This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft File: kS3Nd84XYnPZShzEJZKtBclnamI.mft (raw, json) Hash identifier: VwTuLoTWHRP87UN0qLIfThburid01fUq5PrRYWTnLvk= Subject key identifier: DB:33:2B:2A:F8:89:09:B2:F9:46:52:C4:CF:E4:F5:8C:CD:FB:F3:FB Authority key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 Certificate issuer: /CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft Manifest number: 032B Signing time: Sun 11 Jan 2026 01:47:33 +0000 Manifest this update: Sun 11 Jan 2026 01:47:33 +0000 Manifest next update: Sun 18 Jan 2026 01:47:33 +0000 Files and hashes: 1: kS3Nd84XYnPZShzEJZKtBclnamI.crl (hash: vqKXVincNJdMqNgIzWEM2q0PTFEm93mfTXWNB/ESAw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 01:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA6E6, serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Validity Not Before: Jan 11 01:47:33 2026 GMT Not After : Jan 18 01:47:33 2026 GMT Subject: CN=69630135-cba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cc:13:cb:8d:2b:7f:3b:de:6e:0a:86:1f:8b: 74:8f:46:3f:ae:10:84:09:8d:61:c8:7a:dd:57:37: d7:96:65:73:26:6a:57:ec:42:81:57:b6:b2:b0:0c: 25:d6:58:7a:d3:23:91:4e:f1:6f:3e:7f:ad:c0:39: c4:e2:f0:9d:e3:c0:53:7b:1d:23:87:d8:b2:f8:af: c8:b4:3d:5d:4e:e1:45:ba:29:a0:d4:61:46:56:e1: 35:92:d9:c3:cd:e4:95:79:9a:d7:9c:64:c4:9a:fb: 87:67:07:20:20:88:c9:f8:e3:00:e0:f7:b4:14:c7: 90:7a:8c:64:77:0b:79:d3:61:62:26:9f:23:af:52: 0f:01:cc:5c:37:d4:5f:37:39:7d:cf:e2:a8:8a:f2: 70:fd:f9:d5:ef:86:82:2c:e2:de:c9:0d:cf:fb:9a: cc:d5:cf:79:73:db:fa:de:92:52:2f:2e:0f:ca:a8: 8e:96:ca:57:12:62:37:84:35:8d:43:d6:fb:bb:25: 73:f2:05:b8:e4:f8:20:23:57:5f:48:9c:7b:4f:80: 37:6e:d1:df:dd:65:43:d7:24:85:a4:35:4f:a8:23: 3a:68:b8:12:64:ee:e8:4f:7a:2b:6e:8b:11:ff:c3: 05:10:e5:7a:3f:eb:35:eb:e0:46:73:6e:07:b1:3a: 46:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:33:2B:2A:F8:89:09:B2:F9:46:52:C4:CF:E4:F5:8C:CD:FB:F3:FB X509v3 Authority Key Identifier: keyid:91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:1d:1d:c8:24:6e:9d:e2:5c:2b:51:08:02:d8:2e:d1:d0:36: e3:89:dd:dd:bc:d6:3c:27:08:1f:49:0c:2f:34:1c:b0:79:22: 68:c5:e8:d9:f0:18:d5:a8:fb:90:ea:95:a6:2b:e1:71:fd:1a: b3:95:02:2b:e4:6c:0e:25:15:35:cd:f2:1a:a3:31:c2:77:be: b3:f0:49:55:ea:39:1e:30:15:1c:8e:f4:fa:8c:50:e3:0c:29: 56:08:cc:44:3a:84:6d:4d:5c:91:59:1d:69:28:a8:76:b1:45: 22:87:b7:59:7a:9e:d3:48:1e:be:cf:1c:89:31:32:b3:4f:77: 7a:cf:ac:61:4f:f0:62:2a:7d:2a:2b:70:ea:94:b3:e4:cf:b7: a6:f5:f4:52:ec:95:72:f5:59:99:0e:d2:02:c8:e6:c4:61:63: dc:65:b3:a5:9d:e5:57:c0:9d:2a:6e:eb:ee:35:40:97:ff:94: a1:79:40:79:ef:91:df:75:2d:bc:a9:b4:1d:d5:63:7f:cf:93: ad:95:ec:28:6a:eb:72:46:b1:62:ab:7a:a1:8c:b6:42:45:0a: 73:38:9a:a1:c7:70:a9:2b:4e:e4:85:20:14:6b:ae:66:f3:8c: 81:ee:cc:cb:4b:39:34:7b:b9:c1:46:86:56:d0:fa:f1:35:63: 3e:ec:06:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Q0E2RTYxMTAvBgNVBAUTKDkxMkRDRDc3Q0UxNzYyNzNEOTRBMUNDNDI1OTJBRDA1 Qzk2NzZBNjIwHhcNMjYwMTExMDE0NzMzWhcNMjYwMTE4MDE0NzMzWjAYMRYwFAYD VQQDDA02OTYzMDEzNS1jYmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58wTy40rfzvebgqGH4t0j0Y/rhCECY1hyHrdVzfXlmVzJmpX7EKBV7aysAwl 1lh60yORTvFvPn+twDnE4vCd48BTex0jh9iy+K/ItD1dTuFFuimg1GFGVuE1ktnD zeSVeZrXnGTEmvuHZwcgIIjJ+OMA4Pe0FMeQeoxkdwt502FiJp8jr1IPAcxcN9Rf Nzl9z+KoivJw/fnV74aCLOLeyQ3P+5rM1c95c9v63pJSLy4PyqiOlspXEmI3hDWN Q9b7uyVz8gW45PggI1dfSJx7T4A3btHf3WVD1ySFpDVPqCM6aLgSZO7oT3orbosR /8MFEOV6P+s16+BGc24HsTpG2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNszKyr4 iQmy+UZSxM/k9YzN+/P7MB8GA1UdIwQYMBaAFJEtzXfOF2Jz2UocxCWSrQXJZ2pi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTZFNi8zQjgzQUZFMEYw RDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFluUFpTaHpFSlpLdEJjbG5h bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTM05kODRYWW5QWlNoekVKWkt0QmNsbmFtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFlu UFpTaHpFSlpLdEJjbG5hbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwHR3IJG6d4lwrUQgC2C7R0Dbjid3dvNY8JwgfSQwvNByweSJoxejZ 8BjVqPuQ6pWmK+Fx/RqzlQIr5GwOJRU1zfIaozHCd76z8ElV6jkeMBUcjvT6jFDj DClWCMxEOoRtTVyRWR1pKKh2sUUih7dZep7TSB6+zxyJMTKzT3d6z6xhT/BiKn0q K3DqlLPkz7em9fRS7JVy9VmZDtICyObEYWPcZbOlneVXwJ0qbuvuNUCX/5SheUB5 75HfdS28qbQd1WN/z5OtlewoautyRrFiq3qhjLZCRQpzOJqhx3CpK07khSAUa65m 84yB7szLSzk0e7nBRoZW0PrxNWM+7AZK -----END CERTIFICATE-----Generated at Mon Jan 12 22:18:23 2026 by rpki-client