This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json) Hash identifier: Ge5EMl1oxtI6T3LvvrO0xpf/mSwiF5B1IfQij9M+CCo= Subject key identifier: D5:3C:E2:D6:DE:F3:A6:72:4A:C5:D1:35:5E:E5:A7:AB:64:D3:BE:1C Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Certificate serial: 02E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft Manifest number: 02E8 Signing time: Sat 17 Jan 2026 00:22:34 +0000 Manifest this update: Sat 17 Jan 2026 00:22:34 +0000 Manifest next update: Sat 24 Jan 2026 00:22:34 +0000 Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: f/oyq91kH41+SLadwLKfzBQ1ZyTNB5Px6lGmEPqGIkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 00:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 744 (0x2e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Validity Not Before: Jan 17 00:22:34 2026 GMT Not After : Jan 24 00:22:34 2026 GMT Subject: CN=696ad64a-b80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:64:64:ed:03:8e:b4:a4:8e:54:df:8e:99:71: f4:64:3f:20:32:4d:12:e3:c2:92:00:e4:5c:4c:16: 8b:fb:35:6d:10:60:0f:6c:99:5d:d9:c9:cf:97:a0: fc:34:d3:0a:9b:58:4e:8e:24:aa:99:62:a8:2a:f1: e4:39:dc:e1:4f:25:86:4c:52:12:cc:ad:ed:7f:15: 6e:bf:ae:71:c6:cd:0f:7d:2e:e2:a3:2e:ee:99:8e: 06:6d:85:2e:f0:64:94:00:f9:31:ea:34:c8:ce:98: c0:7b:54:30:24:20:f0:f3:12:c9:eb:bb:33:f5:ca: 81:ec:db:f4:d8:86:b5:18:84:51:dd:d6:81:31:43: a9:e4:94:4d:27:a8:c3:6f:9f:b4:8f:d1:fb:4b:59: 21:cf:94:90:67:ce:7f:65:05:8c:5a:88:60:d4:71: ee:92:ec:5d:b2:23:57:c3:cd:62:e1:63:e4:bf:f6: d9:92:8e:f8:33:67:da:93:95:26:5d:f8:c1:97:13: e1:60:6c:a2:ac:e0:66:d7:80:79:8f:f8:e5:ce:48: 69:38:71:c4:32:55:ed:2a:35:34:97:1e:df:2e:15: e1:0d:0f:3f:f7:14:7c:0a:fa:81:d6:a0:aa:7f:d6: 40:bc:0a:9e:78:93:c8:38:6f:22:46:01:a1:bb:07: c7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3C:E2:D6:DE:F3:A6:72:4A:C5:D1:35:5E:E5:A7:AB:64:D3:BE:1C X509v3 Authority Key Identifier: keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:38:55:19:40:70:58:02:b6:24:59:af:f2:b3:59:29:08:8d: c1:4e:11:4a:b2:9a:39:b1:88:9f:a3:7b:61:e2:c1:00:9c:9a: 18:15:9c:6a:df:e1:fa:8a:bc:3f:c4:56:d6:46:c1:63:03:52: 75:b9:39:42:b3:a4:c2:f2:c7:50:98:6a:53:90:dd:43:64:67: 83:8c:00:f5:67:ee:5d:47:bf:06:94:2e:d4:56:b8:02:04:d3: 5a:e0:17:8c:54:0c:f9:2c:48:49:0f:65:e7:7b:16:b3:ab:01: e0:74:0e:30:f8:27:2e:70:02:49:2c:4b:b4:69:77:d1:2e:50: 9d:47:6a:0c:f8:52:d7:da:1a:41:9e:a2:3c:0c:45:7d:cd:ec: 34:04:e0:67:e1:94:d9:9e:21:d1:ec:a1:ca:eb:f4:10:35:12: 5c:ef:b2:88:a3:7b:4b:1d:79:73:f4:3d:83:ab:f4:fe:e8:f4: e5:e5:7a:d9:db:5d:bf:90:c9:2e:f0:a0:e0:2a:43:be:c4:0e: 61:e6:9c:e5:8c:e8:65:14:25:fd:42:e5:9b:cd:06:e2:c1:ac: 6f:06:02:ec:81:24:6f:76:51:04:d3:22:f8:1a:8c:b4:ba:49: a1:e6:76:65:c9:47:2f:11:a7:2a:f3:11:9a:00:6b:ae:07:a7: be:4b:67:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDkwMUE0M0M5QzQ4MDg2NzE3RURCQ0UyNTVDMDJBMkYw MzUzREFBRkEwHhcNMjYwMTE3MDAyMjM0WhcNMjYwMTI0MDAyMjM0WjAYMRYwFAYD VQQDDA02OTZhZDY0YS1iODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWRk7QOOtKSOVN+OmXH0ZD8gMk0S48KSAORcTBaL+zVtEGAPbJld2cnPl6D8 NNMKm1hOjiSqmWKoKvHkOdzhTyWGTFISzK3tfxVuv65xxs0PfS7ioy7umY4GbYUu 8GSUAPkx6jTIzpjAe1QwJCDw8xLJ67sz9cqB7Nv02Ia1GIRR3daBMUOp5JRNJ6jD b5+0j9H7S1khz5SQZ85/ZQWMWohg1HHukuxdsiNXw81i4WPkv/bZko74M2fak5Um XfjBlxPhYGyirOBm14B5j/jlzkhpOHHEMlXtKjU0lx7fLhXhDQ8/9xR8CvqB1qCq f9ZAvAqeeJPIOG8iRgGhuwfHywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNU84tbe 86ZySsXRNV7lp6tk074cMB8GA1UdIwQYMBaAFJAaQ8nEgIZxftvOJVwCovA1Par6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81MEMxQkY5MjBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhuRi0yODRsWEFLaThEVTlx dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCcER5Y1NBaG5GLTI4NGxYQUtpOERVOXF2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81MEMxQkY5MjBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhu Ri0yODRsWEFLaThEVTlxdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnOFUZQHBYArYkWa/ys1kpCI3BThFKspo5sYifo3th4sEAnJoYFZxq 3+H6irw/xFbWRsFjA1J1uTlCs6TC8sdQmGpTkN1DZGeDjAD1Z+5dR78GlC7UVrgC BNNa4BeMVAz5LEhJD2XnexazqwHgdA4w+CcucAJJLEu0aXfRLlCdR2oM+FLX2hpB nqI8DEV9zew0BOBn4ZTZniHR7KHK6/QQNRJc77KIo3tLHXlz9D2Dq/T+6PTl5XrZ 212/kMku8KDgKkO+xA5h5pzljOhlFCX9QuWbzQbiwaxvBgLsgSRvdlEE0yL4Goy0 ukmh5nZlyUcvEacq8xGaAGuuB6e+S2d2 -----END CERTIFICATE-----Generated at Sun Jan 18 03:17:24 2026 by rpki-client