This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft File: kYy2egJiI43veP8oikXZKB-V0us.mft (raw, json) Hash identifier: wZJSXVsjJBZztQMi4wfBlOjLhK6WBG6naq8AXCtJdKQ= Subject key identifier: B7:28:94:DF:B6:76:AC:A5:AA:01:23:BA:98:76:6F:32:37:D2:25:96 Authority key identifier: 91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB Certificate issuer: /CN=A9168946/serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft Manifest number: 0170 Signing time: Wed 07 Jan 2026 03:04:39 +0000 Manifest this update: Wed 07 Jan 2026 03:04:38 +0000 Manifest next update: Wed 14 Jan 2026 03:04:38 +0000 Files and hashes: 1: kYy2egJiI43veP8oikXZKB-V0us.crl (hash: 1v2uwpjV/bhNNcUJG30OTHL+sy0fTLWScDImPbMwoLo=) 2: B36E0BFAB8C511EE9C927072C4F9AE02.roa (hash: Qm+OTW2NbpHhD1GfCowGRntOHCUaUo/6QfBRl6hKqIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Jan 2026 03:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168946, serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB Validity Not Before: Jan 7 03:04:38 2026 GMT Not After : Jan 14 03:04:38 2026 GMT Subject: CN=695dcd46-2381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:af:6e:19:c2:7c:8f:6e:12:1d:30:66:90: 13:d4:c4:0c:92:6f:a3:68:c8:06:2c:72:b0:e8:38: 6b:00:ac:81:c6:01:a0:c3:d5:2c:f6:02:e7:5c:b3: e6:d9:21:9b:8c:ed:9e:3a:7c:da:b0:71:08:cb:af: a7:25:f9:9f:6a:85:f8:a0:74:4f:45:c6:d5:fd:d4: 2b:d0:0f:32:f2:8f:21:12:fb:59:3c:77:5b:c2:c5: 14:a4:59:8b:ab:be:93:2a:66:2a:1d:dc:74:b0:af: 8f:9c:b7:c1:7c:b4:de:5e:7d:6b:12:c5:57:b6:b0: b0:7f:4d:7a:86:b3:7d:05:4c:bb:12:1a:1b:d6:28: 5c:b1:46:0c:7d:f1:a2:d2:ed:3e:2a:bf:e3:fc:f8: b0:ed:85:b8:30:ee:48:06:19:22:bd:5a:9f:a5:9f: da:0b:ac:85:82:64:1f:12:ab:85:ef:38:50:84:1e: 07:4d:bb:6c:84:f2:2d:cf:b5:64:00:87:0e:9c:46: d0:27:70:da:11:b3:e5:62:25:13:c1:f3:ae:85:70: 3a:7a:8c:2d:40:f1:1c:fd:da:61:55:ca:ef:2c:f4: 07:eb:90:0b:37:14:47:45:21:aa:49:41:f3:8a:72: 66:2b:1f:49:f4:c2:8b:76:0f:5f:45:02:fb:ae:d9: 79:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:28:94:DF:B6:76:AC:A5:AA:01:23:BA:98:76:6F:32:37:D2:25:96 X509v3 Authority Key Identifier: keyid:91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:9a:5b:2f:d7:9e:74:b3:ab:4d:3c:4f:d8:21:05:db:aa:7f: e8:77:44:47:98:7b:fd:6c:45:02:60:8e:43:fb:0b:02:4c:32: a3:36:a6:f3:f8:8c:ea:e2:d0:e3:0b:36:9c:f3:57:23:d0:28: 31:95:6e:0d:95:71:5c:99:ee:38:30:c8:b1:7a:06:29:1f:3a: d8:2f:7a:a0:6a:80:07:fc:25:ae:e3:9d:6e:44:8d:e8:20:b2: 9a:ad:46:fe:5d:9d:3d:43:50:f1:3a:71:df:b7:98:44:59:ea: b1:b7:97:f0:ba:b3:01:79:06:8d:50:e1:b3:ea:7a:ba:a9:8e: 93:68:fd:d8:6c:4d:cc:01:68:8d:1d:e1:a8:41:18:a7:2d:a4: 43:3f:72:a8:d3:a6:67:29:16:b9:71:a8:be:9e:68:c8:5f:2b: af:6d:d9:38:4b:92:0f:d0:7e:74:9d:8c:54:95:6c:37:0a:46: b1:1c:68:3a:06:71:98:4e:6c:95:64:62:3d:5f:a0:1d:d1:44: 0a:2a:28:b1:ba:6e:58:1a:50:c8:94:a6:e4:cb:12:49:72:86: d0:21:27:f6:eb:f8:0a:53:80:7e:ae:a3:91:59:13:41:ab:57: c4:4c:01:a4:a1:6e:41:b6:3d:fc:f6:bb:bf:47:5f:aa:73:9b: 15:ac:fa:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NDYxMTAvBgNVBAUTKDkxOENCNjdBMDI2MjIzOERFRjc4RkYyODhBNDVEOTI4 MUY5NUQyRUIwHhcNMjYwMTA3MDMwNDM4WhcNMjYwMTE0MDMwNDM4WjAYMRYwFAYD VQQDDA02OTVkY2Q0Ni0yMzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9SvbhnCfI9uEh0wZpAT1MQMkm+jaMgGLHKw6DhrAKyBxgGgw9Us9gLnXLPm 2SGbjO2eOnzasHEIy6+nJfmfaoX4oHRPRcbV/dQr0A8y8o8hEvtZPHdbwsUUpFmL q76TKmYqHdx0sK+PnLfBfLTeXn1rEsVXtrCwf016hrN9BUy7Ehob1ihcsUYMffGi 0u0+Kr/j/Piw7YW4MO5IBhkivVqfpZ/aC6yFgmQfEquF7zhQhB4HTbtshPItz7Vk AIcOnEbQJ3DaEbPlYiUTwfOuhXA6eowtQPEc/dphVcrvLPQH65ALNxRHRSGqSUHz inJmKx9J9MKLdg9fRQL7rtl5OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcolN+2 dqylqgEjuph2bzI30iWWMB8GA1UdIwQYMBaAFJGMtnoCYiON73j/KIpF2SgfldLr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk0Ni9DNDAwNkE4OEI4 QzIxMUVFQjVGNzJCNkRDNEY5QUUwMi9rWXkyZWdKaUk0M3ZlUDhvaWtYWktCLVYw dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tZeTJlZ0ppSTQzdmVQOG9pa1haS0ItVjB1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk0Ni9DNDAwNkE4OEI4QzIxMUVFQjVGNzJCNkRDNEY5QUUwMi9rWXkyZWdKaUk0 M3ZlUDhvaWtYWktCLVYwdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNmlsv1550s6tNPE/YIQXbqn/od0RHmHv9bEUCYI5D+wsCTDKjNqbz +Izq4tDjCzac81cj0CgxlW4NlXFcme44MMixegYpHzrYL3qgaoAH/CWu451uRI3o ILKarUb+XZ09Q1DxOnHft5hEWeqxt5fwurMBeQaNUOGz6nq6qY6TaP3YbE3MAWiN HeGoQRinLaRDP3Ko06ZnKRa5cai+nmjIXyuvbdk4S5IP0H50nYxUlWw3CkaxHGg6 BnGYTmyVZGI9X6Ad0UQKKiixum5YGlDIlKbkyxJJcobQISf26/gKU4B+rqORWRNB q1fETAGkoW5Btj389ru/R1+qc5sVrPrf -----END CERTIFICATE-----Generated at Wed Jan 7 22:32:10 2026 by rpki-client