This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft File: k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft (raw, json) Hash identifier: jnAAGFkfq6Hh1dXkXyMKx3NWVvNcIGRfNHmWpacxYto= Subject key identifier: BE:42:00:42:C7:93:86:12:7B:94:51:66:4C:E0:3B:B7:DB:2D:9B:B1 Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft Manifest number: 01CD Signing time: Sun 25 Jan 2026 02:21:06 +0000 Manifest this update: Sun 25 Jan 2026 02:21:06 +0000 Manifest next update: Sun 01 Feb 2026 02:21:06 +0000 Files and hashes: 1: k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl (hash: JmFXCNeOBrpSjD2SlEEwT6D/v7Iu/4N1SsHs4Valvk4=) 2: 1E121F0E4E3111EFB88CF076C4F9AE02.roa (hash: Bn478uLMn4OakQqoDBH/lvI3JDH9R/ce+WPtlw3F7PM=) 3: 9AE3D69A31ED11EFA537871BC4F9AE02.roa (hash: kUXkV/NQKfLoHdA/qdA5T0SS9tU4x4Ty5BWOmAQ680w=) 4: 9442231871C311EEB4110C83C4F9AE02.roa (hash: I72Z1nd1GmnAZEnwp1LzVMVnE9PXjIpQpMnCm3khtZM=) 5: E0FF171A440411EF85685B0DC4F9AE02.roa (hash: KrnQqDXD/GjL/9lZ4fC1ZX3TT1+IBpldk3tM8hf1uJU=) 6: F5E4AAFA2A2711F0A842B012C4F9AE02.roa (hash: TSmTCNrkei7m3TxkX8bukuyuYPbILQnCUPvPyNjgM5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Validity Not Before: Jan 25 02:21:06 2026 GMT Not After : Feb 1 02:21:06 2026 GMT Subject: CN=69757e12-1a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:48:f4:dd:7b:5a:72:2e:a4:97:f8:64:04: be:22:9d:eb:d5:98:9c:0c:53:3b:08:97:92:47:f5: 44:23:05:32:39:e5:df:1a:12:da:c2:69:ad:ef:0e: 1f:ce:41:25:c8:5e:09:e0:76:00:2c:6c:90:ed:43: 4d:5d:fc:d1:0e:52:27:78:9a:23:51:5b:9d:1f:fe: 7f:e4:94:54:30:d8:92:1a:bc:bb:24:20:cb:4c:89: 20:0b:e6:59:13:4e:18:43:23:b7:c5:14:0b:a5:2e: 3b:22:d7:6b:3d:7b:d1:5f:62:9c:d5:98:a2:4e:00: 99:b0:d4:f0:d6:eb:f7:0f:a8:2a:18:5f:02:bb:2b: 9a:0a:7d:bf:48:0f:4f:bc:8f:fa:91:26:02:92:d2: 63:fb:1a:a0:8b:60:64:77:6f:58:27:ed:17:c2:da: 3c:df:86:85:db:eb:a6:14:d7:0f:32:41:54:b5:b7: d3:0c:fd:d8:27:30:b0:9a:71:22:2a:3a:18:d0:ae: 33:dc:65:f4:61:5b:23:5b:50:6f:13:33:b1:74:b5: 0f:cb:ac:c8:b3:05:7b:31:ad:f3:34:8d:86:51:7c: 63:9e:2d:2e:fe:0e:ed:45:5a:d1:3e:00:21:e3:a7: 8a:26:0b:2d:dc:4f:34:ca:86:11:32:da:88:38:70: 4b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:42:00:42:C7:93:86:12:7B:94:51:66:4C:E0:3B:B7:DB:2D:9B:B1 X509v3 Authority Key Identifier: keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c7:27:26:ea:42:14:4b:24:fd:4f:0e:44:b2:4f:f5:be:9d: 