This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft File: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft (raw, json) Hash identifier: QdebOv8QcebszRCaZfFK+8WIr4VgvlTpxOUFPEJHc50= Subject key identifier: 21:A9:FF:FD:E6:E9:02:F9:8B:22:FB:79:65:60:84:28:DD:C1:D0:BD Authority key identifier: 4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 Certificate issuer: /CN=A912016A/serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Certificate serial: 2220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft Manifest number: 2201 Signing time: Sat 24 Jan 2026 15:43:14 +0000 Manifest this update: Sat 24 Jan 2026 15:43:14 +0000 Manifest next update: Sat 31 Jan 2026 15:43:14 +0000 Files and hashes: 1: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl (hash: eIfytmOEA1zKZQVGFTjJMTioCQCN5HiO7VMpc7BIhas=) 2: 05106CB4AFB011EA8972F65BC4F9AE02.roa (hash: 92gAmRF+UjT7qi3HgspO5M3xKNUrfaTQm2Z8Zii+ZFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8736 (0x2220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912016A, serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Validity Not Before: Jan 24 15:43:14 2026 GMT Not After : Jan 31 15:43:14 2026 GMT Subject: CN=6974e892-a76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:9d:36:c8:a6:56:99:76:26:bf:46:b0:57: 65:21:f6:f9:94:a6:8f:2c:8b:b0:c0:fd:e7:f0:71: 9e:e7:38:49:cd:6e:b8:69:71:e8:b3:45:d6:93:57: 29:48:5a:bd:e9:3a:8c:fb:4a:14:9a:38:28:22:ce: 05:95:91:8e:cf:87:6b:9a:c9:5c:0d:9b:82:55:7d: e3:fe:76:f4:c2:81:00:30:38:d0:83:41:10:25:9f: 19:76:ea:8c:93:fc:de:9a:e7:9d:6d:6e:82:10:bf: f2:ca:54:6d:e5:67:f9:12:9e:0e:3f:6d:5b:68:8a: e1:ce:2b:d6:a4:4e:ef:97:a9:94:dd:99:83:89:ed: 6b:0a:4f:cd:55:5e:42:e1:00:ea:63:a3:de:18:c0: f6:e1:2f:fe:9f:7e:c9:4b:10:ba:f2:b6:36:25:ba: d6:30:5b:a5:b5:81:40:c1:52:ee:43:75:bc:df:90: 52:f3:17:e8:33:f7:65:97:5e:c4:39:00:6a:01:13: f4:a2:03:c3:8a:41:91:7a:5a:17:fc:63:49:09:d6: 5a:73:ec:0a:dc:4c:3f:6e:01:d1:66:42:e7:aa:38: d4:4a:ce:9f:dc:f2:f2:64:bb:c0:b1:85:f7:8b:b2: 35:2c:9b:df:30:21:52:79:be:37:8f:8c:00:ed:13: 96:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A9:FF:FD:E6:E9:02:F9:8B:22:FB:79:65:60:84:28:DD:C1:D0:BD X509v3 Authority Key Identifier: keyid:4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:08:a6:71:76:5b:44:25:7d:0a:68:3c:f8:a9:f0:e1:8b:1a: 94:48:d1:ab:cf:cc:36:d7:5c:1b:b5:ba:9f:f6:cb:b4:19:24: bd:0a:47:f1:6f:3c:bd:e0:bc:05:b8:39:c9:3f:c5:bf:d2:8e: 99:7a:05:2e:1c:58:78:0b:67:da:33:c6:96:01:ac:89:eb:98: 0f:34:05:fb:1f:72:ec:34:28:0a:7d:1d:cb:ae:6e:19:fb:0a: 04:4a:5a:99:9e:94:b3:e2:cf:24:c9:34:60:d4:22:19:75:31: c8:58:36:fe:92:97:ba:ea:0f:45:ec:65:54:f6:68:be:9d:3f: e9:b5:b6:8a:a2:b5:67:25:85:03:46:ec:63:5d:71:91:80:be: 55:90:f2:3b:e7:2d:a9:e1:e9:f2:22:6e:fc:32:42:c9:20:82: 82:6b:ba:8e:30:3b:d9:08:51:2b:07:40:db:a6:cb:96:49:7f: 27:1f:74:f8:2f:31:cc:a9:6f:aa:fa:d7:8a:49:63:58:0a:86: de:d4:24:e2:41:13:ad:a3:79:98:94:20:66:fe:f7:99:f8:03: ba:fa:16:24:a0:61:f9:6d:76:46:84:f5:37:b7:b6:1a:8d:e0: 6d:71:94:a5:62:90:68:8c:f0:94:48:e0:3d:87:5b:2a:d4:a8: ec:07:ff:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxNkExMTAvBgNVBAUTKDRCNThCMEIwNjEwOTk0NjY2MEMwOUZCQzk2OTlBNjQz QjdGNDJBRTYwHhcNMjYwMTI0MTU0MzE0WhcNMjYwMTMxMTU0MzE0WjAYMRYwFAYD VQQDDA02OTc0ZTg5Mi1hNzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0+dNsimVpl2Jr9GsFdlIfb5lKaPLIuwwP3n8HGe5zhJzW64aXHos0XWk1cp SFq96TqM+0oUmjgoIs4FlZGOz4drmslcDZuCVX3j/nb0woEAMDjQg0EQJZ8ZduqM k/zemuedbW6CEL/yylRt5Wf5Ep4OP21baIrhzivWpE7vl6mU3ZmDie1rCk/NVV5C 4QDqY6PeGMD24S/+n37JSxC68rY2JbrWMFultYFAwVLuQ3W835BS8xfoM/dll17E OQBqARP0ogPDikGReloX/GNJCdZac+wK3Ew/bgHRZkLnqjjUSs6f3PLyZLvAsYX3 i7I1LJvfMCFSeb43j4wA7ROW3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGp//3m 6QL5iyL7eWVghCjdwdC9MB8GA1UdIwQYMBaAFEtYsLBhCZRmYMCfvJaZpkO39Crm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDE2QS9CMDgzREQwOERF QjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxHWmd3Si04bHBtbVE3ZjBL dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MxaXdzR0VKbEdaZ3dKLThscG1tUTdmMEt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDE2QS9CMDgzREQwOERFQjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxH Wmd3Si04bHBtbVE3ZjBLdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHCKZxdltEJX0KaDz4qfDhixqUSNGrz8w211wbtbqf9su0GSS9Ckfx bzy94LwFuDnJP8W/0o6ZegUuHFh4C2faM8aWAayJ65gPNAX7H3LsNCgKfR3Lrm4Z +woESlqZnpSz4s8kyTRg1CIZdTHIWDb+kpe66g9F7GVU9mi+nT/ptbaKorVnJYUD RuxjXXGRgL5VkPI75y2p4enyIm78MkLJIIKCa7qOMDvZCFErB0DbpsuWSX8nH3T4 LzHMqW+q+teKSWNYCobe1CTiQROto3mYlCBm/veZ+AO6+hYkoGH5bXZGhPU3t7Ya jeBtcZSlYpBojPCUSOA9h1sq1KjsB/+w -----END CERTIFICATE-----Generated at Sun Jan 25 14:28:37 2026 by rpki-client