This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft File: taoJHUe5b__ilkNNAcZFS04cnhk.mft (raw, json) Hash identifier: HZ9ruqhZMqaTg9xIuydloawxHTje4Y4CAYdd/qv8vGE= Subject key identifier: CF:DC:ED:0F:21:C4:69:4E:65:32:51:B7:AD:DA:4E:E6:1A:83:98:44 Authority key identifier: B5:AA:09:1D:47:B9:6F:FF:E2:96:43:4D:01:C6:45:4B:4E:1C:9E:19 Certificate issuer: /CN=A9188AB8/serialNumber=B5AA091D47B96FFFE296434D01C6454B4E1C9E19 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft Manifest number: 33 Signing time: Fri 23 Jan 2026 06:33:51 +0000 Manifest this update: Fri 23 Jan 2026 06:33:50 +0000 Manifest next update: Fri 30 Jan 2026 06:33:50 +0000 Files and hashes: 1: taoJHUe5b__ilkNNAcZFS04cnhk.crl (hash: C5GiSl1G/65zFXZm98kqK0LRdrIrtbDQ8np/8xPhunk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.crl rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188AB8, serialNumber=B5AA091D47B96FFFE296434D01C6454B4E1C9E19 Validity Not Before: Jan 23 06:33:50 2026 GMT Not After : Jan 30 06:33:50 2026 GMT Subject: CN=6973164e-244e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:f6:e1:d7:06:dd:6b:a3:a2:d8:40:2a:4b: 76:5d:bc:c5:37:0b:e8:b1:c2:42:90:57:d8:c9:5a: 6b:a6:b5:49:7e:6b:ef:c5:01:e0:11:43:a4:ec:95: 9a:35:84:76:a7:c4:c4:ab:b3:1c:e2:9b:ae:f0:52: a4:fb:2c:42:cb:8d:86:bb:b5:20:d3:43:f7:62:71: 05:e0:c5:e6:e8:37:7f:21:b3:4e:7f:2d:c2:cd:e5: ea:4c:f3:ae:e0:3b:05:33:59:7c:07:50:d0:99:cc: e6:51:26:d2:81:b5:9d:44:49:a2:63:d6:42:0a:b7: a7:6a:fe:8a:24:3a:a3:eb:41:9b:0a:a0:4e:11:36: 67:4d:2a:0f:d7:b2:03:26:f8:2d:76:a7:3a:67:9c: 26:74:ca:01:f8:52:81:8e:db:60:59:ff:73:61:93: 68:c7:15:e9:5b:53:ba:a5:45:7c:7d:60:ee:5a:59: 21:92:61:1a:84:f8:b4:ac:1f:ad:a3:1c:7a:c7:c8: 99:69:01:fb:f3:43:52:82:67:df:27:1e:d7:10:73: b2:2a:fa:ac:4d:e1:28:a5:29:45:13:c0:3e:74:e0: ae:45:32:81:22:d1:38:95:4e:5c:02:b2:e5:2b:8a: 8b:d2:18:0a:60:85:d1:2f:e8:67:24:9f:bc:0c:d0: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DC:ED:0F:21:C4:69:4E:65:32:51:B7:AD:DA:4E:E6:1A:83:98:44 X509v3 Authority Key Identifier: keyid:B5:AA:09:1D:47:B9:6F:FF:E2:96:43:4D:01:C6:45:4B:4E:1C:9E:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:57:d6:fb:ec:9b:a5:70:7c:1b:19:e0:22:dd:db:6e:74:cd: 89:e0:ed:93:7a:2b:d5:a7:cf:62:9d:d6:5e:ac:9d:0d:09:e5: