This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json) Hash identifier: UaFb7pgN1qkW9gPRCeCnfRMlc5mNFZUFw/1gfpN7pkQ= Subject key identifier: 03:2E:79:94:DD:95:46:14:D9:D2:AE:5A:22:54:85:19:A8:FB:70:0F Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Certificate serial: 1F67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft Manifest number: 1F37 Signing time: Sat 24 Jan 2026 15:50:20 +0000 Manifest this update: Sat 24 Jan 2026 15:50:20 +0000 Manifest next update: Sat 31 Jan 2026 15:50:20 +0000 Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: 4+IfwZStMlaVvSnXzNkweYi8dfAIQ8xvhuMEpRGzZjs=) 2: A63484760E7511F0B651A474C4F9AE02.roa (hash: viR4skCP/MVivW71rPCLWb/HM+520HPQpRhVM95GRJo=) 3: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: Pst+EyYihHYvgrhmvznh/Qw7ABaO8rde6PoQvXSj1X0=) 4: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: hzfdO/T7dLYx6x9B0cEhqN7KXAuqulTey8E65Ho7Grk=) 5: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: z6LWqtEj9AU1LHL6Pkyr2Ux5B41+S1GwphxwVqUtIEg=) 6: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: CjMWzQ4orDUG/TY7wjogSOeP/MIVCZP81sPmtBO9dvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8039 (0x1f67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Validity Not Before: Jan 24 15:50:20 2026 GMT Not After : Jan 31 15:50:20 2026 GMT Subject: CN=6974ea3c-0265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:df:4c:ab:a1:9f:81:8f:aa:35:c3:cc:b1:f4: 10:c3:45:1a:35:18:4d:46:f6:a3:e5:11:cf:23:0a: 60:3a:9c:02:7b:ea:26:b2:59:cf:22:90:d7:d0:4f: e6:7a:8b:87:0f:e0:d3:59:ca:b9:14:f8:a9:10:f9: 2d:a4:0e:e1:2c:ab:a0:cd:87:df:4c:4b:eb:09:6a: a5:9c:9d:af:10:e6:a4:e3:5e:0c:a2:8d:f1:8e:8e: aa:f8:49:a4:8d:b9:32:b3:1e:5b:54:6a:85:60:02: e2:36:ae:83:0a:bb:03:f5:79:ef:ab:6e:d7:b4:fd: c1:99:53:6d:99:c6:95:bd:89:71:97:f4:2c:92:86: 0c:9f:2d:0c:55:2b:40:e5:40:3c:1f:1e:2c:d3:39: c2:ea:1b:1d:72:b9:78:e8:56:bc:23:76:f9:03:8f: e3:e0:b5:8b:c8:41:f8:b1:a6:2b:4b:25:c0:35:fe: 48:20:cf:0f:d7:85:46:b5:c2:f1:be:66:30:ec:39: 58:aa:c9:23:72:51:fe:af:46:9e:9c:5f:50:c3:95: 6d:fb:6c:d7:3e:0c:d9:d9:42:64:7b:df:29:a8:bc: f7:6c:a8:e1:98:0c:83:fc:17:de:b0:2c:d5:71:b4: 8f:0a:30:cd:ea:02:9e:29:83:67:1c:1f:4e:5b:44: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2E:79:94:DD:95:46:14:D9:D2:AE:5A:22:54:85:19:A8:FB:70:0F X509v3 Authority Key Identifier: keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:57:58:ad:4e:5a:8a:1c:a5:33:ab:14:10:37:1f:02:30:55: 22:1d:20:40:61:a7:d1:f4:9e:3d:af:68:28:e3:11:9a:bb:f7: 17:1b:8f:7d:21:9d:87:04:5d:ce:c3:44:c6:74:61:8e:47:15: 08:f2:7a:7b:26:57:28:f7:57:f8:96:a8:0d:bb:a3:57:78:77: 0a:c8:bd:c7:f5:b8:92:85:4b:d3:e4:55:8b:f7:1a:fa:f6:5c: 88:04:4c:66:2f:1c:38:b0:0b:23:d6:04:bf:7a:b0:dd:61:fe: 88:36:08:b4:56:dc:09:0c:a2:5c:34:f1:69:f1:a2:0f:a2:7f: 7b:c9:ce:e0:b3:63:e9:0d:c8:f7:99:2a:08:a1:26:2a:78:bb: 6f:f0:bc:29:1c:3c:1a:a3:1b:56:f3:b9:bf:67:79:4c:43:2c: 34:fd:c9:32:90:37:78:e3:ad:61:15:d6:14:b9:d2:4d:b6:62: b4:7c:93:02:e4:e2:d1:20:13:9d:eb:f5:1d:55:c4:b9:35:da: f4:35:b5:4b:54:3c:28:d9:cd:03:06:32:15:be:f4:49:4b:1a: 05:65:dc:9d:cc:a5:97:e9:0e:1d:d4:db:5d:14:72:da:52:b9: a6:b2:cf:57:b9:3b:6a:e0:ee:e3:cc:6e:2c:f4:4c:a7:09:91: 7e:a1:a3:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1 MDM2ODI0NkYwHhcNMjYwMTI0MTU1MDIwWhcNMjYwMTMxMTU1MDIwWjAYMRYwFAYD VQQDDA02OTc0ZWEzYy0wMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqt9Mq6GfgY+qNcPMsfQQw0UaNRhNRvaj5RHPIwpgOpwCe+omslnPIpDX0E/m eouHD+DTWcq5FPipEPktpA7hLKugzYffTEvrCWqlnJ2vEOak414Moo3xjo6q+Emk jbkysx5bVGqFYALiNq6DCrsD9Xnvq27XtP3BmVNtmcaVvYlxl/QskoYMny0MVStA 5UA8Hx4s0znC6hsdcrl46Fa8I3b5A4/j4LWLyEH4saYrSyXANf5IIM8P14VGtcLx vmYw7DlYqskjclH+r0aenF9Qw5Vt+2zXPgzZ2UJke98pqLz3bKjhmAyD/BfesCzV cbSPCjDN6gKeKYNnHB9OW0RYqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMueZTd lUYU2dKuWiJUhRmo+3APMB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBFMy8yOTE1NzZCRTZCMzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdn UzdFbGhQUGx0ZkJRTm9KRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASV1itTlqKHKUzqxQQNx8CMFUiHSBAYafR9J49r2go4xGau/cXG499 IZ2HBF3Ow0TGdGGORxUI8np7Jlco91f4lqgNu6NXeHcKyL3H9biShUvT5FWL9xr6 9lyIBExmLxw4sAsj1gS/erDdYf6INgi0VtwJDKJcNPFp8aIPon97yc7gs2PpDcj3 mSoIoSYqeLtv8LwpHDwaoxtW87m/Z3lMQyw0/ckykDd4461hFdYUudJNtmK0fJMC 5OLRIBOd6/UdVcS5Ndr0NbVLVDwo2c0DBjIVvvRJSxoFZdydzKWX6Q4d1NtdFHLa Urmmss9XuTtq4O7jzG4s9EynCZF+oaMl -----END CERTIFICATE-----Generated at Sun Jan 25 08:20:13 2026 by rpki-client