This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft File: hEIqhfpOTNTW7plGMaPQ8OboLTo.mft (raw, json) Hash identifier: bSHkIzfbwYEDcmWSD5QcnNHFBbzthzdN/bfA8jQWfz0= Subject key identifier: 2E:40:FE:20:49:3F:36:AE:23:21:78:4A:24:16:D4:2B:F5:68:31:EF Authority key identifier: 84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A Certificate issuer: /CN=A911C61C/serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A Certificate serial: 03D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft Manifest number: 03D2 Signing time: Sat 24 Jan 2026 23:46:42 +0000 Manifest this update: Sat 24 Jan 2026 23:46:41 +0000 Manifest next update: Sat 31 Jan 2026 23:46:41 +0000 Files and hashes: 1: hEIqhfpOTNTW7plGMaPQ8OboLTo.crl (hash: wdTIuJwbwwzwM1yhQx37I4ukNjMLl2SymYmC3irCdyI=) 2: 214E0454B58A11ECAF32FE29C4F9AE02.roa (hash: m/bIsnc72f+GKlsPAyrWqEs82wNRpWBNpwKZDStdnM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 983 (0x3d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C61C, serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A Validity Not Before: Jan 24 23:46:41 2026 GMT Not After : Jan 31 23:46:41 2026 GMT Subject: CN=697559e2-e811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:9a:c5:59:ae:dd:3b:6a:55:2f:87:ac:a4: e8:fd:2c:32:83:be:e9:88:d2:13:17:84:5d:73:28: a9:3b:b7:fa:73:33:c5:fe:ae:3e:39:0a:2c:48:c5: 80:68:94:ec:4c:9c:03:a7:59:ec:0c:bb:4c:5a:6b: 87:e3:6b:8f:00:fd:77:82:9c:7e:21:e9:cd:9c:f3: f6:3b:85:c9:8a:c0:3e:49:28:60:df:d6:3b:50:10: 98:f8:2b:2c:8c:fa:dd:5d:56:07:75:f2:95:7c:39: 7c:08:d8:91:ba:e5:94:1c:ab:c6:7d:f3:f0:8e:98: 5b:e3:38:14:3d:cf:b4:c1:a2:d2:3a:cd:71:2a:21: cf:de:08:66:a9:4e:0d:5a:77:61:18:11:07:6d:49: d1:43:78:0b:76:8c:20:a3:21:fd:15:f6:2c:e3:95: 93:67:5a:f5:34:52:61:3c:8f:96:fb:d9:71:bf:0e: 96:0e:80:92:1a:6e:93:ad:23:a3:13:17:46:62:a6: 9d:3c:e9:d8:07:47:f2:fa:9a:52:51:9f:e5:58:ab: e1:f7:f3:b0:ee:31:1c:ac:cd:f7:59:7c:fe:ee:4a: 9e:a6:c0:26:43:a6:84:ca:27:c4:45:b9:35:8d:ec: 11:e1:bf:da:43:e3:da:aa:e7:db:4f:cd:53:dc:38: 13:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:40:FE:20:49:3F:36:AE:23:21:78:4A:24:16:D4:2B:F5:68:31:EF X509v3 Authority Key Identifier: keyid:84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:90:be:bb:11:45:5d:62:69:e7:a5:f1:b7:1a:80:c8:ca:4f: e8:0e:58:81:13:cd:ee:8e:33:b7:e7:79:8a:ee:e0:45:32:08: 9f:86:b0:b8:99:1e:4c:91:e1:eb:f9:67:57:1e:27:5f:a6:49: ad:76:c3:a0:04:5e:22:fa:b0:ae:64:4e:50:24:79:9e:24:45: ab:6f:ce:1c:b6:eb:7d:e1:1d:ea:69:1e:27:4a:f0:04:79:ec: 00:e1:ae:03:18:ab:02:de:22:6f:fd:e7:d7:ca:fc:c3:fd:13: 87:59:82:4a:8d:de:e5:8f:5f:c8:cb:83:21:f1:58:43:9d:1d: 0f:89:04:ab:a5:dc:14:4a:79:e1:cf:54:af:51:c2:47:66:23: c0:df:15:ee:e3:7e:d3:32:52:ab:6e:a9:a1:cc:b8:18:42:25: 99:73:21:90:1b:a8:7f:1d:c1:6e:56:2f:eb:09:7b:6e:14:47: 97:e8:fc:da:f2:3e:f5:1e:ab:48:8e:61:5b:7a:52:f7:18:cc: bc:e2:65:9a:9c:52:77:aa:f3:97:de:5d:3f:0d:06:ab:6e:91: da:86:d6:e5:2c:d8:52:76:44:3f:1a:6c:c8:66:20:20:73:c5: e6:38:0d:89:46:7f:ac:16:d1:7a:e3:94:6b:07:a5:65:6c:56: 83:10:26:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MUMxMTAvBgNVBAUTKDg0NDIyQTg1RkE0RTRDRDRENkVFOTk0NjMxQTNEMEYw RTZFODJEM0EwHhcNMjYwMTI0MjM0NjQxWhcNMjYwMTMxMjM0NjQxWjAYMRYwFAYD VQQDDA02OTc1NTllMi1lODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYOaxVmu3TtqVS+HrKTo/Swyg77piNITF4RdcyipO7f6czPF/q4+OQosSMWA aJTsTJwDp1nsDLtMWmuH42uPAP13gpx+IenNnPP2O4XJisA+SShg39Y7UBCY+Css jPrdXVYHdfKVfDl8CNiRuuWUHKvGffPwjphb4zgUPc+0waLSOs1xKiHP3ghmqU4N WndhGBEHbUnRQ3gLdowgoyH9FfYs45WTZ1r1NFJhPI+W+9lxvw6WDoCSGm6TrSOj ExdGYqadPOnYB0fy+ppSUZ/lWKvh9/Ow7jEcrM33WXz+7kqepsAmQ6aEyifERbk1 jewR4b/aQ+PaqufbT81T3DgTYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5A/iBJ PzauIyF4SiQW1Cv1aDHvMB8GA1UdIwQYMBaAFIRCKoX6TkzU1u6ZRjGj0PDm6C06 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYxQy8yQTcwOTBGQUI1 ODYxMUVDQUU4MUVEMjJDNEY5QUUwMi9oRUlxaGZwT1ROVFc3cGxHTWFQUThPYm9M VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFSXFoZnBPVE5UVzdwbEdNYVBROE9ib0xUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYxQy8yQTcwOTBGQUI1ODYxMUVDQUU4MUVEMjJDNEY5QUUwMi9oRUlxaGZwT1RO VFc3cGxHTWFQUThPYm9MVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6kL67EUVdYmnnpfG3GoDIyk/oDliBE83ujjO353mK7uBFMgifhrC4 mR5MkeHr+WdXHidfpkmtdsOgBF4i+rCuZE5QJHmeJEWrb84ctut94R3qaR4nSvAE eewA4a4DGKsC3iJv/efXyvzD/ROHWYJKjd7lj1/Iy4Mh8VhDnR0PiQSrpdwUSnnh z1SvUcJHZiPA3xXu437TMlKrbqmhzLgYQiWZcyGQG6h/HcFuVi/rCXtuFEeX6Pza 8j71HqtIjmFbelL3GMy84mWanFJ3qvOX3l0/DQarbpHahtblLNhSdkQ/GmzIZiAg c8XmOA2JRn+sFtF645RrB6VlbFaDECZK -----END CERTIFICATE-----Generated at Sun Jan 25 07:50:49 2026 by rpki-client