This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json) Hash identifier: m/JqqLeBZueJZC3ec0lYiF8x6nj6GArRahQTQmTghN4= Subject key identifier: F4:E0:2A:97:18:42:0C:7B:FD:DB:C3:4A:E4:91:ED:36:58:69:7A:1B Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Certificate serial: 3504 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft Manifest number: 34FF Signing time: Fri 16 Jan 2026 14:58:01 +0000 Manifest this update: Fri 16 Jan 2026 14:58:01 +0000 Manifest next update: Fri 23 Jan 2026 14:58:01 +0000 Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: xIcmUEooJIB+85QVrckFhOiCl4xzn0mak2BU2cgUvvw=) 2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: 3hsbI0PrBL5LI5VaCiCNQ0sMN2EIkZA6LenSvD9t9yA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 14:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13572 (0x3504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Validity Not Before: Jan 16 14:58:01 2026 GMT Not After : Jan 23 14:58:01 2026 GMT Subject: CN=696a51f9-d087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d2:fe:8f:b9:df:9f:c1:ff:25:d3:1e:1c:70: b4:06:fb:28:e6:e2:40:50:d5:93:45:0f:62:4a:e6: 07:e7:4b:ec:8e:23:f5:94:95:dd:9f:3c:95:5c:fe: ff:e8:f3:40:82:e4:3d:95:a2:a8:e6:7d:86:a7:6f: 73:68:c7:0b:60:c5:f9:61:20:4f:a2:e7:4f:65:c6: d8:18:e1:49:d9:9b:18:69:9d:9a:b3:33:3e:a9:77: 37:ba:f1:0f:4b:d4:3f:5f:ad:09:60:cd:fa:c8:e8: 9f:69:5f:09:8a:49:74:bc:13:9d:fe:9f:d0:13:1d: 5a:4b:32:47:d3:42:b3:b7:55:77:0a:46:13:55:58: 63:e1:53:31:cf:e3:37:6d:28:62:eb:3a:8d:e2:9f: 6d:f9:c0:8a:04:00:6a:74:6f:5e:62:21:e8:48:20: bc:7c:8b:b0:c3:d7:68:e3:84:08:23:35:da:be:3f: 76:8c:68:c9:61:9f:80:a4:50:3b:d6:43:6b:68:6e: 8e:91:13:3f:4e:7f:99:45:0a:3d:af:41:33:a6:8e: 22:1f:c7:8e:29:1a:2f:63:76:12:17:9e:28:1b:8e: fd:56:4c:1a:d9:41:e3:fb:fb:45:4a:97:dd:6b:12: 1a:f9:df:98:18:35:9d:3f:5a:54:15:01:bf:fd:78: de:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E0:2A:97:18:42:0C:7B:FD:DB:C3:4A:E4:91:ED:36:58:69:7A:1B X509v3 Authority Key Identifier: keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:a9:97:2c:99:92:ab:bf:e5:0e:28:fc:8f:2c:9d:54:22:64: ff:cf:a5:5d:3f:12:39:ef:cf:40:34:48:5f:a8:79:f7:e0:ab: bc:1f:e0:ce:b3:91:30:15:be:e5:df:fb:2a:e5:8a:04:c9:02: 17:b2:42:11:5d:11:e3:03:7a:c5:0e:1b:d0:4b:75:5d:77:f3: 06:9e:5b:92:24:9f:00:f9:0e:e7:0f:4b:2b:1a:b2:c7:77:18: fa:78:a9:61:87:e2:58:58:a3:d5:3c:00:1c:28:c1:91:dd:a2: d9:90:01:a6:75:3b:c2:ce:f7:eb:82:7d:7f:e9:14:bc:c5:90: 18:77:15:89:68:90:17:76:de:e8:12:a8:9a:fb:b1:74:9d:16: 01:48:64:d0:11:64:f0:9e:f3:42:a4:3c:12:bb:b2:f9:ea:1e: 5c:59:5d:8b:ae:67:9d:05:cd:54:3e:58:1c:b9:ee:54:31:83: 56:86:f6:df:d2:c8:b7:34:4f:d1:d9:82:29:15:12:03:c1:f8: 05:71:62:47:eb:be:a7:99:6f:76:68:3f:01:0b:7c:4f:d5:26: de:06:b5:94:6d:9d:6a:7d:97:02:64:69:b6:48:fb:8e:3f:dc: dd:dc:1f:a7:89:b7:c3:ed:a4:31:1f:b8:a8:4b:e9:4f:36:16: 4f:5b:b5:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKDYzMkM4REUwMjIwQjhDMTBCNDFGRjQ5QkZGOEI0MzJD RjhGRkQyNTQwHhcNMjYwMTE2MTQ1ODAxWhcNMjYwMTIzMTQ1ODAxWjAYMRYwFAYD VQQDDA02OTZhNTFmOS1kMDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+NL+j7nfn8H/JdMeHHC0Bvso5uJAUNWTRQ9iSuYH50vsjiP1lJXdnzyVXP7/ 6PNAguQ9laKo5n2Gp29zaMcLYMX5YSBPoudPZcbYGOFJ2ZsYaZ2aszM+qXc3uvEP S9Q/X60JYM36yOifaV8Jikl0vBOd/p/QEx1aSzJH00Kzt1V3CkYTVVhj4VMxz+M3 bShi6zqN4p9t+cCKBABqdG9eYiHoSCC8fIuww9do44QIIzXavj92jGjJYZ+ApFA7 1kNraG6OkRM/Tn+ZRQo9r0Ezpo4iH8eOKRovY3YSF54oG479Vkwa2UHj+/tFSpfd axIa+d+YGDWdP1pUFQG//XjebQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTgKpcY Qgx7/dvDSuSR7TZYaXobMB8GA1UdIwQYMBaAFGMsjeAiC4wQtB/0m/+LQyz4/9JU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy80NDlCQTUwNjFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpCQzBIX1NiXzR0RExQal8w bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l5eU40Q0lMakJDMEhfU2JfNHRETFBqXzBsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy80NDlCQTUwNjFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpC QzBIX1NiXzR0RExQal8wbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwqZcsmZKrv+UOKPyPLJ1UImT/z6VdPxI5789ANEhfqHn34Ku8H+DO s5EwFb7l3/sq5YoEyQIXskIRXRHjA3rFDhvQS3Vdd/MGnluSJJ8A+Q7nD0srGrLH dxj6eKlhh+JYWKPVPAAcKMGR3aLZkAGmdTvCzvfrgn1/6RS8xZAYdxWJaJAXdt7o Eqia+7F0nRYBSGTQEWTwnvNCpDwSu7L56h5cWV2LrmedBc1UPlgcue5UMYNWhvbf 0si3NE/R2YIpFRIDwfgFcWJH676nmW92aD8BC3xP1SbeBrWUbZ1qfZcCZGm2SPuO P9zd3B+nibfD7aQxH7ioS+lPNhZPW7WV -----END CERTIFICATE-----Generated at Sun Jan 18 03:16:14 2026 by rpki-client