This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft File: 7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json) Hash identifier: 5LJ5cUrPdUZil0ZXgKWxpzfVZoZWLNRROzl/eejkd5w= Subject key identifier: E0:E1:A4:C0:6F:FD:D5:24:7A:A1:C3:32:50:84:3C:8F:3D:79:A7:95 Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B Certificate issuer: /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft Manifest number: 01AF Signing time: Sat 17 Jan 2026 02:21:26 +0000 Manifest this update: Sat 17 Jan 2026 02:21:26 +0000 Manifest next update: Sat 24 Jan 2026 02:21:26 +0000 Files and hashes: 1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: bw1jWLMrCwy5mgzEITS1Roe8ZCFQuDeHPWRWkz88/As=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 02:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Validity Not Before: Jan 17 02:21:26 2026 GMT Not After : Jan 24 02:21:26 2026 GMT Subject: CN=696af226-12ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:df:f7:f0:6f:6a:46:88:aa:8a:80:99:42:9e: 86:66:0b:62:c9:7f:f0:1a:7d:9a:70:cc:a8:e2:17: 95:33:41:0b:3a:e7:f8:cf:06:ee:5a:7f:75:6f:12: cc:65:50:fa:d3:e0:ea:12:df:cc:fa:cb:ff:6e:79: 92:5e:04:ff:c4:15:16:e6:6f:6a:36:2d:f2:3a:b2: 22:6a:d4:f1:25:db:2b:e4:c3:6e:c2:e7:c2:de:95: a8:96:fd:b5:28:8d:1a:75:f4:5a:75:e5:20:c0:fb: a5:ae:20:6f:7a:87:13:d5:18:04:93:bf:09:59:e9: 0f:f5:e8:db:cb:03:37:07:c0:48:49:9d:df:a0:e2: ec:8b:0e:af:fa:35:f4:e2:d4:04:cf:f7:2b:b3:8a: d5:e0:cd:fb:e6:f9:25:01:fb:6e:31:2c:51:4a:c7: bf:58:e1:72:21:48:45:5e:d8:5f:7b:ce:e9:4a:30: 1b:6c:7e:a2:1d:a7:49:c9:93:72:d5:40:09:6c:75: fe:77:be:8f:44:b3:a3:ad:8e:b1:d7:1e:fa:1d:74: be:17:d5:cb:6c:78:67:1c:89:e4:58:16:4f:cd:2b: 8c:04:f8:66:dd:70:b5:3b:dd:25:d2:06:49:9c:db: 91:69:2d:0a:b4:00:81:ba:75:07:b4:fc:11:f5:ff: db:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E1:A4:C0:6F:FD:D5:24:7A:A1:C3:32:50:84:3C:8F:3D:79:A7:95 X509v3 Authority Key Identifier: keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:31:bd:f9:bb:0c:f0:dc:38:ac:64:0f:e7:ee:21:71:b6:11: e7:19:e3:69:f2:cb:5c:c1:ce:df:0b:b2:77:b8:30:12:68:45: 6a:19:8c:d2:38:18:f8:3a:08:49:28:4a:32:88:51:10:f0:cc: c9:aa:b5:b1:75:3f:88:0a:61:91:fc:c5:35:7f:dc:af:45:bf: 98:7a:9c:b9:11:09:fa:49:ec:c9:31:47:40:1f:65:e5:0f:3a: 39:a2:4a:a3:f1:53:af:5f:62:a2:8e:fb:54:e8:3e:e2:18:ac: ef:29:5e:bd:85:be:b2:c9:24:6a:9a:e0:d9:29:1c:54:b0:90: 64:03:7b:91:b8:a4:0e:a1:34:91:22:2c:bb:45:6b:35:01:75: 59:eb:09:97:da:fa:10:b9:f7:86:99:e7:56:37:2b:42:cc:03: 47:86:57:c9:b7:35:4a:d4:70:03:cb:2d:92:36:18:97:80:a4: b5:59:22:51:b3:4c:21:75:74:a5:24:0f:2e:e8:0d:fd:b1:8d: 33:4e:db:14:4e:b5:95:1f:91:20:aa:eb:07:ad:3a:72:5e:de: 98:09:8b:98:cc:47:d6:e5:b1:09:e4:71:68:b0:6d:3a:c3:31: 7f:97:95:be:2c:27:9f:ed:27:aa:7e:f5:5d:14:34:0c:35:bb: 03:46:68:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx ODY4ODMxMTAvBgNVBAUTKEVFMjRDOThCOTYxMzEwRjUwREYwRENCMkQyNzY5NkJB MEVCRDdENEIwHhcNMjYwMTE3MDIyMTI2WhcNMjYwMTI0MDIyMTI2WjAYMRYwFAYD VQQDDA02OTZhZjIyNi0xMmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkd/38G9qRoiqioCZQp6GZgtiyX/wGn2acMyo4heVM0ELOuf4zwbuWn91bxLM ZVD60+DqEt/M+sv/bnmSXgT/xBUW5m9qNi3yOrIiatTxJdsr5MNuwufC3pWolv21 KI0adfRadeUgwPulriBveocT1RgEk78JWekP9ejbywM3B8BISZ3foOLsiw6v+jX0 4tQEz/crs4rV4M375vklAftuMSxRSse/WOFyIUhFXthfe87pSjAbbH6iHadJyZNy 1UAJbHX+d76PRLOjrY6x1x76HXS+F9XLbHhnHInkWBZPzSuMBPhm3XC1O90l0gZJ nNuRaS0KtACBunUHtPwR9f/bcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODhpMBv /dUkeqHDMlCEPI89eaeVMB8GA1UdIwQYMBaAFO4kyYuWExD1DfDcstJ2lroOvX1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9BODhGRkNGODVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQVU44Tnl5MG5hV3VnNjlm VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdpVEppNVlURVBVTjhOeXkwbmFXdWc2OWZVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9BODhGRkNGODVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQ VU44Tnl5MG5hV3VnNjlmVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWMb35uwzw3DisZA/n7iFxthHnGeNp8stcwc7fC7J3uDASaEVqGYzS OBj4OghJKEoyiFEQ8MzJqrWxdT+ICmGR/MU1f9yvRb+Yepy5EQn6SezJMUdAH2Xl Dzo5okqj8VOvX2KijvtU6D7iGKzvKV69hb6yySRqmuDZKRxUsJBkA3uRuKQOoTSR Iiy7RWs1AXVZ6wmX2voQufeGmedWNytCzANHhlfJtzVK1HADyy2SNhiXgKS1WSJR s0whdXSlJA8u6A39sY0zTtsUTrWVH5EgqusHrTpyXt6YCYuYzEfW5bEJ5HFosG06 wzF/l5W+LCef7SeqfvVdFDQMNbsDRmiq -----END CERTIFICATE-----Generated at Sun Jan 18 03:17:32 2026 by rpki-client