This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft File: haTP570qMmoqBWITY5e3zK5eW3w.mft (raw, json) Hash identifier: q0VexdVrm62AkX5iAIW5D2YM7adOdDw49+L1Gpko0hc= Subject key identifier: 48:05:20:79:4F:7A:53:EF:6F:75:7D:E3:5A:AE:91:DA:4E:0C:B6:BB Authority key identifier: 85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C Certificate issuer: /CN=A912B666/serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft Manifest number: 28 Signing time: Sun 25 Jan 2026 06:50:47 +0000 Manifest this update: Sun 25 Jan 2026 06:50:47 +0000 Manifest next update: Sun 01 Feb 2026 06:50:47 +0000 Files and hashes: 1: haTP570qMmoqBWITY5e3zK5eW3w.crl (hash: rzut5R+E3R2QfiT/6K5syRpcGJgRctW2auT7krhAb2g=) 2: AED2D108D1FE11F0A9446F52C4F9AE02.roa (hash: GRhyBTXpwNjfO8wi83PzGPSnR0pSaq7pbu0oY0AhnqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B666, serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C Validity Not Before: Jan 25 06:50:47 2026 GMT Not After : Feb 1 06:50:47 2026 GMT Subject: CN=6975bd47-00d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9d:d4:9f:b8:cf:f5:db:78:64:f9:3b:67:b1: 4e:f3:fc:a2:50:d9:f4:56:54:46:aa:2e:dd:e8:13: e8:62:fc:4a:81:5c:55:e0:72:e9:54:d1:63:8e:93: e4:ad:be:25:44:16:7e:26:66:a8:c0:dd:aa:2a:86: cf:82:2e:e9:f3:25:6e:46:74:83:12:63:89:7e:be: 1e:7b:62:9b:85:35:f1:6d:bf:86:57:cc:70:c9:af: 94:00:ed:b0:10:0b:36:c4:9f:87:22:18:fc:d8:51: 04:3c:45:21:66:80:f0:31:c0:60:00:fa:c2:e8:98: 2c:d3:9b:3e:43:b5:e8:95:33:c8:c4:a5:fd:07:d7: af:ff:24:0d:fa:3c:23:d9:18:e3:02:e7:83:89:6e: 7a:0f:20:79:3b:0f:f3:53:54:c3:92:87:f6:f0:46: 18:77:d7:d6:95:b6:9f:44:b9:73:be:ba:55:08:3a: cd:84:f7:af:58:f1:81:42:4c:d6:f1:30:72:dc:a9: a5:cd:ba:35:ea:4a:9a:3a:d7:76:2f:d5:87:55:22: 40:2c:61:a2:4f:86:ac:f5:e1:83:23:5e:48:1c:7a: 8b:3c:11:ac:67:8d:4d:27:11:fa:2f:b8:77:0d:4d: 01:36:57:b7:e1:cb:a0:31:d1:b2:48:4b:7a:03:41: cc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:05:20:79:4F:7A:53:EF:6F:75:7D:E3:5A:AE:91:DA:4E:0C:B6:BB X509v3 Authority Key Identifier: keyid:85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:52:08:f0:c1:4a:78:fc:ea:a1:20:05:80:77:63:dd:21:6a: f9:10:14:be:fb:14:af:dd:f8:65:d7:ad:04:55:1c:51:10:d0: 42:51:52:8d:6a:e2:ac:33:5e:b2:85:95:be:8b:67:90:7f:93: bf:47:48:f6:df:1c:64:5d:f6:4c:bb:27:fd:fd:23:6d:33:98: c8:05:99:96:2e:2b:2d:4a:0b:cd:c1:c8:7f:50:9a:3e:5b:0d: 4b:28:49:f1:a2:2a:dd:c0:b0:1c:8c:37:50:3a:df:96:fa:af: cc:10:81:99:e8:1c:bb:e2:9f:3f:bd:d7:02:7c:6c:74:e9:c1: ce:8b:57:4f:87:2f:90:0b:b5:c5:81:b7:ab:06:dd:2f:62:b3: a4:d1:18:bc:5c:0d:14:0e:71:e5:9d:53:00:9a:1b:3a:64:33: aa:ac:85:aa:f9:d3:58:82:ca:eb:19:20:6d:92:80:ec:2d:55: 81:8a:a0:19:e4:80:dc:88:be:73:c9:f0:f7:83:b6:09:77:9c: e4:10:96:7c:39:a8:5c:9b:35:96:75:25:e1:49:22:fe:bf:1e: 14:f5:3f:6a:31:04:0b:4a:22:52:9c:03:1f:22:05:3d:e0:d1: 7b:76:71:e7:50:c7:df:19:b8:a1:3f:4d:7a:f9:d6:14:23:52: 34:f5:7c:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjY2NjExMC8GA1UEBRMoODVBNENGRTdCRDJBMzI2QTJBMDU2MjEzNjM5N0I3Q0NB RTVFNUI3QzAeFw0yNjAxMjUwNjUwNDdaFw0yNjAyMDEwNjUwNDdaMBgxFjAUBgNV BAMMDTY5NzViZDQ3LTAwZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdndSfuM/123hk+TtnsU7z/KJQ2fRWVEaqLt3oE+hi/EqBXFXgculU0WOOk+St viVEFn4mZqjA3aoqhs+CLunzJW5GdIMSY4l+vh57YpuFNfFtv4ZXzHDJr5QA7bAQ CzbEn4ciGPzYUQQ8RSFmgPAxwGAA+sLomCzTmz5DteiVM8jEpf0H16//JA36PCPZ GOMC54OJbnoPIHk7D/NTVMOSh/bwRhh319aVtp9EuXO+ulUIOs2E969Y8YFCTNbx MHLcqaXNujXqSpo613Yv1YdVIkAsYaJPhqz14YMjXkgceos8EaxnjU0nEfovuHcN TQE2V7fhy6Ax0bJIS3oDQcxjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSAUgeU96 U+9vdX3jWq6R2k4MtrswHwYDVR0jBBgwFoAUhaTP570qMmoqBWITY5e3zK5eW3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCNjY2LzkwNUJGRUY4Qzky OTExRjA4MDlDRjI4MUM0RjlBRTAyL2hhVFA1NzBxTW1vcUJXSVRZNWUzeks1ZVcz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaGFUUDU3MHFNbW9xQldJVFk1ZTN6SzVlVzN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC NjY2LzkwNUJGRUY4QzkyOTExRjA4MDlDRjI4MUM0RjlBRTAyL2hhVFA1NzBxTW1v cUJXSVRZNWUzeks1ZVczdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFxSCPDBSnj86qEgBYB3Y90havkQFL77FK/d+GXXrQRVHFEQ0EJRUo1q 4qwzXrKFlb6LZ5B/k79HSPbfHGRd9ky7J/39I20zmMgFmZYuKy1KC83ByH9Qmj5b DUsoSfGiKt3AsByMN1A635b6r8wQgZnoHLvinz+91wJ8bHTpwc6LV0+HL5ALtcWB t6sG3S9is6TRGLxcDRQOceWdUwCaGzpkM6qshar501iCyusZIG2SgOwtVYGKoBnk gNyIvnPJ8PeDtgl3nOQQlnw5qFybNZZ1JeFJIv6/HhT1P2oxBAtKIlKcAx8iBT3g 0Xt2cedQx98ZuKE/TXr51hQjUjT1fAE= -----END CERTIFICATE-----Generated at Sun Jan 25 10:43:28 2026 by rpki-client