF:31:54:34:EF:CC:85:9E:46:78:19:C6:66:59:9D:45:89:02:CF:AD Authority key identifier: 76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07 Certificate issuer: /CN=A917ADD1/serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft Manifest number: 01CC Signing time: Sun 25 Jan 2026 02:11:53 +0000 Manifest this update: Sun 25 Jan 2026 02:11:53 +0000 Manifest next update: Sun 01 Feb 2026 02:11:53 +0000 Files and hashes: 1: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl (hash: 3h9oj4H7ixPKM5hNp6vEND3LfOV/KToIumJpD1ZJTyo=) 2: 8D0C1E0E37EF11EE82AF270BC4F9AE02.roa (hash: GFGPvdmy2vrmiAyM3NUeTKYyq91wUi+ACbGsbCoh47g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ADD1, serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507 Validity Not Before: Jan 25 02:11:53 2026 GMT Not After : Feb 1 02:11:53 2026 GMT Subject: CN=69757be9-ebf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:34:4d:5c:61:0c:3b:2f:62:d4:21:18:75:e7: cb:bc:d9:55:87:8e:f9:a9:be:62:05:08:b4:4f:a5: 1f:5a:fe:51:4b:c1:d5:dd:e5:50:54:6e:42:cf:de: b3:83:58:48:af:a1:59:7b:6c:e7:1e:9f:d5:d8:69: 0c:80:60:41:06:43:23:87:a4:9b:67:ce:24:63:5a: be:d8:d3:5c:3b:81:d4:8e:70:f5:3e:89:1e:bf:74: 34:0a:07:7b:c8:20:d0:e2:80:2f:1e:e0:69:96:40: cf:61:98:0e:c8:aa:bc:4f:9f:1e:1b:7b:36:ef:3a: 5e:6d:bf:f9:a4:ae:9b:a1:9d:9a:93:56:cf:3b:b4: f7:b5:fb:31:15:c7:8d:3c:1c:e7:18:83:d4:16:2a: 77:3d:a8:45:39:ee:d8:f8:5e:71:d3:2a:30:a6:c3: 35:c1:c7:7e:06:fa:92:59:96:5f:c8:55:b4:77:8f: ae:a8:a0:47:55:64:3f:c2:89:fd:e3:64:55:86:af: 65:49:60:eb:33:7a:35:89:f6:9f:32:a9:44:6d:d0: 43:c2:b5:0c:72:62:79:01:7b:3a:9c:b0:d9:ed:5e: 16:72:1a:5f:fc:06:0d:02:e3:b6:1e:c6:f4:ab:76: df:c1:b6:26:b6:98:b9:b7:8c:79:76:ad:39:bf:ed: c7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:31:54:34:EF:CC:85:9E:46:78:19:C6:66:59:9D:45:89:02:CF:AD X509v3 Authority Key Identifier: keyid:76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:55:b4:95:3a:fe:db:8f:06:9b:4c:62:60:e3:1a:52:5d:f1: 79:1a:71:f3:d9:f7:f4:23:89:89:6d:59:43:41:11:a4:08:0e: a9:39:b2:eb:ae:c6:75:45:70:0c:c1:7c:a4:35:2b:c5:62:34: 75:5b:14:14:04:aa:7c:4f:0d:99:d4:9a:58:d4:c6:f6:ec:e4: f5:3c:1e:3f:76:41:0f:74:e3:2b:6f:e3:6a:70:7f:f0:b5:9b: f9:86:88:d0:1b:83:eb:57:d3:4e:b9:fd:7a:98:b2:d3:05:ba: f5:c1:85:05:4c:4e:17:2e:b6:03:67:2f:71:5d:35:e7:56:28: e2:5a:0a:61:f4:56:4a:71:87:52:d9:10:1c:56:41:c6:52:3f: 3e:26:5e:ab:9e:4f:a3:27:22:41:d8:d2:ad:41:35:5c:28:5d: fc:5f:cd:37:db:e1:60:39:b1:94:5e:dc:b8:48:a3:29:5a:dc: b6:02:c0:50:b6:25:4a:71:79:07:6e:04:71:e9:4b:b0:ab:36: f7:9e:19:3f:66:4a:a9:13:34:95:30:92:b3:2f:ca:6d:b3:e7: 0c:d9:47:ce:99:30:4f:ad:8e:4d:31:56:c3:c0:62:77:03:4d: f3:e8:a2:95:27:9f:c4:0f:9a:b5:28:d6:4d:bf:b8:79:6f:ac: 8f:90:f9:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FERDExMTAvBgNVBAUTKDc2NTJBMjJGQzI1MEZBQUFFM0FCMkMwQzJBRkREMDRF MzA0N0U1MDcwHhcNMjYwMTI1MDIxMTUzWhcNMjYwMjAxMDIxMTUzWjAYMRYwFAYD VQQDDA02OTc1N2JlOS1lYmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjRNXGEMOy9i1CEYdefLvNlVh475qb5iBQi0T6UfWv5RS8HV3eVQVG5Cz96z g1hIr6FZe2znHp/V2GkMgGBBBkMjh6SbZ84kY1q+2NNcO4HUjnD1Pokev3Q0Cgd7 yCDQ4oAvHuBplkDPYZgOyKq8T58eG3s27zpebb/5pK6boZ2ak1bPO7T3tfsxFceN PBznGIPUFip3PahFOe7Y+F5x0yowpsM1wcd+BvqSWZZfyFW0d4+uqKBHVWQ/won9 42RVhq9lSWDrM3o1ifafMqlEbdBDwrUMcmJ5AXs6nLDZ7V4Wchpf/AYNAuO2Hsb0 q3bfwbYmtpi5t4x5dq05v+3HnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8xVDTv zIWeRngZxmZZnUWJAs+tMB8GA1UdIwQYMBaAFHZSoi/CUPqq46ssDCr90E4wR+UH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUREMS9EMDA2QzBERTM3 RUUxMUVFOThERjM2NjZDNEY5QUUwMi9kbEtpTDhKUS1xcmpxeXdNS3YzUVRqQkg1 UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RsS2lMOEpRLXFyanF5d01LdjNRVGpCSDVRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUREMS9EMDA2QzBERTM3RUUxMUVFOThERjM2NjZDNEY5QUUwMi9kbEtpTDhKUS1x cmpxeXdNS3YzUVRqQkg1UWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiVbSVOv7bjwabTGJg4xpSXfF5GnHz2ff0I4mJbVlDQRGkCA6pObLr rsZ1RXAMwXykNSvFYjR1WxQUBKp8Tw2Z1JpY1Mb27OT1PB4/dkEPdOMrb+NqcH/w tZv5hojQG4PrV9NOuf16mLLTBbr1wYUFTE4XLrYDZy9xXTXnVijiWgph9FZKcYdS 2RAcVkHGUj8+Jl6rnk+jJyJB2NKtQTVcKF38X8032+FgObGUXty4SKMpWty2AsBQ tiVKcXkHbgRx6Uuwqzb3nhk/ZkqpEzSVMJKzL8pts+cM2UfOmTBPrY5NMVbDwGJ3 A03z6KKVJ5/ED5q1KNZNv7h5b6yPkPlN -----END CERTIFICATE-----Generated at Sun Jan 25 04:39:21 2026 by rpki-client