This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft File: 1WjiWa6pXRNIxmPjlfyma-wQwwk.mft (raw, json) Hash identifier: BI6air+I9gGzT9M5g/u227Nnpm1pyVbhTP0+9eYO7Gg= Subject key identifier: AA:CF:DE:DA:98:D6:10:50:BB:B4:BA:77:39:FE:9E:9A:49:8E:6B:DB Authority key identifier: D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09 Certificate issuer: /CN=A914C086/serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309 Certificate serial: 3500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft Manifest number: 34FF Signing time: Sat 24 Jan 2026 15:00:18 +0000 Manifest this update: Sat 24 Jan 2026 15:00:17 +0000 Manifest next update: Sat 31 Jan 2026 15:00:17 +0000 Files and hashes: 1: 1WjiWa6pXRNIxmPjlfyma-wQwwk.crl (hash: xNlDeE13BUPHx0t1HSUxrRqx8eeWXDiNLiekYga1cXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13568 (0x3500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C086, serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309 Validity Not Before: Jan 24 15:00:17 2026 GMT Not After : Jan 31 15:00:17 2026 GMT Subject: CN=6974de82-61c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:77:da:7f:b0:e7:46:ee:51:be:44:65:06:93: 26:cb:62:19:81:ab:32:31:28:07:84:29:ab:2e:89: 2e:75:31:4d:7d:16:84:67:fc:b2:36:87:c5:0e:33: 89:39:f9:6c:dd:76:95:58:07:c7:22:12:bf:27:42: 04:04:95:2c:07:bb:04:e7:3b:fc:48:bd:27:2e:53: c7:82:bc:b7:60:59:50:45:7d:b7:4f:b1:fd:65:4d: 36:44:18:24:8d:df:56:83:cf:3c:12:b1:ac:2a:32: b1:c3:80:91:84:45:cb:16:ac:47:01:e9:54:01:9e: 07:74:37:88:0d:6a:3c:75:a2:32:3c:99:04:82:34: 39:16:cb:28:e6:d9:7a:42:62:0b:0f:3d:8f:f0:a4: d7:7d:39:be:3c:db:cb:d7:9b:a8:8a:fa:44:21:bb: f1:23:f5:92:f8:8e:8a:4b:55:5c:db:d2:05:3f:9e: 15:a2:37:9d:36:2e:29:b6:2c:9c:01:44:0f:7f:ec: 61:94:fc:f5:30:26:28:00:4d:28:93:ff:48:23:00: 33:42:60:f4:57:f9:e7:48:65:ae:92:c5:e7:4d:69: 97:62:f3:d1:8f:e9:a3:ae:85:02:22:84:84:1b:77: a2:1f:3a:f4:82:59:d6:1a:9f:a3:c6:f9:03:a4:85: d8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CF:DE:DA:98:D6:10:50:BB:B4:BA:77:39:FE:9E:9A:49:8E:6B:DB X509v3 Authority Key Identifier: keyid:D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:99:58:6a:0d:f4:f7:b1:d8:17:28:ae:d4:5a:03:ee:1c:98: ba:8d:14:52:53:37:fd:ce:80:a8:53:18:16:e6:0e:a1:fd:16: 08:af:a7:82:6e:95:23:9a:56:34:61:bd:39:17:e9:e7:fb:ec: a5:a9:ca:75:39:f8:c2:ac:67:81:14:64:2e:85:5b:aa:31:2b: 88:02:6f:c6:9f:74:80:23:21:1f:ab:d5:62:0d:c9:80:38:42: 09:10:40:3b:78:ea:30:ca:84:26:9b:04:6a:62:29:fe:9a:e3: c0:32:fe:15:8e:8f:49:10:34:b4:be:6c:ca:f7:d0:07:2e:ab: 51:32:18:0c:17:17:fd:5f:67:e4:85:9c:29:33:cc:a6:c4:92: 19:c3:d9:0f:03:a6:e5:73:81:59:df:f7:4d:06:04:c1:87:e0: c5:d7:57:5e:bd:c6:a1:c8:bd:40:97:78:80:1c:21:f3:04:67: c3:e9:d7:fc:ea:d7:78:58:1d:ff:67:49:1c:39:78:c3:b0:08: a7:07:25:7d:b5:62:28:a0:33:4a:fc:16:3c:fb:85:1a:03:1e: f6:f5:86:3a:96:eb:b0:00:8d:7c:21:b9:3a:cf:77:4c:6f:5b: f8:ee:87:1d:29:26:85:54:d6:46:37:7d:de:a3:22:53:87:40: e1:0b:30:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwODYxMTAvBgNVBAUTKEQ1NjhFMjU5QUVBOTVEMTM0OEM2NjNFMzk1RkNBNjZC RUMxMEMzMDkwHhcNMjYwMTI0MTUwMDE3WhcNMjYwMTMxMTUwMDE3WjAYMRYwFAYD VQQDDA02OTc0ZGU4Mi02MWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonfaf7DnRu5RvkRlBpMmy2IZgasyMSgHhCmrLokudTFNfRaEZ/yyNofFDjOJ Ofls3XaVWAfHIhK/J0IEBJUsB7sE5zv8SL0nLlPHgry3YFlQRX23T7H9ZU02RBgk jd9Wg888ErGsKjKxw4CRhEXLFqxHAelUAZ4HdDeIDWo8daIyPJkEgjQ5Fsso5tl6 QmILDz2P8KTXfTm+PNvL15uoivpEIbvxI/WS+I6KS1Vc29IFP54VojedNi4ptiyc AUQPf+xhlPz1MCYoAE0ok/9IIwAzQmD0V/nnSGWuksXnTWmXYvPRj+mjroUCIoSE G3eiHzr0glnWGp+jxvkDpIXYBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrP3tqY 1hBQu7S6dzn+nppJjmvbMB8GA1UdIwQYMBaAFNVo4lmuqV0TSMZj45X8pmvsEMMJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzA4Ni9BODExNEY1ODFE QTIxMUUyQTA1NThCOTUwOEIwMkNEMi8xV2ppV2E2cFhSTkl4bVBqbGZ5bWEtd1F3 d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXamlXYTZwWFJOSXhtUGpsZnltYS13UXd3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzA4Ni9BODExNEY1ODFEQTIxMUUyQTA1NThCOTUwOEIwMkNEMi8xV2ppV2E2cFhS Tkl4bVBqbGZ5bWEtd1F3d2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0mVhqDfT3sdgXKK7UWgPuHJi6jRRSUzf9zoCoUxgW5g6h/RYIr6eC bpUjmlY0Yb05F+nn++ylqcp1OfjCrGeBFGQuhVuqMSuIAm/Gn3SAIyEfq9ViDcmA OEIJEEA7eOowyoQmmwRqYin+muPAMv4Vjo9JEDS0vmzK99AHLqtRMhgMFxf9X2fk hZwpM8ymxJIZw9kPA6blc4FZ3/dNBgTBh+DF11devcahyL1Al3iAHCHzBGfD6df8 6td4WB3/Z0kcOXjDsAinByV9tWIooDNK/BY8+4UaAx729YY6luuwAI18Ibk6z3dM b1v47ocdKSaFVNZGN33eoyJTh0DhCzA5 -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:46 2026 by rpki-client