This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C8F9/DC6B3614FE6D11EBB83F2B22C4F9AE02/KUrNCNoZE4w376-ydKHndXceRT4.mft File: KUrNCNoZE4w376-ydKHndXceRT4.mft (raw, json) Hash identifier: BFu7QybsMt5dMkxLV84asnsC5QtfZ6nLiSUDE2XYjxs= Subject key identifier: DC:E6:32:99:39:ED:80:2E:35:A8:B3:B3:EB:65:FC:69:DA:E3:68:86 Authority key identifier: 29:4A:CD:08:DA:19:13:8C:37:EF:AF:B2:74:A1:E7:75:77:1E:45:3E Certificate issuer: /CN=A919C8F9/serialNumber=294ACD08DA19138C37EFAFB274A1E775771E453E Certificate serial: 05A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUrNCNoZE4w376-ydKHndXceRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C8F9/DC6B3614FE6D11EBB83F2B22C4F9AE02/KUrNCNoZE4w376-ydKHndXceRT4.mft Manifest number: 05A2 Signing time: Sat 24 Jan 2026 22:24:47 +0000 Manifest this update: Sat 24 Jan 2026 22:24:47 +0000 Manifest next update: Sat 31 Jan 2026 22:24:47 +0000 Files and hashes: 1: KUrNCNoZE4w376-ydKHndXceRT4.crl (hash: lfxs8pI2MBTx/DP0CKwa/lP80iBhAmNbdPq7velie6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C8F9/DC6B3614FE6D11EBB83F2B22C4F9AE02/KUrNCNoZE4w376-ydKHndXceRT4.crl rsync://rpki.apnic.net/member_repository/A919C8F9/DC6B3614FE6D11EBB83F2B22C4F9AE02/KUrNCNoZE4w376-ydKHndXceRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUrNCNoZE4w376-ydKHndXceRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1448 (0x5a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C8F9, serialNumber=294ACD08DA19138C37EFAFB274A1E775771E453E Validity Not Before: Jan 24 22:24:47 2026 GMT Not After : Jan 31 22:24:47 2026 GMT Subject: CN=697546af-0e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:da:6a:52:fe:33:e3:ab:16:c7:90:4c:c5: 7a:9c:8a:36:45:b6:4e:b9:78:11:d3:e5:6f:4a:e7: 35:59:71:03:61:e9:28:af:41:08:6e:97:89:5a:6b: 82:61:f9:84:c2:a4:95:f4:ce:f4:a5:b6:6f:0f:60: e1:85:60:63:ce:62:61:34:9a:de:be:0f:a2:a9:0e: a8:37:ca:3a:85:e7:b9:16:40:1e:c7:00:8d:cc:27: 94:cb:4c:ac:6d:f9:74:5b:61:45:46:7e:55:db:a4: 9f:16:9e:02:b9:70:99:8d:70:85:51:72:50:f3:b4: 4d:af:54:75:30:1a:69:c6:36:eb:22:64:3a:a1:81: 22:bd:3f:0e:fe:27:36:ff:39:d7:51:6c:16:8d:34: 36:65:e0:00:16:57:ae:4f:82:ea:e2:44:42:57:aa: f3:c1:60:2f:35:e3:29:f1:54:65:36:98:2b:5c:41: 55:0d:2d:cf:65:2d:dc:65:0b:76:a5:83:fa:0d:ca: 2c:63:5e:24:f0:73:31:59:d0:14:e3:07:e3:93:d6: c7:f8:3b:3e:fd:51:95:87:60:6b:3c:47:99:b1:09: 84:4f:b6:2a:b3:d3:71:6f:07:66:8b:db:62:d5:61: d6:b0:b3:c0:0f:21:14:2a:bf:ef:55:a4:1f:7a:95: 33:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E6:32:99:39:ED:80:2E:35:A8:B3:B3:EB:65:FC:69:DA:E3:68:86 X509v3 Authority Key Identifier: