This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json) Hash identifier: 7F6S05mnRrUbcJWZGMvam0ypvF4Gaz1PAbbOOmFjfeo= Subject key identifier: 81:60:A1:D9:A8:3B:9C:F0:E9:65:85:82:EB:EB:57:3E:FC:85:71:AF Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft Manifest number: 9C Signing time: Wed 21 Jan 2026 05:33:31 +0000 Manifest this update: Wed 21 Jan 2026 05:33:31 +0000 Manifest next update: Wed 28 Jan 2026 05:33:31 +0000 Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: 79HX5sG4Lrcwqur5Jgkb3GRcKzkE2Sz2soE7oCyftcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 02:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Validity Not Before: Jan 21 05:33:31 2026 GMT Not After : Jan 28 05:33:31 2026 GMT Subject: CN=6970652b-0cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:45:22:80:2b:e0:60:9c:8c:b9:9e:cb:2f: 2f:c7:01:92:8a:a3:98:9b:b1:3e:6e:02:dd:61:7d: 79:0e:9c:ee:12:f9:1f:44:a5:f0:b7:19:9e:e5:4f: e1:fd:22:30:de:4e:1a:4c:1e:e6:2a:6c:76:78:ba: 67:f3:0c:61:c9:c9:b0:c5:db:c9:9f:7f:34:f6:81: 7f:80:b4:e1:33:0d:54:ba:93:9d:07:e4:06:cc:96: 68:91:a1:03:88:ef:08:6f:e3:7d:71:8e:6c:4f:d0: 77:a7:bd:64:7c:52:ca:dc:e9:ab:b0:24:16:ea:fb: ff:fb:79:ed:52:a2:5a:ca:a2:e6:ec:57:91:7b:4c: 3b:f0:11:83:20:f7:38:f1:4c:09:ae:32:df:d3:4f: 4b:30:b6:ec:d2:6e:a9:fd:2a:19:ac:e4:18:d6:d6: 7e:2b:03:51:50:3a:04:b9:45:ba:79:da:34:1b:22: e5:1b:60:86:4b:c2:ec:a2:6b:2f:b2:24:4b:8e:5e: 68:84:c9:69:71:d7:93:6a:bb:f4:46:c1:8d:22:15: 24:f9:f4:db:10:06:d7:b8:04:b8:f8:da:89:76:67: c4:66:9a:43:0f:0f:5e:03:b5:fb:de:2b:43:75:d1: bf:63:be:42:a8:8b:ca:79:3a:ad:91:5c:19:3a:ad: 8a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:60:A1:D9:A8:3B:9C:F0:E9:65:85:82:EB:EB:57:3E:FC:85:71:AF X509v3 Authority Key Identifier: keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:5e:11:67:90:49:b3:44:1f:d4:b4:8d:cd:13:15:f3:64:a9: 37:99:1a:42:fd:4f:09:87:a3:7c:53:ee:b9:d3:2e:c7:c5:42: 6e:3a:38:da:89:97:30:7b:69:fc:b9:6d:07:8c:71:4a:95:9d: 1e:2d:f3:26:4a:23:32:f8:74:dd:d9:f8:8b:60:d0:32:dd:aa: 1e:61:4b:74:7d:28:48:3b:25:9e:cf:30:1b:20:84:8c:29:c3: 97:1a:ac:f4:20:a0:06:86:db:3e:47:72:04:8a:f1:93:9b:02: de:dc:76:e0:8e:8d:83:11:b2:bf:34:ca:83:ca:3e:19:c9:bb: cc:ab:5e:90:c4:b2:a0:af:6e:e9:0b:40:b5:57:fb:32:cb:0f: 44:d7:62:73:5a:73:5b:6f:39:9d:4e:14:d1:f7:f1:85:8d:c2: 93:16:4d:f8:52:a7:af:60:40:20:60:28:4a:89:0b:cd:c6:44: 3b:82:02:82:f2:55:ce:93:5c:6f:2b:94:0f:e0:7e:4f:dc:49: 2d:0a:19:1d:a8:d7:e1:40:2b:f1:f2:46:89:76:61:63:eb:3f: 90:7c:0a:23:62:82:12:fb:cc:f5:87:62:76:f8:a3:b0:4a:7b: 27:ca:27:c7:9c:3c:92:ad:91:d9:88:1c:3c:37:59:1e:4f:56: 81:52:86:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDkyMEU3RDA5MUYxNTU2OUYyRDgzNDBDNjU4MkI5NTk1 RUMwNjU2ODAwHhcNMjYwMTIxMDUzMzMxWhcNMjYwMTI4MDUzMzMxWjAYMRYwFAYD VQQDDA02OTcwNjUyYi0wY2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4pFIoAr4GCcjLmeyy8vxwGSiqOYm7E+bgLdYX15DpzuEvkfRKXwtxme5U/h /SIw3k4aTB7mKmx2eLpn8wxhycmwxdvJn3809oF/gLThMw1UupOdB+QGzJZokaED iO8Ib+N9cY5sT9B3p71kfFLK3OmrsCQW6vv/+3ntUqJayqLm7FeRe0w78BGDIPc4 8UwJrjLf009LMLbs0m6p/SoZrOQY1tZ+KwNRUDoEuUW6edo0GyLlG2CGS8Lsomsv siRLjl5ohMlpcdeTarv0RsGNIhUk+fTbEAbXuAS4+NqJdmfEZppDDw9eA7X73itD ddG/Y75CqIvKeTqtkVwZOq2KPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFgodmo O5zw6WWFguvrVz78hXGvMB8GA1UdIwQYMBaAFJIOfQkfFVafLYNAxlgrlZXsBlaA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9GMUM3NDQ3RTA5 RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9rZzU5Q1I4VlZwOHRnMERHV0N1Vmxld0dW b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2tnNTlDUjhWVnA4dGcwREdXQ3VWbGV3R1ZvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFMS9GMUM3NDQ3RTA5RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9rZzU5Q1I4VlZw OHRnMERHV0N1Vmxld0dWb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGXhFnkEmzRB/UtI3NExXzZKk3mRpC/U8Jh6N8U+650y7HxUJuOjja iZcwe2n8uW0HjHFKlZ0eLfMmSiMy+HTd2fiLYNAy3aoeYUt0fShIOyWezzAbIISM KcOXGqz0IKAGhts+R3IEivGTmwLe3Hbgjo2DEbK/NMqDyj4ZybvMq16QxLKgr27p C0C1V/syyw9E12JzWnNbbzmdThTR9/GFjcKTFk34UqevYEAgYChKiQvNxkQ7ggKC 8lXOk1xvK5QP4H5P3EktChkdqNfhQCvx8kaJdmFj6z+QfAojYoIS+8z1h2J2+KOw SnsnyifHnDySrZHZiBw8N1keT1aBUobr -----END CERTIFICATE-----Generated at Wed Jan 21 07:52:05 2026 by rpki-client