This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft File: aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft (raw, json) Hash identifier: ggaXbAg/V3057x9N2ZdcOOwIjGfMNSKAfgol9YTVcu8= Subject key identifier: AA:BA:63:43:11:62:5D:56:52:02:01:DA:BC:EB:E9:15:AA:17:B0:86 Authority key identifier: 68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D Certificate issuer: /CN=A913B243/serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft Manifest number: 2A Signing time: Fri 23 Jan 2026 06:40:56 +0000 Manifest this update: Fri 23 Jan 2026 06:40:56 +0000 Manifest next update: Fri 30 Jan 2026 06:40:56 +0000 Files and hashes: 1: aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl (hash: BIzk/IeLCbafcatxhxKfhzNefkek1DNpHnw108yz2Kw=) 2: F800618EBBA511F0B0EA597FC4F9AE02.roa (hash: Yw6c7WUM5QYHlwQT+zvf4O1cT4XiBTAyty4UdU8rvsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B243, serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D Validity Not Before: Jan 23 06:40:56 2026 GMT Not After : Jan 30 06:40:56 2026 GMT Subject: CN=697317f8-e1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e1:5d:3e:43:5d:d5:fd:5c:9e:1b:2f:db:5e: 9a:56:fa:7d:d1:11:db:21:ab:4a:44:eb:59:26:2a: 08:bd:72:59:cc:2e:ad:88:64:c3:63:c2:5e:80:9b: b4:00:22:39:66:63:0e:b1:40:01:42:d0:70:6c:9b: 22:ef:6d:3c:10:55:b4:99:13:97:a4:89:52:c2:54: e0:3f:32:84:83:ff:36:b1:c7:32:06:c6:19:fb:21: 05:f5:c2:f0:47:51:f6:1b:4c:24:1d:76:20:fd:28: 2f:27:ba:33:26:8c:3d:52:bc:c5:e6:fe:cf:bc:d6: f2:be:d5:25:ee:49:3a:a9:65:e3:65:df:d6:b2:8f: 1c:0e:62:a1:ef:d8:22:4b:ad:88:7f:5e:6a:9d:fd: 9b:12:03:5f:67:6c:05:be:f2:75:d8:b8:f4:5f:79: bc:9f:ee:fc:76:66:38:bd:8c:a2:e1:f6:91:68:88: d9:05:13:7f:1e:75:17:7c:50:8d:28:bb:ec:6a:87: 39:6e:da:49:2b:34:e7:df:3d:9f:86:3d:6f:4e:9b: 92:fa:80:fe:6c:e8:a3:66:3b:b7:03:26:aa:54:9f: de:d6:cc:b4:8a:43:21:32:16:56:5c:a3:7e:77:2a: e6:ec:31:81:f5:bb:32:9b:86:ab:f2:2f:44:23:cd: dc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BA:63:43:11:62:5D:56:52:02:01:DA:BC:EB:E9:15:AA:17:B0:86 X509v3 Authority Key Identifier: keyid:68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:59:72:55:b3:21:ef:d3:d1:89:2e:e9:2e:6d:48:e7:0b:03: 2d:b4:55:d7:b4:3f:13:b3:1f:3a:73:11:dc:4f:71:87:87:f6: 7a:1d:a8:a9:c7:ec:db:da:19:de:80:f6:72:84:c5:bd:b4:31: 9e:2b:44:6c:a6:c7:5a:e7:71:e5:e3:c3:49:89:53:db:8d:5e: 7c:81:a9:96:b8:9c:16:ee:78:d6:2d:d7:c1:61:e6:23:dd:ba: 67:cb:02:fb:d2:84:15:d6:53:19:af:50:e4:c5:d9:bd:5c:61: 3a:e4:57:19:27:69:9b:1d:0f:ee:7d:24:26:ba:12:47:47:14: 05:85:f7:45:e1:17:4a:a2:27:62:92:74:6c:3c:93:23:b4:d5: f6:6a:bd:6f:55:81:8b:21:72:83:4f:b9:9e:11:c2:cf:de:d6: ec:92:74:19:50:3f:98:37:2f:9c:d8:4a:c1:e9:1a:a2:71:ab: 14:b6:27:0e:04:47:5c:39:37:94:c9:82:39:af:c0:df:33:19: e0:d2:af:70:84:19:f8:d3:c3:46:73:23:dc:ad:13:31:67:82: c2:de:65:7a:67:1c:52:14:a2:52:d2:bb:5e:c3:fc:3c:ab:69: 6a:8a:a4:ff:97:4b:74:f0:f8:03:d4:18:8c:bc:6e:42:8a:92: 00:86:ef:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjI0MzExMC8GA1UEBRMoNjg3RkJBMjBFMkY3ODkxN0UwRkIwM0I5MTJCOEM4NTYz N0M1MzczRDAeFw0yNjAxMjMwNjQwNTZaFw0yNjAxMzAwNjQwNTZaMBgxFjAUBgNV BAMMDTY5NzMxN2Y4LWUxZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCj4V0+Q13V/VyeGy/bXppW+n3REdshq0pE61kmKgi9clnMLq2IZMNjwl6Am7QA IjlmYw6xQAFC0HBsmyLvbTwQVbSZE5ekiVLCVOA/MoSD/zaxxzIGxhn7IQX1wvBH UfYbTCQddiD9KC8nujMmjD1SvMXm/s+81vK+1SXuSTqpZeNl39ayjxwOYqHv2CJL rYh/Xmqd/ZsSA19nbAW+8nXYuPRfebyf7vx2Zji9jKLh9pFoiNkFE38edRd8UI0o u+xqhzlu2kkrNOffPZ+GPW9Om5L6gP5s6KNmO7cDJqpUn97WzLSKQyEyFlZco353 KubsMYH1uzKbhqvyL0Qjzdy9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqrpjQxFi XVZSAgHavOvpFaoXsIYwHwYDVR0jBBgwFoAUaH+6IOL3iRfg+wO5ErjIVjfFNz0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCMjQzL0E5QTc1M0EwQkI5 OTExRjBCNUZCNjk2QUM0RjlBRTAyL2FILTZJT0wzaVJmZy13TzVFcmpJVmpmRk56 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYUgtNklPTDNpUmZnLXdPNUVyaklWamZGTnowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC MjQzL0E5QTc1M0EwQkI5OTExRjBCNUZCNjk2QUM0RjlBRTAyL2FILTZJT0wzaVJm Zy13TzVFcmpJVmpmRk56MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKtZclWzIe/T0Yku6S5tSOcLAy20Vde0PxOzHzpzEdxPcYeH9nodqKnH 7NvaGd6A9nKExb20MZ4rRGymx1rnceXjw0mJU9uNXnyBqZa4nBbueNYt18Fh5iPd umfLAvvShBXWUxmvUOTF2b1cYTrkVxknaZsdD+59JCa6EkdHFAWF90XhF0qiJ2KS dGw8kyO01fZqvW9VgYshcoNPuZ4Rws/e1uySdBlQP5g3L5zYSsHpGqJxqxS2Jw4E R1w5N5TJgjmvwN8zGeDSr3CEGfjTw0ZzI9ytEzFngsLeZXpnHFIUolLSu17D/Dyr aWqKpP+XS3Tw+APUGIy8bkKKkgCG76c= -----END CERTIFICATE-----Generated at Sun Jan 25 08:03:02 2026 by rpki-client