This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft File: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json) Hash identifier: lzHBkfPmPK/+IdqNccYNZeMEKov3fHFKllGQNjPUQBU= Subject key identifier: 22:9F:A8:01:CB:80:02:CB:44:00:1B:EC:7D:93:C3:A8:8F:26:65:54 Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E Certificate issuer: /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft Manifest number: 010D Signing time: Sat 17 Jan 2026 04:06:31 +0000 Manifest this update: Sat 17 Jan 2026 04:06:30 +0000 Manifest next update: Sat 24 Jan 2026 04:06:30 +0000 Files and hashes: 1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: 4wrSn0IlIvrFOrJ7e3pk8crzgxyjm5hjFMFtw4PxSmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 04:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Validity Not Before: Jan 17 04:06:30 2026 GMT Not After : Jan 24 04:06:30 2026 GMT Subject: CN=696b0ac6-74c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3a:2a:a0:43:68:7a:b1:73:96:98:b2:5a:95: 0f:11:bf:42:3d:ed:f5:96:0e:fa:b9:91:8d:01:37: c7:c3:1e:a3:f4:1f:3a:85:dd:3d:dd:b4:88:6c:17: 7c:c4:c0:26:70:5a:55:00:5b:c9:ce:5e:45:ec:2c: 7f:0a:96:e5:bb:b9:09:c3:40:93:fc:85:d1:5f:42: d9:71:34:8e:5a:a0:5d:2b:24:c9:f8:5f:cc:85:c8: 79:ab:8b:ed:37:ab:6d:38:b1:8f:8f:b7:1e:64:9a: ee:97:90:4b:d1:a3:f5:f0:71:26:0c:de:bb:6a:89: e7:29:a9:65:b9:48:35:5d:3a:6d:c6:03:58:b7:4f: a7:dc:37:21:bf:3e:d4:88:89:21:6d:90:54:c2:67: 31:2c:d8:aa:b3:01:ee:d2:9a:7a:29:7c:52:0f:91: 6a:97:ca:1a:14:06:10:94:2a:29:17:b5:de:f4:d2: 57:27:b3:fd:94:65:f7:a2:f5:1e:48:08:04:30:e5: 0f:2a:76:6f:de:57:94:2f:60:fc:83:24:82:13:ad: e7:0f:88:9f:c7:64:96:f8:e7:3d:cc:73:7c:12:c6: 9d:74:0c:b6:5d:4f:f5:7b:08:6a:74:9a:07:b3:5e: ae:74:17:f7:16:a4:80:ff:54:6c:13:fd:5a:f8:57: cc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9F:A8:01:CB:80:02:CB:44:00:1B:EC:7D:93:C3:A8:8F:26:65:54 X509v3 Authority Key Identifier: keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:93:b1:9a:3d:f8:0f:ff:a5:64:70:b7:e2:d2:2c:11:f1:b2: 01:d6:9a:35:56:a7:5e:63:22:d4:50:29:90:6d:df:8c:e0:24: 57:db:c2:f2:1b:98:09:f4:54:54:fd:c9:5d:b5:2f:c5:ea:50: 98:6a:d7:c8:aa:64:fd:a1:6e:cd:12:5c:c8:c7:12:ff:8b:85: c4:c7:32:08:54:fa:96:fe:80:84:93:50:ad:34:3e:36:e7:e9: 2f:73:f3:64:ae:b2:22:12:77:ee:60:05:2d:b2:55:df:a6:8b: b5:8c:7b:18:76:54:01:22:71:be:38:96:34:ca:1c:16:b1:4a: 63:12:c2:cf:0f:8b:03:63:8d:1e:56:2f:de:25:5b:20:ab:6e: ae:31:83:69:5e:68:29:31:41:c2:83:62:05:f7:28:bb:82:77: 78:d1:f7:92:ee:49:39:21:0e:a2:f6:77:bc:ca:6b:97:78:95: 48:95:b3:58:4f:26:58:aa:f4:66:a4:94:f4:ff:d7:0d:f6:c5: 43:68:94:d2:a1:9b:f3:65:64:16:9a:75:48:91:78:e3:c0:7f: 38:2c:29:6a:88:98:07:8c:1f:1a:7f:c5:0c:ee:6b:f8:36:f3: 5f:14:80:43:84:7d:79:82:42:24:8c:cf:92:47:d2:02:8b:2f: ef:dc:53:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKEUwQjYwOEFGNTM0MTRCNkY1OTdEMThDQUU3QTIxNDQ4 M0U4QTY1OUUwHhcNMjYwMTE3MDQwNjMwWhcNMjYwMTI0MDQwNjMwWjAYMRYwFAYD VQQDDA02OTZiMGFjNi03NGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDoqoENoerFzlpiyWpUPEb9CPe31lg76uZGNATfHwx6j9B86hd093bSIbBd8 xMAmcFpVAFvJzl5F7Cx/Cpblu7kJw0CT/IXRX0LZcTSOWqBdKyTJ+F/Mhch5q4vt N6ttOLGPj7ceZJrul5BL0aP18HEmDN67aonnKalluUg1XTptxgNYt0+n3Dchvz7U iIkhbZBUwmcxLNiqswHu0pp6KXxSD5Fql8oaFAYQlCopF7Xe9NJXJ7P9lGX3ovUe SAgEMOUPKnZv3leUL2D8gySCE63nD4ifx2SW+Oc9zHN8EsaddAy2XU/1ewhqdJoH s16udBf3FqSA/1RsE/1a+FfMOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKfqAHL gALLRAAb7H2Tw6iPJmVUMB8GA1UdIwQYMBaAFOC2CK9TQUtvWX0YyueiFEg+imWe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84NkQ3Qjg2MjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMyOVpmUmpLNTZJVVNENkta WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRMWUlyMU5CUzI5WmZSaks1NklVU0Q2S1paNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84NkQ3Qjg2MjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMy OVpmUmpLNTZJVVNENktaWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5k7GaPfgP/6VkcLfi0iwR8bIB1po1VqdeYyLUUCmQbd+M4CRX28Ly G5gJ9FRU/cldtS/F6lCYatfIqmT9oW7NElzIxxL/i4XExzIIVPqW/oCEk1CtND42 5+kvc/NkrrIiEnfuYAUtslXfpou1jHsYdlQBInG+OJY0yhwWsUpjEsLPD4sDY40e Vi/eJVsgq26uMYNpXmgpMUHCg2IF9yi7gnd40feS7kk5IQ6i9ne8ymuXeJVIlbNY TyZYqvRmpJT0/9cN9sVDaJTSoZvzZWQWmnVIkXjjwH84LClqiJgHjB8af8UM7mv4 NvNfFIBDhH15gkIkjM+SR9ICiy/v3FOC -----END CERTIFICATE-----Generated at Sun Jan 18 03:17:32 2026 by rpki-client