This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json) Hash identifier: Spir5+pzpGK+jcrl8fm0lbPBlooHUdjD3t+/3jjYe4M= Subject key identifier: BA:93:CA:AB:2D:0C:97:99:4B:3A:1D:CE:75:1A:94:76:5C:42:ED:9D Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 0853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft Manifest number: 0832 Signing time: Sat 24 Jan 2026 20:13:35 +0000 Manifest this update: Sat 24 Jan 2026 20:13:35 +0000 Manifest next update: Sat 31 Jan 2026 20:13:35 +0000 Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: iRiSi5uf1g4c5tMXMYdn1zZBARqLiORM+iO5UGQm/w4=) 2: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: KAqNHdwX5NNEjIYv/SrmUHgArBmx24W5Jn9cFOvsuKs=) 3: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: 0MurJBTWr3VBt4BzPGN6YSpJS0KuheQ6jbFiFb2lsDo=) 4: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: 3AbfHAacjnEAWoo2sa+rjsKYetf4drBAdDYIzgNRGw0=) 5: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: uh6Udu7tl5B51JnewZD4hvjUOCA+o54nu1BVBecsrkw=) 6: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: EDuSd7q+Wy9A9v2ymA1vM1CdQcsnayUqkzAJ0vginys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: Jan 24 20:13:35 2026 GMT Not After : Jan 31 20:13:35 2026 GMT Subject: CN=697527ef-d64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:87:98:b4:f0:6d:21:28:7b:46:88:31:5f: 5b:c6:2d:48:44:21:db:4b:d7:5d:0d:a7:a6:58:5a: fb:61:a3:f4:63:cb:86:d3:2b:99:15:e4:4a:4c:db: 20:e4:fc:7c:b4:fb:31:2e:32:af:49:8b:5f:f0:18: 24:70:e7:f2:4a:93:6a:bf:6c:1d:23:97:3a:7e:f2: 25:ab:ba:70:9e:bf:f8:37:e5:f5:c7:79:04:58:14: 8a:c8:d9:fe:bf:ab:b9:51:83:c1:e8:27:86:4e:e2: 14:3e:42:cc:70:5a:4c:20:19:f0:3c:7a:69:8d:a8: 84:4c:39:7a:c3:82:18:2c:d9:99:cf:23:f2:03:9c: dc:70:44:45:27:7d:6f:53:63:8a:79:6a:6e:18:58: b2:22:3c:37:7f:2a:84:aa:0a:a7:4d:68:a0:2b:3f: 5e:24:1e:33:22:78:6d:65:b6:97:33:24:6c:b6:41: d9:5d:18:01:ab:6f:eb:98:13:5a:53:5d:6e:59:4b: 33:a5:f6:31:64:9f:70:19:ee:2f:91:b8:93:5c:91: 44:42:d5:2e:f7:87:02:60:a1:1a:bf:6b:48:09:5b: 88:24:aa:60:b1:41:77:85:61:66:3c:47:89:81:7d: 53:da:94:fc:20:24:fc:bd:0e:79:1b:d0:bb:08:60: c0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:93:CA:AB:2D:0C:97:99:4B:3A:1D:CE:75:1A:94:76:5C:42:ED:9D X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:b9:a5:f4:39:eb:ad:ac:af:e6:4e:4b:1c:19:9c:90:74:be: 2a:13:f4:33:18:91:83:21:77:0a:d9:5c:9b:a1:3a:88:4b:b3: f4:85:df:11:62:2d:31:3b:bc:93:03:c9:cb:da:bf:1e:57:8f: 0d:1e:c0:41:85:85:40:ab:c4:36:10:38:33:6b:00:68:0c:eb: 43:16:78:a5:cd:74:80:11:56:9a:a2:3e:71:69:4a:cd:3b:c6: 0d:eb:19:af:ba:9e:09:b3:a7:85:90:3a:d1:65:22:90:11:10: 0f:7f:77:be:70:81:0f:ee:26:1d:c0:fe:a5:2d:f6:48:f2:0c: e1:cd:a4:b9:ba:3b:41:ad:c7:ae:a1:64:29:f1:be:dd:ac:9a: 6c:c6:40:68:ad:c4:8b:ea:7d:66:3e:45:5e:be:67:25:77:2f: e3:e6:02:a4:aa:91:c6:95:0c:44:af:aa:31:92:7d:b3:7b:8f: 1c:95:ed:e7:30:18:b4:21:88:0d:02:84:43:ba:0b:b0:86:12: 57:a9:ca:37:93:b8:1f:89:c0:2e:28:34:9c:77:dd:3e:7e:89: fa:3d:24:cd:08:1c:d6:cf:30:9e:91:c0:f4:3c:28:20:90:ce: 4b:72:7e:9a:87:9c:17:f8:c3:ec:a8:02:2c:83:d3:0e:63:91: 7a:94:7e:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjYwMTI0MjAxMzM1WhcNMjYwMTMxMjAxMzM1WjAYMRYwFAYD VQQDDA02OTc1MjdlZi1kNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQ2HmLTwbSEoe0aIMV9bxi1IRCHbS9ddDaemWFr7YaP0Y8uG0yuZFeRKTNsg 5Px8tPsxLjKvSYtf8BgkcOfySpNqv2wdI5c6fvIlq7pwnr/4N+X1x3kEWBSKyNn+ v6u5UYPB6CeGTuIUPkLMcFpMIBnwPHppjaiETDl6w4IYLNmZzyPyA5zccERFJ31v U2OKeWpuGFiyIjw3fyqEqgqnTWigKz9eJB4zInhtZbaXMyRstkHZXRgBq2/rmBNa U11uWUszpfYxZJ9wGe4vkbiTXJFEQtUu94cCYKEav2tICVuIJKpgsUF3hWFmPEeJ gX1T2pT8ICT8vQ55G9C7CGDA4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqTyqst DJeZSzodznUalHZcQu2dMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDA3Mi8zQTQxODkzNkZCRTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVr bHdXOEphcVBESjd4QU1tUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiuaX0OeutrK/mTkscGZyQdL4qE/QzGJGDIXcK2VyboTqIS7P0hd8R Yi0xO7yTA8nL2r8eV48NHsBBhYVAq8Q2EDgzawBoDOtDFnilzXSAEVaaoj5xaUrN O8YN6xmvup4Js6eFkDrRZSKQERAPf3e+cIEP7iYdwP6lLfZI8gzhzaS5ujtBrceu oWQp8b7drJpsxkBorcSL6n1mPkVevmcldy/j5gKkqpHGlQxEr6oxkn2ze48cle3n MBi0IYgNAoRDuguwhhJXqco3k7gficAuKDScd90+fon6PSTNCBzWzzCekcD0PCgg kM5Lcn6ah5wX+MPsqAIsg9MOY5F6lH5H -----END CERTIFICATE-----Generated at Sun Jan 25 12:21:40 2026 by rpki-client