This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: OpD+9bTi9GnY4ccwRZzIkMWX5Gd2oMI5Gc21PV9hiJc= Subject key identifier: 69:83:A8:2D:89:24:AC:E6:52:3C:B2:70:D6:D4:F2:E3:FA:29:B4:75 Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: 0212 Signing time: Sun 25 Jan 2026 01:39:14 +0000 Manifest this update: Sun 25 Jan 2026 01:39:14 +0000 Manifest next update: Sun 01 Feb 2026 01:39:14 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: t3vBYi+RFtjlYOP+BP8H9WeuZZwg2sIAlccXD/H5yfs=) 2: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: MnDi5zIly9ESguHuvmf3VgR/9XTexkHTRfRhiBCHX8Q=) 3: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: IrYN/pS7dnASKDxXmePvjb6bA3nISZUXgp/s+ESuDSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: Jan 25 01:39:14 2026 GMT Not After : Feb 1 01:39:14 2026 GMT Subject: CN=69757442-98ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:52:0b:55:8e:36:9f:5a:c2:b9:8e:5f:d5:5c: 52:c3:22:f9:4b:83:af:c4:03:e4:16:e9:d9:ac:09: b6:16:d3:72:c2:cb:e0:32:3e:5c:8b:33:8c:d3:51: fc:6f:70:d4:b5:f4:8d:3a:15:5b:00:5c:3b:b0:fe: ff:fe:f2:24:0c:a6:a8:cf:c1:1d:d4:3e:14:2b:58: e7:32:86:c4:ec:58:ac:60:63:dd:a9:51:0d:d7:fe: 72:7d:88:dd:a2:09:03:4e:92:d6:4c:5a:9f:24:49: 61:a1:f1:52:76:1c:c2:19:c8:0f:49:af:85:aa:d3: 13:79:69:10:e6:79:c6:f5:61:8a:4b:aa:6c:cb:56: 10:5a:c9:4d:c8:d6:9d:92:3c:f8:d8:e7:3e:43:bf: 0c:09:ba:a3:01:96:d6:a8:6d:2b:a5:a8:39:95:25: 52:c6:bc:30:fe:96:74:3d:aa:0b:64:fb:42:72:15: 5c:1e:2c:92:96:7e:de:aa:4b:86:fa:ae:d6:2e:35: 79:da:bc:ea:1f:bc:f3:33:87:8f:ee:72:2a:34:a9: 49:89:85:b3:df:4d:0c:d0:13:95:07:ae:a4:a0:02: ce:47:1d:63:37:1f:f4:69:7f:a0:97:f9:53:8f:a0: 18:0d:b9:41:40:ad:d2:21:e9:6d:80:ad:0d:0d:2f: 3a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:83:A8:2D:89:24:AC:E6:52:3C:B2:70:D6:D4:F2:E3:FA:29:B4:75 X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:42:9d:94:96:69:e4:ec:df:a8:ac:e2:1a:55:7f:d4:03:8d: b2:96:73:16:62:43:95:1b:4c:7b:74:99:77:7e:4f:cb:f5:ec: a2:a3:e9:c0:c4:55:54:50:2d:3b:b0:26:1c:93:48:09:05:f4: ac:9d:22:70:5b:f3:82:21:b6:d1:96:c8:80:84:58:c1:eb:4e: 2f:43:a5:fe:af:31:f0:5e:05:2c:ab:9b:58:db:3c:78:4a:6b: 57:9c:7d:37:6f:94:5e:a2:23:2f:71:ca:8f:ee:f0:a6:df:19: c0:2e:48:9d:8c:f6:d8:45:70:c8:f0:82:a4:93:3f:3d:1b:96: 00:a1:25:f4:2d:c1:b5:b3:fe:c7:ff:35:96:be:66:9f:ff:77: 53:14:21:5a:20:54:64:2c:db:49:27:e0:e8:0b:7d:d3:2b:20: 26:5b:05:72:05:dd:aa:28:3b:86:19:f7:46:00:d2:c9:3c:db: a0:23:65:fb:4b:cb:e9:a1:03:86:e6:1f:80:b9:8a:ab:14:3d: 90:61:19:18:da:c4:3d:59:eb:a2:dc:8f:24:7b:6d:91:51:b4: 38:0f:62:72:67:ca:69:bc:61:86:b8:1e:4f:fc:78:37:48:72: 86:70:fd:4b:9a:d6:cb:b4:9a:c3:d6:24:db:7f:22:61:6d:99: 6f:7a:21:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjYwMTI1MDEzOTE0WhcNMjYwMjAxMDEzOTE0WjAYMRYwFAYD VQQDDA02OTc1NzQ0Mi05OGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVILVY42n1rCuY5f1VxSwyL5S4OvxAPkFunZrAm2FtNywsvgMj5cizOM01H8 b3DUtfSNOhVbAFw7sP7//vIkDKaoz8Ed1D4UK1jnMobE7FisYGPdqVEN1/5yfYjd ogkDTpLWTFqfJElhofFSdhzCGcgPSa+FqtMTeWkQ5nnG9WGKS6psy1YQWslNyNad kjz42Oc+Q78MCbqjAZbWqG0rpag5lSVSxrww/pZ0PaoLZPtCchVcHiySln7eqkuG +q7WLjV52rzqH7zzM4eP7nIqNKlJiYWz300M0BOVB66koALORx1jNx/0aX+gl/lT j6AYDblBQK3SIeltgK0NDS86eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmDqC2J JKzmUjyycNbU8uP6KbR1MB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHQp2Ulmnk7N+orOIaVX/UA42ylnMWYkOVG0x7dJl3fk/L9eyio+nA xFVUUC07sCYck0gJBfSsnSJwW/OCIbbRlsiAhFjB604vQ6X+rzHwXgUsq5tY2zx4 SmtXnH03b5ReoiMvccqP7vCm3xnALkidjPbYRXDI8IKkkz89G5YAoSX0LcG1s/7H /zWWvmaf/3dTFCFaIFRkLNtJJ+DoC33TKyAmWwVyBd2qKDuGGfdGANLJPNugI2X7 S8vpoQOG5h+AuYqrFD2QYRkY2sQ9Weui3I8ke22RUbQ4D2JyZ8ppvGGGuB5P/Hg3 SHKGcP1LmtbLtJrD1iTbfyJhbZlveiHU -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:47 2026 by rpki-client