This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft File: ysouRCIiw-2H53WblewRGMOLhbY.mft (raw, json) Hash identifier: 1IaUyM2bcX27D20/ADfugBJ08x2EO+qHUOtYzqzKpCM= Subject key identifier: BB:D9:5E:B8:2D:C0:6C:91:3D:10:D3:8E:36:2B:29:EA:9B:AE:7D:76 Authority key identifier: CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6 Certificate issuer: /CN=A91E9A44/serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft Manifest number: 29 Signing time: Sun 25 Jan 2026 06:45:07 +0000 Manifest this update: Sun 25 Jan 2026 06:45:06 +0000 Manifest next update: Sun 01 Feb 2026 06:45:06 +0000 Files and hashes: 1: ysouRCIiw-2H53WblewRGMOLhbY.crl (hash: 4Q2g+cuC5x2UadteexZTrHzM5bMoma3FVa7oiFXgELM=) 2: 769D5C68C09711F08165E157C4F9AE02.roa (hash: OJEG2iMlHS+dlOzTygzni5AYhZaYZz74JLyfsdZ4HV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9A44, serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6 Validity Not Before: Jan 25 06:45:06 2026 GMT Not After : Feb 1 06:45:06 2026 GMT Subject: CN=6975bbf3-c29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:50:5b:ed:12:4f:ab:82:0b:9e:6a:ff:e8:a2: e8:d0:e5:f0:88:7d:53:09:d3:8e:22:53:10:2e:7f: 77:60:8c:0c:b2:16:26:eb:e8:68:1f:94:a6:6e:10: 36:d2:89:87:aa:a5:7a:1d:52:05:cd:b0:7b:54:cb: 5e:3c:55:92:49:9b:5e:cb:5c:1e:70:31:57:51:2c: d3:dd:17:7f:84:77:0e:cb:d1:50:4c:79:08:e2:32: 58:9f:b3:06:89:b8:94:7a:ea:43:39:c9:d3:62:7d: e8:d3:cd:d1:f1:af:e6:9f:0c:84:c0:7e:e0:e4:22: 58:8f:46:5b:c9:3f:d6:a0:a0:62:32:cd:73:72:5d: ad:d5:59:b5:e2:7c:29:77:42:8f:54:f3:59:21:da: c2:69:20:ff:53:8f:1f:b3:c3:bb:98:d9:a9:41:a4: c0:d2:a4:bb:b4:f3:f4:77:68:35:fb:67:fc:30:46: 12:68:52:ff:b2:25:f0:cb:53:da:b3:a4:b9:db:33: ff:50:60:85:74:de:90:18:b7:6c:f5:c3:47:0f:36: 04:96:30:35:06:80:03:60:a7:12:8a:fe:53:52:e7: 6e:26:5b:01:9b:a0:2a:bd:cc:60:a7:aa:b3:f9:ff: 0c:72:f3:ad:0d:5c:29:6d:0b:60:a9:c3:f6:1f:bd: 79:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D9:5E:B8:2D:C0:6C:91:3D:10:D3:8E:36:2B:29:EA:9B:AE:7D:76 X509v3 Authority Key Identifier: keyid:CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:9b:35:7c:90:af:7f:8f:d1:39:14:b0:3b:ea:1e:85:b4:98: 8f:6b:12:23:8e:60:3b:15:95:14:05:6b:f1:1d:c7:bc:b7:83: 2b:31:26:43:7e:b2:31:91:e7:77:99:df:05:b5:29:73:df:4d: 32:8c:b5:75:ad:d3:e9:55:8e:e5:de:a2:9b:be:07:47:f1:c2: 73:6a:ed:94:40:7f:70:c1:dd:ed:25:ed:fb:ee:82:bc:96:5b: 0e:64:3f:4b:32:6a:e8:c2:21:77:60:cb:13:5f:0b:4f:fb:a3: 60:c3:12:34:a1:8f:25:20:4e:2e:8a:85:55:cb:35:c7:7a:a7: 7f:78:16:97:d8:a1:b3:55:a6:be:96:7c:8f:a0:c0:cb:fb:9d: 5c:4d:e3:6b:04:e4:a0:f8:f6:89:5a:4c:33:c9:9a:2d:94:a6: 44:12:df:1b:2f:51:27:c5:f1:5a:4d:29:b8:7a:f5:6e:a7:c4: d9:28:e3:09:7a:d5:df:ea:c1:5f:1f:1f:ea:d4:e3:f2:af:50: 83:88:25:59:78:1b:e0:0f:a7:f1:52:a8:92:89:6d:43:8e:e6: 6a:1a:81:e0:ee:0f:15:03:55:cb:ac:18:dc:e5:2d:25:7d:fa: 66:eb:79:4c:fa:76:36:3b:87:d0:55:96:65:04:40:1e:16:e7: dc:75:45:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUE0NDExMC8GA1UEBRMoQ0FDQTJFNDQyMjIyQzNFRDg3RTc3NTlCOTVFQzExMThD MzhCODVCNjAeFw0yNjAxMjUwNjQ1MDZaFw0yNjAyMDEwNjQ1MDZaMBgxFjAUBgNV BAMMDTY5NzViYmYzLWMyOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2UFvtEk+rggueav/ooujQ5fCIfVMJ044iUxAuf3dgjAyyFibr6GgflKZuEDbS iYeqpXodUgXNsHtUy148VZJJm17LXB5wMVdRLNPdF3+Edw7L0VBMeQjiMlifswaJ uJR66kM5ydNifejTzdHxr+afDITAfuDkIliPRlvJP9agoGIyzXNyXa3VWbXifCl3 Qo9U81kh2sJpIP9Tjx+zw7uY2alBpMDSpLu08/R3aDX7Z/wwRhJoUv+yJfDLU9qz pLnbM/9QYIV03pAYt2z1w0cPNgSWMDUGgANgpxKK/lNS524mWwGboCq9zGCnqrP5 /wxy860NXCltC2Cpw/YfvXlfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu9leuC3A bJE9ENOONisp6puufXYwHwYDVR0jBBgwFoAUysouRCIiw+2H53WblewRGMOLhbYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QTQ0L0NEQTk1QjQ4QzA4 MjExRjBCOEZFNzIyNkM0RjlBRTAyL3lzb3VSQ0lpdy0ySDUzV2JsZXdSR01PTGhi WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveXNvdVJDSWl3LTJINTNXYmxld1JHTU9MaGJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QTQ0L0NEQTk1QjQ4QzA4MjExRjBCOEZFNzIyNkM0RjlBRTAyL3lzb3VSQ0lpdy0y SDUzV2JsZXdSR01PTGhiWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA6bNXyQr3+P0TkUsDvqHoW0mI9rEiOOYDsVlRQFa/Edx7y3gysxJkN+ sjGR53eZ3wW1KXPfTTKMtXWt0+lVjuXeopu+B0fxwnNq7ZRAf3DB3e0l7fvugryW Ww5kP0syaujCIXdgyxNfC0/7o2DDEjShjyUgTi6KhVXLNcd6p394FpfYobNVpr6W fI+gwMv7nVxN42sE5KD49olaTDPJmi2UpkQS3xsvUSfF8VpNKbh69W6nxNko4wl6 1d/qwV8fH+rU4/KvUIOIJVl4G+APp/FSqJKJbUOO5moageDuDxUDVcusGNzlLSV9 +mbreUz6djY7h9BVlmUEQB4W59x1RYg= -----END CERTIFICATE-----Generated at Sun Jan 25 17:07:02 2026 by rpki-client