This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft File: 1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json) Hash identifier: fzlF9CZjKrXHHbKDCm+MYyMrGS3wxcfEPm2URhqN9Mw= Subject key identifier: 12:AA:69:0B:CD:9C:B9:DC:FA:9D:EF:7F:D3:3A:D4:CE:69:49:F3:68 Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 35A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft Manifest number: 3553 Signing time: Sat 24 Jan 2026 14:22:15 +0000 Manifest this update: Sat 24 Jan 2026 14:22:14 +0000 Manifest next update: Sat 31 Jan 2026 14:22:14 +0000 Files and hashes: 1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: 4LXOdZaPaSwzgSGDGtjPjTZ9BVZ+PlRWKaaUW0gHf/A=) 2: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: LDnpUV+i1iRAJrBm2unF32JWcSXChORTnvD3fUQwbdk=) 3: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: cLWjAQfHB1XuUxPtUJRHi4idez2Y+6Lxv08uwEYGrgM=) 4: 964F254A4AEC11EF91EC775FC4F9AE02.roa (hash: nUgngne0/Po1woAmp/WM+XljTraQ4HMoQ5pOy9QCPKg=) 5: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: MDzjDXZFFOaG6b4Hi2bRVyjseXED7kDvegJ5uB6PIoY=) 6: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: xeaHh4f0PcYoja3FW2MKcCuwzba5+DIVdsTI+jNxV6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13731 (0x35a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: Jan 24 14:22:14 2026 GMT Not After : Jan 31 14:22:14 2026 GMT Subject: CN=6974d597-bcb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:00:a0:03:94:f5:2c:69:c0:37:5c:a3:48:7f: 9e:38:17:f1:33:5b:39:ac:61:4f:07:8a:1a:ba:c7: f5:cf:bf:f1:81:53:e4:67:78:bb:08:b3:0c:5a:2e: 02:35:54:20:59:56:25:18:43:d7:8c:e2:cb:b2:19: c1:bc:7a:dd:09:9f:c9:53:88:1b:bf:88:65:3b:6d: a1:51:b5:3b:84:bb:01:46:bf:50:34:f4:e7:b7:52: 7a:6f:48:77:e2:35:49:db:62:f9:22:92:5e:c9:c3: 46:1b:e5:17:8c:1b:cd:45:52:71:85:82:d9:49:fc: 8a:ab:1c:0c:c5:c4:01:06:bd:a1:15:22:5f:ec:84: 45:f0:da:7b:6e:8e:de:b7:0e:44:2f:ee:93:46:34: 97:0f:07:d2:0f:29:88:fb:21:92:21:f7:31:f6:44: 30:39:d1:23:53:17:ec:b3:b1:9f:e7:fd:82:35:05: f1:78:54:b2:d1:38:12:1b:88:e4:00:31:68:36:a3: a1:06:73:93:b8:e9:eb:00:c7:d9:ff:57:fe:6f:34: 5b:6d:f7:ba:17:46:b5:5f:ed:f6:af:d2:5d:d8:2b: fd:d0:7d:3a:0c:0f:84:ae:69:fa:8f:be:ab:64:d4: c8:81:73:5d:58:fc:16:37:e7:28:89:fe:c7:cd:de: 79:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AA:69:0B:CD:9C:B9:DC:FA:9D:EF:7F:D3:3A:D4:CE:69:49:F3:68 X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5c:04:a2:75:38:84:5f:94:5e:b1:2c:a6:d4:ce:b7:ed:b8: c3:65:75:f0:6f:2d:54:d7:51:e9:64:b0:7a:58:27:91:9d:6f: a0:bd:f0:65:60:78:08:5b:e4:ba:8a:ef:c7:83:01:cd:13:49: a6:ab:96:1f:1b:d7:ba:e7:62:84:bb:a6:1c:dc:44:0f:8a:59: 37:b4:81:72:be:e8:e4:56:d6:0f:95:e7:2d:71:df:8b:67:6c: 3f:1e:c0:e0:ef:16:55:2e:d4:ec:d5:b0:e3:b7:d9:81:ab:31: 41:95:a5:92:b4:8e:f9:c0:0a:1e:d7:ce:b0:ed:14:59:3b:15: fc:93:10:f7:3b:a1:3b:d5:2b:af:91:db:1f:16:23:55:ed:22: dd:64:24:02:4b:9a:2f:02:80:21:8a:75:52:de:cd:53:b6:6c: 20:c8:60:4d:af:dc:30:e2:37:39:c7:0b:9b:27:d2:90:7c:55: f8:47:50:39:5d:f6:6a:5f:95:9d:a1:c6:bb:5d:58:37:11:ee: 81:c0:08:96:38:80:ff:1c:e8:5a:e9:72:08:29:02:3a:0e:62: 3f:8a:af:56:d2:ef:4b:ee:75:f5:4a:1e:a4:6f:ca:06:a0:e4: 54:d3:85:05:f3:02:c4:dc:34:a9:3f:99:90:7f:2e:e8:41:52: 42:7b:8a:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjYwMTI0MTQyMjE0WhcNMjYwMTMxMTQyMjE0WjAYMRYwFAYD VQQDDA02OTc0ZDU5Ny1iY2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQCgA5T1LGnAN1yjSH+eOBfxM1s5rGFPB4oausf1z7/xgVPkZ3i7CLMMWi4C NVQgWVYlGEPXjOLLshnBvHrdCZ/JU4gbv4hlO22hUbU7hLsBRr9QNPTnt1J6b0h3 4jVJ22L5IpJeycNGG+UXjBvNRVJxhYLZSfyKqxwMxcQBBr2hFSJf7IRF8Np7bo7e tw5EL+6TRjSXDwfSDymI+yGSIfcx9kQwOdEjUxfss7Gf5/2CNQXxeFSy0TgSG4jk ADFoNqOhBnOTuOnrAMfZ/1f+bzRbbfe6F0a1X+32r9Jd2Cv90H06DA+Ermn6j76r ZNTIgXNdWPwWN+coif7Hzd55IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKqaQvN nLnc+p3vf9M61M5pSfNoMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPXASidTiEX5ResSym1M637bjDZXXwby1U11HpZLB6WCeRnW+gvfBl YHgIW+S6iu/HgwHNE0mmq5YfG9e652KEu6Yc3EQPilk3tIFyvujkVtYPlectcd+L Z2w/HsDg7xZVLtTs1bDjt9mBqzFBlaWStI75wAoe186w7RRZOxX8kxD3O6E71Suv kdsfFiNV7SLdZCQCS5ovAoAhinVS3s1TtmwgyGBNr9ww4jc5xwubJ9KQfFX4R1A5 XfZqX5Wdoca7XVg3Ee6BwAiWOID/HOha6XIIKQI6DmI/iq9W0u9L7nX1Sh6kb8oG oORU04UF8wLE3DSpP5mQfy7oQVJCe4oy -----END CERTIFICATE-----Generated at Sun Jan 25 12:42:09 2026 by rpki-client