This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft File: hHBzG4maje6yn-pRuQ3BWNvaKvA.mft (raw, json) Hash identifier: MnXHBW3JJJYJ93MTwXrlN+ganbsL1dXkjkKJ881SIQk= Subject key identifier: 68:18:2A:62:B3:4E:9B:20:A6:0A:5E:90:A1:8D:D2:B8:6C:4C:E6:A1 Authority key identifier: 84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0 Certificate issuer: /CN=A914AF32/serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0 Certificate serial: 1408 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft Manifest number: 13F3 Signing time: Sat 24 Jan 2026 16:40:21 +0000 Manifest this update: Sat 24 Jan 2026 16:40:21 +0000 Manifest next update: Sat 31 Jan 2026 16:40:21 +0000 Files and hashes: 1: hHBzG4maje6yn-pRuQ3BWNvaKvA.crl (hash: FZ2iNeSgVY72IBUZrP3ZDV8SOXLeEhxdtkvOZmJAm1w=) 2: 813A255423A611F09025FC11C4F9AE02.roa (hash: uohcAOcE60pEPVtJLM2mjq+61BAF61CBsuLOOzelXqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5128 (0x1408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914AF32, serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0 Validity Not Before: Jan 24 16:40:21 2026 GMT Not After : Jan 31 16:40:21 2026 GMT Subject: CN=6974f5f5-538b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:49:a6:a3:92:50:58:5a:a8:3d:31:c1:42: 52:47:68:19:76:98:bc:16:e2:c2:4c:c6:89:45:32: 1d:c1:8c:5d:f6:52:bb:2b:ba:15:c1:10:72:ae:19: b5:22:ae:93:cd:98:4e:d3:48:9a:54:66:8a:ff:9e: f6:df:e4:67:49:04:2b:02:85:fc:fb:37:5b:41:11: 8c:a7:3d:0c:98:85:fe:18:c8:04:28:e5:90:81:52: 0f:24:07:42:3c:c8:4d:a6:07:c1:2a:ac:b9:c3:d7: 52:f4:37:95:ef:9d:a6:e4:f1:83:fb:b2:51:75:98: ec:b0:63:d7:82:b3:f2:f4:5a:e6:eb:77:ac:da:7a: 2b:52:8c:5e:0a:7a:57:a0:42:ce:60:a7:c3:11:1f: 66:34:cb:c4:c0:ae:9d:90:93:01:2f:ea:bb:43:e4: e3:3b:24:fa:42:fe:b8:e0:72:f0:0e:61:4a:b7:cb: 1d:26:af:cd:98:47:6f:db:9c:d4:b5:0f:03:7e:25: 67:ef:ce:18:2d:06:75:8a:e4:0f:a3:da:0b:95:e7: b0:25:eb:bd:56:3a:70:ff:69:53:9b:64:09:2a:f0: 39:c0:db:01:a9:a3:7d:45:b8:d6:31:05:7c:b0:f6: a4:8b:e0:38:1d:1b:31:01:9c:92:c3:fd:0c:fe:16: 8e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:18:2A:62:B3:4E:9B:20:A6:0A:5E:90:A1:8D:D2:B8:6C:4C:E6:A1 X509v3 Authority Key Identifier: keyid:84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ba:4c:78:b4:c5:7e:06:95:2f:31:45:50:6d:19:6f:f8:f6: a4:82:c6:00:fb:ea:07:5e:90:2c:a8:f4:ff:6b:b6:02:a5:f2: 54:11:cc:9d:7e:c3:57:70:0a:33:f2:24:ad:de:06:50:74:48: b8:46:b2:10:53:e4:f9:2c:b9:f9:30:f0:82:96:7c:4f:f3:a7: c9:18:81:af:2d:7d:20:c7:96:30:b4:59:58:cc:71:e7:c4:96: 89:35:04:b0:e1:2b:4a:f7:38:97:e2:38:f3:6c:e4:95:37:38: 2a:22:6f:6e:47:5c:e0:69:ea:80:b4:c3:a2:68:b2:fe:ff:ea: 10:6f:f1:dd:39:e7:81:a8:fc:e5:d9:c0:bc:07:2f:50:b2:d6: 5c:3b:65:d8:c8:84:32:19:82:38:85:92:89:56:eb:46:13:71: 00:f5:9e:a5:34:eb:6e:32:f5:7d:47:48:67:bf:88:2f:62:d6: 2e:7e:a7:23:d2:b4:4b:d8:20:5d:b0:2f:80:6b:96:c8:b8:e8: 4e:e9:f1:f2:95:30:4a:c7:48:24:f1:c6:3c:5d:52:87:58:6f: 45:82:c6:21:50:d8:09:c2:d7:bc:e8:33:1f:5f:aa:7f:46:90: 5a:97:54:d9:d3:26:45:48:9f:a8:28:40:72:24:f3:8a:6f:be: 39:a8:b1:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFGMzIxMTAvBgNVBAUTKDg0NzA3MzFCODk5QThERUVCMjlGRUE1MUI5MERDMTU4 REJEQTJBRjAwHhcNMjYwMTI0MTY0MDIxWhcNMjYwMTMxMTY0MDIxWjAYMRYwFAYD VQQDDA02OTc0ZjVmNS01MzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+9JpqOSUFhaqD0xwUJSR2gZdpi8FuLCTMaJRTIdwYxd9lK7K7oVwRByrhm1 Iq6TzZhO00iaVGaK/5723+RnSQQrAoX8+zdbQRGMpz0MmIX+GMgEKOWQgVIPJAdC PMhNpgfBKqy5w9dS9DeV752m5PGD+7JRdZjssGPXgrPy9Frm63es2norUoxeCnpX oELOYKfDER9mNMvEwK6dkJMBL+q7Q+TjOyT6Qv644HLwDmFKt8sdJq/NmEdv25zU tQ8DfiVn784YLQZ1iuQPo9oLleewJeu9Vjpw/2lTm2QJKvA5wNsBqaN9RbjWMQV8 sPaki+A4HRsxAZySw/0M/haOHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgYKmKz TpsgpgpekKGN0rhsTOahMB8GA1UdIwQYMBaAFIRwcxuJmo3usp/qUbkNwVjb2irw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUYzMi85REVDMDc0MDlF NTAxMUU4OTgwM0Q4MjZDNEY5QUUwMi9oSEJ6RzRtYWplNnluLXBSdVEzQldOdmFL dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hIQnpHNG1hamU2eW4tcFJ1UTNCV052YUt2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUYzMi85REVDMDc0MDlFNTAxMUU4OTgwM0Q4MjZDNEY5QUUwMi9oSEJ6RzRtYWpl NnluLXBSdVEzQldOdmFLdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXukx4tMV+BpUvMUVQbRlv+PakgsYA++oHXpAsqPT/a7YCpfJUEcyd fsNXcAoz8iSt3gZQdEi4RrIQU+T5LLn5MPCClnxP86fJGIGvLX0gx5YwtFlYzHHn xJaJNQSw4StK9ziX4jjzbOSVNzgqIm9uR1zgaeqAtMOiaLL+/+oQb/HdOeeBqPzl 2cC8By9QstZcO2XYyIQyGYI4hZKJVutGE3EA9Z6lNOtuMvV9R0hnv4gvYtYufqcj 0rRL2CBdsC+Aa5bIuOhO6fHylTBKx0gk8cY8XVKHWG9FgsYhUNgJwte86DMfX6p/ RpBal1TZ0yZFSJ+oKEByJPOKb745qLGz -----END CERTIFICATE-----Generated at Sun Jan 25 06:08:50 2026 by rpki-client