This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft File: j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft (raw, json) Hash identifier: B+iLcdMGTO3NrN09ju2a/BWgf9VIxJst+QKAoL5sCSo= Subject key identifier: 2A:39:B8:CF:E7:80:D0:C6:79:87:F7:09:1E:8D:CF:94:C6:E0:43:3C Authority key identifier: 8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 Certificate issuer: /CN=A91C0989/serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft Manifest number: 01BA Signing time: Sun 25 Jan 2026 02:20:19 +0000 Manifest this update: Sun 25 Jan 2026 02:20:19 +0000 Manifest next update: Sun 01 Feb 2026 02:20:19 +0000 Files and hashes: 1: j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl (hash: anY4OAAyCv7bx/9V67KJ3L0P2ASBU2VVeme/v38pcYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0989, serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Validity Not Before: Jan 25 02:20:19 2026 GMT Not After : Feb 1 02:20:19 2026 GMT Subject: CN=69757de3-219e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7c:da:a6:8e:8a:9a:1b:93:1a:aa:b9:12:32: ae:f2:01:59:4f:ba:e5:dc:5e:95:b8:e7:8c:37:b8: 1d:b4:49:5d:e9:32:2f:b8:43:f2:22:47:2b:93:8b: dd:1e:8c:26:89:b4:17:59:f2:32:d9:0e:51:2f:1e: 70:90:87:71:9a:fd:d9:e3:78:9f:80:a5:61:84:cd: 27:ea:9d:46:22:cf:84:77:ac:48:4f:9b:3e:c9:9e: c8:fc:bf:c1:57:29:df:2d:fc:5a:7e:f4:09:e8:ed: 71:5b:98:76:01:bc:aa:96:7f:86:42:8d:4e:c5:5f: e1:c2:42:fe:c2:90:f9:a5:59:c1:27:82:a5:39:0f: 31:6c:13:1b:bf:41:5f:2c:20:27:a9:dc:51:0f:9a: dc:66:04:ef:5e:0d:ec:38:b4:eb:a2:b8:1d:0d:62: d1:a0:1a:ce:f0:3c:78:bb:73:a4:95:50:c6:97:8f: 3d:39:03:2d:3a:76:37:7c:01:05:26:c8:d2:0c:e5: 96:69:3b:4f:4e:06:cd:a0:b4:11:29:44:1d:e8:e4: e4:d1:7b:40:9e:e1:2a:58:71:d9:fd:88:c3:60:bf: 87:51:41:8c:6c:0c:0a:88:a0:f6:09:37:a2:e6:0d: 5b:7a:a5:d4:97:eb:2c:ec:34:1a:9f:3b:b4:9e:a4: 8c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:39:B8:CF:E7:80:D0:C6:79:87:F7:09:1E:8D:CF:94:C6:E0:43:3C X509v3 Authority Key Identifier: keyid:8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:69:9d:b4:bf:c0:fd:0e:8d:e8:42:5d:59:6b:eb:59:42:26: c5:b3:41:a2:61:c5:52:5d:e5:e7:b8:77:31:83:b4:b9:23:fe: d9:f6:63:d5:c2:66:79:9e:a4:4b:83:06:60:5e:55:ad:56:00: fe:7d:79:3b:b2:80:64:b6:0c:5b:5a:6d:32:fa:48:66:b3:c3: 0f:c3:f8:4f:20:3f:a6:cc:b0:c9:99:72:24:ed:40:d8:89:ee: e6:26:f5:2a:7e:54:6d:5f:66:0a:4d:5b:24:1f:a1:5b:02:65: 64:be:98:cf:eb:3d:5a:77:84:45:83:c4:dd:6e:b2:12:bb:4e: c8:93:35:d2:15:8c:e9:ec:8a:ee:3e:6a:33:7a:33:ab:c2:6d: e9:a5:95:ce:3b:f3:57:09:c4:4f:cd:be:bd:75:52:63:04:85: 40:12:19:ff:4c:56:60:8a:67:00:54:2d:66:04:41:ff:a1:4a: d3:81:c2:ec:a7:6e:43:4b:08:d1:d9:55:31:6c:86:50:a0:67: f9:37:42:51:01:58:27:e3:73:74:10:08:0a:9e:a3:49:16:86: f4:00:a8:9b:2c:92:50:14:16:27:21:04:b8:ce:84:04:d0:95: e9:a1:0a:97:59:72:ed:b7:62:40:ec:bd:f3:2f:38:ed:9c:2d: f4:ed:f8:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5ODkxMTAvBgNVBAUTKDhGRUIzRUJCODM0REJFRTZCMUQ4QjE2NjM5QzAzQkE3 RDM5MTY3RjAwHhcNMjYwMTI1MDIyMDE5WhcNMjYwMjAxMDIyMDE5WjAYMRYwFAYD VQQDDA02OTc1N2RlMy0yMTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkXzapo6KmhuTGqq5EjKu8gFZT7rl3F6VuOeMN7gdtEld6TIvuEPyIkcrk4vd HowmibQXWfIy2Q5RLx5wkIdxmv3Z43ifgKVhhM0n6p1GIs+Ed6xIT5s+yZ7I/L/B VynfLfxafvQJ6O1xW5h2Abyqln+GQo1OxV/hwkL+wpD5pVnBJ4KlOQ8xbBMbv0Ff LCAnqdxRD5rcZgTvXg3sOLTrorgdDWLRoBrO8Dx4u3OklVDGl489OQMtOnY3fAEF JsjSDOWWaTtPTgbNoLQRKUQd6OTk0XtAnuEqWHHZ/YjDYL+HUUGMbAwKiKD2CTei 5g1beqXUl+ss7DQanzu0nqSMowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCo5uM/n gNDGeYf3CR6Nz5TG4EM8MB8GA1UdIwQYMBaAFI/rPruDTb7msdixZjnAO6fTkWfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDk4OS8yQkFEMEM4MDUw RTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1YXgyTEZtT2NBN3A5T1Ja X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2otcy11NE5OdnVheDJMRm1PY0E3cDlPUlpfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDk4OS8yQkFEMEM4MDUwRTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1 YXgyTEZtT2NBN3A5T1JaX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCaZ20v8D9Do3oQl1Za+tZQibFs0GiYcVSXeXnuHcxg7S5I/7Z9mPV wmZ5nqRLgwZgXlWtVgD+fXk7soBktgxbWm0y+khms8MPw/hPID+mzLDJmXIk7UDY ie7mJvUqflRtX2YKTVskH6FbAmVkvpjP6z1ad4RFg8TdbrISu07IkzXSFYzp7Iru PmozejOrwm3ppZXOO/NXCcRPzb69dVJjBIVAEhn/TFZgimcAVC1mBEH/oUrTgcLs p25DSwjR2VUxbIZQoGf5N0JRAVgn43N0EAgKnqNJFob0AKibLJJQFBYnIQS4zoQE 0JXpoQqXWXLtt2JA7L3zLzjtnC307fgc -----END CERTIFICATE-----Generated at Sun Jan 25 04:33:06 2026 by rpki-client