This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft File: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft (raw, json) Hash identifier: hCgZqikbokpS4NmI9ymJjMG7fdXJNenlWDhjNUg3Dso= Subject key identifier: A6:3E:CB:59:1F:42:E7:69:E1:31:11:5F:45:B7:7B:5D:69:11:91:8E Authority key identifier: EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 Certificate issuer: /CN=A91D41AC/serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft Manifest number: 24 Signing time: Sun 25 Jan 2026 05:15:58 +0000 Manifest this update: Sun 25 Jan 2026 05:15:57 +0000 Manifest next update: Sun 01 Feb 2026 05:15:57 +0000 Files and hashes: 1: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl (hash: 4xnRIQfXoR6yYi2+Bp2WaTXtHnc8otvFXiURTl0f12I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D41AC, serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Validity Not Before: Jan 25 05:15:57 2026 GMT Not After : Feb 1 05:15:57 2026 GMT Subject: CN=6975a70e-48c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bc:03:b7:d4:79:4f:02:32:55:8c:e6:bd:3c: c3:2b:6f:d0:53:97:7c:2b:13:84:c6:bb:22:02:42: 03:d5:81:48:0f:49:ca:9e:21:1f:e0:db:41:c6:ea: 61:fc:52:92:e4:42:18:48:f3:51:8d:d1:31:c3:7b: 4f:99:f0:e6:2d:2f:7d:b7:22:13:68:c6:9b:0c:fd: 42:d9:02:7c:de:2f:1e:86:dc:11:bc:a9:d5:6d:06: a8:18:c9:c0:12:fa:e7:10:71:2c:cb:95:40:4b:d5: 12:a6:b2:cd:40:4f:13:f0:d7:4b:82:1b:fc:4c:ae: 73:a6:18:2b:94:aa:4a:80:73:16:3c:f3:8e:e2:e8: e5:1f:bc:b9:c5:d6:a0:55:c5:10:a1:84:63:d8:c0: 0a:07:14:cc:a4:f8:ee:9e:6e:4b:e0:74:be:c6:83: 92:b1:26:a4:0f:4e:7a:43:3f:be:fc:b2:74:63:59: 64:91:5a:00:fd:51:b7:0a:73:bf:ba:41:a4:6e:4a: a3:3a:7d:7f:47:26:d1:84:c8:e0:32:be:ad:c9:9e: a8:a3:77:86:ab:23:1f:bd:29:85:b2:15:36:ba:0d: 21:5e:f0:08:e8:2e:dd:95:20:79:1c:be:92:3b:cb: ba:2f:b5:4b:1a:83:f3:03:e6:b8:49:f4:de:7c:8b: 4e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3E:CB:59:1F:42:E7:69:E1:31:11:5F:45:B7:7B:5D:69:11:91:8E X509v3 Authority Key Identifier: keyid:EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:b9:c8:bf:0e:67:84:14:d4:d6:66:0f:19:ac:01:af:1c:db: ca:ca:ab:21:38:03:35:0e:bb:01:3d:c3:ec:de:51:08:a2:28: d5:f7:b1:ec:03:c1:e3:b1:c9:3a:53:23:bb:5a:a7:c8:1b:b1: 1b:bd:16:b7:4d:0a:c9:d5:11:92:9b:16:4c:f4:02:2e:e0:d6: 64:9e:85:b1:ba:c5:f2:5a:8a:1f:fa:3e:2e:76:68:61:85:7b: 30:36:68:df:7e:b4:27:d4:7c:c7:af:98:b4:e4:ae:7f:57:66: 2c:57:1e:1b:d8:59:3b:0b:30:25:05:21:cc:fb:e6:1a:c3:0a: 0a:1b:c1:55:5b:bd:2f:ee:ec:35:e6:2f:75:89:12:b3:a3:7a: 1a:45:9c:6f:6b:28:88:a0:62:bd:35:43:e7:6e:1c:a6:59:9e: be:77:02:28:a2:95:70:ab:6c:b0:4f:54:a7:fd:5c:c5:14:77: b0:97:17:56:9e:b9:61:56:d9:2a:fc:08:24:85:76:62:fd:29: cf:b4:f5:8f:61:96:44:e1:45:ea:94:8b:f6:e8:aa:01:ce:24: 7d:3f:99:32:56:e6:15:73:7a:8b:02:96:9d:a7:2a:c6:e5:e4: 88:5d:96:4a:7a:92:1b:78:96:ef:8c:a8:b2:f8:6d:9d:00:67: 72:91:cc:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDFBQzExMC8GA1UEBRMoRUVBOTAxQjdGQjMzRkI1MENGMDRDNTk4MUY4QkVGNkM0 REVDMzVFMjAeFw0yNjAxMjUwNTE1NTdaFw0yNjAyMDEwNTE1NTdaMBgxFjAUBgNV BAMMDTY5NzVhNzBlLTQ4YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxvAO31HlPAjJVjOa9PMMrb9BTl3wrE4TGuyICQgPVgUgPScqeIR/g20HG6mH8 UpLkQhhI81GN0THDe0+Z8OYtL323IhNoxpsM/ULZAnzeLx6G3BG8qdVtBqgYycAS +ucQcSzLlUBL1RKmss1ATxPw10uCG/xMrnOmGCuUqkqAcxY8847i6OUfvLnF1qBV xRChhGPYwAoHFMyk+O6ebkvgdL7Gg5KxJqQPTnpDP778snRjWWSRWgD9UbcKc7+6 QaRuSqM6fX9HJtGEyOAyvq3Jnqijd4arIx+9KYWyFTa6DSFe8AjoLt2VIHkcvpI7 y7ovtUsag/MD5rhJ9N58i05fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpj7LWR9C 52nhMRFfRbd7XWkRkY4wHwYDVR0jBBgwFoAU7qkBt/sz+1DPBMWYH4vvbE3sNeIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MUFDL0EzMDJBQjQ2QzY4 QzExRjBBRDIxNDYzN0M0RjlBRTAyLzdxa0J0X3N6LTFEUEJNV1lINHZ2YkUzc05l SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN3FrQnRfc3otMURQQk1XWUg0dnZiRTNzTmVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 MUFDL0EzMDJBQjQ2QzY4QzExRjBBRDIxNDYzN0M0RjlBRTAyLzdxa0J0X3N6LTFE UEJNV1lINHZ2YkUzc05lSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAES5yL8OZ4QU1NZmDxmsAa8c28rKqyE4AzUOuwE9w+zeUQiiKNX3sewD weOxyTpTI7tap8gbsRu9FrdNCsnVEZKbFkz0Ai7g1mSehbG6xfJaih/6Pi52aGGF ezA2aN9+tCfUfMevmLTkrn9XZixXHhvYWTsLMCUFIcz75hrDCgobwVVbvS/u7DXm L3WJErOjehpFnG9rKIigYr01Q+duHKZZnr53AiiilXCrbLBPVKf9XMUUd7CXF1ae uWFW2Sr8CCSFdmL9Kc+09Y9hlkThReqUi/boqgHOJH0/mTJW5hVzeosClp2nKsbl 5Ihdlkp6kht4lu+MqLL4bZ0AZ3KRzCE= -----END CERTIFICATE-----Generated at Sun Jan 25 15:33:12 2026 by rpki-client