This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft File: aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft (raw, json) Hash identifier: cMtmQMmzM3i7Wmgb+j/E3RV0n+GLE5czTAPpVHN/AMI= Subject key identifier: C8:FC:09:BA:8E:EA:C5:08:A8:7C:16:4D:9D:C0:32:52:DD:83:BB:E4 Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 Certificate issuer: /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Certificate serial: 0687 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft Manifest number: 0823 Signing time: Sat 24 Jan 2026 21:56:18 +0000 Manifest this update: Sat 24 Jan 2026 21:56:18 +0000 Manifest next update: Sat 31 Jan 2026 21:56:18 +0000 Files and hashes: 1: aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl (hash: 9qBRmkNMG9QQdAli5bvyPkVNmbiWCK1OA4ZawqpbXVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1671 (0x687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A, serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Validity Not Before: Jan 24 21:56:18 2026 GMT Not After : Jan 31 21:56:18 2026 GMT Subject: CN=69754002-7e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d7:83:f6:4c:72:f3:ba:91:37:8e:a2:0f:15: b2:fc:fd:c1:2c:4b:7d:c9:b1:64:df:64:13:c2:28: f5:87:1d:65:c0:3c:94:2c:ea:ff:cc:0e:84:a2:ec: bc:ee:08:9d:b3:c4:63:ef:08:47:8e:05:a6:2b:55: 09:c5:e7:73:00:08:92:88:81:54:bc:40:9a:3e:7c: 63:8f:21:af:f7:63:48:43:c9:b9:5a:7b:5d:2e:bf: ff:55:41:1d:68:cd:bf:a8:b6:39:17:2a:e6:f2:5f: 65:f2:c3:84:ca:c5:4f:79:c2:a8:9c:3f:2f:44:ac: a1:ac:78:06:29:18:1c:b7:51:2a:a4:52:72:e2:53: 30:d8:18:c7:86:b5:29:3c:66:86:d3:d9:38:53:3c: 76:b6:9c:6d:2a:a9:1f:d4:ee:f7:3c:c6:01:da:77: 13:a1:d1:44:4d:95:03:fe:73:04:53:29:99:34:17: ab:4e:de:19:28:e8:8f:2e:a9:82:b2:bc:dd:52:54: ae:5c:9a:53:b0:38:14:6e:51:50:cd:48:1b:2c:ff: 46:09:e7:4b:e8:e5:74:dc:51:b2:fd:7d:e5:9c:40: 0e:f4:77:be:3d:30:36:7b:75:80:eb:ec:0e:84:0c: 47:59:c3:28:9e:62:36:40:84:57:7c:18:f8:b2:90: a5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FC:09:BA:8E:EA:C5:08:A8:7C:16:4D:9D:C0:32:52:DD:83:BB:E4 X509v3 Authority Key Identifier: keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:92:18:4c:c4:7c:61:65:6d:db:ea:6c:e4:e5:e7:7f:f8:e9: 88:9e:7f:ab:ee:dd:84:d8:a9:c0:3d:fa:b7:dc:73:c2:33:8d: c7:e5:fd:5a:ad:22:0c:07:c8:d0:13:c7:85:90:a0:82:a2:67: 93:01:f7:16:83:28:31:ef:10:30:08:15:26:85:ea:0d:a9:a0: ce:dd:e8:9b:5d:c8:e0:59:ee:2a:fe:ef:cb:9c:d0:12:b9:7d: 57:b1:e2:4b:4f:6f:19:5f:2c:a6:26:70:bd:42:73:21:9a:e5: 08:1c:33:b0:2e:3d:32:f6:d3:76:0f:11:ff:dd:05:1b:ce:ac: 62:b4:bd:db:d0:0e:ad:5e:d6:04:0c:af:96:7e:be:6f:5f:32: d9:9a:af:f0:1b:d2:ac:0f:be:43:86:e1:c0:1e:87:ec:c2:f4: 44:c1:c5:89:cd:4c:75:6e:db:eb:d0:23:4a:32:6e:6e:6c:79: fa:87:c7:7b:4c:95:93:16:88:42:8d:ed:50:4f:a9:24:80:3c: a6:bb:ae:9f:56:55:d9:87:b6:2b:bd:ff:10:81:8b:f8:c6:fd: 31:79:f9:46:0d:e1:f1:a3:e8:cb:f6:69:da:b7:32:e0:55:c1: 10:d1:18:3e:a9:ed:7a:6b:ab:ed:60:8f:22:61:27:1a:bd:85: 3b:c6:82:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKDY4ODBEMzIzQUEzRjJENTE0NjA1MDY0MEYzMjFBNjEy OTAwMERGMDMwHhcNMjYwMTI0MjE1NjE4WhcNMjYwMTMxMjE1NjE4WjAYMRYwFAYD VQQDDA02OTc1NDAwMi03ZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2teD9kxy87qRN46iDxWy/P3BLEt9ybFk32QTwij1hx1lwDyULOr/zA6Eouy8 7gids8Rj7whHjgWmK1UJxedzAAiSiIFUvECaPnxjjyGv92NIQ8m5WntdLr//VUEd aM2/qLY5Fyrm8l9l8sOEysVPecKonD8vRKyhrHgGKRgct1EqpFJy4lMw2BjHhrUp PGaG09k4Uzx2tpxtKqkf1O73PMYB2ncTodFETZUD/nMEUymZNBerTt4ZKOiPLqmC srzdUlSuXJpTsDgUblFQzUgbLP9GCedL6OV03FGy/X3lnEAO9He+PTA2e3WA6+wO hAxHWcMonmI2QIRXfBj4spCl7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMj8CbqO 6sUIqHwWTZ3AMlLdg7vkMB8GA1UdIwQYMBaAFGiA0yOqPy1RRgUGQPMhphKQAN8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xWRkdCUVpBOHlHbUVwQUEz d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJRFRJNm9fTFZGR0JRWkE4eUdtRXBBQTN3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xW RkdCUVpBOHlHbUVwQUEzd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRkhhMxHxhZW3b6mzk5ed/+OmInn+r7t2E2KnAPfq33HPCM43H5f1a rSIMB8jQE8eFkKCComeTAfcWgygx7xAwCBUmheoNqaDO3eibXcjgWe4q/u/LnNAS uX1XseJLT28ZXyymJnC9QnMhmuUIHDOwLj0y9tN2DxH/3QUbzqxitL3b0A6tXtYE DK+Wfr5vXzLZmq/wG9KsD75DhuHAHofswvREwcWJzUx1btvr0CNKMm5ubHn6h8d7 TJWTFohCje1QT6kkgDymu66fVlXZh7Yrvf8QgYv4xv0xeflGDeHxo+jL9mnatzLg VcEQ0Rg+qe16a6vtYI8iYScavYU7xoLG -----END CERTIFICATE-----Generated at Sun Jan 25 02:58:55 2026 by rpki-client