This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft File: A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json) Hash identifier: w1fbusr0qr2D6yl0kwHoZUcO4SJRp1dEtUo4rlQwRbA= Subject key identifier: A7:E6:30:02:73:FB:29:E3:11:CF:E4:61:96:5B:F6:17:1D:15:86:8C Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 Certificate issuer: /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Certificate serial: 350F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft Manifest number: 3504 Signing time: Sat 24 Jan 2026 15:02:36 +0000 Manifest this update: Sat 24 Jan 2026 15:02:35 +0000 Manifest next update: Sat 31 Jan 2026 15:02:35 +0000 Files and hashes: 1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: 2Xwvxw4Q82k+clKUMCLyMJmVNA0xbQs8GGwA6t/llTU=) 2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: kZdCLZLr7MrW3XdEboMd7BRjcidMEtmhtIWvhKUYQqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13583 (0x350f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Validity Not Before: Jan 24 15:02:35 2026 GMT Not After : Jan 31 15:02:35 2026 GMT Subject: CN=6974df0b-7ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:58:55:00:9f:c3:88:d3:c2:24:d4:8f:e8:53: fe:f7:dc:36:1e:02:30:9d:63:86:ff:28:66:1b:bb: 94:f7:e6:cc:3f:b7:48:bf:15:17:c7:86:e1:09:ee: 98:a9:97:28:b3:01:62:56:47:06:56:5d:16:c1:0e: 12:2a:14:67:03:3c:82:b9:0e:bd:69:69:9d:51:fa: 75:fc:8b:7e:a9:fc:3f:04:0f:a7:1f:da:d6:ea:8b: 52:b2:bf:b5:8e:41:a1:a4:d7:28:95:24:ff:63:bb: df:8c:a5:2d:4d:0f:80:7f:9f:b8:5e:bf:98:53:b6: a3:af:07:f9:dd:1c:71:db:64:51:4d:c7:0d:57:de: 66:3c:be:8b:8f:7d:83:cf:3b:22:9d:a1:1a:c9:c5: 92:43:b3:e8:c6:cd:ae:8b:dd:b0:7d:a4:5f:19:6d: 0f:5d:ee:b0:2c:0b:d9:65:bf:88:0c:a5:9e:a7:2e: 74:37:0f:28:ac:3f:4e:9f:ec:cb:d1:6f:cc:b8:77: d3:30:e9:71:d0:e8:0f:11:8b:e2:1e:08:82:35:29: 42:b7:85:9e:4a:75:aa:08:79:e4:d9:44:fd:e3:f4: 26:1d:83:4f:2e:08:16:9a:6d:18:cb:c4:ac:6d:f9: b6:87:74:bb:37:c6:8f:cf:30:d2:51:fc:3f:6d:ca: 28:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E6:30:02:73:FB:29:E3:11:CF:E4:61:96:5B:F6:17:1D:15:86:8C X509v3 Authority Key Identifier: keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:49:64:6e:d0:d5:e1:45:29:16:2e:4a:27:d6:49:ac:b7:0f: 5e:cf:08:5c:28:ae:a8:ec:b6:50:08:54:ae:5f:02:65:0c:94: 9b:2f:5e:e0:16:fe:97:e0:b7:ad:2e:0b:55:93:fc:67:b4:c3: 9f:ef:6f:6d:72:ed:2e:ab:ff:9f:31:70:a1:82:b2:86:c8:8e: d9:ff:47:5e:84:be:5b:49:3f:9d:af:3a:a6:82:88:b6:c7:c6: 2c:81:d3:38:bc:39:0d:fc:c5:43:ac:07:6a:e7:93:24:63:64: dd:79:ef:f1:fa:2d:92:c2:c4:d2:0f:48:23:cb:d7:f5:9b:6d: a5:59:84:61:37:92:4c:18:d9:2d:d3:b4:cf:de:02:01:a2:e8: 0f:41:4a:e6:20:4e:d5:2f:d6:6e:e6:67:f6:89:68:a8:53:71: 62:25:45:bf:00:2c:46:d6:85:ad:ca:4c:36:30:ad:6a:a4:2c: 24:14:09:4b:c0:0b:b6:55:e4:b8:d4:99:0c:ed:6d:1a:3b:7f: 32:99:93:e3:42:34:9b:dd:c5:d9:19:39:33:35:ad:85:b9:91: f3:81:34:ea:76:db:6c:5f:cd:6b:c5:ae:b5:f9:34:0e:93:19: 1d:03:30:95:61:a7:db:f5:ff:ee:74:8f:e0:59:79:34:b8:67: fa:cb:10:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJDRUMxMTAvBgNVBAUTKDAzOENGMkUyODA3N0RGMkNBREE0NTc1NkZCNUQ5OUE2 RTI0MEZEMDkwHhcNMjYwMTI0MTUwMjM1WhcNMjYwMTMxMTUwMjM1WjAYMRYwFAYD VQQDDA02OTc0ZGYwYi03ZWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01hVAJ/DiNPCJNSP6FP+99w2HgIwnWOG/yhmG7uU9+bMP7dIvxUXx4bhCe6Y qZcoswFiVkcGVl0WwQ4SKhRnAzyCuQ69aWmdUfp1/It+qfw/BA+nH9rW6otSsr+1 jkGhpNcolST/Y7vfjKUtTQ+Af5+4Xr+YU7ajrwf53Rxx22RRTccNV95mPL6Lj32D zzsinaEaycWSQ7Poxs2ui92wfaRfGW0PXe6wLAvZZb+IDKWepy50Nw8orD9On+zL 0W/MuHfTMOlx0OgPEYviHgiCNSlCt4WeSnWqCHnk2UT94/QmHYNPLggWmm0Yy8Ss bfm2h3S7N8aPzzDSUfw/bcootwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfmMAJz +ynjEc/kYZZb9hcdFYaMMB8GA1UdIwQYMBaAFAOM8uKAd98sraRXVvtdmabiQP0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkNFQy9COEIwQzc4ODFE QTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5eXRwRmRXLTEyWnB1SkFf UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0enk0b0IzM3l5dHBGZFctMTJacHVKQV9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkNFQy9COEIwQzc4ODFEQTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5 eXRwRmRXLTEyWnB1SkFfUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJSWRu0NXhRSkWLkon1kmstw9ezwhcKK6o7LZQCFSuXwJlDJSbL17g Fv6X4LetLgtVk/xntMOf729tcu0uq/+fMXChgrKGyI7Z/0dehL5bST+drzqmgoi2 x8YsgdM4vDkN/MVDrAdq55MkY2Tdee/x+i2SwsTSD0gjy9f1m22lWYRhN5JMGNkt 07TP3gIBougPQUrmIE7VL9Zu5mf2iWioU3FiJUW/ACxG1oWtykw2MK1qpCwkFAlL wAu2VeS41JkM7W0aO38ymZPjQjSb3cXZGTkzNa2FuZHzgTTqdttsX81rxa61+TQO kxkdAzCVYafb9f/udI/gWXk0uGf6yxBa -----END CERTIFICATE-----Generated at Sun Jan 25 10:53:59 2026 by rpki-client