This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft File: YGHkRpDveLCtqNg1DRHKngGUnBQ.mft (raw, json) Hash identifier: +8zJ4l6HFcwViK5Cb0f/JsuTZIQ3p/sdyW1plNKhvlg= Subject key identifier: 5A:61:25:AB:36:30:3A:CE:30:52:2B:83:3B:41:9B:64:C3:68:C2:FD Authority key identifier: 60:61:E4:46:90:EF:78:B0:AD:A8:D8:35:0D:11:CA:9E:01:94:9C:14 Certificate issuer: /CN=A91BFE76/serialNumber=6061E44690EF78B0ADA8D8350D11CA9E01949C14 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft Manifest number: 2B Signing time: Fri 23 Jan 2026 06:39:39 +0000 Manifest this update: Fri 23 Jan 2026 06:39:39 +0000 Manifest next update: Fri 30 Jan 2026 06:39:39 +0000 Files and hashes: 1: YGHkRpDveLCtqNg1DRHKngGUnBQ.crl (hash: izPmatoNMT1iwJZhfpWsi8YysYHRw4pxDWpk8XXSh34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.crl rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE76, serialNumber=6061E44690EF78B0ADA8D8350D11CA9E01949C14 Validity Not Before: Jan 23 06:39:39 2026 GMT Not After : Jan 30 06:39:39 2026 GMT Subject: CN=697317ab-e630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:e7:10:d5:fa:bc:fa:dd:d1:65:b4:a3:d8: 4f:0d:ec:3c:72:b3:58:bc:cb:24:2c:d5:68:97:4b: 8c:e8:c9:2b:9e:29:b4:52:39:4e:ac:2c:f3:e4:ec: 30:85:f8:55:ea:1d:40:5e:6e:90:51:a0:ab:e0:aa: e1:c2:2c:75:9e:2b:75:e5:ce:52:d7:ce:67:1d:8e: fc:e7:c3:c6:54:a7:ff:75:16:4d:81:30:c6:1d:7b: ee:28:74:9b:31:dc:6a:1d:e6:c7:22:85:59:78:7e: 74:f4:81:2a:dc:33:15:ab:a4:53:46:2d:d5:d2:b4: d3:31:50:89:ba:18:e5:3e:ec:b3:23:4c:ba:9c:e9: af:1b:d8:20:8a:9d:6a:c6:cb:19:b5:36:b7:9d:82: 5f:d7:6e:9f:9a:fd:dc:0a:13:39:df:40:7d:8e:3c: 43:73:3c:12:c4:99:71:a3:45:92:42:43:0f:78:18: b9:06:9c:cf:1e:c5:d5:56:83:04:49:8d:59:12:2b: 8d:26:27:63:68:ce:a9:78:49:e7:d7:fa:bf:7b:cb: a6:c6:db:3e:d9:72:db:ea:b2:cb:2b:92:d7:d1:2b: cd:e4:26:10:2a:63:ac:7d:a4:a0:30:b1:98:bb:07: 0f:0b:e3:65:4a:f4:dd:d6:6b:47:60:b7:2d:72:0f: 0e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:61:25:AB:36:30:3A:CE:30:52:2B:83:3B:41:9B:64:C3:68:C2:FD X509v3 Authority Key Identifier: keyid:60:61:E4:46:90:EF:78:B0:AD:A8:D8:35:0D:11:CA:9E:01:94:9C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:12:38:90:62:af:53:15:91:06:d4:de:04:ea:31:6f:fd:44: 7a:ae:dd:74:ae:ef:bb:b7:95:59:ed:8c:7a:55:ee:4e:ee:e2: 