This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft File: otDn34iradtuBZowZOTdweb8nRk.mft (raw, json) Hash identifier: T2Vy8HRoeSJQGCEjZtDZLXWMH+80GFtqO4zx9nMPNVQ= Subject key identifier: 35:BA:52:99:E5:F5:94:77:C5:72:BA:8C:50:C8:F0:22:6C:C2:4D:3F Authority key identifier: A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19 Certificate issuer: /CN=A913D2D8/serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft Manifest number: 20 Signing time: Fri 23 Jan 2026 06:49:12 +0000 Manifest this update: Fri 23 Jan 2026 06:49:12 +0000 Manifest next update: Fri 30 Jan 2026 06:49:12 +0000 Files and hashes: 1: otDn34iradtuBZowZOTdweb8nRk.crl (hash: y1TbGEYMHTYWvfk3nzuyB2DHrpTYNbxBprlM9hRM5Bs=) 2: 86CCDF8EC91411F085F4A61BC4F9AE02.roa (hash: iu8Dyk5Qv95gSvhMYx99k6dn0qCT8hNUapTROLABhvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D2D8, serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19 Validity Not Before: Jan 23 06:49:12 2026 GMT Not After : Jan 30 06:49:12 2026 GMT Subject: CN=697319e8-febf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:04:fe:96:eb:86:60:31:c5:d4:b2:2d:f5: 5d:93:3c:90:1b:3c:ab:c1:de:50:61:ab:dd:9f:e6: 06:42:f4:ba:3a:bb:30:b7:db:e1:26:bb:ca:28:c2: 2e:d2:39:e6:bf:ce:7b:ae:98:03:5d:dd:44:4d:7b: 06:5d:8e:cf:4f:86:1f:be:98:d1:61:65:6f:8a:81: 49:72:a4:d1:37:e5:2b:e3:59:1b:9e:cb:82:a1:6a: 25:83:87:e6:a4:f3:7a:55:b6:d7:f6:de:8b:f7:65: 75:62:b8:65:6f:db:7b:21:fd:8a:b7:a5:8f:3f:9e: 20:f4:12:e0:71:c7:02:f3:9a:1a:1b:3f:8f:64:0e: 1f:33:d9:0c:7f:68:d1:5d:90:d0:fa:7a:41:e1:10: c7:2c:16:a3:1a:c5:a9:45:ac:79:6c:d7:15:1a:ff: 94:bf:4c:5e:a3:0f:1d:9c:ab:e3:79:3b:89:a4:2a: b4:bc:d1:c6:b0:bc:bb:f4:eb:ec:4d:fe:cc:d0:bb: 07:46:60:33:2b:d8:e4:54:6a:29:29:e5:8b:f8:2e: ae:46:41:61:5e:8d:d0:5a:c7:62:c9:c3:cd:df:26: 0a:ab:78:ca:a4:6d:1b:fc:d1:58:21:37:2a:4e:f7: fb:a3:83:06:f6:de:55:0a:a3:90:09:1e:6e:b8:49: 9e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BA:52:99:E5:F5:94:77:C5:72:BA:8C:50:C8:F0:22:6C:C2:4D:3F X509v3 Authority Key Identifier: keyid:A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:e5:8a:f7:f9:ea:7f:1b:83:1b:90:4f:80:1f:e9:08:45:f5: 59:25:1a:cf:e3:40:c5:78:7d:56:da:f4:d3:42:4a:11:95:42: 67:db:d7:c0:30:36:04:be:a9:20:27:d4:df:ef:12:a5:8c:fd: 78:97:ce:11:a9:b6:bf:2f:01:a4:f1:c6:d3:45:41:42:43:0f: 6a:82:68:1a:cf:6b:cb:31:17:54:fd:77:36:55:20:9f:9c:9d: 0a:2c:a3:07:44:8d:c7:76:ea:97:da:24:92:96:ce:be:d9:f8: cc:a1:f4:20:bf:cf:4f:f6:85:01:06:f1:9e:68:03:ef:ce:79: aa:9f:85:97:7a:51:4c:88:1e:7f:e9:1e:67:3e:1b:30:d2:8e: 66:82:1d:89:94:eb:08:33:54:14:bd:d4:20:d3:bb:6f:a5:e2: 2f:d5:37:9d:cd:0d:ef:75:f5:94:6f:62:64:b7:14:d5:24:1f: 66:9d:e0:19:7e:ce:84:ea:79:14:f0:25:a6:6d:dc:5f:76:2b: 29:39:68:ef:67:dc:b2:2d:a8:1c:cc:a8:20:ab:e8:6a:ea:1b: c0:6e:9c:49:32:b7:75:1b:0b:10:98:2a:bf:a1:52:d6:c4:dd: d6:90:8b:7c:57:d1:7a:9a:16:56:2c:93:a5:c0:0f:23:19:f9: bc:c0:3a:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDJEODExMC8GA1UEBRMoQTJEMEU3REY4OEFCNjlEQjZFMDU5QTMwNjRFNEREQzFF NkZDOUQxOTAeFw0yNjAxMjMwNjQ5MTJaFw0yNjAxMzAwNjQ5MTJaMBgxFjAUBgNV BAMMDTY5NzMxOWU4LWZlYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC67QT+luuGYDHF1LIt9V2TPJAbPKvB3lBhq92f5gZC9Lo6uzC32+Emu8oowi7S Oea/znuumANd3URNewZdjs9Phh++mNFhZW+KgUlypNE35SvjWRuey4KhaiWDh+ak 83pVttf23ov3ZXViuGVv23sh/Yq3pY8/niD0EuBxxwLzmhobP49kDh8z2Qx/aNFd kND6ekHhEMcsFqMaxalFrHls1xUa/5S/TF6jDx2cq+N5O4mkKrS80cawvLv06+xN /szQuwdGYDMr2ORUaikp5Yv4Lq5GQWFejdBax2LJw83fJgqreMqkbRv80VghNypO 9/ujgwb23lUKo5AJHm64SZ4FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNbpSmeX1 lHfFcrqMUMjwImzCTT8wHwYDVR0jBBgwFoAUotDn34iradtuBZowZOTdweb8nRkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMkQ4Lzk0OTZENzRFQzkx MTExRjBCMDAxQ0U4M0M0RjlBRTAyL290RG4zNGlyYWR0dUJab3daT1Rkd2ViOG5S ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3REbjM0aXJhZHR1Qlpvd1pPVGR3ZWI4blJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MkQ4Lzk0OTZENzRFQzkxMTExRjBCMDAxQ0U4M0M0RjlBRTAyL290RG4zNGlyYWR0 dUJab3daT1Rkd2ViOG5Say5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACblivf56n8bgxuQT4Af6QhF9VklGs/jQMV4fVba9NNCShGVQmfb18Aw NgS+qSAn1N/vEqWM/XiXzhGptr8vAaTxxtNFQUJDD2qCaBrPa8sxF1T9dzZVIJ+c nQosowdEjcd26pfaJJKWzr7Z+Myh9CC/z0/2hQEG8Z5oA+/OeaqfhZd6UUyIHn/p Hmc+GzDSjmaCHYmU6wgzVBS91CDTu2+l4i/VN53NDe919ZRvYmS3FNUkH2ad4Bl+ zoTqeRTwJaZt3F92Kyk5aO9n3LItqBzMqCCr6GrqG8BunEkyt3UbCxCYKr+hUtbE 3daQi3xX0XqaFlYsk6XADyMZ+bzAOoo= -----END CERTIFICATE-----Generated at Sun Jan 25 04:33:32 2026 by rpki-client