This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft File: hYtkVOIiRseB5RNSswVkEJhoV34.mft (raw, json) Hash identifier: J+vGadTqeEeJOHg5enoBLRLYiUoKg4O53ESmjFObsBQ= Subject key identifier: 14:5C:2F:E7:EA:D5:2F:03:EA:A3:DF:3F:27:CF:FB:E5:30:EB:83:4A Authority key identifier: 85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E Certificate issuer: /CN=A91F65C7/serialNumber=858B6454E22246C781E51352B30564109868577E Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft Manifest number: 016D Signing time: Fri 23 Jan 2026 03:04:03 +0000 Manifest this update: Fri 23 Jan 2026 03:04:02 +0000 Manifest next update: Fri 30 Jan 2026 03:04:02 +0000 Files and hashes: 1: hYtkVOIiRseB5RNSswVkEJhoV34.crl (hash: xQht9VI2qvkgOces64f9+t/utwggbRZ1MroN/P3Ba0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 03:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65C7, serialNumber=858B6454E22246C781E51352B30564109868577E Validity Not Before: Jan 23 03:04:02 2026 GMT Not After : Jan 30 03:04:02 2026 GMT Subject: CN=6972e523-281e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:64:6a:87:f5:ae:3e:b8:ee:0f:3e:35:9b: da:89:ae:73:99:f4:25:52:d6:9e:c6:ae:b9:7d:8f: b2:7f:97:42:c0:29:b5:dd:09:66:0e:6c:80:c7:87: 48:c9:cf:73:1d:6e:a0:2d:f9:c6:2c:27:70:4c:82: 02:28:68:44:71:c8:44:40:b3:82:ee:f8:97:2c:c4: ae:a1:81:14:2f:3c:2b:f0:4f:8f:1c:91:84:2a:d8: 5c:aa:eb:49:34:ca:6e:8c:bc:0b:82:25:45:77:a2: 1f:e5:1b:01:18:78:f6:cc:7c:eb:26:7d:bc:d0:80: a8:c5:a5:07:6a:fb:d0:06:58:2f:70:65:6d:e2:d3: 7e:20:01:37:ed:63:64:5b:a7:3a:42:15:34:04:66: 49:8c:3f:3a:e0:71:ed:bd:7b:ac:d8:4b:6d:38:81: 52:11:38:86:f0:18:e6:73:85:d1:b2:77:bc:93:2a: 52:e3:21:3e:d3:37:67:fa:58:94:be:64:a7:9b:63: 37:48:a9:08:f4:88:3e:ee:51:0c:5d:6c:a4:4b:5f: be:53:d7:3f:53:ce:57:27:f2:1a:0b:ff:19:87:e5: 9d:ae:b5:0e:c8:a8:02:bf:36:4f:d0:06:a4:1f:af: 68:c9:11:99:10:1d:52:9a:eb:58:5c:42:99:cd:3d: a2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5C:2F:E7:EA:D5:2F:03:EA:A3:DF:3F:27:CF:FB:E5:30:EB:83:4A X509v3 Authority Key Identifier: keyid:85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:8d:49:c9:79:4a:80:01:e7:9a:c7:78:41:11:eb:36:91:9b: 72:fd:9b:44:60:f7:71:7f:c7:e2:f5:e9:08:fa:09:b6:0d:ac: 3a:47:df:56:57:59:33:fb:ca:1b:50:37:c0:ee:66:c0:a3:db: 03:87:f4:58:99:5c:ee:38:89:c3:78:21:40:cd:6b:f7:01:db: 1e:23:96:48:34:ee:7d:a1:0d:5d:b9:c7:7d:fb:1d:dc:a2:35: 37:c0:9f:93:10:bd:9b:f5:76:b0:20:8c:c4:a2:55:89:bb:58: 1f:c8:93:2d:14:6f:fa:b7:7b:0b:7c:4b:df:a3:c6:c9:db:ce: e7:b0:44:25:07:be:76:8c:d5:3a:15:0b:1e:eb:08:b1:9c:19: d8:63:8f:db:41:66:77:ef:77:b5:0a:c6:25:94:7a:4e:20:ee: ff:7f:2b:6c:c4:4c:c6:75:bc:2b:0e:3c:ec:b5:89:d1:11:42: c8:a0:01:2f:3d:4b:a2:3f:3b:b2:bd:f4:48:c1:5f:e4:65:96: 49:0a:ac:bd:c2:a5:37:33:7e:ae:38:84:97:ea:08:1c:95:b8: cc:92:ef:b5:f9:13:1f:79:3a:3e:c3:c1:8c:eb:95:20:bc:ed: 98:f3:8f:ec:3d:a5:e8:30:f8:76:5d:57:e7:08:37:e4:8f:41: 9b:f2:34:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1QzcxMTAvBgNVBAUTKDg1OEI2NDU0RTIyMjQ2Qzc4MUU1MTM1MkIzMDU2NDEw OTg2ODU3N0UwHhcNMjYwMTIzMDMwNDAyWhcNMjYwMTMwMDMwNDAyWjAYMRYwFAYD VQQDDA02OTcyZTUyMy0yODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySdkaof1rj647g8+NZvaia5zmfQlUtaexq65fY+yf5dCwCm13QlmDmyAx4dI yc9zHW6gLfnGLCdwTIICKGhEcchEQLOC7viXLMSuoYEULzwr8E+PHJGEKthcqutJ NMpujLwLgiVFd6If5RsBGHj2zHzrJn280ICoxaUHavvQBlgvcGVt4tN+IAE37WNk W6c6QhU0BGZJjD864HHtvXus2EttOIFSETiG8Bjmc4XRsne8kypS4yE+0zdn+liU vmSnm2M3SKkI9Ig+7lEMXWykS1++U9c/U85XJ/IaC/8Zh+WdrrUOyKgCvzZP0Aak H69oyRGZEB1SmutYXEKZzT2iJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRcL+fq 1S8D6qPfPyfP++Uw64NKMB8GA1UdIwQYMBaAFIWLZFTiIkbHgeUTUrMFZBCYaFd+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FRDBGQjY4NkMz RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJzZUI1Uk5Tc3dWa0VKaG9W MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZdGtWT0lpUnNlQjVSTlNzd1ZrRUpob1YzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVDNy9FRDBGQjY4NkMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJz ZUI1Uk5Tc3dWa0VKaG9WMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEjUnJeUqAAeeax3hBEes2kZty/ZtEYPdxf8fi9ekI+gm2Daw6R99W V1kz+8obUDfA7mbAo9sDh/RYmVzuOInDeCFAzWv3AdseI5ZINO59oQ1ducd9+x3c ojU3wJ+TEL2b9XawIIzEolWJu1gfyJMtFG/6t3sLfEvfo8bJ287nsEQlB752jNU6 FQse6wixnBnYY4/bQWZ373e1CsYllHpOIO7/fytsxEzGdbwrDjzstYnREULIoAEv PUuiPzuyvfRIwV/kZZZJCqy9wqU3M36uOISX6ggclbjMku+1+RMfeTo+w8GM65Ug vO2Y84/sPaXoMPh2XVfnCDfkj0Gb8jSx -----END CERTIFICATE-----Generated at Sun Jan 25 04:34:03 2026 by rpki-client