This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft File: rJEs76dYoRmcG-3gaxSp6jmJdfc.mft (raw, json) Hash identifier: a5hJuUbTJ0XaEGVg5NDfN0R7hNSXiV6ZqoHB+uLMHlw= Subject key identifier: 1A:29:4E:FD:2C:9D:D3:3F:32:A0:96:3F:51:A0:04:8A:E4:15:0D:0C Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7 Certificate issuer: /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7 Certificate serial: 027A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft Manifest number: 0267 Signing time: Sun 25 Jan 2026 00:55:29 +0000 Manifest this update: Sun 25 Jan 2026 00:55:29 +0000 Manifest next update: Sun 01 Feb 2026 00:55:29 +0000 Files and hashes: 1: rJEs76dYoRmcG-3gaxSp6jmJdfc.crl (hash: NVxIGLa7wOWC36b6GYmr4euqHSedC+bH7oFI4XWzNUE=) 2: 1327E728C4D611F08E87F351C4F9AE02.roa (hash: O/yg3aFI704dQ5gqO9mIGal9BMnqrltgiZFyZJ3iS0M=) 3: 38E02CDC04EE11EE89900876C4F9AE02.roa (hash: +0GRxYO2GKHW0qvFUQkbtc7koZkiCwiB0U5TojZcsvM=) 4: EE0C206E96FF11ED87B56F84C4F9AE02.roa (hash: Ma1fK8A2BnEQxkntLkAUafOlFP+pb/E30IvuoC7r5bk=) 5: EF1E23F896FF11ED87B56F84C4F9AE02.roa (hash: S5t27YbvUIBsEi+zxF5EsG2NIOAo49u3/IX5fyPJ2Lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911285C, serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7 Validity Not Before: Jan 25 00:55:29 2026 GMT Not After : Feb 1 00:55:29 2026 GMT Subject: CN=69756a01-837e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:7b:ad:5b:db:df:c3:9d:21:37:b4:e2:8e: 5f:b9:e5:2e:d1:3c:26:89:47:9b:44:84:b9:90:51: 50:48:4b:7a:6e:a8:9f:ed:25:bb:64:7a:23:8d:0d: 47:8c:15:9f:a3:d6:62:f1:84:df:a1:44:80:62:e0: 25:d3:ea:d1:23:6e:c4:13:28:03:7e:bf:76:cc:bb: 36:b8:41:24:4a:a7:96:e1:b4:4b:19:48:b6:f7:32: 94:c6:15:65:75:e8:e3:d4:40:fc:c6:c8:60:a5:8d: 21:a3:8b:08:99:e4:09:d5:58:ff:2f:6a:05:4f:e8: 23:33:9a:5d:d6:2f:0d:6e:98:9a:db:62:af:d7:bf: 05:e3:e3:2f:6d:df:00:11:4d:35:11:d1:8f:2c:f7: fe:7f:e3:9e:2f:a0:2b:c5:78:f8:84:4b:94:fc:5c: 4b:67:df:3f:b2:6d:d3:fa:71:51:09:0c:74:a8:5f: cc:62:3d:92:79:95:5b:64:65:6b:ba:fb:fd:8e:09: e7:f5:f3:d4:30:34:4d:d1:36:b4:8f:90:12:df:77: af:1c:8e:57:5b:ec:db:65:14:2d:6e:b8:9a:c2:5f: 2e:47:05:6d:9f:93:c5:b6:95:82:61:f5:38:f5:63: d0:60:c7:09:a7:5c:27:0e:51:85:c6:11:60:49:19: 99:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:29:4E:FD:2C:9D:D3:3F:32:A0:96:3F:51:A0:04:8A:E4:15:0D:0C X509v3 Authority Key Identifier: keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a3:26:a2:ed:3d:1f:34:43:b5:7f:8d:6b:07:f8:a8:56:07: bb:59:cd:0e:7e:17:04:25:2d:2a:d2:51:b0:47:2c:33:48:e8: c5:d5:2e:99:1a:19:f4:52:ce:18:6a:eb:c4:69:72:88:56:db: 0b:d1:f1:dd:a2:f7:4f:35:68:33:7f:bc:b2:73:57:1f:64:1d: ac:15:05:a0:b0:62:2c:7b:a5:83:b7:ac:06:3b:59:36:68:c4: fd:a0:62:a7:5d:3d:9f:8e:f8:4c:5d:6d:d1:66:2b:62:dc:2b: 9f:77:39:02:b6:3b:b5:2e:a1:40:a0:e3:62:2a:30:bf:e0:a5: bc:f2:85:a1:5a:82:aa:2f:bb:a5:a3:15:e1:96:ec:f4:88:cf: 99:31:85:32:d8:29:cc:55:bb:a5:39:5f:1e:ac:ff:40:f0:3e: f5:53:7b:24:f2:42:22:9c:73:4b:0b:87:74:91:4e:55:e8:a6: cf:33:7a:c1:59:9a:d8:e4:63:e7:6b:1d:e1:3e:dc:cd:42:24: 7e:0d:3f:09:aa:5b:ea:9f:78:11:8a:4b:7c:2e:84:32:88:98: 76:d4:66:19:7a:9e:d7:02:9b:fa:e1:2d:08:32:2c:1a:af:48: e6:7b:13:2e:22:ab:ac:b0:09:0c:b7:0c:d0:36:63:14:0e:92: d2:9f:7e:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4NUMxMTAvBgNVBAUTKEFDOTEyQ0VGQTc1OEExMTk5QzFCRURFMDZCMTRBOUVB Mzk4OTc1RjcwHhcNMjYwMTI1MDA1NTI5WhcNMjYwMjAxMDA1NTI5WjAYMRYwFAYD VQQDDA02OTc1NmEwMS04MzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2p7rVvb38OdITe04o5fueUu0TwmiUebRIS5kFFQSEt6bqif7SW7ZHojjQ1H jBWfo9Zi8YTfoUSAYuAl0+rRI27EEygDfr92zLs2uEEkSqeW4bRLGUi29zKUxhVl dejj1ED8xshgpY0ho4sImeQJ1Vj/L2oFT+gjM5pd1i8Nbpia22Kv178F4+Mvbd8A EU01EdGPLPf+f+OeL6ArxXj4hEuU/FxLZ98/sm3T+nFRCQx0qF/MYj2SeZVbZGVr uvv9jgnn9fPUMDRN0Ta0j5AS33evHI5XW+zbZRQtbriawl8uRwVtn5PFtpWCYfU4 9WPQYMcJp1wnDlGFxhFgSRmZhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBopTv0s ndM/MqCWP1GgBIrkFQ0MMB8GA1UdIwQYMBaAFKyRLO+nWKEZnBvt4GsUqeo5iXX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjg1Qy8wQTY4QjExODYw OEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9SbWNHLTNnYXhTcDZqbUpk ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKRXM3NmRZb1JtY0ctM2dheFNwNmptSmRmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjg1Qy8wQTY4QjExODYwOEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9S bWNHLTNnYXhTcDZqbUpkZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6oyai7T0fNEO1f41rB/ioVge7Wc0OfhcEJS0q0lGwRywzSOjF1S6Z Ghn0Us4YauvEaXKIVtsL0fHdovdPNWgzf7yyc1cfZB2sFQWgsGIse6WDt6wGO1k2 aMT9oGKnXT2fjvhMXW3RZiti3CufdzkCtju1LqFAoONiKjC/4KW88oWhWoKqL7ul oxXhluz0iM+ZMYUy2CnMVbulOV8erP9A8D71U3sk8kIinHNLC4d0kU5V6KbPM3rB WZrY5GPnax3hPtzNQiR+DT8Jqlvqn3gRikt8LoQyiJh21GYZep7XApv64S0IMiwa r0jmexMuIqussAkMtwzQNmMUDpLSn34K -----END CERTIFICATE-----Generated at Sun Jan 25 10:47:09 2026 by rpki-client