This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: BYUH/nZcS8I4E8IYsvbEj5IaK+6gvBli8o9llHlGiHM= Subject key identifier: DA:D9:AC:91:18:FE:26:E7:B0:0B:7D:F9:76:F6:6A:7C:25:38:0A:33 Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 3587 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 3550 Signing time: Sat 24 Jan 2026 14:21:31 +0000 Manifest this update: Sat 24 Jan 2026 14:21:31 +0000 Manifest next update: Sat 31 Jan 2026 14:21:31 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: oTWKgBUDUNLEQhVhOqo+vliWfwvO+vUxe4HS2woRYv4=) 2: 9E3540C2C41311F0ADD84872C4F9AE02.roa (hash: HO2uIzfxAfoPWxfU892wMpOqa/oj9WPQVlDPIvb5NMQ=) 3: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: SUsUIXE/tKa73O2xJJTZ5W41hRd+PFlpRhUTlZjlrnU=) 4: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: C0b11kHxUkGRgJNkSLgXVrGvFc4MAtKBux3nfA6wsg8=) 5: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: 3w7qO3vRXc8eTnPd+5qLXghMh2FqcCG7VeR4W+VW+ps=) 6: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: z0+u6Iw9nBsWkBxEBsOze7XPIpbGqUrpaAbGEfXztn0=) 7: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: yQ9Zz2wr8tjKdfaxVczUpLIfv3iNt/pg9a1JKFuCtos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13703 (0x3587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Jan 24 14:21:31 2026 GMT Not After : Jan 31 14:21:31 2026 GMT Subject: CN=6974d56b-8f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7e:e9:93:ae:5a:b8:c7:49:29:b9:31:ff:2a: e9:38:6a:e8:a1:92:66:e2:1a:ba:17:d5:96:7f:28: 10:7d:1a:ec:bb:c6:13:3e:53:1c:d3:4b:f5:e7:63: 13:7a:91:55:43:86:19:0a:c6:66:0d:84:dc:02:95: 1e:29:52:6d:ae:04:87:8e:b7:a6:4e:9e:d9:31:16: b3:e1:a2:dc:54:c8:e1:b9:49:33:f4:82:9a:0a:28: b2:ce:8b:16:7f:18:0a:b6:4a:cf:21:55:0c:1a:1d: 62:e6:23:e2:7d:c3:c1:4a:a7:85:7d:99:54:51:5d: 62:70:ce:2b:f5:44:2c:16:9d:f6:77:eb:3a:20:10: b3:12:17:24:33:0b:c3:d9:3c:37:5a:81:73:58:40: 02:f0:d3:87:2f:3b:3f:45:47:a7:b6:d4:69:7b:da: a5:4c:a7:fa:cd:30:df:19:f5:69:e8:b7:da:20:96: 03:53:67:f2:64:5e:5b:39:93:82:c9:f6:1f:c4:ef: 94:51:4a:f0:44:c7:12:32:34:e4:9a:f0:d0:94:43: 44:96:da:6f:97:da:32:31:f1:8b:48:09:99:71:1d: 45:d1:0d:dd:6d:1f:38:63:1e:24:dd:99:27:5b:ba: f0:48:8d:36:61:a8:c1:cf:e0:29:dc:ca:43:2c:67: 3d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D9:AC:91:18:FE:26:E7:B0:0B:7D:F9:76:F6:6A:7C:25:38:0A:33 X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:7d:db:bc:3e:7a:b3:50:0a:b2:52:8f:82:7a:bf:eb:45:08: 6f:89:d7:b4:c5:13:2f:9a:ef:af:b4:04:a0:cf:93:79:93:b9: 10:97:73:b0:9a:13:b6:36:85:cb:79:53:ae:23:e3:06:fc:a6: aa:05:db:53:97:14:9a:08:bb:6c:ed:c5:62:eb:fa:de:39:95: 2f:60:d4:3a:bf:c8:6f:29:34:c0:42:19:10:2a:24:e9:00:23: 7f:c8:c3:12:24:09:4a:19:eb:f0:29:65:4c:19:a7:17:5a:08: 80:69:35:a4:2f:40:2c:6d:69:77:1e:da:1c:27:26:7f:09:56: d3:cf:90:15:6d:3c:62:80:29:e7:76:cd:53:d4:2b:33:1b:08: 15:c0:f2:fc:ab:ce:a5:b6:5d:bb:26:37:c8:7b:af:aa:3f:6f: ea:8b:bb:32:3d:cb:59:4d:64:70:32:8c:de:51:3c:77:de:75: 45:64:3b:98:86:9d:24:60:e9:a1:05:c1:80:85:8d:8d:13:33: 2b:47:43:06:61:b4:22:d0:52:d4:1d:36:20:75:27:58:91:20: 08:4f:3f:da:10:c0:a7:c0:4f:04:32:0a:24:29:e3:ad:cf:a3: 6d:2f:4b:dc:d2:2e:99:8e:12:50:3b:23:e5:8a:ad:40:85:a3: 41:fa:17:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjYwMTI0MTQyMTMxWhcNMjYwMTMxMTQyMTMxWjAYMRYwFAYD VQQDDA02OTc0ZDU2Yi04ZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1H7pk65auMdJKbkx/yrpOGrooZJm4hq6F9WWfygQfRrsu8YTPlMc00v152MT epFVQ4YZCsZmDYTcApUeKVJtrgSHjremTp7ZMRaz4aLcVMjhuUkz9IKaCiiyzosW fxgKtkrPIVUMGh1i5iPifcPBSqeFfZlUUV1icM4r9UQsFp32d+s6IBCzEhckMwvD 2Tw3WoFzWEAC8NOHLzs/RUenttRpe9qlTKf6zTDfGfVp6LfaIJYDU2fyZF5bOZOC yfYfxO+UUUrwRMcSMjTkmvDQlENEltpvl9oyMfGLSAmZcR1F0Q3dbR84Yx4k3Zkn W7rwSI02YajBz+Ap3MpDLGc9FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrZrJEY /ibnsAt9+Xb2anwlOAozMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdfdu8PnqzUAqyUo+Cer/rRQhvide0xRMvmu+vtASgz5N5k7kQl3Ow mhO2NoXLeVOuI+MG/KaqBdtTlxSaCLts7cVi6/reOZUvYNQ6v8hvKTTAQhkQKiTp ACN/yMMSJAlKGevwKWVMGacXWgiAaTWkL0AsbWl3HtocJyZ/CVbTz5AVbTxigCnn ds1T1CszGwgVwPL8q86ltl27JjfIe6+qP2/qi7syPctZTWRwMozeUTx33nVFZDuY hp0kYOmhBcGAhY2NEzMrR0MGYbQi0FLUHTYgdSdYkSAITz/aEMCnwE8EMgokKeOt z6NtL0vc0i6ZjhJQOyPliq1AhaNB+heC -----END CERTIFICATE-----Generated at Sun Jan 25 11:52:32 2026 by rpki-client