This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft File: Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json) Hash identifier: 8skABfH0DqnqzZt/7ZdbUI6mWhfkl5pe297zHTF+sNA= Subject key identifier: 88:CD:B2:F3:96:F2:EA:FC:0A:C3:D9:EC:DE:E0:F5:47:45:62:10:01 Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Certificate serial: 18A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft Manifest number: 1894 Signing time: Sat 24 Jan 2026 16:15:20 +0000 Manifest this update: Sat 24 Jan 2026 16:15:20 +0000 Manifest next update: Sat 31 Jan 2026 16:15:20 +0000 Files and hashes: 1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: cjfFuxNQnOR69z5LUn2Ihno9X5GfvTeJx2uv4UfMync=) 2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: XNKpRb8/02tHDrrS9S3tLwWbmiJabIsnKyEKhJUYUM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6306 (0x18a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Validity Not Before: Jan 24 16:15:20 2026 GMT Not After : Jan 31 16:15:20 2026 GMT Subject: CN=6974f018-f910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:3b:8c:32:24:26:e3:2a:fa:b2:81:9e:21: 84:dd:62:59:c0:ca:1f:62:55:14:7c:29:4c:a1:31: ce:b0:7f:73:56:26:3f:3c:90:a3:51:84:c3:1f:8e: ef:9b:6a:5e:90:d0:18:ae:4b:a5:9d:9e:36:92:f5: a2:14:0b:e3:30:1e:4d:d0:93:56:da:89:86:e2:c6: e5:85:fe:da:0d:62:6a:f4:c0:2a:7d:94:42:dd:42: bc:8d:53:b4:41:48:90:6e:c4:55:5e:d9:d0:3e:88: 95:90:6b:f3:6a:bc:e7:98:77:bc:2a:b9:ee:de:e3: 9e:e2:a4:2b:2c:bf:fc:f2:42:a5:17:e5:a2:73:69: 5b:e0:b7:4c:13:35:6b:93:1c:6d:02:6c:47:9e:d2: cc:88:c8:4b:0e:19:7e:45:29:96:10:11:b4:c4:bd: 71:3d:59:64:c3:a6:5e:c5:0c:31:97:42:19:3e:1d: 67:af:45:82:bd:2d:11:ff:fd:f9:a7:8e:d2:91:0c: 07:06:59:4c:0f:c1:c3:a3:01:0a:af:c9:c0:7d:8a: f7:b8:20:d8:1a:b3:7a:01:d6:28:84:ba:db:4c:84: 14:00:c9:8f:00:b3:eb:75:18:e0:37:a5:70:95:72: 64:b4:a4:7a:a6:aa:07:12:de:9a:f1:3e:ea:18:aa: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CD:B2:F3:96:F2:EA:FC:0A:C3:D9:EC:DE:E0:F5:47:45:62:10:01 X509v3 Authority Key Identifier: keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:4f:8a:20:2d:f5:80:2b:de:14:21:8a:28:22:11:e8:29:4f: 6c:96:1d:dd:12:9b:92:b6:d6:e2:d5:71:01:31:0d:37:c5:6a: 6c:f7:22:83:38:15:cc:08:df:e9:e5:ef:8e:f9:7c:0f:c8:71: 95:84:82:55:8e:ff:23:71:8b:60:fa:2e:24:41:49:70:ec:16: 21:13:0e:1a:5b:5e:61:9e:d9:0f:41:16:bb:04:5c:e9:08:52: 44:b0:69:0d:e3:a3:cf:99:8e:ab:7d:a6:92:ab:ee:69:f8:70: 40:d9:88:a2:9b:4b:e3:d0:35:8d:4d:d9:6d:1e:57:c1:fb:c2: f7:4e:f6:08:ba:17:8e:e2:99:cb:0b:1b:71:eb:5f:05:f6:a0: 55:ca:46:bf:ec:67:3e:8c:f8:7d:f5:a0:ba:47:19:41:be:1a: a8:f9:b6:70:e3:93:71:37:c7:d7:80:e7:ff:bb:d2:d5:a1:36: db:63:d7:d0:1c:6d:ec:ff:76:46:20:2a:74:97:75:ca:82:b0: af:5f:8a:d2:57:2b:c8:e2:74:85:24:52:b2:69:61:14:1d:9b: 10:55:e6:0e:45:b7:6f:04:1b:04:b4:73:63:05:39:af:09:9a: ce:e1:ca:08:ee:79:8e:6b:50:81:e1:54:60:95:65:e2:81:af: 52:23:e0:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxQjExMTAvBgNVBAUTKDYyQ0ZCNjEwRTk2NTBGRTNDODAwMkJDNjE3QjcwNTcy NEQyQTAyREQwHhcNMjYwMTI0MTYxNTIwWhcNMjYwMTMxMTYxNTIwWjAYMRYwFAYD VQQDDA02OTc0ZjAxOC1mOTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmr47jDIkJuMq+rKBniGE3WJZwMofYlUUfClMoTHOsH9zViY/PJCjUYTDH47v m2pekNAYrkulnZ42kvWiFAvjMB5N0JNW2omG4sblhf7aDWJq9MAqfZRC3UK8jVO0 QUiQbsRVXtnQPoiVkGvzarznmHe8Krnu3uOe4qQrLL/88kKlF+Wic2lb4LdMEzVr kxxtAmxHntLMiMhLDhl+RSmWEBG0xL1xPVlkw6ZexQwxl0IZPh1nr0WCvS0R//35 p47SkQwHBllMD8HDowEKr8nAfYr3uCDYGrN6AdYohLrbTIQUAMmPALPrdRjgN6Vw lXJktKR6pqoHEt6a8T7qGKoc5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjNsvOW 8ur8CsPZ7N7g9UdFYhABMB8GA1UdIwQYMBaAFGLPthDpZQ/jyAArxhe3BXJNKgLd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFCMS9BMEYwQURGMEIy NTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQtUElBQ3ZHRjdjRmNrMHFB dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzLTJFT2xsRC1QSUFDdkdGN2NGY2swcUF0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFCMS9BMEYwQURGMEIyNTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQt UElBQ3ZHRjdjRmNrMHFBdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQT4ogLfWAK94UIYooIhHoKU9slh3dEpuSttbi1XEBMQ03xWps9yKD OBXMCN/p5e+O+XwPyHGVhIJVjv8jcYtg+i4kQUlw7BYhEw4aW15hntkPQRa7BFzp CFJEsGkN46PPmY6rfaaSq+5p+HBA2Yiim0vj0DWNTdltHlfB+8L3TvYIuheO4pnL Cxtx618F9qBVyka/7Gc+jPh99aC6RxlBvhqo+bZw45NxN8fXgOf/u9LVoTbbY9fQ HG3s/3ZGICp0l3XKgrCvX4rSVyvI4nSFJFKyaWEUHZsQVeYORbdvBBsEtHNjBTmv CZrO4coI7nmOa1CB4VRglWXiga9SI+AZ -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:26 2026 by rpki-client