This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft File: 4suW87BaY-nlR5ZSbszpSjWR5fw.mft (raw, json) Hash identifier: 9vWrwyIb6rU8zSavn7iGdDxFxSZWfmeI2h+4K9uU+90= Subject key identifier: 91:AC:95:94:5C:09:F8:0B:22:83:2A:0B:6A:45:35:AF:93:4E:A3:B9 Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC Certificate issuer: /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft Manifest number: 7F Signing time: Sun 25 Jan 2026 05:49:52 +0000 Manifest this update: Sun 25 Jan 2026 05:49:52 +0000 Manifest next update: Sun 01 Feb 2026 05:49:52 +0000 Files and hashes: 1: 4suW87BaY-nlR5ZSbszpSjWR5fw.crl (hash: AwCLXULztBhUZkvrx5jr7B+6ButSLj5RPQmxJO9aw9E=) 2: ACCFE0643C9711F08159891EC4F9AE02.roa (hash: wGVIBPNEBcFCJnJRSDz4VWxuIzLpiNR2BJzQPhs1Kok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC Validity Not Before: Jan 25 05:49:52 2026 GMT Not After : Feb 1 05:49:52 2026 GMT Subject: CN=6975af00-b0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:79:27:27:08:f1:0e:be:c1:71:e3:56:98: 00:a5:8f:b2:a8:33:7e:a6:5a:8d:e6:01:6e:bd:90: c5:0a:db:3c:e6:58:4d:e6:57:55:92:59:65:13:13: c7:b1:8a:b1:cc:76:c4:a3:f2:8e:18:36:d3:0a:60: 99:c2:01:dc:74:0b:ca:98:0d:91:7d:76:cb:72:95: f2:6e:4c:34:f5:90:12:65:f2:ce:b5:c6:b6:96:bb: 38:77:4a:59:84:85:3f:d8:94:3f:91:19:54:a9:af: e0:46:e2:1c:96:0c:2a:0e:6c:03:21:ae:b8:12:5a: 07:1a:dd:bb:18:e0:f0:8b:b8:84:9d:b4:39:91:bc: eb:a8:f4:75:ad:10:74:d0:69:b8:f1:cd:0c:a2:f1: 63:61:52:8a:75:ee:bc:6b:29:80:4c:53:dc:87:1d: 3b:20:b4:87:8a:0c:a7:03:25:ea:21:5b:ae:59:5e: d5:9a:3c:d8:20:e3:22:5e:27:57:0f:32:b4:d6:7a: 5d:ae:17:16:55:80:7c:0f:c1:b8:eb:3c:1f:56:d0: 5e:15:24:fc:a6:1f:31:58:9e:48:c9:de:d8:bb:b1: cd:db:16:0a:80:31:d9:87:ef:85:29:2c:9d:d4:c4: 30:a0:89:cf:34:f1:65:1a:0e:71:e8:ef:a5:46:89: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AC:95:94:5C:09:F8:0B:22:83:2A:0B:6A:45:35:AF:93:4E:A3:B9 X509v3 Authority Key Identifier: keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:f2:a9:72:19:6d:3f:29:4e:bf:c7:4b:b5:6c:7e:fc:29:cd: f3:cf:ad:63:50:03:58:39:e6:47:8c:ae:bd:16:d3:69:e0:d5: 83:69:c3:57:1d:36:00:55:ba:85:9c:1f:03:ab:fe:2b:98:2f: be:0b:03:04:86:a9:57:f2:ad:5a:4e:22:f1:eb:d7:aa:e6:de: e0:31:bf:05:96:a8:1f:90:06:c5:53:14:73:34:21:3c:c1:7c: b1:13:01:61:10:09:d8:5e:42:2c:2f:99:71:69:3c:c9:17:f3: 33:ca:4c:16:83:e1:db:04:2b:f5:ca:fa:a9:3e:4b:d2:3f:9c: ce:b8:61:3f:68:89:99:38:26:59:53:75:fc:cc:f4:d7:8c:05: 95:d5:a2:d9:df:1f:ae:45:be:ec:a6:1d:fb:a3:35:7e:06:1f: bc:f0:ff:d0:51:4b:13:42:cd:1e:af:6c:24:11:a5:bf:79:f0: cd:78:e6:c6:36:74:2f:03:f0:d2:48:e9:8a:2c:48:30:eb:d3: ed:86:ce:30:e4:ab:ee:2c:e6:31:0e:44:b4:2e:4f:20:9d:72: 34:46:4f:64:cb:47:1e:5e:3e:be:b1:31:90:16:24:13:0c:95: f1:1e:69:bf:8c:32:d8:c3:93:ba:76:39:c6:1c:3b:6f:4b:27: a9:99:b7:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCNzQxMTAvBgNVBAUTKEUyQ0I5NkYzQjA1QTYzRTlFNTQ3OTY1MjZFQ0NFOTRB MzU5MUU1RkMwHhcNMjYwMTI1MDU0OTUyWhcNMjYwMjAxMDU0OTUyWjAYMRYwFAYD VQQDDA02OTc1YWYwMC1iMGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D95JycI8Q6+wXHjVpgApY+yqDN+plqN5gFuvZDFCts85lhN5ldVklllExPH sYqxzHbEo/KOGDbTCmCZwgHcdAvKmA2RfXbLcpXybkw09ZASZfLOtca2lrs4d0pZ hIU/2JQ/kRlUqa/gRuIclgwqDmwDIa64EloHGt27GODwi7iEnbQ5kbzrqPR1rRB0 0Gm48c0MovFjYVKKde68aymATFPchx07ILSHigynAyXqIVuuWV7VmjzYIOMiXidX DzK01npdrhcWVYB8D8G46zwfVtBeFST8ph8xWJ5Iyd7Yu7HN2xYKgDHZh++FKSyd 1MQwoInPNPFlGg5x6O+lRom3KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGslZRc CfgLIoMqC2pFNa+TTqO5MB8GA1UdIwQYMBaAFOLLlvOwWmPp5UeWUm7M6Uo1keX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I3NC9BRjY0RTUxMDNC QUExMUYwOTY0MjgyMUNDNEY5QUUwMi80c3VXODdCYVktbmxSNVpTYnN6cFNqV1I1 ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRzdVc4N0JhWS1ubFI1WlNic3pwU2pXUjVmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0I3NC9BRjY0RTUxMDNCQUExMUYwOTY0MjgyMUNDNEY5QUUwMi80c3VXODdCYVkt bmxSNVpTYnN6cFNqV1I1ZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk8qlyGW0/KU6/x0u1bH78Kc3zz61jUANYOeZHjK69FtNp4NWDacNX HTYAVbqFnB8Dq/4rmC++CwMEhqlX8q1aTiLx69eq5t7gMb8FlqgfkAbFUxRzNCE8 wXyxEwFhEAnYXkIsL5lxaTzJF/MzykwWg+HbBCv1yvqpPkvSP5zOuGE/aImZOCZZ U3X8zPTXjAWV1aLZ3x+uRb7sph37ozV+Bh+88P/QUUsTQs0er2wkEaW/efDNeObG NnQvA/DSSOmKLEgw69Pths4w5KvuLOYxDkS0Lk8gnXI0Rk9ky0ceXj6+sTGQFiQT DJXxHmm/jDLYw5O6djnGHDtvSyepmbeg -----END CERTIFICATE-----Generated at Sun Jan 25 18:34:33 2026 by rpki-client