This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: eQPEZKCM1qM2LkeZDfDklSV8xqwdrWpnehAYRmbTWnQ= Subject key identifier: 35:AA:85:E6:57:6B:A6:F3:3A:DE:1C:1B:75:C0:81:78:16:B7:CA:E6 Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2D2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2D17 Signing time: Sat 24 Jan 2026 15:23:02 +0000 Manifest this update: Sat 24 Jan 2026 15:23:01 +0000 Manifest next update: Sat 31 Jan 2026 15:23:01 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: /H1RCdibav9BsIPM9VFNK2DHd/jrCwMO9Hn2ExBZwWs=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: R9f6Z3Uevp4d36wvfS3ESJSWBBwm4wuAIByOXNTGRgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11565 (0x2d2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Jan 24 15:23:01 2026 GMT Not After : Jan 31 15:23:01 2026 GMT Subject: CN=6974e3d6-d5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:70:56:1b:df:d4:0b:83:80:bc:75:f3:01:a4: 0a:d2:82:4e:a7:47:f4:32:a8:38:51:c2:bf:74:7c: 4f:86:22:e0:0d:4a:0c:5e:03:24:da:c7:83:cc:8e: 82:cd:21:5d:0c:ee:1b:75:53:49:e6:d5:7f:48:d0: c0:3b:83:09:f9:41:64:a9:28:f5:1a:ba:75:82:51: f9:59:8f:1f:bc:89:44:24:c1:74:79:c5:0b:f7:b1: cf:a3:92:f6:bb:16:9d:43:26:d4:e1:c6:23:a8:5c: ab:15:e3:a5:ae:3a:d0:ea:31:20:14:e3:7b:3b:84: 5b:b3:8f:62:30:0f:1e:06:91:02:53:9d:36:50:e0: a5:a4:59:ed:26:71:af:d9:27:a2:f8:78:64:1f:b4: a7:82:05:2f:03:e4:11:a8:ad:fb:54:61:ea:e9:e3: b8:6b:64:17:c8:f0:a1:93:33:77:04:64:a3:21:99: f2:83:b2:ca:0d:e6:f6:ab:d5:f7:b1:c4:24:f3:0a: 5f:56:57:eb:d4:f4:4e:b0:1a:50:c1:56:6b:3f:db: fc:8d:33:77:a7:e7:ca:c3:0b:15:ce:a3:42:cb:e1: f7:6b:4c:94:e7:7e:c2:5c:c5:30:88:ea:a1:56:fe: 9b:05:c4:bc:60:c0:d7:fe:1a:f9:da:b9:7f:33:1c: b4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AA:85:E6:57:6B:A6:F3:3A:DE:1C:1B:75:C0:81:78:16:B7:CA:E6 X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d8:b1:65:16:2f:ae:a1:8d:f3:90:c2:c0:71:74:7d:29:de: bc:22:d9:d4:13:23:12:e1:63:73:f9:1d:30:a8:de:ea:2b:53: 1e:60:f6:b9:a1:69:08:88:81:ec:24:b6:70:7e:e8:4b:17:3b: 40:72:a7:5c:dd:b8:72:d9:31:93:a5:88:9e:8a:08:de:2d:e9: 3e:ec:7a:c6:06:83:f7:b8:4c:2f:7a:b2:de:91:26:c4:44:aa: 5e:f0:6c:b6:bc:cd:58:6b:00:b9:b3:71:04:4e:17:5c:8f:ff: ea:ef:a3:30:f9:f5:5e:cc:d5:2d:be:71:77:9b:3c:63:85:7c: a3:b1:52:63:56:4e:1b:84:5f:69:06:d1:34:04:bb:8f:23:b1: 1d:aa:4b:02:82:8e:52:cb:14:f1:79:8b:18:05:dd:a0:ff:7e: 27:c0:39:1a:2e:f1:31:7d:3a:88:10:c7:c2:01:e0:fa:76:d9: bd:79:29:dc:21:82:23:91:19:5e:02:e7:2e:91:8d:08:04:d3: 23:77:78:e9:55:10:03:14:1e:94:8b:0e:0d:c0:9e:1a:59:d4: 9e:8d:1a:fd:4f:81:3a:f3:f1:3b:99:41:bd:67:46:cf:e6:ad: f1:c6:5f:c5:03:52:cb:cf:a6:73:af:37:12:82:ce:71:a3:c7: a8:bb:80:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjYwMTI0MTUyMzAxWhcNMjYwMTMxMTUyMzAxWjAYMRYwFAYD VQQDDA02OTc0ZTNkNi1kNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XBWG9/UC4OAvHXzAaQK0oJOp0f0Mqg4UcK/dHxPhiLgDUoMXgMk2seDzI6C zSFdDO4bdVNJ5tV/SNDAO4MJ+UFkqSj1Grp1glH5WY8fvIlEJMF0ecUL97HPo5L2 uxadQybU4cYjqFyrFeOlrjrQ6jEgFON7O4Rbs49iMA8eBpECU502UOClpFntJnGv 2Sei+HhkH7SnggUvA+QRqK37VGHq6eO4a2QXyPChkzN3BGSjIZnyg7LKDeb2q9X3 scQk8wpfVlfr1PROsBpQwVZrP9v8jTN3p+fKwwsVzqNCy+H3a0yU537CXMUwiOqh Vv6bBcS8YMDX/hr52rl/Mxy0PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWqheZX a6bzOt4cG3XAgXgWt8rmMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA62LFlFi+uoY3zkMLAcXR9Kd68ItnUEyMS4WNz+R0wqN7qK1MeYPa5 oWkIiIHsJLZwfuhLFztAcqdc3bhy2TGTpYieigjeLek+7HrGBoP3uEwverLekSbE RKpe8Gy2vM1YawC5s3EEThdcj//q76Mw+fVezNUtvnF3mzxjhXyjsVJjVk4bhF9p BtE0BLuPI7EdqksCgo5SyxTxeYsYBd2g/34nwDkaLvExfTqIEMfCAeD6dtm9eSnc IYIjkRleAucukY0IBNMjd3jpVRADFB6Uiw4NwJ4aWdSejRr9T4E68/E7mUG9Z0bP 5q3xxl/FA1LLz6ZzrzcSgs5xo8eou4Cc -----END CERTIFICATE-----Generated at Sun Jan 25 08:23:23 2026 by rpki-client