This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft File: IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json) Hash identifier: x46zwbHWG1zBBwu3e3vEI/ozFTkAQws9Rn/MYogAXYY= Subject key identifier: 17:B8:5C:36:CB:C6:BC:8F:DC:81:89:BC:8B:D2:94:3B:5A:B7:D9:9D Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Certificate serial: 0812 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft Manifest number: 0805 Signing time: Sat 24 Jan 2026 20:25:52 +0000 Manifest this update: Sat 24 Jan 2026 20:25:51 +0000 Manifest next update: Sat 31 Jan 2026 20:25:51 +0000 Files and hashes: 1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: /Bj8m/iRk51Y3xkJMmYlyS0VewASn4XBHg0wDvh2JN8=) 2: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: faGNUns0UIB/6rsiDFhIe2V0V3MDd2DqirXM6CF0Z8Q=) 3: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: x1swDqDbdRpW1YcvJW4XZPVqkw29NgcBcxcpOtDQ400=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2066 (0x812) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Validity Not Before: Jan 24 20:25:51 2026 GMT Not After : Jan 31 20:25:51 2026 GMT Subject: CN=69752ad0-430d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:e5:28:37:94:40:53:36:64:87:4b:fb:e7: 6b:e4:45:89:6e:a3:23:01:21:2a:89:b4:bd:99:d4: 56:9f:06:7b:c9:45:f0:d6:e3:f7:c4:79:24:b0:d4: c8:50:48:3b:ab:a1:a0:f8:c2:d7:83:f2:8b:ed:85: d1:08:c5:07:5e:8c:77:3a:ed:72:6f:b0:db:10:ac: 69:7f:4a:9a:d9:e0:8c:49:35:1d:5b:23:4c:38:df: 93:01:f6:16:2e:8c:fd:06:7b:06:70:31:25:81:98: 77:df:32:9a:7c:18:af:c8:27:24:d9:70:b6:0f:cf: 56:4a:31:c3:69:53:90:99:ad:ae:b1:01:1d:77:67: ed:ed:23:37:ec:eb:0a:45:a7:88:80:1f:ff:ac:fc: 5a:9d:58:b5:19:40:d3:a4:bc:a6:7f:d0:d1:52:a3: d0:e3:6c:6e:56:6c:34:30:0e:53:e7:f5:a9:37:1c: 0f:3f:02:4b:8e:58:40:69:32:f3:54:7c:a5:38:9d: b6:af:20:ee:e6:78:ec:a2:8f:73:bf:66:fa:6d:7c: e8:b6:56:97:73:bd:ad:ab:50:88:13:5c:a1:ec:47: fc:25:bb:dd:ce:67:7f:57:ac:cd:fd:bc:e1:a6:39: 06:7a:f4:b7:50:98:93:86:54:88:69:91:d4:a4:f3: 29:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B8:5C:36:CB:C6:BC:8F:DC:81:89:BC:8B:D2:94:3B:5A:B7:D9:9D X509v3 Authority Key Identifier: keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:32:f5:42:14:e6:d7:16:0d:a2:fe:05:de:7f:4d:70:30:e0: db:0c:bd:8b:f4:13:0f:3f:cb:e3:d4:ee:31:d0:53:98:bd:a8: 35:2a:39:d3:16:2d:d2:d8:0a:53:4a:c2:29:6f:66:e5:00:da: c3:e5:8a:84:6a:11:13:c8:13:c5:bd:1d:30:f4:0c:51:a3:f0: 43:00:cc:5c:0d:b0:91:d2:36:8d:99:85:ba:dc:77:0f:c9:c8: 3b:03:79:71:c8:38:11:ca:a2:49:54:a6:56:df:be:f7:1d:cd: 4d:95:ab:ba:3d:2c:17:2f:cb:01:f9:2f:09:85:05:a2:83:14: 39:6e:b7:73:19:66:de:4f:eb:1c:79:bc:9f:61:ea:c8:9f:ae: cf:67:2f:37:b5:45:14:d6:e7:5f:f7:d7:95:bf:1b:28:05:31: 00:28:78:4f:9a:11:64:14:65:c0:0d:17:8f:40:c0:03:c8:36: 03:fc:37:5c:c0:2a:5b:d8:75:76:31:bb:9c:f1:68:5e:ba:2a: 93:8b:93:f7:e1:e8:2d:76:1a:4c:b2:6b:68:59:02:78:28:3e: fb:e2:fd:f8:d6:78:6d:a5:18:6d:3f:67:fb:bb:b9:9c:4a:df: 06:2f:85:b1:98:26:ba:82:90:f2:6f:ae:e2:36:bb:0b:67:6d: a0:ef:69:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTkxMTAvBgNVBAUTKDIyODkyRTNEOEM0NDlGNUE5QUM2NENGQ0I2MzRCNTlG NkM1MzEzNkIwHhcNMjYwMTI0MjAyNTUxWhcNMjYwMTMxMjAyNTUxWjAYMRYwFAYD VQQDDA02OTc1MmFkMC00MzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsF3lKDeUQFM2ZIdL++dr5EWJbqMjASEqibS9mdRWnwZ7yUXw1uP3xHkksNTI UEg7q6Gg+MLXg/KL7YXRCMUHXox3Ou1yb7DbEKxpf0qa2eCMSTUdWyNMON+TAfYW Loz9BnsGcDElgZh33zKafBivyCck2XC2D89WSjHDaVOQma2usQEdd2ft7SM37OsK RaeIgB//rPxanVi1GUDTpLymf9DRUqPQ42xuVmw0MA5T5/WpNxwPPwJLjlhAaTLz VHylOJ22ryDu5njsoo9zv2b6bXzotlaXc72tq1CIE1yh7Ef8Jbvdzmd/V6zN/bzh pjkGevS3UJiThlSIaZHUpPMp0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBe4XDbL xryP3IGJvIvSlDtat9mdMB8GA1UdIwQYMBaAFCKJLj2MRJ9amsZM/LY0tZ9sUxNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1OS9CNjhCOTBENjBE Q0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4xcWF4a3o4dGpTMW4yeFRF MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lva3VQWXhFbjFxYXhrejh0alMxbjJ4VEUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1OS9CNjhCOTBENjBEQ0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4x cWF4a3o4dGpTMW4yeFRFMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfMvVCFObXFg2i/gXef01wMODbDL2L9BMPP8vj1O4x0FOYvag1KjnT Fi3S2ApTSsIpb2blANrD5YqEahETyBPFvR0w9AxRo/BDAMxcDbCR0jaNmYW63HcP ycg7A3lxyDgRyqJJVKZW3773Hc1Nlau6PSwXL8sB+S8JhQWigxQ5brdzGWbeT+sc ebyfYerIn67PZy83tUUU1udf99eVvxsoBTEAKHhPmhFkFGXADRePQMADyDYD/Ddc wCpb2HV2Mbuc8WheuiqTi5P34egtdhpMsmtoWQJ4KD774v341nhtpRhtP2f7u7mc St8GL4WxmCa6gpDyb67iNrsLZ22g72lE -----END CERTIFICATE-----Generated at Sun Jan 25 03:02:36 2026 by rpki-client