This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: yGkt0GSKTXG8tDvUFkXHAlqLgulcfoOgY0WHOthvn54= Subject key identifier: 36:57:D0:7D:26:D3:5B:D2:68:33:26:2F:21:DE:06:C9:6C:68:68:4B Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: 0150 Signing time: Sun 25 Jan 2026 03:29:14 +0000 Manifest this update: Sun 25 Jan 2026 03:29:14 +0000 Manifest next update: Sun 01 Feb 2026 03:29:14 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: LczoXQdGKEa9cimoxfqXGDs2bJVunOcfP1jPoQc8ho0=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: j6g0qkyBnbC6ObzWJzLVBlWvAyU9t4dwcYlCD4aOUWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Validity Not Before: Jan 25 03:29:14 2026 GMT Not After : Feb 1 03:29:14 2026 GMT Subject: CN=69758e0a-8751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6b:cd:92:c9:4e:5f:87:c9:7c:46:68:27:67: 17:7c:4b:5d:2f:de:2d:b4:af:f5:09:f8:68:09:d3: 01:14:f2:4f:2c:ea:ff:9f:5e:11:d7:13:89:5c:15: 3f:90:6f:ae:88:10:3d:51:b8:7a:7d:6e:5d:33:6d: 91:c7:65:ff:8e:8c:22:f1:66:34:76:54:fa:79:5c: 2c:2c:37:c2:53:73:73:6d:31:83:fa:9d:32:4e:ae: 95:26:59:38:fc:f1:60:1d:34:98:a5:1b:9f:ad:da: 37:94:86:64:72:90:49:5f:ea:a9:44:d5:96:19:25: c1:e9:aa:e7:ad:8c:3d:26:6b:b4:ce:0e:a7:5a:3c: 33:10:34:59:cc:76:18:45:20:7e:24:58:49:16:57: 64:13:ad:7a:93:aa:46:df:21:19:d5:4b:f9:53:08: 86:0d:de:a5:1d:8d:86:7e:7f:f8:4c:47:24:fa:ad: 1d:af:f5:0f:66:e7:cd:81:11:f7:aa:44:97:61:47: 4e:62:60:5e:4f:45:a9:e8:9a:d5:2e:8a:60:72:e2: 69:a6:60:89:fc:d9:be:d7:ea:72:ea:4a:2a:31:49: 2b:8f:ab:55:e9:57:8a:e2:12:3a:a4:f8:b1:77:3e: 32:fd:58:2d:d4:74:6a:b1:88:e1:c7:29:92:76:59: ca:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:57:D0:7D:26:D3:5B:D2:68:33:26:2F:21:DE:06:C9:6C:68:68:4B X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:0e:4e:80:ae:26:51:a4:58:f6:36:d7:fc:4f:a1:50:2c:8a: 11:ac:da:0d:f0:c5:b4:fd:6c:ba:cb:c0:a3:fa:17:8f:0d:45: 74:67:d6:b3:95:79:bf:ff:38:b5:9c:8b:67:fa:c2:90:9a:50: 7a:6a:da:e4:da:53:7d:84:33:b6:2d:94:0e:19:7e:b7:35:a5: 48:a4:7c:09:ab:95:b6:3b:2f:48:38:f9:dc:74:47:c9:b4:40: 8d:3f:c5:89:7d:aa:65:18:cd:1a:3b:e6:ab:2f:a0:cb:6f:00: ff:a9:c4:54:d6:43:99:be:1a:50:df:b6:97:d4:8d:6e:4d:25: af:60:59:6a:5e:a2:74:b6:d2:09:91:e4:30:19:8a:83:3c:e8: c8:c5:19:ce:37:9d:6e:c0:36:98:08:d0:5b:20:eb:f3:e1:a4: 12:2b:72:1d:b9:65:20:42:1b:a3:06:b6:08:f5:ba:e6:46:14: 30:90:0a:27:54:24:c8:09:de:b3:eb:75:2e:ca:7a:f8:39:1b: 1b:c5:be:40:65:a2:58:00:07:b7:56:63:6e:98:95:35:a8:59: 14:38:9b:92:b5:1e:7c:54:95:5b:2e:ac:70:e8:ff:e5:4c:bb: e1:e7:88:50:57:e8:d1:cf:ff:6c:31:87:af:78:71:c2:f5:b2: 8e:38:05:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF RTcyMDM5NTUwHhcNMjYwMTI1MDMyOTE0WhcNMjYwMjAxMDMyOTE0WjAYMRYwFAYD VQQDDA02OTc1OGUwYS04NzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mvNkslOX4fJfEZoJ2cXfEtdL94ttK/1CfhoCdMBFPJPLOr/n14R1xOJXBU/ kG+uiBA9Ubh6fW5dM22Rx2X/jowi8WY0dlT6eVwsLDfCU3NzbTGD+p0yTq6VJlk4 /PFgHTSYpRufrdo3lIZkcpBJX+qpRNWWGSXB6arnrYw9Jmu0zg6nWjwzEDRZzHYY RSB+JFhJFldkE616k6pG3yEZ1Uv5UwiGDd6lHY2Gfn/4TEck+q0dr/UPZufNgRH3 qkSXYUdOYmBeT0Wp6JrVLopgcuJppmCJ/Nm+1+py6koqMUkrj6tV6VeK4hI6pPix dz4y/Vgt1HRqsYjhxymSdlnKzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZX0H0m 01vSaDMmLyHeBslsaGhLMB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3 MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN SjlmOElCYzRYU1B1Y2dPVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSDk6AriZRpFj2Ntf8T6FQLIoRrNoN8MW0/Wy6y8Cj+hePDUV0Z9az lXm//zi1nItn+sKQmlB6atrk2lN9hDO2LZQOGX63NaVIpHwJq5W2Oy9IOPncdEfJ tECNP8WJfaplGM0aO+arL6DLbwD/qcRU1kOZvhpQ37aX1I1uTSWvYFlqXqJ0ttIJ keQwGYqDPOjIxRnON51uwDaYCNBbIOvz4aQSK3IduWUgQhujBrYI9brmRhQwkAon VCTICd6z63Uuynr4ORsbxb5AZaJYAAe3VmNumJU1qFkUOJuStR58VJVbLqxw6P/l TLvh54hQV+jRz/9sMYeveHHC9bKOOAU5 -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:15 2026 by rpki-client