This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json) Hash identifier: 4eXurg5LYtxjidBU4RC8Ofphy1zJ7fjtsOJIh9fbclA= Subject key identifier: 4B:6E:83:CD:D5:EA:74:F9:11:5F:91:E6:6C:89:B0:E6:F3:77:52:55 Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0AFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft Manifest number: 0AF2 Signing time: Sat 24 Jan 2026 18:53:32 +0000 Manifest this update: Sat 24 Jan 2026 18:53:31 +0000 Manifest next update: Sat 31 Jan 2026 18:53:31 +0000 Files and hashes: 1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: 2cyCsOTenrGbOW3v7O02ybF0rxyQuZ0MSEQ6SFC63yc=) 2: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: t6+QHhHKWbDZoxFsvhT+y8k66KeW3LrS7MegiCYm79I=) 3: B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (hash: itui9dWg0G04SAz0tNGsUM1LVCVeybo3ZddvvnrIfd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2815 (0xaff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: Jan 24 18:53:31 2026 GMT Not After : Jan 31 18:53:31 2026 GMT Subject: CN=6975152c-22e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:eb:45:60:af:bc:21:c9:d5:4b:93:59:75:9a: 82:63:bf:47:07:c5:c3:0f:a5:34:98:d5:f5:97:62: 79:f4:ed:8a:8c:3f:43:68:58:15:c2:4d:19:a6:74: eb:ee:f3:0e:bc:70:0c:2c:96:fe:cc:fb:28:90:a3: 14:fb:0f:c5:d3:d9:0d:5e:ee:de:cb:ec:ae:2c:56: 6a:2f:e6:77:64:1b:a9:67:67:0d:22:2a:cf:ab:fd: dc:68:30:e2:06:a4:cd:ea:60:34:81:a6:ef:e1:5b: 5c:48:ca:3a:7a:99:e2:0c:62:90:e7:fb:cf:86:93: 22:bb:b6:8f:0b:c5:b1:f2:7f:08:13:d0:d4:38:2a: 84:9b:e2:84:6d:39:5d:eb:56:56:d6:a6:7a:25:4c: 56:a5:cc:81:67:c5:a2:dc:18:2e:19:e1:27:1a:44: ef:8c:bf:34:ed:93:39:69:aa:dc:d6:eb:a7:ee:13: 65:36:e2:10:e3:2f:d4:aa:a9:f4:86:02:8b:43:53: 70:11:d1:1a:de:5d:5f:36:07:eb:8e:ba:be:52:c9: df:45:3e:a8:3b:a3:9a:25:04:d8:1f:30:b4:b2:ca: bf:8f:60:78:25:93:69:2f:5c:72:a9:6e:73:67:b2: 73:a4:12:18:17:1e:03:61:37:6e:5f:d1:b2:33:3e: 26:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6E:83:CD:D5:EA:74:F9:11:5F:91:E6:6C:89:B0:E6:F3:77:52:55 X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5e:ad:0d:34:e4:fd:da:db:65:61:18:b4:7e:a8:87:8e:09: 20:9c:d5:5b:49:11:bf:a5:6e:64:c0:a0:b2:f0:52:35:51:4b: 28:2e:c2:bc:38:75:a5:e8:5c:dc:65:85:cb:00:26:c9:d7:e7: 20:74:50:3a:39:8f:a7:3a:11:d3:ce:e3:da:a5:e3:e2:33:01: 0d:c2:ab:2e:31:3f:b0:81:75:ea:48:e5:8c:73:bd:88:f6:ac: 78:c7:2b:ac:78:d5:84:d3:93:8b:3a:c9:60:f2:d1:8c:11:9b: 71:8f:83:87:69:7a:a8:7f:6d:61:91:d6:12:0f:66:3c:5f:00: e5:80:85:41:ef:01:ad:8a:27:9e:c3:75:3c:c1:c8:f1:ef:0a: a8:2d:60:6e:37:5c:34:65:ad:60:78:d3:b0:23:0f:83:bb:5e: 3f:b8:db:54:2e:9f:31:7f:c3:13:f9:05:0b:51:97:a6:00:cc: 31:56:63:64:8a:2a:8e:c2:77:de:5b:e4:24:3c:23:cb:8f:da: 84:ff:e0:6d:04:98:cd:ba:86:58:71:e8:8f:48:ee:5e:10:2e: e1:d0:79:80:df:6a:6d:32:c0:82:fb:7d:d5:c9:ff:30:31:2e: 2c:05:7e:51:cb:0d:67:cd:03:80:10:ef:c6:e3:30:d0:11:b1: 3a:16:d4:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjYwMTI0MTg1MzMxWhcNMjYwMTMxMTg1MzMxWjAYMRYwFAYD VQQDDA02OTc1MTUyYy0yMmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxetFYK+8IcnVS5NZdZqCY79HB8XDD6U0mNX1l2J59O2KjD9DaFgVwk0ZpnTr 7vMOvHAMLJb+zPsokKMU+w/F09kNXu7ey+yuLFZqL+Z3ZBupZ2cNIirPq/3caDDi BqTN6mA0gabv4VtcSMo6epniDGKQ5/vPhpMiu7aPC8Wx8n8IE9DUOCqEm+KEbTld 61ZW1qZ6JUxWpcyBZ8Wi3BguGeEnGkTvjL807ZM5aarc1uun7hNlNuIQ4y/Uqqn0 hgKLQ1NwEdEa3l1fNgfrjrq+UsnfRT6oO6OaJQTYHzC0ssq/j2B4JZNpL1xyqW5z Z7JzpBIYFx4DYTduX9GyMz4m5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtug83V 6nT5EV+R5myJsObzd1JVMB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ1Qi8yOEQ4MkM4MjVGNkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NF SUp4eXJQUms2LTZoWlNJRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLXq0NNOT92ttlYRi0fqiHjgkgnNVbSRG/pW5kwKCy8FI1UUsoLsK8 OHWl6FzcZYXLACbJ1+cgdFA6OY+nOhHTzuPapePiMwENwqsuMT+wgXXqSOWMc72I 9qx4xyuseNWE05OLOslg8tGMEZtxj4OHaXqof21hkdYSD2Y8XwDlgIVB7wGtiiee w3U8wcjx7wqoLWBuN1w0Za1geNOwIw+Du14/uNtULp8xf8MT+QULUZemAMwxVmNk iiqOwnfeW+QkPCPLj9qE/+BtBJjNuoZYceiPSO5eEC7h0HmA32ptMsCC+33Vyf8w MS4sBX5Ryw1nzQOAEO/G4zDQEbE6FtTl -----END CERTIFICATE-----Generated at Sun Jan 25 09:45:22 2026 by rpki-client