This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json) Hash identifier: mJulQYYJMj194VTgxJS3w7IkOuGWNLHlVAeUSen/Il4= Subject key identifier: EB:E1:67:61:E7:74:0C:E7:05:63:9C:C7:15:99:44:F9:8C:20:A6:9B Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Certificate serial: 0414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft Manifest number: 040E Signing time: Sat 24 Jan 2026 23:37:31 +0000 Manifest this update: Sat 24 Jan 2026 23:37:31 +0000 Manifest next update: Sat 31 Jan 2026 23:37:31 +0000 Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: +STm9u2GHvZZtS0hHQQ/nHIo1rN6vZdROXgZciqwa6Q=) 2: 2100DB4AE24811F0BB8D45AB726F56BC.roa (hash: zcFuvKA0smcEUUwdDCYB9xqLVXu6tsup5XFVLBOc5rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1044 (0x414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912654A, serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Validity Not Before: Jan 24 23:37:31 2026 GMT Not After : Jan 31 23:37:31 2026 GMT Subject: CN=697557bb-508a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:52:af:b9:97:4d:43:14:12:af:94:cf:a1:bb: 3a:87:23:9c:e7:4e:60:e9:44:53:95:01:ee:cd:cc: 13:25:4b:42:0f:32:22:19:ff:04:42:b1:b4:be:a2: 71:5d:0a:b5:e9:bd:45:8a:aa:87:15:dd:89:28:ef: d0:00:4c:d8:b0:9a:ac:23:09:ec:c6:2e:d1:3d:97: 60:e2:ba:f1:c5:d7:48:83:65:8e:a0:c4:99:7a:2d: 03:e4:a3:29:fc:1a:a9:95:19:db:54:a0:27:a6:65: 3a:20:4d:96:70:8f:84:e9:9e:1b:39:06:47:6b:ae: 3f:06:6c:0c:d1:9e:2e:c9:75:a0:d0:19:a0:39:36: df:ca:5d:e5:e3:1f:06:68:6b:a9:0e:f9:0e:4c:3f: a9:f9:aa:ff:81:cf:7d:2f:31:4e:b0:aa:5b:fe:53: 73:14:67:e5:bb:6d:ff:dd:14:80:2f:c2:13:67:51: 43:22:2c:f6:0d:23:cd:ee:8c:8c:76:a4:2f:9e:18: 73:cf:95:cb:e0:9c:62:6a:24:a7:e8:de:02:74:a9: 54:fa:64:17:db:88:1e:aa:b2:9e:15:a8:a0:36:a7: 73:67:f4:d3:2a:57:0a:ab:62:55:d6:df:c2:77:90: 35:7e:d9:94:df:93:78:2f:81:7e:18:7a:75:b0:a4: c6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E1:67:61:E7:74:0C:E7:05:63:9C:C7:15:99:44:F9:8C:20:A6:9B X509v3 Authority Key Identifier: keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:00:22:5b:fa:99:18:1e:5c:8b:48:30:ab:ec:bc:fb:8f:22: 5e:a7:2b:f1:da:c6:ff:19:6d:be:e8:3e:07:59:b0:00:f9:0a: 06:b9:9e:f4:41:99:12:9f:d5:f7:aa:17:40:66:bc:e3:3b:f5: 40:f0:73:c8:33:68:5d:b1:1c:d9:ab:c6:dd:97:55:52:98:a4: d8:56:df:7f:60:36:70:38:c8:56:3a:14:46:09:b7:68:62:97: 7e:0d:28:21:3a:60:b9:8d:69:30:78:a0:92:a1:8b:0c:0d:55: fa:e6:42:b8:42:52:67:e7:1f:f3:e3:c7:61:74:9c:66:71:1c: 60:78:98:11:a0:b6:20:6e:e5:40:a9:98:9a:88:cb:c7:ee:fe: a4:94:0f:eb:c9:cd:56:b1:26:a0:2d:1e:af:19:f7:b7:66:27: e1:98:e5:f7:c3:de:a8:3d:2e:e9:fa:38:d1:67:08:93:fb:cc: d6:83:fc:b9:7b:50:01:e6:e4:f3:42:9f:e8:73:53:bf:d8:e3: e1:e6:fb:b1:4a:98:a3:85:49:2f:57:78:32:64:6c:56:7e:15: ff:70:8b:bb:a0:9a:a9:86:d9:4f:f8:84:fa:b9:39:32:85:a9: 5a:33:37:c8:36:38:83:21:ee:45:39:d7:f1:ed:eb:b2:49:78: bc:7e:d1:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY1NEExMTAvBgNVBAUTKDk4MTQ1MTc3Q0FDMkY1QkVFNUQyNzY3NDVDRUQ5ODk4 NDA1M0VEQTcwHhcNMjYwMTI0MjMzNzMxWhcNMjYwMTMxMjMzNzMxWjAYMRYwFAYD VQQDDA02OTc1NTdiYi01MDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8VKvuZdNQxQSr5TPobs6hyOc505g6URTlQHuzcwTJUtCDzIiGf8EQrG0vqJx XQq16b1FiqqHFd2JKO/QAEzYsJqsIwnsxi7RPZdg4rrxxddIg2WOoMSZei0D5KMp /BqplRnbVKAnpmU6IE2WcI+E6Z4bOQZHa64/BmwM0Z4uyXWg0BmgOTbfyl3l4x8G aGupDvkOTD+p+ar/gc99LzFOsKpb/lNzFGflu23/3RSAL8ITZ1FDIiz2DSPN7oyM dqQvnhhzz5XL4JxiaiSn6N4CdKlU+mQX24geqrKeFaigNqdzZ/TTKlcKq2JV1t/C d5A1ftmU35N4L4F+GHp1sKTGaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvhZ2Hn dAznBWOcxxWZRPmMIKabMB8GA1UdIwQYMBaAFJgUUXfKwvW+5dJ2dFztmJhAU+2n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjU0QS9GRkI0NDM3ODlG MEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzliN2wwblowWE8yWW1FQlQ3 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CUlJkOHJDOWI3bDBuWjBYTzJZbUVCVDdhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjU0QS9GRkI0NDM3ODlGMEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzli N2wwblowWE8yWW1FQlQ3YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2ACJb+pkYHlyLSDCr7Lz7jyJepyvx2sb/GW2+6D4HWbAA+QoGuZ70 QZkSn9X3qhdAZrzjO/VA8HPIM2hdsRzZq8bdl1VSmKTYVt9/YDZwOMhWOhRGCbdo Ypd+DSghOmC5jWkweKCSoYsMDVX65kK4QlJn5x/z48dhdJxmcRxgeJgRoLYgbuVA qZiaiMvH7v6klA/ryc1WsSagLR6vGfe3ZifhmOX3w96oPS7p+jjRZwiT+8zWg/y5 e1AB5uTzQp/oc1O/2OPh5vuxSpijhUkvV3gyZGxWfhX/cIu7oJqphtlP+IT6uTky halaMzfINjiDIe5FOdfx7euySXi8ftGt -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:33 2026 by rpki-client