This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft File: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft (raw, json) Hash identifier: oMJp7LKg3mPUefPpnxWvttsqcu0JHQo2QJjTL/DJZKw= Subject key identifier: 78:34:6B:32:78:84:6A:82:0F:B8:5F:E2:6A:89:1C:4D:4B:B6:FD:86 Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft Manifest number: DC Signing time: Fri 23 Jan 2026 05:28:08 +0000 Manifest this update: Fri 23 Jan 2026 05:28:08 +0000 Manifest next update: Fri 30 Jan 2026 05:28:08 +0000 Files and hashes: 1: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl (hash: Oqv85QhGeBWiAH12/w88kqYyqotRO2NkUgumgY29uWA=) 2: 71A92448186E11F083760527C4F9AE02.roa (hash: fEhJNoYQsvAhpUWy30zyzhm+f82+0YX6EDfhlwxFPqw=) 3: 0AAD710010B111F0A46DA723C4F9AE02.roa (hash: bk09MGKmA1KtNu/8fLfir0D9n+KVGE5j0LJioJGLi+A=) 4: 95E16734187411F099AC2133C4F9AE02.roa (hash: GF8rCTpf/VJlJeNEZPKA8ehDu40GNOcfTE2tHrOTJPA=) 5: C4A5B394A86711F0BD0D193DC4F9AE02.roa (hash: EzdO0E9s+3cgAs/ZEX/Wfo2/4xk/HK6LBfwW3sjjoC0=) 6: 13B46272139511F0BAC02735C4F9AE02.roa (hash: lunzyAvH2WnGuuqjQcMC7tzE6PiUkG2ZqHNZmlQ3Mow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 05:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Validity Not Before: Jan 23 05:28:08 2026 GMT Not After : Jan 30 05:28:08 2026 GMT Subject: CN=697306e8-b756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8a:bc:8f:bd:eb:84:5d:5f:ef:b8:7b:a2:80: b0:7e:d2:93:07:28:be:09:72:c9:c7:8b:38:28:5e: dd:ce:e0:1d:6b:f4:ac:21:6e:67:c4:bd:3b:1f:38: 55:81:0c:cb:0a:a2:47:e8:6b:24:6b:2b:a7:99:cd: 17:9d:bf:e6:17:ba:ba:04:39:a7:b9:fe:8c:1a:44: 9a:dd:c1:f1:80:d2:88:5e:43:22:50:31:c5:f7:7d: a8:f2:0f:28:8b:41:06:11:58:0d:57:a4:4e:e4:de: eb:58:54:be:f4:35:2b:92:6c:d4:ab:1d:13:b3:b7: cd:9f:2f:fe:d9:c4:21:2f:dd:69:b8:54:a8:f3:2c: 40:e4:3a:07:2f:2f:ad:8f:f9:f4:53:a2:4e:9c:fa: 79:82:bc:5e:25:5a:d7:20:44:6a:bd:69:16:04:e2: 56:32:14:9e:9a:5c:e8:7a:35:53:dc:d8:9e:68:e7: 3c:c4:82:50:10:9a:68:3f:60:06:96:bb:16:29:6e: 21:73:67:9c:e4:d1:32:84:35:0b:7f:0e:59:ce:81: a8:64:38:e2:ed:d4:c2:85:24:5a:03:df:b8:c9:d4: 3a:9b:0b:0f:32:a0:79:ee:3b:d8:33:bb:0a:2c:58: 5a:70:ab:b3:15:ee:75:dd:64:15:cd:55:d3:19:5f: d5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:34:6B:32:78:84:6A:82:0F:B8:5F:E2:6A:89:1C:4D:4B:B6:FD:86 X509v3 Authority Key Identifier: keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:1b:26:15:0f:2c:76:df:22:db:2b:00:90:9d:a5:13:d8:24: ae:da:57:8c:90:8b:ff:3d:06:1d:d5:b5:70:e5:98:f2:53:44: 49:eb:41:8b:6d:80:44:15:3e:d0:d0:ff:3e:34:ec:59:b2:88: 97:3b:f2:83:bd:d9:23:b3:ca:81:ac:b5:84:6b:f5:3d:a5:71: a7:16:30:d5:dd:90:30:76:88:5a:c5:57:b7:4c:0c:82:1b:ab: d7:fd:1b:e3:a5:ca:ad:c8:60:e2:b0:be:a8:d0:45:17:a3:de: 8f:10:21:fe:09:6d:04:fb:1b:cc:b6:e4:75:9c:f1:0d:8b:78: 4b:f5:5d:f3:a6:8d:59:0a:01:dd:29:9b:99:d1:b5:1a:ba:8b: 8d:dd:c5:51:84:57:35:68:c0:d1:78:f1:ab:9a:6b:7b:24:d1: b4:d6:72:02:65:d2:9b:bf:b7:3a:c5:60:9b:ff:89:0c:37:db: 0e:ba:e8:13:98:a2:df:60:4e:3f:7d:50:b8:dc:ad:d2:6a:48: 56:90:1e:95:83:04:38:65:e9:60:e8:e3:35:3f:ad:5a:e3:1b: 6b:73:7c:24:14:04:25:04:6e:67:0d:2c:92:3a:51:b7:a2:dc: 34:5e:04:f1:4a:bd:06:d4:1e:0a:b4:62:5b:c7:39:93:a2:5a: 1a:27:04:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDOTgxMTAvBgNVBAUTKEZGOENDQkU2MTg3NTVBMUY1MTk5QkQwQzgyNzYwRThF REI4Rjg1QkEwHhcNMjYwMTIzMDUyODA4WhcNMjYwMTMwMDUyODA4WjAYMRYwFAYD VQQDDA02OTczMDZlOC1iNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oq8j73rhF1f77h7ooCwftKTByi+CXLJx4s4KF7dzuAda/SsIW5nxL07HzhV gQzLCqJH6Gskayunmc0Xnb/mF7q6BDmnuf6MGkSa3cHxgNKIXkMiUDHF932o8g8o i0EGEVgNV6RO5N7rWFS+9DUrkmzUqx0Ts7fNny/+2cQhL91puFSo8yxA5DoHLy+t j/n0U6JOnPp5grxeJVrXIERqvWkWBOJWMhSemlzoejVT3NieaOc8xIJQEJpoP2AG lrsWKW4hc2ec5NEyhDULfw5ZzoGoZDji7dTChSRaA9+4ydQ6mwsPMqB57jvYM7sK LFhacKuzFe513WQVzVXTGV/VQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHg0azJ4 hGqCD7hf4mqJHE1Ltv2GMB8GA1UdIwQYMBaAFP+My+YYdVofUZm9DIJ2Do7bj4W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkM5OC9BQkFGRjVFQTA2 MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi9fNHpMNWhoMVdoOVJtYjBNZ25ZT2p0dVBo Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL180ekw1aGgxV2g5Um1iME1nbllPanR1UGhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkM5OC9BQkFGRjVFQTA2MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi9fNHpMNWhoMVdo OVJtYjBNZ25ZT2p0dVBoYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4GyYVDyx23yLbKwCQnaUT2CSu2leMkIv/PQYd1bVw5ZjyU0RJ60GL bYBEFT7Q0P8+NOxZsoiXO/KDvdkjs8qBrLWEa/U9pXGnFjDV3ZAwdohaxVe3TAyC G6vX/RvjpcqtyGDisL6o0EUXo96PECH+CW0E+xvMtuR1nPENi3hL9V3zpo1ZCgHd KZuZ0bUauouN3cVRhFc1aMDRePGrmmt7JNG01nICZdKbv7c6xWCb/4kMN9sOuugT mKLfYE4/fVC43K3SakhWkB6VgwQ4Zelg6OM1P61a4xtrc3wkFAQlBG5nDSySOlG3 otw0XgTxSr0G1B4KtGJbxzmToloaJwQP -----END CERTIFICATE-----Generated at Sun Jan 25 02:53:19 2026 by rpki-client