83:8c:d9:b0:8e:3c:77:2d:9f:1a:24:0b:a2:5e:f9:58:d0:5b: c3:a7:48:27:99:8f:23:9d:d4:a4:64:d6:e1:53:34:95:0a:7c: bd:b8:2a:77:a8:03:17:75:99:b4:e8:4b:5c:ce:9c:98:92:b5: 41:bb:4f:26:f2:45:fd:1e:c7:e2:2b:2d:4c:2f:61:25:02:52: 3f:00:c1:4c:f1:3f:2a:26:73:fc:04:8d:ef:7f:be:6b:1e:e4: db:57:0d:ae:c9:97:7c:53:83:c1:25:ef:5b:c8:ab:87:9d:29: 6c:1b:1a:b3:0d:26:c5:35:3b:e9:3b:43:62:78:2f:18:2d:7c: 0f:8a:36:15:7c:f9:98:db:99:12:95:15:62:a7:b0:16:a5:2a: a6:54:d2:86:f2:cd:37:fd:79:af:fe:7e:c2:54:3f:cb:40:59: 50:11:d0:50:b0:83:cb:a1:be:fd:68:1e:4a:92:be:12:1f:3e: cc:53:14:16:62:3e:f5:3c:9b:41:53:17:49:d8:3b:f0:50:ee: 77:03:90:04:4a:47:8e:d5:21:c6:ed:91:1c:9f:77:2b:61:07: 55:9e:45:0c:78:43:ab:13:49:fe:d0:58:95:4c:cd:36:75:a0: 13:67:54:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKDkzODc5QjAwRTRCN0ZCQzAxMjYwNzA3Qjc2RDVEMTIw RjQ1QjUzNUIwHhcNMjYwMTI1MDIyMTA2WhcNMjYwMjAxMDIyMTA2WjAYMRYwFAYD VQQDDA02OTc1N2UxMi0xYTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHBI9N17WnIupJf4ZAS+Ip3r1ZicDFM7CJeSR/VEIwUyOeXfGhLawmmt7w4f zkElyF4J4HYALGyQ7UNNXfzRDlIneJojUVudH/5/5JRUMNiSGry7JCDLTIkgC+ZZ E04YQyO3xRQLpS47ItdrPXvRX2Kc1ZiiTgCZsNTw1uv3D6gqGF8CuyuaCn2/SA9P vI/6kSYCktJj+xqgi2Bkd29YJ+0Xwto834aF2+umFNcPMkFUtbfTDP3YJzCwmnEi KjoY0K4z3GX0YVsjW1BvEzOxdLUPy6zIswV7Ma3zNI2GUXxjni0u/g7tRVrRPgAh 46eKJgst3E80yoYRMtqIOHBLSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5CAELH k4YSe5RRZkzgO7fbLZuxMB8GA1UdIwQYMBaAFJOHmwDkt/vAEmBwe3bV0SD0W1Nb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8yODIzMTVEMDUy MDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04QVNZSEI3ZHRYUklQUmJV MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s0ZWJBT1MzLThBU1lIQjdkdFhSSVBSYlUxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Njc4Qy8yODIzMTVEMDUyMDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04 QVNZSEI3ZHRYUklQUmJVMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXxycm6kIUSyT9Tw5Esk/1vp2DjNmwjjx3LZ8aJAuiXvlY0FvDp0gn mY8jndSkZNbhUzSVCny9uCp3qAMXdZm06EtczpyYkrVBu08m8kX9HsfiKy1ML2El AlI/AMFM8T8qJnP8BI3vf75rHuTbVw2uyZd8U4PBJe9byKuHnSlsGxqzDSbFNTvp O0NieC8YLXwPijYVfPmY25kSlRVip7AWpSqmVNKG8s03/Xmv/n7CVD/LQFlQEdBQ sIPLob79aB5Kkr4SHz7MUxQWYj71PJtBUxdJ2DvwUO53A5AESkeO1SHG7ZEcn3cr YQdVnkUMeEOrE0n+0FiVTM02daATZ1RA -----END CERTIFICATE-----Generated at Sun Jan 25 15:22:07 2026 by rpki-client