This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft File: gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft (raw, json) Hash identifier: RF27QGVwIv4BNTIdxTc6cIasRB30/HE2mEVzoxK9R68= Subject key identifier: FD:79:99:C4:74:77:0C:EF:89:23:B0:E6:E1:7E:81:D8:00:AE:01:E9 Authority key identifier: 81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74 Certificate issuer: /CN=A914E4E2/serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft Manifest number: 17 Signing time: Sun 25 Jan 2026 07:00:02 +0000 Manifest this update: Sun 25 Jan 2026 07:00:02 +0000 Manifest next update: Sun 01 Feb 2026 07:00:02 +0000 Files and hashes: 1: gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl (hash: 4kZX3ZV5GELKDDtNUHixjD7NayOrxcqdMSWtayeCszk=) 2: 6F81A4F8E64811F09CAB54BE376F56BC.roa (hash: Iu+jMJSYCe8XXlTEkGVJAiiEoPkUb2VpGs090qWjkVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4E2, serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174 Validity Not Before: Jan 25 07:00:02 2026 GMT Not After : Feb 1 07:00:02 2026 GMT Subject: CN=6975bf72-47e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:94:37:6f:d3:7e:89:af:18:b6:09:47:0e:3c: f7:87:d6:26:36:09:e1:6b:d5:05:1d:71:75:f6:aa: c5:f6:19:93:6b:4c:aa:84:a1:ee:31:53:68:df:05: 41:08:ac:0c:ea:cb:c6:9c:c7:56:7c:5d:40:89:23: 2d:fe:15:4a:99:02:df:77:20:55:9a:24:95:f9:a2: 0d:ed:9d:10:f4:2f:a1:17:fa:09:e0:ff:fe:b7:95: 29:6f:2a:00:4b:76:36:1b:85:6b:ec:f7:03:f1:4c: 66:07:38:4b:a1:06:ce:e7:8c:57:36:5e:90:61:4f: 5a:35:2f:12:8e:bf:1b:5b:29:b4:57:a9:60:8c:bb: c0:35:84:75:98:88:a9:d2:ac:d4:4d:28:bf:af:1a: 5b:0f:9c:2b:c5:dd:d2:4a:16:36:66:a4:b3:c1:86: 7c:fb:46:cc:fc:a0:de:25:c7:51:f0:3b:47:2b:ce: 34:ec:cb:22:25:42:03:04:1f:b3:8c:41:af:e4:29: dc:db:94:6d:70:9c:8c:19:9c:fe:00:99:c9:73:98: 7e:21:dc:38:13:33:31:7b:ce:4c:5c:aa:61:30:76: 4f:fc:aa:ec:95:c4:f8:49:83:a0:3a:6c:76:5b:3b: 80:51:eb:e8:a7:df:f2:68:b0:e5:80:7b:f5:92:7f: f5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:79:99:C4:74:77:0C:EF:89:23:B0:E6:E1:7E:81:D8:00:AE:01:E9 X509v3 Authority Key Identifier: keyid:81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:c4:b7:fb:08:d6:77:13:c6:be:9b:54:13:68:e4:75:c3:a8: 1f:dd:f2:83:d6:c5:40:42:a0:a1:98:42:48:a0:11:20:92:c6: ef:a5:6a:18:d0:d9:28:bf:3a:4c:0f:77:f7:f3:a3:29:30:be: da:f0:b0:22:c4:a2:ba:d1:ad:41:58:c6:57:79:5a:37:49:1c: de:3d:69:7f:3d:79:1d:bf:7c:72:16:25:6a:f0:19:08:f0:99: fe:5e:4b:c8:4c:83:77:04:a6:93:43:a8:db:29:21:a3:85:e5: 9d:63:e9:91:64:99:26:c5:4a:64:02:6d:24:19:c4:44:6a:03: 05:78:e5:cd:15:79:8c:d1:77:9b:c9:5a:94:bc:c5:a0:34:b2: 9f:dd:e1:cb:b6:d1:ff:d0:93:8b:9d:78:a6:f1:85:46:73:fd: 2d:f3:8a:02:85:11:0c:ae:44:06:18:fb:f5:38:81:38:6e:50: 35:3f:81:41:b7:33:cb:b9:a4:31:b6:eb:f1:80:4d:be:03:06: 11:d3:9d:64:cc:f9:23:9d:8d:b6:65:9e:7c:5c:31:78:52:24: 51:91:5c:f1:ea:a7:18:c5:3c:f3:d1:5c:04:b8:7d:33:09:a5: 7b:b7:e6:17:ae:fa:28:e9:f6:5c:83:b3:5d:0a:9e:83:ee:df: 5f:b2:70:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTRFMjExMC8GA1UEBRMoODEyRkYwREUxQzM0NDE0NjNDQzk1Q0E4ODQyM0JFNUEx MEFEQjE3NDAeFw0yNjAxMjUwNzAwMDJaFw0yNjAyMDEwNzAwMDJaMBgxFjAUBgNV BAMMDTY5NzViZjcyLTQ3ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDElDdv036Jrxi2CUcOPPeH1iY2CeFr1QUdcXX2qsX2GZNrTKqEoe4xU2jfBUEI rAzqy8acx1Z8XUCJIy3+FUqZAt93IFWaJJX5og3tnRD0L6EX+gng//63lSlvKgBL djYbhWvs9wPxTGYHOEuhBs7njFc2XpBhT1o1LxKOvxtbKbRXqWCMu8A1hHWYiKnS rNRNKL+vGlsPnCvF3dJKFjZmpLPBhnz7Rsz8oN4lx1HwO0crzjTsyyIlQgMEH7OM Qa/kKdzblG1wnIwZnP4AmclzmH4h3DgTMzF7zkxcqmEwdk/8quyVxPhJg6A6bHZb O4BR6+in3/JosOWAe/WSf/VBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/XmZxHR3 DO+JI7Dm4X6B2ACuAekwHwYDVR0jBBgwFoAUgS/w3hw0QUY8yVyohCO+WhCtsXQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNEUyLzQxQ0U5REVFREFG QTExRjA5QUY2MTYyMDdDRDM2NDFEL2dTX3czaHcwUVVZOHlWeW9oQ08tV2hDdHNY US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ1NfdzNodzBRVVk4eVZ5b2hDTy1XaEN0c1hRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NEUyLzQxQ0U5REVFREFGQTExRjA5QUY2MTYyMDdDRDM2NDFEL2dTX3czaHcwUVVZ OHlWeW9oQ08tV2hDdHNYUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACLEt/sI1ncTxr6bVBNo5HXDqB/d8oPWxUBCoKGYQkigESCSxu+lahjQ 2Si/OkwPd/fzoykwvtrwsCLEorrRrUFYxld5WjdJHN49aX89eR2/fHIWJWrwGQjw mf5eS8hMg3cEppNDqNspIaOF5Z1j6ZFkmSbFSmQCbSQZxERqAwV45c0VeYzRd5vJ WpS8xaA0sp/d4cu20f/Qk4udeKbxhUZz/S3zigKFEQyuRAYY+/U4gThuUDU/gUG3 M8u5pDG26/GATb4DBhHTnWTM+SOdjbZlnnxcMXhSJFGRXPHqpxjFPPPRXAS4fTMJ pXu35heu+ijp9lyDs10KnoPu31+ycGw= -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:05 2026 by rpki-client