This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft File: PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json) Hash identifier: lqZXsm5b3fBG3sxCWdCowAcM5Qz6PEzqh5eLvnKfCXg= Subject key identifier: 0A:AD:54:D0:AF:CE:77:19:FF:D9:85:98:AA:2A:B8:9C:45:9D:4B:07 Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Certificate serial: 0EB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft Manifest number: 0EAF Signing time: Sat 24 Jan 2026 17:21:41 +0000 Manifest this update: Sat 24 Jan 2026 17:21:41 +0000 Manifest next update: Sat 31 Jan 2026 17:21:41 +0000 Files and hashes: 1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: N3QgzqBXbtBRjbk8Ehlb2Bqs8igKOI5AkcbriDGTf3w=) 2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: F23CXCLEdHEHx/0prljjzO2nfGEWKXpGSMmp6uriDiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3768 (0xeb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Validity Not Before: Jan 24 17:21:41 2026 GMT Not After : Jan 31 17:21:41 2026 GMT Subject: CN=6974ffa5-cc34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0b:16:62:98:02:f0:ab:8c:a2:cf:b9:3a:51: 86:f4:76:ff:9e:46:23:52:d1:54:5e:22:21:5c:c7: 83:d4:90:cb:4a:85:12:bd:b9:20:c5:3d:f5:c9:1a: 4e:92:ec:c5:90:85:dd:a2:8d:30:74:81:e0:ae:42: b3:ad:83:f3:2b:ab:17:24:b5:fe:cd:ff:f5:e0:1c: 07:af:bf:b8:d5:3b:22:0b:d3:ff:78:fa:b1:f4:a1: a2:2e:9a:7e:90:b0:98:da:8d:bb:48:c2:d9:c4:52: 50:4a:7a:0a:ec:1e:66:9d:8e:92:09:1a:97:c5:35: d4:9a:6d:aa:8a:42:f9:77:e3:d7:fd:0e:5b:16:af: 89:df:11:8a:20:c1:29:d6:21:a3:38:bf:bf:7e:58: dc:bb:1a:7c:68:69:b3:54:d5:20:30:27:47:9e:0d: fa:f5:aa:a2:a1:f7:54:ce:2e:db:e5:dc:9e:fc:d6: f3:f7:c4:d1:42:7e:24:d9:9d:55:2d:1e:fa:28:36: 45:8d:2e:b0:e8:7e:f4:5a:62:b7:ee:1c:0e:c8:5a: cb:62:ed:f7:bc:c7:92:74:b8:ae:2c:61:26:f9:df: 8e:fe:ec:95:25:da:83:80:48:60:1b:b2:43:13:55: 3c:96:69:1a:05:87:d9:a5:4d:1e:93:84:ee:3e:76: ff:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AD:54:D0:AF:CE:77:19:FF:D9:85:98:AA:2A:B8:9C:45:9D:4B:07 X509v3 Authority Key Identifier: keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:90:f7:c4:20:96:08:e3:5a:61:ec:99:2c:45:ca:3c:a1:58: 2e:0f:52:cd:d2:19:99:b2:88:fd:99:0c:20:fe:3d:7d:8e:1a: 49:d0:3a:5c:55:43:98:6e:ab:5e:06:68:40:46:07:bb:ed:b3: 92:bb:2f:75:2a:ae:09:61:54:3f:22:c1:eb:fd:31:1c:e0:61: d3:2d:76:5e:d5:b1:8f:7e:fd:d3:63:4f:d5:bc:59:8a:5e:4c: 3d:1f:1e:a7:4f:2e:cd:0e:92:37:ee:cb:2b:0e:db:09:52:49: db:10:0d:7e:fe:80:29:9e:6a:19:b0:0c:12:be:bf:1d:ed:7c: d7:d0:c2:f3:d8:ec:b4:8c:fa:5d:66:aa:5c:59:4b:db:28:33: a6:3e:4a:77:f9:41:7c:a1:94:71:9e:71:07:9b:6a:0f:3f:58: c4:74:fe:3b:e2:40:5e:6e:2f:a7:fa:a3:7d:99:16:f9:9a:02: e0:db:10:a7:dc:fd:0a:09:c9:86:ef:92:c0:e8:02:4a:70:80: 5e:cc:ec:8a:62:2b:2b:59:d8:b5:9c:02:5e:32:af:8f:7f:46: b3:89:e9:2c:1f:0d:cd:21:d0:92:ae:e9:42:67:fc:53:cf:ef: 20:e9:fb:f5:a4:3e:cc:20:ff:8c:5f:6b:89:1c:52:72:b3:30: 59:c8:f3:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4 NzUyODE5ODMwHhcNMjYwMTI0MTcyMTQxWhcNMjYwMTMxMTcyMTQxWjAYMRYwFAYD VQQDDA02OTc0ZmZhNS1jYzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QsWYpgC8KuMos+5OlGG9Hb/nkYjUtFUXiIhXMeD1JDLSoUSvbkgxT31yRpO kuzFkIXdoo0wdIHgrkKzrYPzK6sXJLX+zf/14BwHr7+41TsiC9P/ePqx9KGiLpp+ kLCY2o27SMLZxFJQSnoK7B5mnY6SCRqXxTXUmm2qikL5d+PX/Q5bFq+J3xGKIMEp 1iGjOL+/fljcuxp8aGmzVNUgMCdHng369aqiofdUzi7b5dye/Nbz98TRQn4k2Z1V LR76KDZFjS6w6H70WmK37hwOyFrLYu33vMeSdLiuLGEm+d+O/uyVJdqDgEhgG7JD E1U8lmkaBYfZpU0ek4TuPnb/twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqtVNCv zncZ/9mFmKoquJxFnUsHMB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjg4MC8xRjUxMThBNEEyRUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZl OExONURRNTVZZWlIVW9HWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlkPfEIJYI41ph7JksRco8oVguD1LN0hmZsoj9mQwg/j19jhpJ0Dpc VUOYbqteBmhARge77bOSuy91Kq4JYVQ/IsHr/TEc4GHTLXZe1bGPfv3TY0/VvFmK Xkw9Hx6nTy7NDpI37ssrDtsJUknbEA1+/oApnmoZsAwSvr8d7XzX0MLz2Oy0jPpd ZqpcWUvbKDOmPkp3+UF8oZRxnnEHm2oPP1jEdP474kBebi+n+qN9mRb5mgLg2xCn 3P0KCcmG75LA6AJKcIBezOyKYisrWdi1nAJeMq+Pf0azieksHw3NIdCSrulCZ/xT z+8g6fv1pD7MIP+MX2uJHFJyszBZyPMx -----END CERTIFICATE-----Generated at Sun Jan 25 09:50:36 2026 by rpki-client