This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft File: 2leiQgcEcAjXOmXWgiSke5oD2qo.mft (raw, json) Hash identifier: TADoUOkufIb3R6haEshrn7K2FN0yU9dpvP+1EApJO2I= Subject key identifier: 52:69:9A:7B:18:50:68:C2:61:49:2A:70:27:F5:06:C1:61:62:7B:D1 Authority key identifier: DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA Certificate issuer: /CN=A914573E/serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA Certificate serial: 068C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft Manifest number: 0685 Signing time: Sat 24 Jan 2026 21:47:10 +0000 Manifest this update: Sat 24 Jan 2026 21:47:09 +0000 Manifest next update: Sat 31 Jan 2026 21:47:09 +0000 Files and hashes: 1: 2leiQgcEcAjXOmXWgiSke5oD2qo.crl (hash: jOd32x9eSXEYG19H9+aqmvNAseu6XNIwzjWVaGUz19w=) 2: B67E0BB4A5A511EB94C0DE0FC4F9AE02.roa (hash: abFPv422MLo42yfuvK6GPVX4x/zkpsuvBFUhQvjbtGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914573E, serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA Validity Not Before: Jan 24 21:47:09 2026 GMT Not After : Jan 31 21:47:09 2026 GMT Subject: CN=69753ddd-f5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:0f:68:0d:d5:1d:34:b8:fa:c3:f9:ab:38: b7:dd:90:96:ef:64:5d:02:43:55:46:61:d5:b4:eb: 07:f0:b1:13:a1:7d:7f:38:e2:e5:c0:ff:02:d6:a5: 4f:5e:d1:30:95:64:fa:c1:3e:5d:9d:ee:46:9a:b7: c7:7b:4f:5b:da:e8:92:73:b4:f0:31:46:e3:94:2d: 67:3c:33:3a:99:c9:fb:e5:7e:ed:f0:9d:68:3a:30: b0:fa:06:dd:18:eb:ef:a7:cf:3d:cf:7c:f1:c9:1b: 0a:85:a0:4f:67:4e:2d:33:1b:9e:4f:a5:ec:b8:4c: 9f:b8:37:7e:66:e2:45:4a:aa:55:1e:c5:e0:48:fd: be:d9:5d:e5:a8:dd:a9:95:b4:1f:ad:81:d3:53:60: 27:f1:3a:75:f1:52:7d:51:05:a1:4f:f7:bb:8b:02: a6:b8:cb:71:39:aa:6e:a7:26:c7:3e:e6:a6:50:23: e0:66:82:cf:5d:2f:9b:12:f0:f4:79:78:f8:5c:f4: 86:cd:d1:53:b9:12:58:63:d5:f1:93:08:d9:50:35: 9b:be:27:55:a8:33:2a:09:dc:36:4d:5d:03:87:5c: f3:04:c2:b0:66:c9:9a:f5:a3:37:de:cf:46:11:83: 86:bf:57:a7:7f:21:e0:26:50:6c:7a:5f:4d:d5:de: f1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:69:9A:7B:18:50:68:C2:61:49:2A:70:27:F5:06:C1:61:62:7B:D1 X509v3 Authority Key Identifier: keyid:DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:36:75:fa:fd:50:98:e2:16:9e:50:eb:a2:3b:68:1a:0e:7b: cf:b2:77:8f:b5:bd:20:d4:f9:88:aa:2d:c5:56:38:fe:f3:44: b9:02:09:b5:e7:7d:fd:ef:85:e7:73:c9:f0:e3:c5:32:31:88: fa:99:b2:92:68:b2:60:da:5a:c5:d2:0a:79:87:af:89:9b:3d: 57:ae:3d:bc:fb:98:2a:a0:a2:72:a3:3a:51:b6:b0:e4:20:1c: df:10:f4:0b:3b:84:37:ac:af:cf:f0:7f:7a:a4:26:59:e9:52: f2:8d:da:f2:9c:f0:f3:02:bc:aa:79:c0:26:68:0d:72:18:f9: 12:de:06:d0:34:76:af:c1:30:70:7c:7c:a9:57:94:e9:76:64: 3a:28:3d:79:4f:b5:b1:23:12:a8:0e:de:33:dc:2f:1f:48:cc: be:10:5c:42:94:54:02:5b:39:e5:14:03:94:fa:37:3e:e4:66: ae:91:49:b2:e1:2e:a4:1c:29:4a:04:c1:35:5e:ae:38:d8:92: ca:c9:cc:08:2c:e7:a1:56:c8:ce:6d:31:62:5b:44:a3:76:89: 00:91:ed:42:83:73:02:11:41:e5:c4:ee:a1:d0:30:cb:58:37: 6b:83:ad:ea:1f:ec:ad:cf:85:8f:9f:ff:a5:6f:d0:ae:47:9e: 45:ff:53:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU3M0UxMTAvBgNVBAUTKERBNTdBMjQyMDcwNDcwMDhENzNBNjVENjgyMjRBNDdC OUEwM0RBQUEwHhcNMjYwMTI0MjE0NzA5WhcNMjYwMTMxMjE0NzA5WjAYMRYwFAYD VQQDDA02OTc1M2RkZC1mNWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+4PaA3VHTS4+sP5qzi33ZCW72RdAkNVRmHVtOsH8LEToX1/OOLlwP8C1qVP XtEwlWT6wT5dne5GmrfHe09b2uiSc7TwMUbjlC1nPDM6mcn75X7t8J1oOjCw+gbd GOvvp889z3zxyRsKhaBPZ04tMxueT6XsuEyfuDd+ZuJFSqpVHsXgSP2+2V3lqN2p lbQfrYHTU2An8Tp18VJ9UQWhT/e7iwKmuMtxOapupybHPuamUCPgZoLPXS+bEvD0 eXj4XPSGzdFTuRJYY9XxkwjZUDWbvidVqDMqCdw2TV0Dh1zzBMKwZsma9aM33s9G EYOGv1enfyHgJlBsel9N1d7xyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJpmnsY UGjCYUkqcCf1BsFhYnvRMB8GA1UdIwQYMBaAFNpXokIHBHAI1zpl1oIkpHuaA9qq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTczRS82NzY4OTc4RUE1 QTQxMUVCOThDMzI5MEZDNEY5QUUwMi8ybGVpUWdjRWNBalhPbVhXZ2lTa2U1b0Qy cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsZWlRZ2NFY0FqWE9tWFdnaVNrZTVvRDJxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTczRS82NzY4OTc4RUE1QTQxMUVCOThDMzI5MEZDNEY5QUUwMi8ybGVpUWdjRWNB alhPbVhXZ2lTa2U1b0QycW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4NnX6/VCY4haeUOuiO2gaDnvPsnePtb0g1PmIqi3FVjj+80S5Agm1 533974Xnc8nw48UyMYj6mbKSaLJg2lrF0gp5h6+Jmz1Xrj28+5gqoKJyozpRtrDk IBzfEPQLO4Q3rK/P8H96pCZZ6VLyjdrynPDzAryqecAmaA1yGPkS3gbQNHavwTBw fHypV5TpdmQ6KD15T7WxIxKoDt4z3C8fSMy+EFxClFQCWznlFAOU+jc+5GaukUmy 4S6kHClKBME1Xq442JLKycwILOehVsjObTFiW0SjdokAke1Cg3MCEUHlxO6h0DDL WDdrg63qH+ytz4WPn/+lb9CuR55F/1OS -----END CERTIFICATE-----Generated at Sun Jan 25 06:19:41 2026 by rpki-client