This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft File: Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json) Hash identifier: pRfYwM2R7fi1mjNPkZ33zTI13oHNh0X+XcqZNBKHvCM= Subject key identifier: 63:37:D6:7B:B4:B6:B1:D4:4F:67:A0:4B:89:6A:4A:BB:25:B7:44:94 Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E Certificate issuer: /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Certificate serial: 0BD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft Manifest number: 14A7 Signing time: Sat 24 Jan 2026 18:28:11 +0000 Manifest this update: Sat 24 Jan 2026 18:28:10 +0000 Manifest next update: Sat 31 Jan 2026 18:28:10 +0000 Files and hashes: 1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: T9GshKAgJuDm/uG3+KiKlKVNOfDPX6Y8C+jpejAu+bQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3028 (0xbd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Validity Not Before: Jan 24 18:28:10 2026 GMT Not After : Jan 31 18:28:10 2026 GMT Subject: CN=69750f3b-c83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:f5:af:24:ca:20:ec:63:c6:e7:74:7e:b9: 16:e0:b7:83:49:09:20:ed:f9:92:ae:82:78:e9:07: 79:e0:e3:17:b3:9c:3b:ea:6b:bc:52:9f:ea:49:f8: 71:8e:d9:e4:bf:a3:6e:ec:4d:39:c2:1d:68:4e:3b: b1:61:7a:7d:dc:67:92:e7:ab:fc:db:ec:60:3c:a3: c4:5d:c7:84:83:6f:14:af:5c:1c:6a:bc:31:cb:ef: 76:4b:a5:e0:2a:0f:52:6f:53:aa:b5:51:f4:f1:be: 10:a0:60:d3:55:e4:64:5f:27:6c:2f:d4:dc:2e:12: fc:d2:03:00:6e:ae:1c:8d:e8:3f:d4:f3:af:26:4d: 79:ba:e4:3b:50:2e:a0:89:dc:91:b0:98:a8:d3:be: 7f:09:b5:a5:7e:25:ae:83:91:b4:07:d0:e1:16:1c: 72:b4:5a:f3:05:c8:7e:d5:8c:b3:12:76:05:ce:37: 49:dc:45:8c:be:a3:d0:3a:37:45:ba:0e:da:96:d0: a8:dc:1a:64:92:cf:96:1c:b6:4e:ea:aa:51:c9:aa: e3:c1:71:34:f4:62:35:e3:7c:e9:14:6c:9b:e0:4e: 73:13:b1:43:85:1b:3f:23:82:de:c3:81:36:12:32: e8:ff:8d:ce:3e:a4:60:cb:8c:a6:f9:85:17:a4:ab: c8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:37:D6:7B:B4:B6:B1:D4:4F:67:A0:4B:89:6A:4A:BB:25:B7:44:94 X509v3 Authority Key Identifier: keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:ed:8e:94:eb:71:f5:b4:fd:86:23:50:dc:fa:6a:a6:a0:9e: 60:a1:23:2f:b1:a7:b0:22:e6:4e:86:7d:86:d2:f5:da:7b:6b: e4:05:c9:c7:6d:4c:d8:8a:eb:9e:ef:05:e2:21:dc:69:ff:6c: 4a:34:a0:2e:6d:43:4f:e5:fb:6c:4f:a7:72:b1:7c:bb:61:ee: 41:bc:a5:6d:da:82:6a:79:0b:2f:42:42:8f:73:8e:10:ef:61: e5:b5:6f:d5:89:07:e7:72:c2:8b:67:1a:36:ed:7e:06:de:70: 6b:69:91:61:c9:9a:54:57:f2:11:40:c3:b0:7b:61:89:e6:ca: 98:4f:b3:21:30:08:a7:f2:ce:f7:ea:0f:2d:b6:f4:55:be:61: 50:33:b6:df:44:82:a5:01:9e:09:57:b0:f3:20:62:a5:d9:c2: 3f:4c:7c:fb:a1:96:2b:e5:73:20:a0:01:d4:3f:3b:24:47:cb: 19:c0:a8:a2:55:4c:09:13:93:b5:36:78:67:24:6d:0d:7d:f0: 8e:b5:dc:6e:6e:8c:85:60:f2:b6:f8:e1:e6:45:7c:c1:de:5a: 68:6e:04:55:f1:3e:ad:ab:0c:88:ef:b1:fb:78:53:0a:f1:88: 03:ad:96:62:75:d3:ff:99:db:da:7d:76:cd:0c:d5:27:ad:81: 03:85:dc:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMTUxMTAvBgNVBAUTKDYzRUJBNDg1MDI1MTEzNDBCODI1MjYxRDVFQzIwQTkx MjdBRjI5NUUwHhcNMjYwMTI0MTgyODEwWhcNMjYwMTMxMTgyODEwWjAYMRYwFAYD VQQDDA02OTc1MGYzYi1jODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw31ryTKIOxjxud0frkW4LeDSQkg7fmSroJ46Qd54OMXs5w76mu8Up/qSfhx jtnkv6Nu7E05wh1oTjuxYXp93GeS56v82+xgPKPEXceEg28Ur1wcarwxy+92S6Xg Kg9Sb1OqtVH08b4QoGDTVeRkXydsL9TcLhL80gMAbq4cjeg/1POvJk15uuQ7UC6g idyRsJio075/CbWlfiWug5G0B9DhFhxytFrzBch+1YyzEnYFzjdJ3EWMvqPQOjdF ug7altCo3Bpkks+WHLZO6qpRyarjwXE09GI143zpFGyb4E5zE7FDhRs/I4Lew4E2 EjLo/43OPqRgy4ym+YUXpKvIMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGM31nu0 trHUT2egS4lqSrslt0SUMB8GA1UdIwQYMBaAFGPrpIUCURNAuCUmHV7CCpEnryle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUwQzRKU1lkWHNJS2tTZXZL VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ktdWtoUUpSRTBDNEpTWWRYc0lLa1NldktWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUw QzRKU1lkWHNJS2tTZXZLVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDO7Y6U63H1tP2GI1Dc+mqmoJ5goSMvsaewIuZOhn2G0vXae2vkBcnH bUzYiuue7wXiIdxp/2xKNKAubUNP5ftsT6dysXy7Ye5BvKVt2oJqeQsvQkKPc44Q 72HltW/ViQfncsKLZxo27X4G3nBraZFhyZpUV/IRQMOwe2GJ5sqYT7MhMAin8s73 6g8ttvRVvmFQM7bfRIKlAZ4JV7DzIGKl2cI/THz7oZYr5XMgoAHUPzskR8sZwKii VUwJE5O1NnhnJG0NffCOtdxuboyFYPK2+OHmRXzB3lpobgRV8T6tqwyI77H7eFMK 8YgDrZZiddP/mdvafXbNDNUnrYEDhdyG -----END CERTIFICATE-----Generated at Sun Jan 25 15:33:53 2026 by rpki-client