This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft File: 529w4WvXl_FHD9HglUZu2f_XC94.mft (raw, json) Hash identifier: RZs7mz+7Baj9FiDjfJSwIDnpJEHv6mvIP1oIMnOSAp8= Subject key identifier: 9E:EF:BB:D8:58:88:13:AA:4B:96:7E:A2:AD:9C:2A:17:FA:71:A5:76 Authority key identifier: E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE Certificate issuer: /CN=A914B6D8/serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft Manifest number: 28 Signing time: Sat 24 Jan 2026 17:47:48 +0000 Manifest this update: Sat 24 Jan 2026 17:47:48 +0000 Manifest next update: Sat 31 Jan 2026 17:47:48 +0000 Files and hashes: 1: 529w4WvXl_FHD9HglUZu2f_XC94.crl (hash: bzFUfklRk/PtP2xqsINhZ5zkoKMd4ny5xZz3D9BHIAA=) 2: 551B0760BEBD11F0AD50D23AC4F9AE02.roa (hash: k/Bj5MFr5woGzZDRB9XxOYqM9e19oHws7ME7lRNdfok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B6D8, serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE Validity Not Before: Jan 24 17:47:48 2026 GMT Not After : Jan 31 17:47:48 2026 GMT Subject: CN=697505c4-d56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:db:57:c1:4a:a1:d4:8e:18:35:97:f3:a4:72: 4f:5d:2a:d6:ac:c5:cc:e5:0f:6c:88:da:ba:71:52: 2f:53:27:a6:74:4e:5a:06:40:23:5f:fc:15:80:4f: e6:32:3d:7a:74:a8:86:c2:2d:9e:f4:cd:c2:64:ed: ff:cc:5c:07:14:ac:66:15:a0:15:d2:f7:93:d7:2f: 22:9e:09:16:07:ee:91:f4:ea:c6:ba:2f:e4:a7:dd: 3b:b2:a0:05:34:a0:b8:c7:7c:0d:16:01:3d:b9:e0: 00:cd:2d:a1:57:0c:72:0f:55:10:8b:8c:d0:a9:ec: e2:ba:9a:f2:19:5c:5e:ad:a0:8e:11:70:ef:8c:cc: a9:02:6b:28:5a:d3:1f:73:36:20:b1:34:e0:a6:6c: 91:f8:62:d0:2c:50:c4:d3:3e:b4:ce:22:56:bc:ca: 1c:b0:04:fc:58:70:50:80:af:40:13:d0:8f:f7:ec: 9b:1d:40:be:f0:5a:7f:e4:e4:51:15:07:d3:6e:22: ef:a1:79:cd:8c:1c:5f:55:20:42:15:61:fa:b6:31: a1:c2:22:45:73:b6:f7:7d:73:a9:a4:3e:fc:44:c3: d0:9c:35:e5:64:2e:25:3d:9c:72:cd:f1:6b:e4:79: a9:0f:51:7a:78:ac:0a:89:29:15:75:f5:12:0b:82: 59:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EF:BB:D8:58:88:13:AA:4B:96:7E:A2:AD:9C:2A:17:FA:71:A5:76 X509v3 Authority Key Identifier: keyid:E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0f:06:31:aa:e9:b8:6c:a4:db:5a:b2:2c:16:a7:26:d0:22: ae:3d:41:50:35:4c:6d:c5:63:79:be:f4:43:c2:22:b8:28:9e: 3f:66:f6:de:14:7e:02:1d:fd:d7:11:2b:b6:0f:d6:05:7f:c0: 9e:aa:74:77:f5:06:bb:9a:27:a3:97:fd:a3:0d:2d:92:49:2b: 29:d2:3d:5f:52:6b:de:a0:9a:96:e0:63:04:6f:19:7c:0d:71: 1c:92:54:fe:8a:83:8e:76:10:d6:ba:35:a2:e2:f9:50:65:b9: 90:ed:a3:20:e1:b7:17:85:74:86:86:07:9f:08:72:3e:82:13: 7a:93:b8:2d:f5:d7:88:a5:1f:5d:9e:7a:75:3c:f0:1a:b9:31: 61:94:e4:1a:fd:4c:f9:58:15:bd:d0:ff:82:ad:86:e8:af:e7: c1:4b:4e:d8:23:cf:0b:20:5d:92:b1:6a:30:2b:da:bd:31:0a: 03:bf:2b:42:d0:ef:c3:f6:0a:11:dd:d0:67:ea:e0:bd:e5:42: 38:68:82:9e:71:55:2e:c7:3c:4e:9e:d9:ec:2c:9f:fd:47:05: 05:24:60:4a:57:96:35:ae:69:ef:db:94:b5:c2:98:88:bc:54: 64:b4:06:27:24:de:77:fd:ef:96:2c:bb:de:5f:46:ef:0e:e3: e5:f4:6a:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjZEODExMC8GA1UEBRMoRTc2RjcwRTE2QkQ3OTdGMTQ3MEZEMUUwOTU0NjZFRDlG RkQ3MEJERTAeFw0yNjAxMjQxNzQ3NDhaFw0yNjAxMzExNzQ3NDhaMBgxFjAUBgNV BAMMDTY5NzUwNWM0LWQ1NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC121fBSqHUjhg1l/Okck9dKtasxczlD2yI2rpxUi9TJ6Z0TloGQCNf/BWAT+Yy PXp0qIbCLZ70zcJk7f/MXAcUrGYVoBXS95PXLyKeCRYH7pH06sa6L+Sn3TuyoAU0 oLjHfA0WAT254ADNLaFXDHIPVRCLjNCp7OK6mvIZXF6toI4RcO+MzKkCayha0x9z NiCxNOCmbJH4YtAsUMTTPrTOIla8yhywBPxYcFCAr0AT0I/37JsdQL7wWn/k5FEV B9NuIu+hec2MHF9VIEIVYfq2MaHCIkVztvd9c6mkPvxEw9CcNeVkLiU9nHLN8Wvk eakPUXp4rAqJKRV19RILglnjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnu+72FiI E6pLln6irZwqF/pxpXYwHwYDVR0jBBgwFoAU529w4WvXl/FHD9HglUZu2f/XC94w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNkQ4LzU2OTQ4QjMyQkVC QTExRjA5NkE2Mjc4NEM0RjlBRTAyLzUyOXc0V3ZYbF9GSEQ5SGdsVVp1MmZfWEM5 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNTI5dzRXdlhsX0ZIRDlIZ2xVWnUyZl9YQzk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC NkQ4LzU2OTQ4QjMyQkVCQTExRjA5NkE2Mjc4NEM0RjlBRTAyLzUyOXc0V3ZYbF9G SEQ5SGdsVVp1MmZfWEM5NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ8PBjGq6bhspNtasiwWpybQIq49QVA1TG3FY3m+9EPCIrgonj9m9t4U fgId/dcRK7YP1gV/wJ6qdHf1BruaJ6OX/aMNLZJJKynSPV9Sa96gmpbgYwRvGXwN cRySVP6Kg452ENa6NaLi+VBluZDtoyDhtxeFdIaGB58Icj6CE3qTuC3114ilH12e enU88Bq5MWGU5Br9TPlYFb3Q/4Kthuiv58FLTtgjzwsgXZKxajAr2r0xCgO/K0LQ 78P2ChHd0Gfq4L3lQjhogp5xVS7HPE6e2ewsn/1HBQUkYEpXljWuae/blLXCmIi8 VGS0Bick3nf975Ysu95fRu8O4+X0arM= -----END CERTIFICATE-----Generated at Mon Jan 26 02:09:29 2026 by rpki-client