This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: tLUmd5SYQDkdYGn+7Fwirk259/AgKTER5qDpSiWEpuY= Subject key identifier: 1F:B0:28:42:F0:A0:9F:B0:F1:FB:1D:29:38:33:ED:D9:FC:57:42:C9 Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 0534 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 051F Signing time: Sat 10 Jan 2026 22:51:44 +0000 Manifest this update: Sat 10 Jan 2026 22:51:44 +0000 Manifest next update: Sat 17 Jan 2026 22:51:44 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: Bkdi1P6YzAQFpwojCH+B6aON0UZSHipJ60h+N1ZiQtw=) 2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: FE6e27RdwbgfOIo+ikPTPJ/pdQA+p/z7qpPIRAny0BQ=) 3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: Pm0s4Nw0vjEdOt8OEH+67yrk/B68Gy2u6QwOvd+DpWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 22:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: Jan 10 22:51:44 2026 GMT Not After : Jan 17 22:51:44 2026 GMT Subject: CN=6962d800-97ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:95:cb:3a:39:fa:e1:c5:7e:cc:46:06:e8: bd:99:66:47:bd:78:94:f7:0a:fe:0b:e1:bd:61:dc: 47:c7:95:96:56:0a:c8:b1:a5:c4:2f:c6:67:3a:e2: 0d:66:a3:d9:21:9f:0e:dd:51:9d:92:c1:28:0e:8f: bb:dc:85:4f:60:80:67:35:85:4e:a5:8c:13:bc:86: 9a:7f:02:cd:4c:34:f8:21:ae:9f:dc:3a:9a:5b:4c: 70:70:81:23:04:a5:fb:c6:bd:78:2c:37:9b:1f:67: e9:3e:98:7c:b7:3e:4e:b4:10:87:70:a4:40:32:b8: 04:2e:34:d2:1d:25:9d:5b:21:17:e8:f5:b5:24:12: e4:db:58:d3:a8:8d:f6:a5:f7:09:01:e9:46:ba:f9: af:60:13:ce:a5:10:f4:34:21:76:2c:d6:74:cf:bc: c6:ac:66:2f:25:87:98:c0:19:1b:a5:5a:db:4a:52: 18:f9:18:38:fd:8c:37:60:f1:2d:3b:15:49:91:5d: f5:0f:03:14:c1:d3:a5:ea:5b:c4:e8:50:b7:c4:04: 81:c7:66:ac:d7:6d:fb:1c:e3:c4:e1:2c:43:40:dd: 84:83:a1:87:d0:8f:68:92:c0:a4:d8:5f:3f:2f:25: 08:ab:46:2b:4f:0e:16:68:1a:51:88:00:e6:bb:8b: 9f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B0:28:42:F0:A0:9F:B0:F1:FB:1D:29:38:33:ED:D9:FC:57:42:C9 X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:e2:0a:55:b7:af:b3:c1:1f:a3:bd:4a:2d:76:81:fb:93:39: f8:1e:0e:a4:47:99:aa:c3:9f:a0:d8:b2:b9:e1:61:b2:2d:8c: 79:65:c6:2e:ca:52:89:86:1d:ce:7d:40:e1:d4:29:1b:aa:50: db:51:e1:8e:b1:65:98:f9:a3:17:9d:87:91:3c:7d:0f:10:c7: c4:12:8d:ea:21:fd:c7:f4:ab:e4:56:db:92:96:0f:6e:9d:cc: ce:bf:df:2a:cc:16:b3:b4:fe:88:61:2b:bf:19:6f:20:51:f6: d0:67:fb:42:e3:c7:e4:1d:73:2a:1d:df:1f:a5:c2:e7:b4:28: a2:37:cd:3e:3e:93:7f:46:11:95:4e:60:e6:22:2c:e6:1d:2e: 9c:9c:d6:93:54:dc:3c:c5:6c:d1:e0:fd:e9:4d:64:72:a2:40: ad:81:61:09:f1:28:56:1e:93:27:73:a1:1c:c8:90:0a:2e:a1: 61:ec:51:c7:71:41:e4:be:bb:16:76:56:d5:7e:93:e2:7e:8d: a0:43:7e:c3:b8:a5:28:fe:02:aa:24:12:5e:8d:53:fe:f4:67: 4c:55:23:dd:83:80:55:50:91:22:75:39:af:97:62:b3:20:b9: 12:c6:41:06:b7:82:f4:84:74:97:77:16:fe:f5:7f:23:c7:ba: 05:fe:05:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjYwMTEwMjI1MTQ0WhcNMjYwMTE3MjI1MTQ0WjAYMRYwFAYD VQQDDA02OTYyZDgwMC05N2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLGVyzo5+uHFfsxGBui9mWZHvXiU9wr+C+G9YdxHx5WWVgrIsaXEL8ZnOuIN ZqPZIZ8O3VGdksEoDo+73IVPYIBnNYVOpYwTvIaafwLNTDT4Ia6f3DqaW0xwcIEj BKX7xr14LDebH2fpPph8tz5OtBCHcKRAMrgELjTSHSWdWyEX6PW1JBLk21jTqI32 pfcJAelGuvmvYBPOpRD0NCF2LNZ0z7zGrGYvJYeYwBkbpVrbSlIY+Rg4/Yw3YPEt OxVJkV31DwMUwdOl6lvE6FC3xASBx2as1237HOPE4SxDQN2Eg6GH0I9oksCk2F8/ LyUIq0YrTw4WaBpRiADmu4ufIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+wKELw oJ+w8fsdKTgz7dn8V0LJMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl4gpVt6+zwR+jvUotdoH7kzn4Hg6kR5mqw5+g2LK54WGyLYx5ZcYu ylKJhh3OfUDh1CkbqlDbUeGOsWWY+aMXnYeRPH0PEMfEEo3qIf3H9KvkVtuSlg9u nczOv98qzBaztP6IYSu/GW8gUfbQZ/tC48fkHXMqHd8fpcLntCiiN80+PpN/RhGV TmDmIizmHS6cnNaTVNw8xWzR4P3pTWRyokCtgWEJ8ShWHpMnc6EcyJAKLqFh7FHH cUHkvrsWdlbVfpPifo2gQ37DuKUo/gKqJBJejVP+9GdMVSPdg4BVUJEidTmvl2Kz ILkSxkEGt4L0hHSXdxb+9X8jx7oF/gXa -----END CERTIFICATE-----Generated at Mon Jan 12 13:44:55 2026 by rpki-client