This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft File: FWZDTXxsxlkckNwnSr9z3gDrBQE.mft (raw, json) Hash identifier: bWL+rDlTFU44FVzDHSCcc4dP5s+IcuW0Khjx6IjcBvY= Subject key identifier: 90:70:97:C1:B0:DF:88:0C:9E:F0:B6:A2:A4:A0:ED:CD:C8:08:45:5D Authority key identifier: 15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 Certificate issuer: /CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft Manifest number: 029E Signing time: Sun 25 Jan 2026 00:40:41 +0000 Manifest this update: Sun 25 Jan 2026 00:40:40 +0000 Manifest next update: Sun 01 Feb 2026 00:40:40 +0000 Files and hashes: 1: FWZDTXxsxlkckNwnSr9z3gDrBQE.crl (hash: oSBTtYA8I7xfBaucOIEcWQl1ajThmaNTQvAkOfbcGBM=) 2: 9082B9C42F8711ED90F1090CC4F9AE02.roa (hash: EHgU2cZ4WrhUGfJodVxwyNqi6PRqTM3uJHJG0fszsy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FEAB, serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Validity Not Before: Jan 25 00:40:40 2026 GMT Not After : Feb 1 00:40:40 2026 GMT Subject: CN=69756689-bc57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:07:91:73:35:d7:d2:bd:ae:3b:70:76:e9:c6: 21:57:58:c4:39:f5:d1:4d:05:58:4c:86:05:5d:b1: 5d:6b:c5:9f:26:82:97:6e:db:50:65:5c:3c:c0:d7: e2:0b:d8:73:6d:cf:2a:42:4c:a2:1e:cd:ce:1a:10: c3:ac:9b:8a:ee:e5:ea:68:d5:1e:e3:fc:b9:6e:d6: 61:d2:0f:00:8a:ee:25:5c:0b:ce:50:f7:62:4e:60: 02:7d:4a:a9:cf:f5:01:66:08:01:42:b9:d5:9a:d2: 95:3f:18:fc:c6:bd:76:71:4b:f3:1f:c6:85:c5:ba: 3c:df:c9:8a:e0:ab:dd:8c:ea:4c:9d:95:73:bd:33: d3:be:1b:bb:80:d6:64:a2:c7:aa:57:c3:92:85:f5: 0e:eb:ab:cc:56:9d:97:06:fa:7f:1e:32:20:4a:8a: a5:d9:3b:3d:09:0c:6d:72:8f:23:0e:7e:30:8c:d9: ff:f0:ae:bb:48:bc:09:bd:5c:0c:90:30:aa:e7:75: 08:d9:8c:2b:71:c8:c3:b0:23:b1:33:26:d4:65:e3: 86:aa:1f:55:60:16:63:82:7d:3b:f0:34:aa:12:22: 53:9b:0b:38:15:f2:97:9e:ea:aa:8b:61:ef:77:3e: a8:d3:0c:92:b5:d3:6d:e0:67:ab:54:b6:5b:2f:43: a0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:70:97:C1:B0:DF:88:0C:9E:F0:B6:A2:A4:A0:ED:CD:C8:08:45:5D X509v3 Authority Key Identifier: keyid:15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:c3:a1:ad:a9:f1:6f:ce:ca:35:0b:e9:e0:2c:6d:69:7f:43: 0d:a0:dd:7d:8a:75:4c:78:bc:4d:0a:b2:a4:f8:e8:89:3c:63: 2c:93:6d:97:da:88:6a:90:d0:9f:d5:be:2f:dc:99:bc:93:41: ea:d3:6d:5e:6c:05:b8:09:bb:64:98:93:bd:65:eb:05:09:f0: 6f:df:32:56:f3:59:4c:79:20:ac:e4:a9:c6:b8:d1:56:d2:72: 93:c1:ba:39:15:70:c1:29:50:d4:8e:a2:25:52:3c:67:55:b2: ac:e9:e7:3f:88:e6:ed:07:44:26:55:99:01:e9:74:61:00:2d: a9:44:35:e9:fa:20:bf:30:3b:98:ca:4a:31:4d:1e:97:23:aa: e5:75:0c:21:dc:53:ca:52:a7:b6:88:53:05:33:3f:4c:1f:7c: a0:db:d2:7c:f0:bd:59:9f:61:d6:07:7f:a4:4f:91:4d:66:1f: 50:e2:52:d3:a9:64:04:24:9d:a6:24:bf:2f:17:37:a7:93:98: 64:52:c9:4d:10:5d:9a:32:b2:6e:3e:b7:dc:1d:d1:c9:86:bc: 43:28:b9:e9:d0:87:b4:41:92:00:eb:33:5a:69:3f:75:51:aa: d7:e9:4d:77:32:e6:7a:67:1d:c5:39:f0:cd:27:9d:09:cb:b6: 2c:69:d8:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFQUIxMTAvBgNVBAUTKDE1NjY0MzREN0M2Q0M2NTkxQzkwREMyNzRBQkY3M0RF MDBFQjA1MDEwHhcNMjYwMTI1MDA0MDQwWhcNMjYwMjAxMDA0MDQwWjAYMRYwFAYD VQQDDA02OTc1NjY4OS1iYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugeRczXX0r2uO3B26cYhV1jEOfXRTQVYTIYFXbFda8WfJoKXbttQZVw8wNfi C9hzbc8qQkyiHs3OGhDDrJuK7uXqaNUe4/y5btZh0g8Aiu4lXAvOUPdiTmACfUqp z/UBZggBQrnVmtKVPxj8xr12cUvzH8aFxbo838mK4KvdjOpMnZVzvTPTvhu7gNZk oseqV8OShfUO66vMVp2XBvp/HjIgSoql2Ts9CQxtco8jDn4wjNn/8K67SLwJvVwM kDCq53UI2YwrccjDsCOxMybUZeOGqh9VYBZjgn078DSqEiJTmws4FfKXnuqqi2Hv dz6o0wyStdNt4GerVLZbL0OgSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBwl8Gw 34gMnvC2oqSg7c3ICEVdMB8GA1UdIwQYMBaAFBVmQ018bMZZHJDcJ0q/c94A6wUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkVBQi9GREQ4OTlFQzJG ODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hsa2NrTnduU3I5ejNnRHJC UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXWkRUWHhzeGxrY2tOd25Tcjl6M2dEckJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkVBQi9GREQ4OTlFQzJGODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hs a2NrTnduU3I5ejNnRHJCUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6w6GtqfFvzso1C+ngLG1pf0MNoN19inVMeLxNCrKk+OiJPGMsk22X 2ohqkNCf1b4v3Jm8k0Hq021ebAW4CbtkmJO9ZesFCfBv3zJW81lMeSCs5KnGuNFW 0nKTwbo5FXDBKVDUjqIlUjxnVbKs6ec/iObtB0QmVZkB6XRhAC2pRDXp+iC/MDuY ykoxTR6XI6rldQwh3FPKUqe2iFMFMz9MH3yg29J88L1Zn2HWB3+kT5FNZh9Q4lLT qWQEJJ2mJL8vFzenk5hkUslNEF2aMrJuPrfcHdHJhrxDKLnp0Ie0QZIA6zNaaT91 UarX6U13MuZ6Zx3FOfDNJ50Jy7YsadjH -----END CERTIFICATE-----Generated at Sun Jan 25 03:03:44 2026 by rpki-client