This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: h67i94CtNTUPYYWcwJ4dU6Ix1PqO217wBy7Xfaxm3mU= Subject key identifier: 9E:C6:B8:8E:5D:06:BD:41:65:14:A0:DB:34:54:C1:49:0D:9C:39:DE Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 08B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 086F Signing time: Sat 24 Jan 2026 20:04:33 +0000 Manifest this update: Sat 24 Jan 2026 20:04:33 +0000 Manifest next update: Sat 31 Jan 2026 20:04:33 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: rS9s+auJyNc0FWkbF5SYj8Nl0erlVKCP/JsWS2cfhag=) 2: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: Y77Vm4FDvzInxKFqdlF/vRWJ/K3yltYPE+Pe0UH2y2g=) 3: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: blrAgl3fjG1pjrvf4Xs1bBFsczydDh5kF9/bkGOAsSQ=) 4: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: AKMar7M+pQ4y6XoQFhZVW0JujFvWAFeIi5OqHavhpXY=) 5: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: q8NO+KLP5CuELgICWVCpo8gcxUyHjK7jNGZWSmFkgjE=) 6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: e0wK1EfjjzOwAebCT+bRt55wU2Y1pEBpk2uJbmvJGI8=) 7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: QIJzT5GapeGSiWUEH6w75YrO1W7X/FkG1tF+eQj92Fk=) 8: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: kCdoRWjX7vh3I5Nidiix3CmYE03MKnq+oXPvSl8Xnds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2224 (0x8b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Jan 24 20:04:33 2026 GMT Not After : Jan 31 20:04:33 2026 GMT Subject: CN=697525d1-7b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:77:e5:b7:62:0a:bf:d7:ba:60:80:94:a4: 5b:a3:61:41:7f:5e:3f:bb:b0:30:96:13:5d:79:11: ba:ca:20:58:f5:08:18:5e:d7:8f:00:3d:60:91:c7: fb:a4:a8:68:19:3c:94:0e:ac:a7:86:36:22:39:1a: 08:ea:61:b4:bf:22:86:7b:ca:2c:ae:77:9d:d9:c2: 9d:37:f5:05:a0:1f:ec:4a:d0:b5:64:43:95:a1:3b: 18:df:7f:ff:37:55:42:e1:3a:62:be:25:f6:66:a5: ed:35:61:c7:d2:2e:78:c6:28:79:16:83:2c:d3:3f: 91:e8:b5:08:03:b3:c4:ed:75:a7:13:3f:fd:76:d0: cb:92:11:a6:c8:20:62:06:91:fb:2e:6d:7a:e9:13: 3b:86:20:65:4c:1f:f1:d8:99:80:b5:91:84:08:3c: b8:ac:80:f6:43:e8:ed:a1:b2:40:9a:97:ed:25:8b: 28:e6:28:b0:2b:76:31:bc:ac:b6:ff:c8:3b:d1:6a: 17:1b:e4:d6:fc:b7:9a:d0:d1:9f:24:00:e6:49:aa: dd:6e:e7:10:bd:f2:94:0b:d5:34:d7:d9:45:f2:94: 13:b5:e1:9d:3e:ed:42:b2:14:19:37:69:20:4a:bd: 0c:c8:ef:c0:d6:32:8b:12:ea:3f:f1:84:ae:24:31: d1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C6:B8:8E:5D:06:BD:41:65:14:A0:DB:34:54:C1:49:0D:9C:39:DE X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:2d:d1:31:54:57:87:c1:2f:b7:76:d1:cd:c6:05:a7:22:52: 00:59:3f:9b:1d:8c:ea:ef:86:c4:6f:72:f6:11:04:fe:51:84: 87:a3:10:c7:61:d0:18:5a:d9:de:70:18:dd:06:f2:eb:b6:f5: 34:91:06:c0:30:98:18:ba:68:59:58:56:49:6e:bf:9d:69:04: d5:e2:e3:30:be:14:be:f9:40:0c:81:21:ee:96:7e:a8:77:be: a1:e1:fc:6c:26:3e:39:b7:ef:a2:40:91:3a:c1:f5:b5:4e:ee: e9:17:d1:6d:a4:bd:ca:f3:97:7e:45:a8:07:8a:ba:32:bf:11: 06:fa:3c:e5:c9:50:20:d3:22:58:4f:49:75:f8:62:15:d5:68: 3f:88:ab:b1:51:90:e0:3c:76:53:9d:a4:79:66:1c:7c:d4:15: d7:db:58:e9:2c:e0:29:68:4d:42:46:db:e7:14:f5:e7:6a:fe: 90:7d:e8:27:d8:b0:d3:83:63:6d:cf:0a:8f:3f:f1:54:54:e2: 01:9f:9b:37:d5:84:ab:a2:d1:81:f4:0f:88:c0:3f:3e:08:47: c9:c9:84:76:72:f9:3c:bf:e0:69:a6:f2:eb:b0:9f:69:95:a3: ba:47:2e:c0:67:e5:c3:35:8f:15:91:f5:60:ef:00:f3:ae:de: cd:f4:24:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjYwMTI0MjAwNDMzWhcNMjYwMTMxMjAwNDMzWjAYMRYwFAYD VQQDDA02OTc1MjVkMS03Yjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbR35bdiCr/XumCAlKRbo2FBf14/u7AwlhNdeRG6yiBY9QgYXtePAD1gkcf7 pKhoGTyUDqynhjYiORoI6mG0vyKGe8osrned2cKdN/UFoB/sStC1ZEOVoTsY33// N1VC4TpiviX2ZqXtNWHH0i54xih5FoMs0z+R6LUIA7PE7XWnEz/9dtDLkhGmyCBi BpH7Lm166RM7hiBlTB/x2JmAtZGECDy4rID2Q+jtobJAmpftJYso5iiwK3YxvKy2 /8g70WoXG+TW/Lea0NGfJADmSardbucQvfKUC9U019lF8pQTteGdPu1CshQZN2kg Sr0MyO/A1jKLEuo/8YSuJDHR3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7GuI5d Br1BZRSg2zRUwUkNnDneMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvLdExVFeHwS+3dtHNxgWnIlIAWT+bHYzq74bEb3L2EQT+UYSHoxDH YdAYWtnecBjdBvLrtvU0kQbAMJgYumhZWFZJbr+daQTV4uMwvhS++UAMgSHuln6o d76h4fxsJj45t++iQJE6wfW1Tu7pF9FtpL3K85d+RagHiroyvxEG+jzlyVAg0yJY T0l1+GIV1Wg/iKuxUZDgPHZTnaR5Zhx81BXX21jpLOApaE1CRtvnFPXnav6Qfegn 2LDTg2NtzwqPP/FUVOIBn5s31YSrotGB9A+IwD8+CEfJyYR2cvk8v+BppvLrsJ9p laO6Ry7AZ+XDNY8VkfVg7wDzrt7N9CR8 -----END CERTIFICATE-----Generated at Sun Jan 25 03:02:48 2026 by rpki-client