This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft File: 48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json) Hash identifier: fLhOxPLCeLznWhGEDP/CgllB1WjfxgaD3K0kXjs1zLs= Subject key identifier: 43:C6:C7:55:C9:46:F9:C7:9A:A0:8C:6E:92:30:17:85:C6:D9:79:40 Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 Certificate issuer: /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Certificate serial: 0824 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft Manifest number: 0824 Signing time: Sat 24 Jan 2026 20:19:12 +0000 Manifest this update: Sat 24 Jan 2026 20:19:12 +0000 Manifest next update: Sat 31 Jan 2026 20:19:12 +0000 Files and hashes: 1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: Wsi0bjFtGZbzTQ0moDl7qXeMlMXI6fwnDOHaeBY11PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2084 (0x824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Validity Not Before: Jan 24 20:19:12 2026 GMT Not After : Jan 31 20:19:12 2026 GMT Subject: CN=69752940-ccb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b3:97:64:8e:4b:9e:d2:4a:ef:1b:01:07:1c: c6:33:86:9e:aa:3f:87:3a:92:82:f3:96:95:ca:99: 0b:0c:32:ac:a8:d5:4e:11:bd:65:90:ea:a0:7e:fc: 50:cd:bf:42:03:4d:a2:d6:9b:2a:ac:e7:a3:5f:c2: 02:50:06:0a:e9:b4:f7:08:be:b3:5a:ef:87:f0:72: cd:ef:58:73:cd:5e:a3:1b:9e:c4:23:b8:67:56:c3: 6e:9d:62:c3:9b:a3:d6:0a:0c:27:e2:a3:90:0b:e4: a2:a5:d7:98:0f:fc:79:95:5b:07:4a:dc:e4:d7:d1: 03:da:36:e8:9c:22:e7:82:ad:3d:99:12:74:13:7d: 38:02:4f:6d:ff:d9:ce:6f:5b:cc:b8:12:ec:0d:ee: 87:a4:c4:86:e3:c8:38:b6:ea:84:de:57:62:70:7c: 80:5f:72:ae:51:38:7e:a8:30:91:28:e1:86:ba:59: 3d:63:ee:5c:56:85:f5:ea:b5:37:fa:1c:f1:e8:01: fc:a1:2d:e5:23:b5:d8:90:7a:6e:60:63:13:36:eb: 19:27:97:76:20:ff:7a:22:43:4e:a9:00:f7:b8:41: 77:d2:4c:c0:b7:04:2a:1f:59:94:e1:f8:d0:9b:66: 78:84:67:25:b0:18:7f:b1:ef:de:f9:82:55:e0:82: f4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C6:C7:55:C9:46:F9:C7:9A:A0:8C:6E:92:30:17:85:C6:D9:79:40 X509v3 Authority Key Identifier: keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:c7:9d:ca:40:a3:58:54:7d:ab:d1:77:04:89:cf:ef:f7:4a: 38:51:3e:6b:67:7d:a2:43:c8:ca:2c:62:a1:ac:b3:96:e5:3b: 19:b6:6f:b4:7a:f0:02:dd:46:0b:0c:94:bf:25:5e:e5:ae:33: 58:84:6d:51:a7:3e:c2:38:22:ad:b3:b1:4d:12:de:4c:31:47: 46:99:f5:03:e6:64:be:60:7f:01:aa:7a:5e:4c:48:02:18:02: b5:66:7b:09:d9:12:a3:73:3f:d5:dd:41:40:91:b5:34:ee:72: b4:ed:c0:09:ff:01:01:68:4d:c2:5a:47:89:5f:58:78:15:38: 8e:2c:69:a6:b8:df:36:6a:e7:ea:7e:b7:f2:b1:6c:4c:de:e4: 1e:8f:16:85:a3:2e:43:cb:db:58:48:0f:f2:90:b5:5f:47:0e: a2:0c:53:fa:59:49:77:fc:1b:76:b3:65:42:6c:63:5e:30:34: 50:79:ff:dd:48:bc:52:a9:59:e6:88:74:50:ff:93:ad:3f:c3: 04:19:f3:ed:98:7f:61:42:ac:fd:fe:73:0d:c4:45:04:ec:8b: b7:3d:af:49:90:6e:e5:5a:14:ad:a3:05:ac:43:88:61:29:fd: 1f:e9:e7:01:4a:bc:e6:86:e8:b6:4c:0c:c9:50:ed:d8:10:e0: 24:cf:85:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKEUzQzMzN0RCNjY4NzJBMEE5MzVDOUQ1NTVFNUI2REQz NTMwNzJDNzQwHhcNMjYwMTI0MjAxOTEyWhcNMjYwMTMxMjAxOTEyWjAYMRYwFAYD VQQDDA02OTc1Mjk0MC1jY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbOXZI5LntJK7xsBBxzGM4aeqj+HOpKC85aVypkLDDKsqNVOEb1lkOqgfvxQ zb9CA02i1psqrOejX8ICUAYK6bT3CL6zWu+H8HLN71hzzV6jG57EI7hnVsNunWLD m6PWCgwn4qOQC+SipdeYD/x5lVsHStzk19ED2jbonCLngq09mRJ0E304Ak9t/9nO b1vMuBLsDe6HpMSG48g4tuqE3ldicHyAX3KuUTh+qDCRKOGGulk9Y+5cVoX16rU3 +hzx6AH8oS3lI7XYkHpuYGMTNusZJ5d2IP96IkNOqQD3uEF30kzAtwQqH1mU4fjQ m2Z4hGclsBh/se/e+YJV4IL0/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPGx1XJ RvnHmqCMbpIwF4XG2XlAMB8GA1UdIwQYMBaAFOPDN9tmhyoKk1ydVV5bbdNTByx0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy82RTJGRkVERTAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtncVRYSjFWWGx0dDAxTUhM SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ4TTMyMmFIS2dxVFhKMVZYbHR0MDFNSExIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy82RTJGRkVERTAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtn cVRYSjFWWGx0dDAxTUhMSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWx53KQKNYVH2r0XcEic/v90o4UT5rZ32iQ8jKLGKhrLOW5TsZtm+0 evAC3UYLDJS/JV7lrjNYhG1Rpz7COCKts7FNEt5MMUdGmfUD5mS+YH8BqnpeTEgC GAK1ZnsJ2RKjcz/V3UFAkbU07nK07cAJ/wEBaE3CWkeJX1h4FTiOLGmmuN82aufq frfysWxM3uQejxaFoy5Dy9tYSA/ykLVfRw6iDFP6WUl3/Bt2s2VCbGNeMDRQef/d SLxSqVnmiHRQ/5OtP8MEGfPtmH9hQqz9/nMNxEUE7Iu3Pa9JkG7lWhStowWsQ4hh Kf0f6ecBSrzmhui2TAzJUO3YEOAkz4X0 -----END CERTIFICATE-----Generated at Sun Jan 25 11:00:48 2026 by rpki-client