This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft File: 08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json) Hash identifier: exxfrLaH2/Q5uV1upuWvznjGzIenY88NVCswqGW5QBk= Subject key identifier: 17:5B:44:57:47:C2:68:13:55:4B:5D:59:65:65:04:1E:16:8F:7A:51 Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Certificate serial: 0BB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft Manifest number: 0B8F Signing time: Sat 24 Jan 2026 18:38:23 +0000 Manifest this update: Sat 24 Jan 2026 18:38:22 +0000 Manifest next update: Sat 31 Jan 2026 18:38:22 +0000 Files and hashes: 1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: pgFUVHLb8qXeG0ycVzRZenobQPAHtKlHWczVD55rVDg=) 2: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: H9hbPUbdv0cUQiC5whOpkC+JQu6c3qm0FHMfkH/xI3Y=) 3: DE437646F8A911EB98242219C4F9AE02.roa (hash: qO/L9iOGcVT7Zy5+lQ1QEnr1iK0Ar+vJn8jp9AXsGQU=) 4: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: BML327IqAumg1Qf2fd2jwUkaILEe0UriC88ZGk+s8xU=) 5: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: dSI3Emdz4l81LDdf6Ly+xEHJKZsAFGwWrqPYXFTwQHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2995 (0xbb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Validity Not Before: Jan 24 18:38:22 2026 GMT Not After : Jan 31 18:38:22 2026 GMT Subject: CN=6975119f-c3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0d:ef:e5:48:ca:04:2a:cd:43:3e:76:3c:81: a7:5c:3b:3c:39:2e:b8:48:8a:25:f9:6d:ca:14:7c: ea:e4:68:56:c1:25:3a:b4:ac:bd:dc:78:24:3e:4a: d7:f8:55:49:70:6b:88:d5:ac:23:68:40:b9:68:28: 58:ca:e1:21:5e:c2:a8:d6:dd:f3:dc:85:dc:31:2a: 64:04:e9:b1:57:dc:d0:2d:4f:cc:b5:85:61:b0:c7: c9:2c:52:6a:9e:20:fd:d3:b3:f5:94:02:43:82:77: 75:cc:0e:5c:2e:12:8d:d9:95:1a:af:2b:64:ee:c3: eb:62:60:9b:70:62:7a:f3:1a:f8:cf:f0:29:1b:b0: 5d:6d:51:cc:7c:d9:7b:35:13:77:96:54:6a:81:f0: 2c:55:88:1a:d2:be:0b:f0:53:9a:30:a6:a2:ba:51: a0:8f:7f:92:5a:13:ab:b0:53:bc:4e:36:65:f6:af: cf:31:e8:8c:d7:58:8d:d8:2b:27:ea:e3:74:cd:56: 60:a8:b2:fb:01:80:21:c7:04:5f:b3:f6:d5:37:ba: 4d:d6:cd:bb:e6:e6:8c:d1:6e:63:a6:f3:65:8a:d8: ca:c5:5d:aa:df:25:e3:31:2b:86:9c:95:2b:ed:d8: 3d:c9:39:d0:c2:58:4a:60:58:0d:c7:ab:8a:da:0a: 31:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5B:44:57:47:C2:68:13:55:4B:5D:59:65:65:04:1E:16:8F:7A:51 X509v3 Authority Key Identifier: keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:9b:ad:57:f6:ea:6c:2d:d8:e9:70:3c:99:3b:1b:58:f0:26: e6:f1:aa:78:fa:60:29:bc:6e:43:11:6d:90:76:df:23:05:f0: b1:1f:56:8f:71:90:aa:7c:9e:39:fa:91:d3:a1:74:cf:d1:a2: e4:7c:5d:02:34:4b:0a:d5:34:5d:36:6f:17:10:0b:9f:82:c1: d1:33:20:d9:ea:7a:6e:ce:eb:5e:c6:5c:75:88:64:c1:4a:72: e6:e0:9f:c1:ac:d7:db:d8:ce:25:67:18:9e:0a:69:68:1e:27: dc:06:0c:c0:44:c4:67:66:8b:99:0a:26:5f:a1:7d:65:ad:0b: 62:98:7d:b3:54:cb:b3:e7:2c:e9:d4:83:cd:31:60:26:d2:d0: c0:0b:fc:f5:61:45:aa:50:b7:9d:70:6e:da:4e:fa:9a:84:5a: 4f:e5:5d:41:ed:4d:35:e9:11:1f:77:9e:7d:2d:b8:16:58:26: 3a:7d:4b:56:8a:c3:c7:69:fe:de:4d:fe:b3:18:a3:f3:95:fd: eb:e5:b4:e5:7e:72:26:24:de:05:24:12:78:a6:12:b2:3a:34: 83:fb:eb:ed:72:67:46:d5:25:1f:de:67:a4:48:f8:3d:46:1b: 64:4a:5d:a0:71:f9:21:85:99:38:f4:00:bc:7a:85:9c:fc:99: 5d:c5:6d:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERENzgxMTAvBgNVBAUTKEQzQzY2QzI2QTlGRDFCOUU3QzQ1NUJEREIzNTE1OTY4 OEQwMTQwRkUwHhcNMjYwMTI0MTgzODIyWhcNMjYwMTMxMTgzODIyWjAYMRYwFAYD VQQDDA02OTc1MTE5Zi1jM2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlw3v5UjKBCrNQz52PIGnXDs8OS64SIol+W3KFHzq5GhWwSU6tKy93HgkPkrX +FVJcGuI1awjaEC5aChYyuEhXsKo1t3z3IXcMSpkBOmxV9zQLU/MtYVhsMfJLFJq niD907P1lAJDgnd1zA5cLhKN2ZUarytk7sPrYmCbcGJ68xr4z/ApG7BdbVHMfNl7 NRN3llRqgfAsVYga0r4L8FOaMKaiulGgj3+SWhOrsFO8TjZl9q/PMeiM11iN2Csn 6uN0zVZgqLL7AYAhxwRfs/bVN7pN1s275uaM0W5jpvNlitjKxV2q3yXjMSuGnJUr 7dg9yTnQwlhKYFgNx6uK2goxBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdbRFdH wmgTVUtdWWVlBB4Wj3pRMB8GA1UdIwQYMBaAFNPGbCap/RuefEVb3bNRWWiNAUD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REQ3OC9ENEU5NjQ5QzQy RjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1NThSVnZkczFGWmFJMEJR UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WnNKcW45RzU1OFJWdmRzMUZaYUkwQlFQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REQ3OC9ENEU5NjQ5QzQyRjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1 NThSVnZkczFGWmFJMEJRUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEm61X9upsLdjpcDyZOxtY8Cbm8ap4+mApvG5DEW2Qdt8jBfCxH1aP cZCqfJ45+pHToXTP0aLkfF0CNEsK1TRdNm8XEAufgsHRMyDZ6npuzutexlx1iGTB SnLm4J/BrNfb2M4lZxieCmloHifcBgzARMRnZouZCiZfoX1lrQtimH2zVMuz5yzp 1IPNMWAm0tDAC/z1YUWqULedcG7aTvqahFpP5V1B7U016REfd559LbgWWCY6fUtW isPHaf7eTf6zGKPzlf3r5bTlfnImJN4FJBJ4phKyOjSD++vtcmdG1SUf3mekSPg9 RhtkSl2gcfkhhZk49AC8eoWc/JldxW1W -----END CERTIFICATE-----Generated at Sun Jan 25 07:52:06 2026 by rpki-client