This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft File: kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json) Hash identifier: 2Nsbey4lVfx4GZ1q+EEwcpUbOsb10m1P1oNsTtPl2ok= Subject key identifier: EE:23:D7:EA:D8:0B:37:E9:AA:92:AE:AC:84:B2:1C:C5:00:B4:C9:F5 Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD Certificate issuer: /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Certificate serial: 04B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft Manifest number: 39B1 Signing time: Sat 24 Jan 2026 14:34:38 +0000 Manifest this update: Sat 24 Jan 2026 14:34:38 +0000 Manifest next update: Sat 31 Jan 2026 14:34:38 +0000 Files and hashes: 1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: 4MhOqUI3GFpS6xrU5fT2t1SLg5Vki6T/OnPBQMG2BrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1201 (0x4b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Validity Not Before: Jan 24 14:34:38 2026 GMT Not After : Jan 31 14:34:38 2026 GMT Subject: CN=6974d87e-9095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:d8:b4:b5:7c:df:cf:b7:9c:03:8e:0e:bb: 92:90:5c:91:7c:1a:14:09:5c:02:6c:85:62:a1:80: 2d:94:0b:2a:4b:08:0a:bf:bb:b6:56:0a:e1:15:af: 8f:b4:32:64:aa:0f:36:69:eb:32:9b:8b:a6:52:0f: 67:f6:de:54:b8:aa:07:70:9d:6f:75:c8:5f:f1:ba: de:7f:2a:8a:3d:a3:98:de:b5:23:8b:92:fd:80:71: c7:52:ab:03:5d:a9:b6:bf:06:c7:99:ce:99:c8:35: e5:17:21:fa:b0:0b:0e:bb:ff:e0:09:00:a4:03:7c: 52:09:2c:ae:25:40:bd:0b:33:17:4a:7f:c7:b6:2f: 07:ab:95:a0:12:8f:75:69:44:f8:1e:04:99:71:63: f8:92:a7:2b:73:61:ba:13:4b:d1:0f:c7:a1:dc:dd: d1:54:10:c2:15:b9:01:79:24:66:d6:10:c7:e3:8d: d8:b6:90:26:5f:5c:d5:e2:e7:6f:9e:1d:b9:d3:06: ad:bc:04:9b:b0:10:65:2f:dc:8e:c9:09:d8:69:89: f4:83:31:f0:0a:88:5d:4d:3d:a8:74:43:18:5b:06: 7e:92:a3:8e:41:9b:33:e9:f1:b3:98:b0:2a:2f:9c: 11:c9:9a:64:79:53:20:23:93:97:0d:5a:ab:76:a6: 18:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:23:D7:EA:D8:0B:37:E9:AA:92:AE:AC:84:B2:1C:C5:00:B4:C9:F5 X509v3 Authority Key Identifier: keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:37:a6:0a:13:7e:2e:af:a1:8b:e1:19:8b:52:94:34:d3:01: 0e:c5:56:b6:1b:43:b3:40:a6:25:cb:67:76:a8:bb:5a:27:65: 39:4f:ab:14:e9:26:f7:e1:eb:70:60:ce:8a:14:6b:ab:09:fa: e7:d4:52:bd:de:84:41:d8:2f:ab:70:09:ba:41:c8:f7:b3:32: b0:0c:3f:b1:79:57:9b:25:27:08:da:52:0a:47:41:44:00:1e: 3b:ee:98:23:38:cf:cb:c5:b9:c2:fa:f9:24:bf:02:e4:1c:71: d0:4e:06:f1:24:38:e1:4f:2a:fe:74:d0:d3:73:2c:40:03:dc: 2f:55:7c:3e:bf:2e:94:b4:97:52:66:91:b7:8c:47:b8:5f:b9: b7:20:83:67:5f:c0:11:1e:4e:df:d6:84:62:7d:e8:4b:eb:1c: 9e:4c:a6:e5:49:f2:d0:3e:c8:d4:e4:5e:98:47:38:aa:4c:93: 5e:2b:b5:1b:36:fb:ff:47:d6:b5:8f:e7:74:48:82:a9:af:70: 84:d8:ce:a3:eb:91:6b:db:8c:fd:d5:b9:5c:b5:a5:df:3b:fb: 9d:9e:bb:b0:32:00:78:a4:79:27:41:65:36:47:45:46:09:e6: 1b:20:bd:a4:3b:54:b8:41:9d:3d:18:e1:ad:3d:c5:e2:0a:c5: c8:07:47:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDkzMjI3MUZDNDc1RkEyREQ5RDkzMzExMjJCMDdBNTI4 RDM4RjhFRkQwHhcNMjYwMTI0MTQzNDM4WhcNMjYwMTMxMTQzNDM4WjAYMRYwFAYD VQQDDA02OTc0ZDg3ZS05MDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZbYtLV838+3nAOODruSkFyRfBoUCVwCbIVioYAtlAsqSwgKv7u2VgrhFa+P tDJkqg82aesym4umUg9n9t5UuKoHcJ1vdchf8brefyqKPaOY3rUji5L9gHHHUqsD Xam2vwbHmc6ZyDXlFyH6sAsOu//gCQCkA3xSCSyuJUC9CzMXSn/Hti8Hq5WgEo91 aUT4HgSZcWP4kqcrc2G6E0vRD8eh3N3RVBDCFbkBeSRm1hDH443YtpAmX1zV4udv nh250watvASbsBBlL9yOyQnYaYn0gzHwCohdTT2odEMYWwZ+kqOOQZsz6fGzmLAq L5wRyZpkeVMgI5OXDVqrdqYYrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4j1+rY CzfpqpKurISyHMUAtMn1MB8GA1UdIwQYMBaAFJMicfxHX6LdnZMxEisHpSjTj479 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90MmRrekVTS3dlbEtOT1Bq djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5SnhfRWRmb3QyZGt6RVNLd2VsS05PUGp2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90 MmRrekVTS3dlbEtOT1BqdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDON6YKE34ur6GL4RmLUpQ00wEOxVa2G0OzQKYly2d2qLtaJ2U5T6sU 6Sb34etwYM6KFGurCfrn1FK93oRB2C+rcAm6Qcj3szKwDD+xeVebJScI2lIKR0FE AB477pgjOM/LxbnC+vkkvwLkHHHQTgbxJDjhTyr+dNDTcyxAA9wvVXw+vy6UtJdS ZpG3jEe4X7m3IINnX8ARHk7f1oRifehL6xyeTKblSfLQPsjU5F6YRziqTJNeK7Ub Nvv/R9a1j+d0SIKpr3CE2M6j65Fr24z91blctaXfO/udnruwMgB4pHknQWU2R0VG CeYbIL2kO1S4QZ09GOGtPcXiCsXIB0cL -----END CERTIFICATE-----Generated at Sun Jan 25 10:44:58 2026 by rpki-client