This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft File: tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json) Hash identifier: 8NpD7PVSTtXJhS0oi9odpZJFiIfDe60jF8I8b3tIAHg= Subject key identifier: 24:E1:24:1B:D0:83:60:66:93:6B:B0:64:9D:6D:80:03:C0:EF:49:87 Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft Manifest number: 0201 Signing time: Fri 23 Jan 2026 01:49:41 +0000 Manifest this update: Fri 23 Jan 2026 01:49:41 +0000 Manifest next update: Fri 30 Jan 2026 01:49:41 +0000 Files and hashes: 1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: oZZu1oHj1IOBhv8pBRroJsxvNrochYnUhjvqcTUwFSU=) 2: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: YHLvsfLb9vn+sTC103ywcZHpPAhWQQaEGzE/L4SadW0=) 3: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: GzY2mja93XMB8v0gofsGbfBeQdmx/oTQdYYP656riXY=) 4: 2D450BA8B58211F094C92178C4F9AE02.roa (hash: iIj9yJVCt0RNLEHDnqyR+A4ssEqyV6ayKCnQGatPpAI=) 5: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: sKzlG98yhfvA0cZ5DMZFsMl5sTXVOn8rst+hGNnB2OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 01:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Validity Not Before: Jan 23 01:49:41 2026 GMT Not After : Jan 30 01:49:41 2026 GMT Subject: CN=6972d3b5-812b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:23:38:d4:47:d1:18:7d:11:72:ab:f1:f9:3b: b7:76:fd:77:67:6c:ed:24:ee:62:eb:cf:4e:1c:43: a8:03:bc:b3:63:76:c3:2d:7f:c9:7d:46:8c:5d:1e: 3c:96:37:e6:48:01:2a:0e:a8:3f:e8:9b:19:77:4e: 27:8b:f8:33:e7:6e:5c:c2:ee:ad:5b:09:03:c6:d1: b9:7e:72:42:61:ec:05:28:a1:b6:45:78:99:75:d1: 18:27:b7:3c:5e:3f:f5:0e:c7:c8:84:b0:05:eb:15: 8e:8a:31:90:00:81:05:22:87:2b:26:64:6a:e9:f9: 60:e4:4e:e3:da:94:34:9c:c8:8f:c2:61:6c:c6:bd: 0c:20:1a:11:7f:aa:9a:51:0e:b0:77:02:19:bd:8f: a6:06:50:db:06:7e:d2:db:f2:88:80:5b:f2:e2:68: 93:d3:48:c0:3d:3f:e5:f8:76:68:07:a9:66:d9:f0: b6:3d:e8:07:c9:70:2d:88:e6:9e:dd:4a:41:3a:1f: 17:7b:be:4b:39:56:1f:ce:89:93:2b:c4:51:3a:44: f5:12:52:af:52:34:0c:51:fb:21:dd:36:24:05:ac: 24:d8:c6:cc:23:ef:b8:88:81:31:23:3f:c0:1b:67: 93:1e:9c:03:88:d9:3d:0b:a9:e2:e3:2e:b5:97:ce: a3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E1:24:1B:D0:83:60:66:93:6B:B0:64:9D:6D:80:03:C0:EF:49:87 X509v3 Authority Key Identifier: keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:19:51:d4:65:cf:c2:7a:20:b1:f5:62:f6:08:af:e8:d5:27: 87:72:54:b8:28:cb:aa:41:63:6c:07:bf:37:11:2c:78:d1:41: 07:71:13:5a:88:0a:f7:ed:21:26:8b:d1:38:57:23:10:03:fd: 0c:7c:2a:84:d7:56:d8:ae:40:53:8c:3e:c1:17:14:aa:e7:7d: 0f:ad:a7:46:ef:12:5e:77:3e:0e:54:bf:8b:b3:a6:42:64:5f: a2:c0:69:7c:41:da:8a:14:db:6b:fc:e9:21:51:42:1c:02:f9: 10:c7:c4:fa:ae:6c:e6:63:25:26:33:21:b5:1f:9d:c1:06:a9: 5f:07:12:7c:e4:66:b3:e2:c1:37:66:53:57:2a:3e:53:47:4b: ef:8a:93:17:7f:ae:f7:b2:05:71:ef:28:a3:9c:8a:5a:9e:da: b5:e7:40:f5:6f:29:39:69:89:0d:98:83:01:fa:32:a1:c3:98: c7:55:27:88:47:76:f0:20:1c:e9:42:4c:80:59:07:a8:1a:a0: 39:5e:5b:e4:43:ec:a7:b6:ce:c0:19:ee:10:9d:53:e4:0b:86: 26:b8:28:8d:dd:49:1e:b6:0d:f1:27:36:01:f1:fc:19:ee:8b: af:5b:4e:6b:d5:72:3c:6a:64:f1:59:ca:2a:5c:1c:1b:15:8b: 7f:76:e0:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5 NTY1Qzk0RDgwHhcNMjYwMTIzMDE0OTQxWhcNMjYwMTMwMDE0OTQxWjAYMRYwFAYD VQQDDA02OTcyZDNiNS04MTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSM41EfRGH0Rcqvx+Tu3dv13Z2ztJO5i689OHEOoA7yzY3bDLX/JfUaMXR48 ljfmSAEqDqg/6JsZd04ni/gz525cwu6tWwkDxtG5fnJCYewFKKG2RXiZddEYJ7c8 Xj/1DsfIhLAF6xWOijGQAIEFIocrJmRq6flg5E7j2pQ0nMiPwmFsxr0MIBoRf6qa UQ6wdwIZvY+mBlDbBn7S2/KIgFvy4miT00jAPT/l+HZoB6lm2fC2PegHyXAtiOae 3UpBOh8Xe75LOVYfzomTK8RROkT1ElKvUjQMUfsh3TYkBawk2MbMI++4iIExIz/A G2eTHpwDiNk9C6ni4y61l86j4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCThJBvQ g2Bmk2uwZJ1tgAPA70mHMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0RC81N0MzN0UzODBBNTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0 Z3pVNFFnTGItN09WWmNsTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9GVHUZc/CeiCx9WL2CK/o1SeHclS4KMuqQWNsB783ESx40UEHcRNa iAr37SEmi9E4VyMQA/0MfCqE11bYrkBTjD7BFxSq530PradG7xJedz4OVL+Ls6ZC ZF+iwGl8QdqKFNtr/OkhUUIcAvkQx8T6rmzmYyUmMyG1H53BBqlfBxJ85Gaz4sE3 ZlNXKj5TR0vvipMXf673sgVx7yijnIpantq150D1byk5aYkNmIMB+jKhw5jHVSeI R3bwIBzpQkyAWQeoGqA5XlvkQ+ynts7AGe4QnVPkC4YmuCiN3Uketg3xJzYB8fwZ 7ouvW05r1XI8amTxWcoqXBwbFYt/duDk -----END CERTIFICATE-----Generated at Sun Jan 25 02:57:28 2026 by rpki-client