This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft File: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft (raw, json) Hash identifier: MndDSi2WM6yWzKc6VorVhDhypqjgDTU9mlj3LXC7PTE= Subject key identifier: AE:65:FC:8D:D3:9A:7F:9D:09:52:5B:93:30:0C:90:B8:22:74:85:84 Authority key identifier: EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 Certificate issuer: /CN=A91D41AC/serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft Manifest number: 20 Signing time: Sat 17 Jan 2026 05:15:02 +0000 Manifest this update: Sat 17 Jan 2026 05:15:02 +0000 Manifest next update: Sat 24 Jan 2026 05:15:02 +0000 Files and hashes: 1: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl (hash: zMj5WstRAvLfdbvI1Dss2JajdutGqwus9Qz9O/lnTf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 05:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D41AC, serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Validity Not Before: Jan 17 05:15:02 2026 GMT Not After : Jan 24 05:15:02 2026 GMT Subject: CN=696b1ad6-60c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0d:8f:34:03:13:38:ae:d1:7b:6b:7a:48:17: c8:27:0c:c4:dc:b7:71:7e:17:83:a0:66:ff:2b:04: b9:ce:3b:85:a3:dc:58:38:57:35:e8:82:8c:e8:28: ba:88:2e:7c:6a:06:eb:11:9e:f0:75:97:15:e5:70: c5:d5:5c:9c:8d:fd:57:2f:02:e7:b8:01:21:d2:fe: fd:b7:eb:da:e1:f3:fe:10:73:44:77:9d:7b:83:e8: 0c:5c:18:a0:1c:2f:72:d6:d2:da:d9:fa:52:ed:d8: f5:de:37:59:52:70:9a:9d:3a:5e:8e:58:c5:d3:27: 4b:7a:ff:fd:c2:cc:fb:98:ca:41:b0:c6:c3:2e:37: ba:3e:60:f5:20:fa:1c:a4:9d:ad:0e:03:49:44:73: 69:f8:b5:55:2c:78:f4:9c:bd:f1:cd:80:5c:d0:9e: e3:6d:2e:f8:4b:f9:43:3c:9f:78:70:37:a6:00:ca: 9b:bc:51:7f:9d:d4:8d:6d:c3:b4:3e:b4:ad:74:5e: 8c:56:f5:d5:e5:22:63:18:61:03:7c:2a:d0:a3:fe: 2e:41:7f:0d:e1:af:3b:c5:4b:4d:d4:78:31:d0:f9: a4:f2:dd:0c:50:fc:6c:b2:b8:d8:0a:3f:29:68:91: 80:d4:9c:bb:32:0b:eb:7f:97:ec:4d:88:70:c0:c7: 6a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:65:FC:8D:D3:9A:7F:9D:09:52:5B:93:30:0C:90:B8:22:74:85:84 X509v3 Authority Key Identifier: keyid:EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:46:f7:aa:67:61:69:86:2e:6e:78:b6:13:36:85:3e:71:02: 02:14:8e:f0:24:d9:58:f1:2c:32:c1:69:45:84:59:34:87:da: 3d:32:34:2e:49:27:c7:81:cc:3e:c8:e4:2f:59:ce:a7:39:f1: 51:07:03:f0:8d:80:c4:6f:c9:e0:25:0c:4b:c3:e8:c3:92:a6: 36:f5:8e:d6:b0:3f:3b:ac:a1:9a:f2:b3:24:06:8c:ba:e5:62: 96:a3:01:5d:e8:86:29:18:22:ed:7b:0b:bb:5c:48:da:3d:e1: f3:c3:00:87:ba:5e:a6:ee:ee:1f:ff:d5:0c:d6:a1:ed:e6:2d: b0:24:da:27:9b:1f:20:2e:d8:06:fb:99:c5:c0:1b:86:5d:47: 24:ef:82:2a:2a:56:4b:3a:2e:44:1b:24:83:e1:fa:94:09:ca: 40:8a:7b:77:83:a6:a9:a5:1f:a3:6b:e4:f7:d9:88:e6:a2:13: 8b:97:95:12:72:04:92:ab:3d:36:a7:db:95:07:95:69:cb:5f: c6:d4:82:8c:4c:13:78:a2:fd:9c:35:4a:dd:d1:e6:16:32:06: 73:5d:3e:d0:dc:16:47:b5:d2:8f:c2:5d:a9:d1:a3:25:c5:1e: 69:5f:a3:c4:b0:12:df:34:42:1b:08:0b:fb:38:c7:7b:08:64: f2:1e:15:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDFBQzExMC8GA1UEBRMoRUVBOTAxQjdGQjMzRkI1MENGMDRDNTk4MUY4QkVGNkM0 REVDMzVFMjAeFw0yNjAxMTcwNTE1MDJaFw0yNjAxMjQwNTE1MDJaMBgxFjAUBgNV BAMMDTY5NmIxYWQ2LTYwYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxDY80AxM4rtF7a3pIF8gnDMTct3F+F4OgZv8rBLnOO4Wj3Fg4VzXogozoKLqI LnxqBusRnvB1lxXlcMXVXJyN/VcvAue4ASHS/v2369rh8/4Qc0R3nXuD6AxcGKAc L3LW0trZ+lLt2PXeN1lScJqdOl6OWMXTJ0t6//3CzPuYykGwxsMuN7o+YPUg+hyk na0OA0lEc2n4tVUsePScvfHNgFzQnuNtLvhL+UM8n3hwN6YAypu8UX+d1I1tw7Q+ tK10XoxW9dXlImMYYQN8KtCj/i5Bfw3hrzvFS03UeDHQ+aTy3QxQ/GyyuNgKPylo kYDUnLsyC+t/l+xNiHDAx2oTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrmX8jdOa f50JUluTMAyQuCJ0hYQwHwYDVR0jBBgwFoAU7qkBt/sz+1DPBMWYH4vvbE3sNeIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MUFDL0EzMDJBQjQ2QzY4 QzExRjBBRDIxNDYzN0M0RjlBRTAyLzdxa0J0X3N6LTFEUEJNV1lINHZ2YkUzc05l SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN3FrQnRfc3otMURQQk1XWUg0dnZiRTNzTmVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 MUFDL0EzMDJBQjQ2QzY4QzExRjBBRDIxNDYzN0M0RjlBRTAyLzdxa0J0X3N6LTFE UEJNV1lINHZ2YkUzc05lSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFdG96pnYWmGLm54thM2hT5xAgIUjvAk2VjxLDLBaUWEWTSH2j0yNC5J J8eBzD7I5C9Zzqc58VEHA/CNgMRvyeAlDEvD6MOSpjb1jtawPzusoZrysyQGjLrl YpajAV3ohikYIu17C7tcSNo94fPDAIe6Xqbu7h//1QzWoe3mLbAk2iebHyAu2Ab7 mcXAG4ZdRyTvgioqVks6LkQbJIPh+pQJykCKe3eDpqmlH6Nr5PfZiOaiE4uXlRJy BJKrPTan25UHlWnLX8bUgoxME3ii/Zw1St3R5hYyBnNdPtDcFke10o/CXanRoyXF Hmlfo8SwEt80QhsIC/s4x3sIZPIeFWc= -----END CERTIFICATE-----Generated at Sun Jan 18 03:15:14 2026 by rpki-client