c8:0d:17:f6:9e:cb:07:44:11:63:9f:95:e1:35:39:74:7f:29: 23:16:08:7d:82:19:ed:a4:fa:52:3d:38:a8:27:b6:82:b1:a8: a4:90:23:ae:b2:e4:6d:1c:96:0a:b5:b0:f3:78:63:98:ec:ad: d2:8d:2b:4e:b3:2b:0a:3c:ae:5a:32:73:7d:2b:c5:d6:89:f9: 35:a3:3a:dc:6d:ac:74:0b:ff:7e:9c:ee:31:1d:57:bc:41:c9: 08:f8:a1:16:17:d1:96:95:20:bd:67:b2:6a:60:27:31:12:eb: 1c:62:bc:b8:5a:b3:79:ce:5f:4d:21:58:9f:e2:a8:ff:a7:37: 3f:9b:1d:08:c5:97:88:3b:67:92:37:05:84:90:32:e5:b4:c5: 9d:70:ea:ec:4f:08:2e:9e:85:7b:25:c3:c1:f7:56:3f:77:36: 21:3e:02:7d:d7:ad:39:3b:cf:4d:ee:7f:e6:c8:aa:2c:92:5d: 96:e5:f8:90:82:94:34:ce:98:f5:9d:ec:37:9a:bb:cc:3a:00: f8:84:3f:75:60:6e:99:80:2d:b9:c3:4d:2d:bf:90:cf:df:50: f3:6a:a3:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEFCODExMC8GA1UEBRMoQjVBQTA5MUQ0N0I5NkZGRkUyOTY0MzREMDFDNjQ1NEI0 RTFDOUUxOTAeFw0yNjAxMjMwNjMzNTBaFw0yNjAxMzAwNjMzNTBaMBgxFjAUBgNV BAMMDTY5NzMxNjRlLTI0NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHHvbh1wbda6Oi2EAqS3ZdvMU3C+ixwkKQV9jJWmumtUl+a+/FAeARQ6TslZo1 hHanxMSrsxzim67wUqT7LELLjYa7tSDTQ/dicQXgxeboN38hs05/LcLN5epM867g OwUzWXwHUNCZzOZRJtKBtZ1ESaJj1kIKt6dq/ookOqPrQZsKoE4RNmdNKg/XsgMm +C12pzpnnCZ0ygH4UoGO22BZ/3Nhk2jHFelbU7qlRXx9YO5aWSGSYRqE+LSsH62j HHrHyJlpAfvzQ1KCZ98nHtcQc7Iq+qxN4SilKUUTwD504K5FMoEi0TiVTlwCsuUr iovSGApghdEv6Gckn7wM0KQ3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz9ztDyHE aU5lMlG3rdpO5hqDmEQwHwYDVR0jBBgwFoAUtaoJHUe5b//ilkNNAcZFS04cnhkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4QUI4LzYzRDNCMzZFQUI3 MjExRjA4NUM2REY1QkM0RjlBRTAyL3Rhb0pIVWU1Yl9faWxrTk5BY1pGUzA0Y25o ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGFvSkhVZTViX19pbGtOTkFjWkZTMDRjbmhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 QUI4LzYzRDNCMzZFQUI3MjExRjA4NUM2REY1QkM0RjlBRTAyL3Rhb0pIVWU1Yl9f aWxrTk5BY1pGUzA0Y25oay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADFX1vvsm6VwfBsZ4CLd2250zYng7ZN6K9Wnz2Kd1l6snQ0J5cgNF/ae ywdEEWOfleE1OXR/KSMWCH2CGe2k+lI9OKgntoKxqKSQI66y5G0clgq1sPN4Y5js rdKNK06zKwo8rloyc30rxdaJ+TWjOtxtrHQL/36c7jEdV7xByQj4oRYX0ZaVIL1n smpgJzES6xxivLhas3nOX00hWJ/iqP+nNz+bHQjFl4g7Z5I3BYSQMuW0xZ1w6uxP CC6ehXslw8H3Vj93NiE+An3XrTk7z03uf+bIqiySXZbl+JCClDTOmPWd7Deau8w6 APiEP3VgbpmALbnDTS2/kM/fUPNqo0Q= -----END CERTIFICATE-----Generated at Sun Jan 25 09:23:08 2026 by rpki-client