This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft File: E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft (raw, json) Hash identifier: VD1+kg6JdMNIDh2M75cpCMh4muA8YCxb9mAwMpWVZMg= Subject key identifier: 5A:7D:8A:62:A8:B5:17:41:DC:F2:00:D9:EB:C3:FF:D0:CE:BE:FB:81 Authority key identifier: E4:A2:D2:F4:E4:87:25:65:FB:EB:0E:AA:00:02:F7:EB:05:9E:5C:1C Certificate issuer: /CN=A918C2870001/serialNumber=E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C Certificate serial: 71CAFA8F7491BC2068C9FF6F64EB6E085C6EAE3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KLS9OSHJWX76w6qAAL36wWeXBw.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft Manifest number: 15 Signing time: Tue 06 Jan 2026 23:10:12 +0000 Manifest this update: Tue 06 Jan 2026 23:05:12 +0000 Manifest next update: Wed 21 Jan 2026 00:33:12 +0000 Files and hashes: 1: E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.crl (hash: imDXUAo4WYwCmg8O12Uh31IGDDRlw/lsVSylqjCbJlA=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 71:ca:fa:8f:74:91:bc:20:68:c9:ff:6f:64:eb:6e:08:5c:6e:ae:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C2870001, serialNumber=E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C Validity Not Before: Jan 6 23:05:12 2026 GMT Not After : Jan 21 00:33:12 2026 GMT Subject: CN=5A7D8A62A8B51741DCF200D9EBC3FFD0CEBEFB81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bf:8b:cd:b3:dc:51:5c:5f:0b:5a:4f:f2:b6: 71:3d:8d:1a:44:74:55:ff:0b:ff:0f:aa:ac:7d:6b: 6c:91:ac:99:bb:09:2e:b9:ca:3b:b8:3a:49:6b:ac: 7b:18:a2:3d:42:56:a0:6c:87:a9:a8:4f:8c:60:ab: bd:49:6a:4f:41:ab:78:e8:f3:3f:b5:cb:9a:72:a6: c4:89:bf:b6:55:be:40:54:1a:76:cd:58:5c:dc:8a: 6c:a4:99:be:cd:de:54:8f:b2:d4:f7:7d:4c:14:89: 92:57:5a:a8:22:ed:8d:49:65:99:d2:17:7a:3a:b2: ad:81:f2:c4:b6:f0:05:c9:45:7e:45:aa:7a:a5:43: ce:20:e8:3f:ac:fa:86:a0:16:3b:ed:75:75:03:b6: 17:18:21:dc:02:6e:9d:e1:63:0c:ee:d7:20:29:22: ad:02:99:23:6e:9e:5b:79:3c:1e:68:a0:f4:3e:f9: 8d:85:af:b8:e7:ed:4f:b1:d4:82:72:c2:fa:e3:f5: 55:7f:be:21:14:f0:dc:27:14:b7:65:f0:73:8d:f8: 24:3a:f2:6a:fc:ce:a6:6e:bb:6b:7b:ca:f5:87:8a: ef:8f:a3:83:c2:0a:0d:7e:00:78:94:4f:14:ee:05: 6e:29:f0:13:98:2c:b2:bd:c3:24:a9:49:43:3a:e7: 4e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7D:8A:62:A8:B5:17:41:DC:F2:00:D9:EB:C3:FF:D0:CE:BE:FB:81 X509v3 Authority Key Identifier: keyid:E4:A2:D2:F4:E4:87:25:65:FB:EB:0E:AA:00:02:F7:EB:05:9E:5C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KLS9OSHJWX76w6qAAL36wWeXBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:3f:74:c9:db:65:e7:60:42:45:5a:73:41:c4:3a:9f:ad:f7: 