3c:24:80:b7:ad:7e:d3:35:9e:2e:16:03:07:ff:4b:4b:34:c5: 9b:6e:40:78:a5:44:33:81:ad:58:b2:2d:20:c6:c6:89:99:ec: d6:d3:24:c0:7b:67:7e:50:e1:16:7c:ac:75:f4:b1:51:cc:11: 59:75:b8:d5:2e:73:52:c5:64:aa:6d:14:a9:0d:26:3d:d8:f6: 60:2b:4d:11:59:b0:b7:44:a9:33:00:6c:d0:7a:92:c1:ae:84: e2:cc:52:93:70:f2:6c:b6:45:7e:14:51:f8:06:a8:a1:e0:4e: 87:14:86:98:cf:76:40:c5:0d:58:be:9f:bd:df:bb:9a:4f:93: b6:9b:ac:21:02:4c:ce:b3:cc:5d:a8:fe:6c:42:1f:0b:16:28: d6:dd:4e:a8:0a:74:f5:b9:aa:a1:86:21:84:dc:4a:43:9b:bb: 22:62:55:05:93:6d:0b:0b:4c:38:60:7c:7e:6c:d0:04:7a:f2: 64:40:83:62:4b:5c:a6:9d:be:89:f7:c1:8c:d1:64:fe:f5:b9: 99:95:26:b0:6d:20:3d:ef:70:e6:f9:67:5d:24:de:08:37:52: 93:72:76:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkU3NjExMC8GA1UEBRMoNjA2MUU0NDY5MEVGNzhCMEFEQThEODM1MEQxMUNBOUUw MTk0OUMxNDAeFw0yNjAxMjMwNjM5MzlaFw0yNjAxMzAwNjM5MzlaMBgxFjAUBgNV BAMMDTY5NzMxN2FiLWU2MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu/OcQ1fq8+t3RZbSj2E8N7Dxys1i8yyQs1WiXS4zoySueKbRSOU6sLPPk7DCF +FXqHUBebpBRoKvgquHCLHWeK3XlzlLXzmcdjvznw8ZUp/91Fk2BMMYde+4odJsx 3God5scihVl4fnT0gSrcMxWrpFNGLdXStNMxUIm6GOU+7LMjTLqc6a8b2CCKnWrG yxm1Nredgl/Xbp+a/dwKEznfQH2OPENzPBLEmXGjRZJCQw94GLkGnM8exdVWgwRJ jVkSK40mJ2Nozql4SefX+r97y6bG2z7ZctvqsssrktfRK83kJhAqY6x9pKAwsZi7 Bw8L42VK9N3Wa0dgty1yDw7DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWmElqzYw Os4wUiuDO0GbZMNowv0wHwYDVR0jBBgwFoAUYGHkRpDveLCtqNg1DRHKngGUnBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRTc2L0UzMzNFQzJFQjky NzExRjBCODBFQzQ1RUM0RjlBRTAyL1lHSGtScER2ZUxDdHFOZzFEUkhLbmdHVW5C US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWUdIa1JwRHZlTEN0cU5nMURSSEtuZ0dVbkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG RTc2L0UzMzNFQzJFQjkyNzExRjBCODBFQzQ1RUM0RjlBRTAyL1lHSGtScER2ZUxD dHFOZzFEUkhLbmdHVW5CUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACISOJBir1MVkQbU3gTqMW/9RHqu3XSu77u3lVntjHpV7k7u4jwkgLet ftM1ni4WAwf/S0s0xZtuQHilRDOBrViyLSDGxomZ7NbTJMB7Z35Q4RZ8rHX0sVHM EVl1uNUuc1LFZKptFKkNJj3Y9mArTRFZsLdEqTMAbNB6ksGuhOLMUpNw8my2RX4U UfgGqKHgTocUhpjPdkDFDVi+n73fu5pPk7abrCECTM6zzF2o/mxCHwsWKNbdTqgK dPW5qqGGIYTcSkObuyJiVQWTbQsLTDhgfH5s0AR68mRAg2JLXKadvon3wYzRZP71 uZmVJrBtID3vcOb5Z10k3gg3UpNyduA= -----END CERTIFICATE-----Generated at Sun Jan 25 07:26:42 2026 by rpki-client