This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft File: 03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json) Hash identifier: S/dhDjLA/tG5krHXMZjcxZQqHq0Yn6yVEW7LYWXwmsM= Subject key identifier: 67:65:7F:5A:00:9B:0B:FA:76:65:D0:45:A6:15:0D:00:7E:B6:18:F9 Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Certificate serial: 07CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft Manifest number: 0762 Signing time: Sat 24 Jan 2026 21:05:32 +0000 Manifest this update: Sat 24 Jan 2026 21:05:32 +0000 Manifest next update: Sat 31 Jan 2026 21:05:32 +0000 Files and hashes: 1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: w9hnh35H4V3jgRoAGmzAQ7EgkTiNgGjQaS1DHg0kpFY=) 2: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: QXMJ/jQUAiv47lj1Bpig1n8sU68IQku+vQs4DkbFezU=) 3: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: 16YSTY2fnFs4eLLfhffiWxoVMVf5CI9XbA8xhp2Kh5I=) 4: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: nwY3XOAdSWHWQClj8gA6vZzRQBvYNcJIrQ5O7yr8CLI=) 5: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: 8R/rZ/mbFR6fAD2MephrS/g3rxSP0cp2rY+Gklzx/Zc=) 6: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: UrcHb9Zyjjqupasl1c8DJT8gL2zSGyTRtXJj/YwkNr0=) 7: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: GcUaymkPtkuB9knKnQU1h04sFVKLXXAddmnuYc97Q5c=) 8: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: uYKsV4sv50u9alr+4EgeUv5NJJKiEhEbHCBbGXsadQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1998 (0x7ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Validity Not Before: Jan 24 21:05:32 2026 GMT Not After : Jan 31 21:05:32 2026 GMT Subject: CN=6975341c-8bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:82:89:a4:e4:6c:c3:25:2a:f9:51:d3:50: 74:54:44:4d:a9:e8:83:f9:53:7a:b7:1a:ec:79:9a: 56:8e:20:c7:00:5e:26:fa:30:52:54:a6:e2:f9:a3: 73:26:e5:48:3e:c7:11:aa:0b:ea:ff:66:58:8b:ab: 4b:f7:dd:32:90:73:28:2a:90:32:61:cd:4e:12:6c: c2:04:df:10:b3:3e:0b:7b:1f:2a:cd:0d:af:ea:06: 0a:78:5f:50:66:18:1e:a2:d1:b8:b5:cd:51:c2:cb: 0c:33:49:16:c4:01:d7:27:ec:e0:6e:83:b1:97:c3: 1f:54:80:b4:ab:74:59:02:30:4f:39:0a:d6:fa:2d: 39:82:5c:a9:c8:56:c5:b3:27:ab:cd:35:3e:b4:b3: 61:bf:e2:31:cf:45:0a:c6:7c:01:ab:62:65:1f:86: cb:81:57:73:8e:b9:58:c4:cf:37:47:23:2b:15:d3: 67:59:69:e5:00:7e:ac:3b:42:56:ee:c1:ce:9f:e3: 52:58:4d:e6:59:57:7d:9d:54:23:ba:0b:70:32:5e: 68:ff:ea:08:1e:56:fa:50:8d:db:2c:28:aa:38:e7: ce:2f:1d:88:09:b4:5a:c7:c2:60:e6:1c:c7:e1:4d: fe:9d:d8:bc:43:d5:10:3a:a9:4b:7d:ad:96:f7:f5: 46:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:65:7F:5A:00:9B:0B:FA:76:65:D0:45:A6:15:0D:00:7E:B6:18:F9 X509v3 Authority Key Identifier: keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:5d:dc:c5:ae:90:ef:e7:37:9a:2e:84:c5:e3:c6:1f:92:0d: 70:1f:51:f4:58:47:f2:b0:70:db:6a:76:50:93:18:45:cd:c8: 9b:fa:82:d6:71:65:f1:27:0c:58:81:bd:37:4b:d6:d8:ce:98: 70:27:c1:f2:f9:d9:84:b2:94:7f:d1:fd:4d:cf:c2:9e:f2:cc: be:80:c6:f0:8b:c7:84:d5:82:e2:7d:f5:9b:67:7b:89:b3:78: e0:dc:c4:b6:48:ac:86:d3:ca:7c:94:8f:c7:a5:43:85:f3:82: 17:80:64:10:b5:9a:12:ab:79:d2:3e:39:d5:24:f1:2e:db:d9: 36:c4:cd:1f:d6:83:58:5f:62:1a:01:47:11:76:5a:ce:d5:18: f9:59:60:b9:4a:5d:ef:7d:5f:63:4e:c0:0d:f5:bd:cf:03:1e: 86:4c:3a:08:6f:72:f8:74:74:0a:2c:7d:52:e3:57:43:f6:64: 8e:fe:5b:10:d6:ef:b3:73:40:1c:5c:f1:68:d9:c6:5b:f1:cd: 46:79:43:ec:67:72:f5:ad:b2:1a:dd:f8:dd:ab:de:8f:ec:9c: 38:85:2f:49:0a:d8:fd:b0:62:d1:02:c9:54:13:68:53:f7:5c: 9d:3e:47:f1:8b:21:bd:24:6d:33:c2:25:de:d3:44:aa:54:9a: 0a:e4:11:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGMUYxMTAvBgNVBAUTKEQzNzE3OUNCQjk3RDY4MEU2QTgwREMxMkVFNDIyRkU4 QjZFMzYzRjUwHhcNMjYwMTI0MjEwNTMyWhcNMjYwMTMxMjEwNTMyWjAYMRYwFAYD VQQDDA02OTc1MzQxYy04YmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArz6CiaTkbMMlKvlR01B0VERNqeiD+VN6txrseZpWjiDHAF4m+jBSVKbi+aNz JuVIPscRqgvq/2ZYi6tL990ykHMoKpAyYc1OEmzCBN8Qsz4Lex8qzQ2v6gYKeF9Q ZhgeotG4tc1RwssMM0kWxAHXJ+zgboOxl8MfVIC0q3RZAjBPOQrW+i05glypyFbF syerzTU+tLNhv+Ixz0UKxnwBq2JlH4bLgVdzjrlYxM83RyMrFdNnWWnlAH6sO0JW 7sHOn+NSWE3mWVd9nVQjugtwMl5o/+oIHlb6UI3bLCiqOOfOLx2ICbRax8Jg5hzH 4U3+ndi8Q9UQOqlLfa2W9/VGuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdlf1oA mwv6dmXQRaYVDQB+thj5MB8GA1UdIwQYMBaAFNNxecu5fWgOaoDcEu5CL+i242P1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREYxRi9GNUNCNkU2QTVD NTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFBNXFnTndTN2tJdjZMYmpZ X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzRjV5N2w5YUE1cWdOd1M3a0l2NkxiallfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REYxRi9GNUNCNkU2QTVDNTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFB NXFnTndTN2tJdjZMYmpZX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTXdzFrpDv5zeaLoTF48Yfkg1wH1H0WEfysHDbanZQkxhFzcib+oLW cWXxJwxYgb03S9bYzphwJ8Hy+dmEspR/0f1Nz8Ke8sy+gMbwi8eE1YLiffWbZ3uJ s3jg3MS2SKyG08p8lI/HpUOF84IXgGQQtZoSq3nSPjnVJPEu29k2xM0f1oNYX2Ia AUcRdlrO1Rj5WWC5Sl3vfV9jTsAN9b3PAx6GTDoIb3L4dHQKLH1S41dD9mSO/lsQ 1u+zc0AcXPFo2cZb8c1GeUPsZ3L1rbIa3fjdq96P7Jw4hS9JCtj9sGLRAslUE2hT 91ydPkfxiyG9JG0zwiXe00SqVJoK5BEG -----END CERTIFICATE-----Generated at Sun Jan 25 14:48:18 2026 by rpki-client