42:d7:4c:13:f1:89:b7:35:2d:20:40:08:42:50:59:bf:7e:e1: d1:a5:63:8d:ae:f3:90:0b:1c:60:94:5d:3b:5c:1b:1d:b6:05: 65:01:27:61:f8:28:be:bc:7b:cc:f9:53:d9:ff:32:9e:38:49: c1:06:fe:3e:40:73:2c:4a:ff:ac:6a:82:65:89:32:ad:f9:0d: cb:c1:c6:65:ca:59:e9:07:56:45:fd:33:98:d4:b2:47:2c:ad: 8d:13:db:aa:73:44:6b:8f:ef:00:7b:14:b6:95:ba:33:84:27: b8:4f:4a:a7:3e:57:a8:8c:04:ab:8e:67:4e:5e:a1:c5:bd:05: 0a:2c:bd:3d:23:6e:6c:f2:f6:c3:72:8e:51:76:b3:1a:37:55: 82:fd:76:19:28:62:c0:a3:99:47:22:de:d1:34:b0:48:8f:f6: e9:61:2c:1b:a7:a6:23:9b:b2:18:f2:1b:ad:f7:1e:b5:51:34: 2a:f5:14:fb:0e:aa:16:3a:91:0a:d0:f5:83:f7:71:83:1c:cb: 29:5d:0d:06:03:9d:dd:f3:47:f8:ed:10:81:68:64:87:77:80: 1a:fa:17:0a:61:9e:ca:7f:2e:41:ff:7b:ad:a8:ba:8f:b1:cc: 7f:64:49:89 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUccr6j3SRvCBoyf9vZOtuCFxurjwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOEMyODcwMDAxMTEwLwYDVQQFEyhFNEEyRDJGNEU0 ODcyNTY1RkJFQjBFQUEwMDAyRjdFQjA1OUU1QzFDMB4XDTI2MDEwNjIzMDUxMloX DTI2MDEyMTAwMzMxMlowMzExMC8GA1UEAxMoNUE3RDhBNjJBOEI1MTc0MURDRjIw MEQ5RUJDM0ZGRDBDRUJFRkI4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJy/i82z3FFcXwtaT/K2cT2NGkR0Vf8L/w+qrH1rbJGsmbsJLrnKO7g6SWus exiiPUJWoGyHqahPjGCrvUlqT0GreOjzP7XLmnKmxIm/tlW+QFQads1YXNyKbKSZ vs3eVI+y1Pd9TBSJkldaqCLtjUllmdIXejqyrYHyxLbwBclFfkWqeqVDziDoP6z6 hqAWO+11dQO2Fxgh3AJuneFjDO7XICkirQKZI26eW3k8Hmig9D75jYWvuOftT7HU gnLC+uP1VX++IRTw3CcUt2Xwc434JDryavzOpm67a3vK9YeK74+jg8IKDX4AeJRP FO4FbinwE5gssr3DJKlJQzrnTqcCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRafYpi qLUXQdzyANnrw//Qzr77gTAfBgNVHSMEGDAWgBTkotL05IclZfvrDqoAAvfrBZ5c HDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE4QzI4NzAwMDEvMC9FNEEyRDJG NEU0ODcyNTY1RkJFQjBFQUEwMDAyRjdFQjA1OUU1QzFDLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81S0xTOU9TSEpX WDc2dzZxQUFMMzZ3V2VYQncuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE4QzI4 NzAwMDEvMC9FNEEyRDJGNEU0ODcyNTY1RkJFQjBFQUEwMDAyRjdFQjA1OUU1QzFD Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAWD90ydtl52BCRVpzQcQ6n633QtdME/GJtzUtIEAIQlBZv37h 0aVjja7zkAscYJRdO1wbHbYFZQEnYfgovrx7zPlT2f8ynjhJwQb+PkBzLEr/rGqC ZYkyrfkNy8HGZcpZ6QdWRf0zmNSyRyytjRPbqnNEa4/vAHsUtpW6M4QnuE9Kpz5X qIwEq45nTl6hxb0FCiy9PSNubPL2w3KOUXazGjdVgv12GShiwKOZRyLe0TSwSI/2 6WEsG6emI5uyGPIbrfcetVE0KvUU+w6qFjqRCtD1g/dxgxzLKV0NBgOd3fNH+O0Q gWhkh3eAGvoXCmGeyn8uQf97rai6j7HMf2RJiQ== -----END CERTIFICATE-----Generated at Sun Jan 25 05:54:19 2026 by rpki-client