This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft File: MYjUHQwG76LJaocHNWno4QNE4s0.mft (raw, json) Hash identifier: YBcLPqvi93+LyybcDtsou/Xvw8QeIZCjME1eX6gZAj8= Subject key identifier: 81:0C:7A:20:F5:EA:B4:4D:E4:52:9B:19:76:93:35:81:A3:ED:EA:91 Authority key identifier: 31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD Certificate issuer: /CN=A9147CA8/serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft Manifest number: 20 Signing time: Sat 17 Jan 2026 06:13:42 +0000 Manifest this update: Sat 17 Jan 2026 06:13:41 +0000 Manifest next update: Sat 24 Jan 2026 06:13:41 +0000 Files and hashes: 1: MYjUHQwG76LJaocHNWno4QNE4s0.crl (hash: fSTio+KG6csRhl/Yn9nZGJxNBSabNpl6/Cv+bphhd3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CA8, serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD Validity Not Before: Jan 17 06:13:41 2026 GMT Not After : Jan 24 06:13:41 2026 GMT Subject: CN=696b2896-9c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:d9:d9:9e:63:29:47:f1:20:d1:92:31:69: 82:13:3a:15:b5:9b:8d:c3:f5:61:f9:38:02:dc:eb: aa:67:70:02:05:4f:7b:79:ec:05:89:0f:72:83:67: 0f:83:fc:a9:c7:bc:83:94:17:59:25:52:40:6d:50: 39:5c:b5:d1:51:82:03:f1:ca:ca:1a:7e:e4:8a:21: 44:39:4f:4d:8c:04:9f:dd:d0:e5:9d:a8:35:21:1a: 2f:cf:d0:33:2f:eb:63:be:c2:52:3d:e2:b0:16:7d: af:00:ba:8f:1e:d6:a7:89:32:af:33:65:fd:fe:6d: c5:62:a1:bd:b9:69:c0:48:0c:95:be:d7:9f:ca:ba: 24:87:97:24:96:cf:97:e0:9e:7d:5b:49:1d:f2:95: c9:3c:81:9e:01:21:50:ef:6f:31:6f:93:f4:0f:1f: 66:5e:65:18:0c:48:c4:f5:c4:08:d1:e7:cd:03:22: 0d:44:fd:d4:ef:fb:42:42:24:44:1e:3a:72:8c:f8: cf:a6:e5:84:9d:eb:c2:62:d0:86:1e:71:bf:58:f0: 37:49:8b:61:d4:02:c6:8b:06:19:f8:9b:38:57:49: bd:44:10:7a:bd:90:45:25:e4:81:8a:4f:80:00:a9: 1c:63:f0:08:2a:28:aa:ae:91:b3:05:ef:da:23:ab: 7b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0C:7A:20:F5:EA:B4:4D:E4:52:9B:19:76:93:35:81:A3:ED:EA:91 X509v3 Authority Key Identifier: keyid:31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:91:00:96:fc:1a:fe:b7:b3:4e:a7:70:f1:b5:ef:a6:c6:83: db:2b:32:b3:5b:f9:75:17:3d:49:f2:41:58:4d:25:07:ac:ff: 4a:ae:b0:38:85:59:46:fb:a0:98:54:e7:a2:91:90:74:b8:6e: 77:16:ba:89:19:60:f1:aa:31:36:b1:e9:4e:98:87:7d:88:9c: 60:c0:7a:b3:36:26:4d:ae:91:98:19:b8:9f:ba:fc:f6:11:9e: c4:01:fe:1e:ff:93:21:d6:29:17:0b:72:9a:41:72:9b:70:4e: 25:2e:28:85:3a:b2:61:cf:2a:37:9b:4c:df:74:b2:05:35:02: 04:f1:b8:fd:aa:f9:28:61:1f:a7:69:4a:0f:4c:f7:3d:e2:13: 72:58:4d:dd:45:bd:33:55:f3:60:9a:3b:11:b8:b9:5f:d8:27: 66:5f:fc:6f:97:41:cc:42:be:e4:3c:31:79:3f:36:6b:fc:45: b1:ee:3a:b3:4f:0e:fb:11:c8:08:02:f7:c9:50:c4:cc:98:d7: ca:d8:02:35:4d:73:56:8c:8a:be:7d:bf:e7:69:95:38:92:e0: 31:80:f3:22:58:0d:e0:59:d6:e9:6a:8a:d3:b9:e8:e4:48:69: a0:e5:c7:05:dc:5b:7a:f2:1d:5b:d4:f9:79:d7:57:9e:0d:ed: ce:c9:76:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0NBODExMC8GA1UEBRMoMzE4OEQ0MUQwQzA2RUZBMkM5NkE4NzA3MzU2OUU4RTEw MzQ0RTJDRDAeFw0yNjAxMTcwNjEzNDFaFw0yNjAxMjQwNjEzNDFaMBgxFjAUBgNV BAMMDTY5NmIyODk2LTljMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3Y9nZnmMpR/Eg0ZIxaYITOhW1m43D9WH5OALc66pncAIFT3t57AWJD3KDZw+D /KnHvIOUF1klUkBtUDlctdFRggPxysoafuSKIUQ5T02MBJ/d0OWdqDUhGi/P0DMv 62O+wlI94rAWfa8Auo8e1qeJMq8zZf3+bcViob25acBIDJW+15/KuiSHlySWz5fg nn1bSR3ylck8gZ4BIVDvbzFvk/QPH2ZeZRgMSMT1xAjR580DIg1E/dTv+0JCJEQe OnKM+M+m5YSd68Ji0IYecb9Y8DdJi2HUAsaLBhn4mzhXSb1EEHq9kEUl5IGKT4AA qRxj8AgqKKqukbMF79ojq3sjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgQx6IPXq tE3kUpsZdpM1gaPt6pEwHwYDVR0jBBgwFoAUMYjUHQwG76LJaocHNWno4QNE4s0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3Q0E4LzJEOThDQzVBQzUw NjExRjA4QzZCQTMyQkM0RjlBRTAyL01ZalVIUXdHNzZMSmFvY0hOV25vNFFORTRz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVlqVUhRd0c3NkxKYW9jSE5Xbm80UU5FNHMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 Q0E4LzJEOThDQzVBQzUwNjExRjA4QzZCQTMyQkM0RjlBRTAyL01ZalVIUXdHNzZM SmFvY0hOV25vNFFORTRzMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMWRAJb8Gv63s06ncPG176bGg9srMrNb+XUXPUnyQVhNJQes/0qusDiF WUb7oJhU56KRkHS4bncWuokZYPGqMTax6U6Yh32InGDAerM2Jk2ukZgZuJ+6/PYR nsQB/h7/kyHWKRcLcppBcptwTiUuKIU6smHPKjebTN90sgU1AgTxuP2q+ShhH6dp Sg9M9z3iE3JYTd1FvTNV82CaOxG4uV/YJ2Zf/G+XQcxCvuQ8MXk/Nmv8RbHuOrNP DvsRyAgC98lQxMyY18rYAjVNc1aMir59v+dplTiS4DGA8yJYDeBZ1ulqitO56ORI aaDlxwXcW3ryHVvU+XnXV54N7c7Jdjs= -----END CERTIFICATE-----Generated at Sun Jan 18 03:16:15 2026 by rpki-client