keyid:29:4A:CD:08:DA:19:13:8C:37:EF:AF:B2:74:A1:E7:75:77:1E:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C8F9/DC6B3614FE6D11EBB83F2B22C4F9AE02/KUrNCNoZE4w376-ydKHndXceRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUrNCNoZE4w376-ydKHndXceRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8F9/DC6B3614FE6D11EBB83F2B22C4F9AE02/KUrNCNoZE4w376-ydKHndXceRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:a0:4b:8f:7b:fa:a1:56:8b:4d:70:f3:84:31:e6:4a:03:7c: 3e:c0:f8:08:cb:5f:30:87:56:06:2e:04:a3:26:43:28:55:22: 8f:8c:b1:99:e2:9b:b9:dd:2b:6a:ea:a0:c1:26:53:5f:27:28: 12:7c:41:18:b0:de:b2:53:05:97:be:db:8f:d0:54:30:f8:a8: d9:87:9b:81:16:ea:66:9f:d2:20:2b:01:31:df:8d:ea:01:82: 67:4a:42:75:8c:d7:1b:ae:42:8d:dd:18:27:b9:69:6e:8b:23: a7:30:05:ff:39:42:5e:77:61:7f:9b:ac:45:48:48:0d:ef:40: 96:46:e1:a9:00:51:df:21:87:fe:ea:31:bd:81:c5:c9:a0:bf: 10:16:92:b6:e2:6e:45:8d:c2:e1:db:65:de:1f:38:7b:fe:05: d6:d7:d6:53:34:e0:09:9b:0a:fe:d1:18:25:b0:b3:a6:68:70: 97:45:24:53:3b:23:6c:a1:10:ce:1c:d6:6b:12:dc:cb:45:0c: e4:3a:fb:0e:4a:95:4b:76:58:5f:27:cc:72:31:e5:10:ef:a7: 01:8a:8c:a7:31:a8:a2:ae:ec:b4:b6:81:6a:db:d8:bd:d4:86: 5c:6e:e0:1e:d1:fd:94:48:9e:e3:64:4c:93:3e:bd:b9:66:74: 74:ec:5e:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4RjkxMTAvBgNVBAUTKDI5NEFDRDA4REExOTEzOEMzN0VGQUZCMjc0QTFFNzc1 NzcxRTQ1M0UwHhcNMjYwMTI0MjIyNDQ3WhcNMjYwMTMxMjIyNDQ3WjAYMRYwFAYD VQQDDA02OTc1NDZhZi0wZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtR3aalL+M+OrFseQTMV6nIo2RbZOuXgR0+VvSuc1WXEDYekor0EIbpeJWmuC YfmEwqSV9M70pbZvD2DhhWBjzmJhNJrevg+iqQ6oN8o6hee5FkAexwCNzCeUy0ys bfl0W2FFRn5V26SfFp4CuXCZjXCFUXJQ87RNr1R1MBppxjbrImQ6oYEivT8O/ic2 /znXUWwWjTQ2ZeAAFleuT4Lq4kRCV6rzwWAvNeMp8VRlNpgrXEFVDS3PZS3cZQt2 pYP6DcosY14k8HMxWdAU4wfjk9bH+Ds+/VGVh2BrPEeZsQmET7Yqs9Nxbwdmi9ti 1WHWsLPADyEUKr/vVaQfepUzRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzmMpk5 7YAuNaizs+tl/Gna42iGMB8GA1UdIwQYMBaAFClKzQjaGROMN++vsnSh53V3HkU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzhGOS9EQzZCMzYxNEZF NkQxMUVCQjgzRjJCMjJDNEY5QUUwMi9LVXJOQ05vWkU0dzM3Ni15ZEtIbmRYY2VS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tVck5DTm9aRTR3Mzc2LXlkS0huZFhjZVJUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzhGOS9EQzZCMzYxNEZFNkQxMUVCQjgzRjJCMjJDNEY5QUUwMi9LVXJOQ05vWkU0 dzM3Ni15ZEtIbmRYY2VSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkoEuPe/qhVotNcPOEMeZKA3w+wPgIy18wh1YGLgSjJkMoVSKPjLGZ 4pu53Stq6qDBJlNfJygSfEEYsN6yUwWXvtuP0FQw+KjZh5uBFupmn9IgKwEx343q AYJnSkJ1jNcbrkKN3RgnuWluiyOnMAX/OUJed2F/m6xFSEgN70CWRuGpAFHfIYf+ 6jG9gcXJoL8QFpK24m5FjcLh22XeHzh7/gXW19ZTNOAJmwr+0RglsLOmaHCXRSRT OyNsoRDOHNZrEtzLRQzkOvsOSpVLdlhfJ8xyMeUQ76cBioynMaiiruy0toFq29i9 1IZcbuAe0f2USJ7jZEyTPr25ZnR07F6+ -----END CERTIFICATE-----Generated at Sun Jan 25 17:27:43 2026 by rpki-client