This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft File: eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json) Hash identifier: nZe/W6ECDPoZxq75hKCOjVCKxUBkx5hSKfNalrXQDns= Subject key identifier: 2B:84:26:05:3F:FE:BC:A0:2D:94:BA:51:37:35:3F:65:2F:E4:91:AC Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 Certificate issuer: /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Certificate serial: 089E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft Manifest number: 0884 Signing time: Sat 24 Jan 2026 19:59:23 +0000 Manifest this update: Sat 24 Jan 2026 19:59:23 +0000 Manifest next update: Sat 31 Jan 2026 19:59:23 +0000 Files and hashes: 1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: KUsBD8pDTS04EfXzqIoUn/2TIQwDzRqP8iFtMWjznoU=) 2: C664689AE0F511EABB96D531C4F9AE02.roa (hash: dYyNNCNhHnZkGZCDfE/V9Ur6jl+sr7C71Nxoo9EVQmI=) 3: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: B74A200MEGtzjKLkG19+x2nWM7IOpN8G2t0B9881Biw=) 4: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: DOSZg99mo70HEeL3C6AnH+3DNlQmbU02wS7iu6QLEaI=) 5: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: XB8wSFVQZAHvqakZ35MOgP2u0Ix9DouCb4nv3BULPR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2206 (0x89e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Validity Not Before: Jan 24 19:59:23 2026 GMT Not After : Jan 31 19:59:23 2026 GMT Subject: CN=6975249b-ad5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:8d:79:14:28:8a:3f:fc:07:2d:0e:c5:47: 31:ef:90:b3:30:5d:f4:cc:76:79:04:c4:63:c2:d9: 63:93:f5:f8:16:c1:33:9d:16:8d:9c:41:69:19:f4: 63:15:ed:0e:79:5e:62:ef:72:be:04:36:b3:9d:db: 0d:5e:06:b0:c6:66:a4:25:99:69:b2:6f:18:8f:db: f3:cc:b3:06:c8:99:bd:df:c6:3a:da:0e:4c:96:88: 00:34:6e:85:74:31:06:93:b4:04:a8:d5:3a:50:af: 18:60:14:3a:ff:97:ec:3e:0f:ac:c8:75:5a:c3:47: 05:1e:0c:ba:97:b1:9d:95:6f:48:47:5e:63:35:91: 2f:cd:be:9b:e1:94:49:df:22:ad:24:05:55:92:19: 85:48:1b:39:71:30:d5:9f:a9:77:81:42:29:8e:20: 93:70:97:82:ef:c4:a4:fd:ac:d9:21:48:c9:48:9b: c6:df:ff:28:f5:10:73:96:e7:fa:32:c5:f5:cd:65: 3e:3b:c2:c9:9c:4f:7f:b1:e0:fc:da:5b:48:5c:84: f6:97:e6:c0:67:e4:e8:30:ce:ce:96:49:4a:a6:41: 21:71:eb:0d:ef:46:75:34:02:8d:c9:cd:ce:3b:f4: 78:9b:c8:84:a2:c5:ea:2b:f1:5a:15:d6:07:0c:18: dc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:84:26:05:3F:FE:BC:A0:2D:94:BA:51:37:35:3F:65:2F:E4:91:AC X509v3 Authority Key Identifier: keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:99:9c:8d:f8:8d:3f:80:1c:c8:b3:7c:96:40:f1:f4:ff:fe: ed:d4:d2:78:02:9b:a4:23:08:f2:2f:5b:56:7e:7a:d4:bc:5c: 54:40:02:0b:4c:4f:1a:78:53:a7:c8:df:e8:c1:a0:d9:4e:31: 6e:63:11:84:52:6b:0a:0d:6b:9a:3c:cb:6a:78:2d:3b:24:e5: d9:ff:48:7a:03:e1:c5:97:4b:0b:16:ba:fb:5c:56:ae:87:71: af:14:71:d8:57:ec:aa:8e:1a:ef:58:d0:c1:c8:43:9f:7d:f5: 0f:ed:50:a9:ac:45:85:76:96:2f:0c:34:cc:99:b7:2c:17:4f: ed:c3:90:9d:3f:1d:63:3a:72:83:97:eb:a0:66:b8:21:55:99: 57:fd:2c:d8:e7:15:b9:3e:80:53:65:5c:b2:f5:54:ee:23:84: b0:64:9f:e9:9e:e6:93:2f:da:7e:4c:09:fc:6d:12:5d:7e:d9: 9a:0e:6a:f7:75:f4:7b:86:9e:93:24:e5:87:42:12:d4:85:f8: 3e:f9:78:c5:69:31:46:88:d7:21:ce:aa:a9:25:09:a1:e8:42: 6f:c6:36:c3:94:5b:50:69:d3:b8:73:22:89:37:d8:05:70:50: 9b:d2:eb:58:13:fe:f5:54:36:aa:37:f2:d2:20:a1:7a:90:ea: 25:6b:c9:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGRTUxMTAvBgNVBAUTKDc4QTk5NzdGRkI0N0FGM0VDMUU5NDZCQzEwRjgxMzc2 OTQ5RUJFQzIwHhcNMjYwMTI0MTk1OTIzWhcNMjYwMTMxMTk1OTIzWjAYMRYwFAYD VQQDDA02OTc1MjQ5Yi1hZDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaSNeRQoij/8By0OxUcx75CzMF30zHZ5BMRjwtljk/X4FsEznRaNnEFpGfRj Fe0OeV5i73K+BDazndsNXgawxmakJZlpsm8Yj9vzzLMGyJm938Y62g5MlogANG6F dDEGk7QEqNU6UK8YYBQ6/5fsPg+syHVaw0cFHgy6l7GdlW9IR15jNZEvzb6b4ZRJ 3yKtJAVVkhmFSBs5cTDVn6l3gUIpjiCTcJeC78Sk/azZIUjJSJvG3/8o9RBzluf6 MsX1zWU+O8LJnE9/seD82ltIXIT2l+bAZ+ToMM7OlklKpkEhcesN70Z1NAKNyc3O O/R4m8iEosXqK/FaFdYHDBjcZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuEJgU/ /rygLZS6UTc1P2Uv5JGsMB8GA1UdIwQYMBaAFHipl3/7R68+welGvBD4E3aUnr7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkZFNS85REFGNDg2RURE RUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6N0I2VWE4RVBnVGRwU2V2 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLbVhmX3RIcno3QjZVYThFUGdUZHBTZXZzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkZFNS85REFGNDg2RURERUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6 N0I2VWE4RVBnVGRwU2V2c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4mZyN+I0/gBzIs3yWQPH0//7t1NJ4ApukIwjyL1tWfnrUvFxUQAIL TE8aeFOnyN/owaDZTjFuYxGEUmsKDWuaPMtqeC07JOXZ/0h6A+HFl0sLFrr7XFau h3GvFHHYV+yqjhrvWNDByEOfffUP7VCprEWFdpYvDDTMmbcsF0/tw5CdPx1jOnKD l+ugZrghVZlX/SzY5xW5PoBTZVyy9VTuI4SwZJ/pnuaTL9p+TAn8bRJdftmaDmr3 dfR7hp6TJOWHQhLUhfg++XjFaTFGiNchzqqpJQmh6EJvxjbDlFtQadO4cyKJN9gF cFCb0utYE/71VDaqN/LSIKF6kOola8ni -----END CERTIFICATE-----Generated at Sun Jan 25 02:49:16 2026 by rpki-client