This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json) Hash identifier: Fe8hgWLsdDqxbPUH6EJPOxbmnuv4ub3qnHzCArmfd14= Subject key identifier: FE:DE:01:CB:85:86:98:7B:DC:77:EA:90:75:8F:B0:B9:34:AD:92:AA Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Certificate serial: 064F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft Manifest number: 0649 Signing time: Sat 24 Jan 2026 21:57:16 +0000 Manifest this update: Sat 24 Jan 2026 21:57:15 +0000 Manifest next update: Sat 31 Jan 2026 21:57:15 +0000 Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: 6Jp3XHWojmexLOop/q0uUc+rrVNrbi1aOs0rb+lEkeI=) 2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: B/l1/qnG+ox/f3khU2Qu7i7cTmOVlXxBXIJAWV1sQEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Validity Not Before: Jan 24 21:57:15 2026 GMT Not After : Jan 31 21:57:15 2026 GMT Subject: CN=6975403c-a5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:8f:0f:27:9c:ec:e5:7a:c6:1e:de:ab:10: 2c:13:bd:0c:55:87:61:2c:3c:84:71:fb:14:31:95: 51:8d:28:54:a7:dc:8b:79:1e:e2:40:05:47:be:e7: a2:3d:c7:e6:63:c2:e0:3f:91:68:44:de:d9:44:6f: 5b:e2:e4:88:3c:8e:fb:fd:43:05:5e:cd:61:fe:7f: 5c:e2:e0:ab:9e:e8:69:65:97:4d:7e:4c:8f:3e:49: 62:2f:e5:ff:31:0e:a5:e1:1c:8f:eb:ca:5b:92:87: 1d:d2:86:89:a1:e2:c4:a4:d5:9a:b4:b3:83:b1:c3: 03:89:b9:22:59:c5:e7:ac:3f:4d:4a:98:8d:9c:43: 15:c6:0d:85:93:07:c9:a3:af:dd:ca:09:39:e9:62: 59:d4:46:33:89:e1:4e:89:cc:af:cc:cc:24:33:1d: dc:fd:7e:b5:98:57:f9:40:63:f4:2a:1b:29:27:fb: 43:5a:2e:a4:ce:8b:e3:d6:2e:32:4f:c5:4a:cd:89: 8a:9c:8e:c3:23:8b:59:3b:b2:8b:79:ff:fb:9b:b6: 7d:83:4b:f6:ad:58:54:b8:2b:a6:96:3c:03:d5:5b: 06:fb:cd:67:c4:72:ad:9b:1a:78:0a:40:25:42:02: 14:a9:80:95:60:d4:8a:51:8c:3d:68:a7:fe:7f:18: 64:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DE:01:CB:85:86:98:7B:DC:77:EA:90:75:8F:B0:B9:34:AD:92:AA X509v3 Authority Key Identifier: keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:3a:6b:03:5c:81:1e:5e:ee:ac:27:85:56:ea:2a:48:84:37: 34:7b:84:00:d0:a8:38:ed:68:c8:45:22:a3:9a:b0:68:7f:3c: 57:8f:77:d8:ca:1a:e1:4f:54:8b:91:0c:62:86:ae:57:6d:70: 44:47:e1:75:70:60:ec:3e:b6:84:bd:15:d6:39:1f:0f:ef:84: ef:c6:75:ab:75:a7:67:e7:31:79:5d:d7:be:66:7f:cc:79:2f: ad:b6:b8:c7:78:c7:42:13:22:5d:db:aa:23:6a:a6:4b:08:95: 85:05:bc:8c:eb:e4:d3:50:85:fb:43:93:24:15:70:00:a5:a4: 5f:b4:36:17:b9:da:c6:84:38:07:48:21:40:a1:e8:09:8b:13: 0e:5c:f6:79:f2:b2:49:bd:1a:45:15:0d:1d:af:c4:65:ea:ae: 48:b9:22:45:12:85:d4:1c:61:2d:79:27:e3:30:ce:e7:73:1a: b4:99:e6:59:55:4b:2a:3e:e5:9c:60:56:c4:f6:eb:93:69:35: 8d:a6:39:c0:1c:32:51:a8:34:c4:41:e1:42:2a:6f:ad:0d:66: 6a:bd:8f:1d:4c:40:23:ff:79:69:74:63:22:26:89:58:70:8a: 37:aa:f7:a0:ea:9c:34:44:2a:9a:e3:09:0f:bc:ae:7d:e2:b7: 4a:fc:f8:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC RDNDMzg2NUUwHhcNMjYwMTI0MjE1NzE1WhcNMjYwMTMxMjE1NzE1WjAYMRYwFAYD VQQDDA02OTc1NDAzYy1hNWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaWPDyec7OV6xh7eqxAsE70MVYdhLDyEcfsUMZVRjShUp9yLeR7iQAVHvuei PcfmY8LgP5FoRN7ZRG9b4uSIPI77/UMFXs1h/n9c4uCrnuhpZZdNfkyPPkliL+X/ MQ6l4RyP68pbkocd0oaJoeLEpNWatLODscMDibkiWcXnrD9NSpiNnEMVxg2FkwfJ o6/dygk56WJZ1EYzieFOicyvzMwkMx3c/X61mFf5QGP0KhspJ/tDWi6kzovj1i4y T8VKzYmKnI7DI4tZO7KLef/7m7Z9g0v2rVhUuCumljwD1VsG+81nxHKtmxp4CkAl QgIUqYCVYNSKUYw9aKf+fxhkYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7eAcuF hph73HfqkHWPsLk0rZKqMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh UnJacVotdVRTcWU5UERobDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcOmsDXIEeXu6sJ4VW6ipIhDc0e4QA0Kg47WjIRSKjmrBofzxXj3fY yhrhT1SLkQxihq5XbXBER+F1cGDsPraEvRXWOR8P74TvxnWrdadn5zF5Xde+Zn/M eS+ttrjHeMdCEyJd26ojaqZLCJWFBbyM6+TTUIX7Q5MkFXAApaRftDYXudrGhDgH SCFAoegJixMOXPZ58rJJvRpFFQ0dr8Rl6q5IuSJFEoXUHGEteSfjMM7ncxq0meZZ VUsqPuWcYFbE9uuTaTWNpjnAHDJRqDTEQeFCKm+tDWZqvY8dTEAj/3lpdGMiJolY cIo3qveg6pw0RCqa4wkPvK594rdK/Pjt -----END CERTIFICATE-----Generated at Sun Jan 25 10:35:09 2026 by rpki-client