This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft File: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json) Hash identifier: Hy1pKO4rH5yTSJsQ8O4WkdoYI+3VrJfsPM5wo1TDX6w= Subject key identifier: 85:4A:3A:A4:F3:87:7C:09:4B:65:24:DC:EB:B6:81:B0:98:32:6D:4E Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 Certificate issuer: /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Certificate serial: 037C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft Manifest number: 037C Signing time: Sun 25 Jan 2026 00:01:15 +0000 Manifest this update: Sun 25 Jan 2026 00:01:15 +0000 Manifest next update: Sun 01 Feb 2026 00:01:15 +0000 Files and hashes: 1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: aaB+Zk3fxEOD/xvGd4AHCelsfDpJFwQSI7WhT7AxZwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Validity Not Before: Jan 25 00:01:15 2026 GMT Not After : Feb 1 00:01:15 2026 GMT Subject: CN=69755d4b-8a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:de:2b:d1:e4:7e:89:a8:92:59:4b:08:ce: 41:92:6c:a2:4b:5c:39:c4:7c:82:9b:21:96:84:84: 5f:de:ee:42:ab:39:66:37:e2:06:d5:de:1a:aa:95: 48:1e:22:6b:36:fb:36:6a:fc:76:32:1a:11:ff:1d: 1f:b0:b1:da:d5:71:2c:ae:ae:cc:e1:aa:7f:26:08: c9:82:fe:0c:b0:cc:da:9d:b8:8a:24:a5:bc:5d:7a: 73:5a:18:a9:d4:4b:28:ac:ce:ea:87:0a:f1:98:f2: 0e:d9:93:89:d9:9b:3d:3e:6a:57:e7:24:86:1f:cb: d1:71:df:8a:32:4b:16:d6:f5:1b:24:21:c4:34:27: 4a:37:26:69:0a:fa:1d:e2:ee:df:74:ed:55:a2:d5: 95:28:92:06:7b:1c:39:85:ce:d9:4b:d8:86:8c:87: 13:42:10:60:48:00:92:52:4a:b8:fc:b6:7c:fb:f0: ed:2d:a2:fb:dc:84:e6:c5:f6:da:58:16:37:c8:58: c9:0b:c0:cc:d4:40:9f:ca:14:17:c0:d4:10:41:9c: 18:72:dd:87:54:ac:94:c8:eb:ee:1c:42:f2:1d:66: 0a:e6:3f:9c:f6:99:a3:c0:8e:62:db:86:e1:fc:f1: 14:5e:4f:f5:15:7a:3f:8c:f0:6c:74:84:c6:9d:62: f9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4A:3A:A4:F3:87:7C:09:4B:65:24:DC:EB:B6:81:B0:98:32:6D:4E X509v3 Authority Key Identifier: keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9d:b6:1b:b0:af:06:ad:2a:b5:98:04:7e:67:84:08:5e:8b: 9e:9a:50:d1:c7:ba:e2:09:de:7d:2b:8f:1c:c5:aa:1b:9d:21: 9a:cc:52:6d:6d:22:ff:93:50:e0:55:cd:71:a5:75:ee:25:13: ab:d5:dc:5d:1f:03:fb:56:c3:84:b6:b1:a5:f4:e4:a9:19:bc: b6:ce:35:65:37:17:b1:a8:79:6a:02:ab:09:5e:42:09:f8:ac: f7:1a:da:9b:c0:06:13:dd:51:98:0c:79:ae:0b:53:48:6d:22: 6a:33:7c:16:92:c0:ab:de:c5:0c:b0:7a:5d:81:b7:74:fd:aa: 46:d0:a6:e7:6b:2e:cb:3a:65:94:77:e3:9c:1c:94:68:dc:5d: 7d:3e:3e:58:68:1b:cb:9e:e9:9a:72:5f:12:56:3f:a6:2e:64: a2:2b:31:f1:1c:1a:7f:a5:59:69:96:8e:77:b5:6d:f6:b2:b4: 31:c6:a2:73:30:00:f0:4d:f1:6b:d7:0a:21:37:54:db:17:87: 97:6d:42:ba:fb:9c:a1:49:60:04:0b:f5:26:b8:1e:2a:b8:4e: 4f:fe:19:5c:44:d6:77:b4:6a:de:3a:9b:22:86:cc:38:b2:de: 4a:8b:72:d9:a6:9a:6f:24:44:5d:52:40:ab:7e:3e:76:00:6f: 97:d3:1a:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNGMjExMTAvBgNVBAUTKEY2N0RBOUYxNUU1RTkzNEQ5MEU0OEZFNTBFN0RDODU3 MUREOTM3QTUwHhcNMjYwMTI1MDAwMTE1WhcNMjYwMjAxMDAwMTE1WjAYMRYwFAYD VQQDDA02OTc1NWQ0Yi04YTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxfeK9HkfomokllLCM5BkmyiS1w5xHyCmyGWhIRf3u5CqzlmN+IG1d4aqpVI HiJrNvs2avx2MhoR/x0fsLHa1XEsrq7M4ap/JgjJgv4MsMzanbiKJKW8XXpzWhip 1EsorM7qhwrxmPIO2ZOJ2Zs9PmpX5ySGH8vRcd+KMksW1vUbJCHENCdKNyZpCvod 4u7fdO1VotWVKJIGexw5hc7ZS9iGjIcTQhBgSACSUkq4/LZ8+/DtLaL73ITmxfba WBY3yFjJC8DM1ECfyhQXwNQQQZwYct2HVKyUyOvuHELyHWYK5j+c9pmjwI5i24bh /PEUXk/1FXo/jPBsdITGnWL5YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVKOqTz h3wJS2Uk3Ou2gbCYMm1OMB8GA1UdIwQYMBaAFPZ9qfFeXpNNkOSP5Q59yFcd2Tel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0YyMS9GMkVCRUIzNEQ1 MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWswMlE1SV9sRG4zSVZ4M1pO NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluMnA4VjVlazAyUTVJX2xEbjNJVngzWk42VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0YyMS9GMkVCRUIzNEQ1MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWsw MlE1SV9sRG4zSVZ4M1pONlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6nbYbsK8GrSq1mAR+Z4QIXouemlDRx7riCd59K48cxaobnSGazFJt bSL/k1DgVc1xpXXuJROr1dxdHwP7VsOEtrGl9OSpGby2zjVlNxexqHlqAqsJXkIJ +Kz3GtqbwAYT3VGYDHmuC1NIbSJqM3wWksCr3sUMsHpdgbd0/apG0Kbnay7LOmWU d+OcHJRo3F19Pj5YaBvLnumacl8SVj+mLmSiKzHxHBp/pVlplo53tW32srQxxqJz MADwTfFr1wohN1TbF4eXbUK6+5yhSWAEC/UmuB4quE5P/hlcRNZ3tGreOpsihsw4 st5Ki3LZpppvJERdUkCrfj52AG+X0xqg -----END CERTIFICATE-----Generated at Sun Jan 25 09:20:01 2026 by rpki-client