This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft File: wHDviCxuSAhkJKm18UZuG3dKRJo.mft (raw, json) Hash identifier: i9ghO+FMRVj+laePsbd0uYvXSUPjTM3kR5+aGcxfVf4= Subject key identifier: 2E:CF:FC:DE:72:52:F8:FF:B4:75:2F:61:CC:93:29:20:AE:24:65:EB Authority key identifier: C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A Certificate issuer: /CN=A914EB9A/serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft Manifest number: 0131 Signing time: Sun 25 Jan 2026 03:45:52 +0000 Manifest this update: Sun 25 Jan 2026 03:45:52 +0000 Manifest next update: Sun 01 Feb 2026 03:45:52 +0000 Files and hashes: 1: wHDviCxuSAhkJKm18UZuG3dKRJo.crl (hash: iFIKWjivD00Q8I2Lg8ZIhGlPajHnErTc+Nr1T5Nz+uA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A, serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Validity Not Before: Jan 25 03:45:52 2026 GMT Not After : Feb 1 03:45:52 2026 GMT Subject: CN=697591f0-8f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:a9:b9:54:62:ac:7f:05:00:f3:c6:2d:4c: 29:6c:5d:9f:a5:ce:5c:56:5c:52:3a:7e:fe:a1:f0: dc:bb:df:d4:4b:c7:4c:e7:d2:f4:2b:82:87:56:da: 13:64:2a:40:86:a4:a9:1a:bf:cf:ac:8e:ce:e1:69: 74:f4:36:7d:b5:12:97:d1:98:9d:b8:a2:db:de:a3: 5a:a8:56:5f:b4:a2:c4:83:82:27:c1:25:a9:d0:64: df:81:f6:73:7e:6a:da:f3:9e:fb:1d:a7:38:71:21: 1f:49:84:c6:41:55:1e:da:a9:db:19:1d:fd:bb:54: 48:7a:9e:06:7c:62:f7:a1:09:fd:1b:2d:10:20:32: ea:9a:3c:06:fe:a6:e9:6b:d1:1f:71:f3:11:bb:4f: 76:fc:83:28:8f:22:a4:36:0a:e4:56:be:ac:b5:c4: f6:d4:6e:84:d7:fe:ff:c1:8d:64:27:f9:e2:6b:83: 41:a9:d2:ac:b3:33:ff:8d:c7:c0:aa:e3:83:e6:06: 28:09:10:75:67:49:b7:2f:dc:3b:19:91:d9:e2:1f: 72:4b:ce:52:c2:49:c2:c2:98:c9:09:69:db:3c:31: ec:16:2f:84:1c:1f:6b:79:4b:4d:e4:43:f7:bf:fd: 0f:5e:73:9c:cd:ea:e7:83:14:79:96:84:7d:d2:92: 15:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CF:FC:DE:72:52:F8:FF:B4:75:2F:61:CC:93:29:20:AE:24:65:EB X509v3 Authority Key Identifier: keyid:C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:97:38:56:28:c7:24:2b:56:94:53:bf:43:7a:75:4e:d0:b4: 25:49:ad:c0:3f:79:1f:b6:e1:cc:20:7f:10:54:34:4b:0d:1e: 2c:a4:22:18:f2:97:32:26:73:cc:a6:51:84:43:f0:99:4b:55: eb:ab:d3:61:e8:a5:19:7c:f1:02:73:2d:42:3a:06:51:f0:c9: 27:d8:d1:a3:35:2d:5a:47:44:a4:30:ab:51:82:fc:81:e9:77: 17:e5:d2:c3:c4:1e:cd:62:a1:aa:0d:47:4b:7b:7e:b6:e2:ec: 6f:08:d8:99:c0:b4:7a:be:ad:51:dc:60:a7:bf:4b:df:26:15: bc:fd:b4:37:40:a2:ce:8b:4e:f2:dd:ad:1b:06:b9:84:4c:ed: 65:ca:16:fd:1c:cb:d6:3c:12:22:32:82:e0:3f:b6:d2:28:5f: 91:c4:0c:0b:04:28:9f:41:e8:04:0f:aa:55:0b:45:40:b2:f9: 46:32:2a:d6:1b:15:95:a8:93:69:22:b1:8c:13:9c:7e:d4:94: e5:20:58:40:10:88:ae:08:cf:b9:1b:43:90:4f:0a:4a:90:29: ac:e0:c7:b7:01:3e:41:53:a1:65:bd:fe:5e:e6:57:21:57:3c: 3a:22:3f:f6:ee:4a:27:d8:77:5a:77:7e:95:89:a9:ca:be:f3: fc:2f:46:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCOUExMTAvBgNVBAUTKEMwNzBFRjg4MkM2RTQ4MDg2NDI0QTlCNUYxNDY2RTFC Nzc0QTQ0OUEwHhcNMjYwMTI1MDM0NTUyWhcNMjYwMjAxMDM0NTUyWjAYMRYwFAYD VQQDDA02OTc1OTFmMC04ZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArimpuVRirH8FAPPGLUwpbF2fpc5cVlxSOn7+ofDcu9/US8dM59L0K4KHVtoT ZCpAhqSpGr/PrI7O4Wl09DZ9tRKX0ZiduKLb3qNaqFZftKLEg4InwSWp0GTfgfZz fmra8577Hac4cSEfSYTGQVUe2qnbGR39u1RIep4GfGL3oQn9Gy0QIDLqmjwG/qbp a9EfcfMRu092/IMojyKkNgrkVr6stcT21G6E1/7/wY1kJ/nia4NBqdKsszP/jcfA quOD5gYoCRB1Z0m3L9w7GZHZ4h9yS85SwknCwpjJCWnbPDHsFi+EHB9reUtN5EP3 v/0PXnOczerngxR5loR90pIV5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7P/N5y Uvj/tHUvYcyTKSCuJGXrMB8GA1UdIwQYMBaAFMBw74gsbkgIZCSptfFGbht3SkSa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9EQTY5MDdBMDIz QzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNBaGtKS20xOFVadUczZEtS Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dIRHZpQ3h1U0Foa0pLbTE4VVp1RzNkS1JKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI5QS9EQTY5MDdBMDIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNB aGtKS20xOFVadUczZEtSSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBolzhWKMckK1aUU79DenVO0LQlSa3AP3kftuHMIH8QVDRLDR4spCIY 8pcyJnPMplGEQ/CZS1Xrq9Nh6KUZfPECcy1COgZR8Mkn2NGjNS1aR0SkMKtRgvyB 6XcX5dLDxB7NYqGqDUdLe3624uxvCNiZwLR6vq1R3GCnv0vfJhW8/bQ3QKLOi07y 3a0bBrmETO1lyhb9HMvWPBIiMoLgP7bSKF+RxAwLBCifQegED6pVC0VAsvlGMirW GxWVqJNpIrGME5x+1JTlIFhAEIiuCM+5G0OQTwpKkCms4Me3AT5BU6Flvf5e5lch Vzw6Ij/27kon2Hdad36VianKvvP8L0aP -----END CERTIFICATE-----Generated at Sun Jan 25 20:24:39 2026 by rpki-client