This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft File: iJMypOJcIeib-kP6AC0tHwrX55c.mft (raw, json) Hash identifier: meC2oEX0hmr2nVqdlvS/udoTWEC6gA8S+ij8GTq2XYI= Subject key identifier: EE:CD:E1:CD:BA:91:C8:DD:ED:9E:DF:47:DB:6C:88:80:25:9C:87:61 Authority key identifier: 88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 Certificate issuer: /CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Certificate serial: 0CF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft Manifest number: 0CE3 Signing time: Sat 24 Jan 2026 17:48:29 +0000 Manifest this update: Sat 24 Jan 2026 17:48:28 +0000 Manifest next update: Sat 31 Jan 2026 17:48:28 +0000 Files and hashes: 1: iJMypOJcIeib-kP6AC0tHwrX55c.crl (hash: 1B1IxrMfmfyKmShdtdsBN5EYfiZFHgBhUwxVwxgIU6M=) 2: AFA9D654D9F711EEA1409D5DC4F9AE02.roa (hash: O6ZOPVwxFkNjeJWmRWdaGnVAImdC2WliszZw8u4xZjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3315 (0xcf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCF8, serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Validity Not Before: Jan 24 17:48:28 2026 GMT Not After : Jan 31 17:48:28 2026 GMT Subject: CN=697505ec-3636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:25:91:54:34:60:ba:5e:e9:93:6f:66:d4:bb: 60:06:c7:b4:c2:72:c3:ab:dd:76:0e:e7:18:59:07: 71:71:63:cf:98:63:7e:5c:17:62:a9:a3:16:78:74: 4a:b1:31:b5:e4:83:2f:49:3c:68:8b:ca:5e:84:39: 30:72:f0:51:16:a9:49:2d:c6:77:b0:99:a4:c1:9a: e8:86:10:9f:28:89:09:76:0f:4c:7e:6b:c6:83:ea: ae:10:8d:45:c8:93:c4:cd:07:79:cc:e3:a8:40:c6: 8b:48:09:c0:46:b3:cd:22:38:07:ae:56:c5:95:b5: 78:1c:39:8c:e7:3c:3c:0b:a1:ad:05:eb:62:bd:0c: 05:72:c6:20:a6:92:47:d5:0a:dc:4f:ff:20:77:4e: b4:3c:74:e5:d8:48:e1:1b:7a:23:b2:55:35:97:85: c6:b3:27:21:5d:40:e8:0e:c3:bb:0b:13:80:fb:db: a8:a4:0b:4a:86:d2:81:d2:fc:c1:af:d2:99:ed:8c: a1:04:87:ba:21:2e:20:9d:08:13:d6:1b:00:61:3e: b7:b7:e7:0e:c1:c4:ff:a0:80:56:e4:37:00:f4:63: 7d:b9:2b:69:99:82:3f:58:34:83:fe:01:7d:fd:b1: 77:d3:7b:84:11:47:db:59:df:a3:84:90:87:60:61: a6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CD:E1:CD:BA:91:C8:DD:ED:9E:DF:47:DB:6C:88:80:25:9C:87:61 X509v3 Authority Key Identifier: keyid:88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:dd:8f:87:36:45:b4:e0:f9:84:a8:bd:c3:17:eb:66:b0:ab: 4e:42:7c:7e:79:5f:37:52:6c:cd:eb:1d:a3:c7:c3:d5:ec:ea: 23:e1:2a:66:59:cb:85:5a:c6:a4:97:21:ec:2c:ca:b7:e2:db: 29:92:ce:a9:69:e4:09:48:c7:a3:ea:87:a5:0c:52:f1:24:bd: 3b:5a:df:05:5a:8b:38:c2:92:d7:0d:aa:84:2d:80:85:25:86: 1a:7a:87:5e:b2:5b:e5:90:d4:55:7b:48:d9:2b:8f:8c:65:e0: db:71:64:a5:c8:1b:f7:99:15:6a:80:ec:4d:5f:33:86:cd:b1: 29:1f:75:aa:53:a6:5e:a6:aa:cd:01:59:93:c8:16:4d:52:1d: 99:62:2a:34:d0:79:ef:c9:a0:7c:97:00:79:dd:5e:9c:bd:e4: 7b:e9:f2:aa:14:10:32:36:f3:b9:83:83:a5:1d:aa:cf:42:c9: 73:41:b3:c7:ef:4f:8f:76:42:93:84:42:60:50:6d:9c:6b:3c: e3:22:64:39:b1:a9:a6:39:42:3d:6d:53:9e:8b:89:c3:b4:37: 1b:47:43:7c:eb:32:af:d0:12:36:0f:ad:37:fe:99:70:04:20: c6:37:93:91:f8:15:28:11:3c:c5:fa:d9:75:fe:17:5f:12:18: 94:2a:48:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDRjgxMTAvBgNVBAUTKDg4OTMzMkE0RTI1QzIxRTg5QkZBNDNGQTAwMkQyRDFG MEFEN0U3OTcwHhcNMjYwMTI0MTc0ODI4WhcNMjYwMTMxMTc0ODI4WjAYMRYwFAYD VQQDDA02OTc1MDVlYy0zNjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniWRVDRgul7pk29m1LtgBse0wnLDq912DucYWQdxcWPPmGN+XBdiqaMWeHRK sTG15IMvSTxoi8pehDkwcvBRFqlJLcZ3sJmkwZrohhCfKIkJdg9MfmvGg+quEI1F yJPEzQd5zOOoQMaLSAnARrPNIjgHrlbFlbV4HDmM5zw8C6GtBetivQwFcsYgppJH 1QrcT/8gd060PHTl2EjhG3ojslU1l4XGsychXUDoDsO7CxOA+9uopAtKhtKB0vzB r9KZ7YyhBIe6IS4gnQgT1hsAYT63t+cOwcT/oIBW5DcA9GN9uStpmYI/WDSD/gF9 /bF303uEEUfbWd+jhJCHYGGmwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7N4c26 kcjd7Z7fR9tsiIAlnIdhMB8GA1UdIwQYMBaAFIiTMqTiXCHom/pD+gAtLR8K1+eX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNGOC9CNzA3OEY4MDAw NTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0llaWIta1A2QUMwdEh3clg1 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKTXlwT0pjSWVpYi1rUDZBQzB0SHdyWDU1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNGOC9CNzA3OEY4MDAwNTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0ll aWIta1A2QUMwdEh3clg1NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+3Y+HNkW04PmEqL3DF+tmsKtOQnx+eV83UmzN6x2jx8PV7Ooj4Spm WcuFWsaklyHsLMq34tspks6paeQJSMej6oelDFLxJL07Wt8FWos4wpLXDaqELYCF JYYaeodeslvlkNRVe0jZK4+MZeDbcWSlyBv3mRVqgOxNXzOGzbEpH3WqU6ZepqrN AVmTyBZNUh2ZYio00HnvyaB8lwB53V6cveR76fKqFBAyNvO5g4OlHarPQslzQbPH 70+PdkKThEJgUG2cazzjImQ5sammOUI9bVOei4nDtDcbR0N86zKv0BI2D603/plw BCDGN5OR+BUoETzF+tl1/hdfEhiUKkgR -----END CERTIFICATE-----Generated at Sun Jan 25 09:44:24 2026 by rpki-client