This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json) Hash identifier: Bwata3hokcmXLew5bYbSibWwZ0JVLqIQGsMfmrulfnI= Subject key identifier: A3:4D:C8:94:48:4C:C9:00:42:A8:FC:FF:B6:AE:E7:A3:FD:49:94:FC Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Certificate serial: 0810 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft Manifest number: 0809 Signing time: Sat 24 Jan 2026 20:24:12 +0000 Manifest this update: Sat 24 Jan 2026 20:24:12 +0000 Manifest next update: Sat 31 Jan 2026 20:24:12 +0000 Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: QN6Z2koJQzM27wKWIRBj6h4kNNhAe1o4w0mcwVPLeTE=) 2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: 4H/7tRgY+9ShgVfnL2F79sUIJ0/ruS7tEGMDyU0Q41E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Validity Not Before: Jan 24 20:24:12 2026 GMT Not After : Jan 31 20:24:12 2026 GMT Subject: CN=69752a6c-b086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b3:bc:2b:d5:eb:a3:e5:00:f0:d2:d5:46:f0: 05:1c:b4:a8:e6:58:aa:e3:6b:15:22:89:e7:5a:96: 41:74:c6:a6:96:aa:72:7c:12:09:99:05:14:31:fa: a9:0a:cb:79:99:23:ee:de:f9:1f:2f:62:42:77:0f: 11:97:79:8d:c4:eb:71:e9:ed:d5:32:a3:b0:67:2a: 2b:df:57:bb:3f:eb:73:98:53:c2:56:4f:ad:47:9c: bc:69:bb:f1:fc:74:d6:c4:79:5f:c1:fe:34:69:9c: 02:00:44:ab:bd:8a:76:16:8a:09:10:a4:81:ff:a6: a9:e4:9c:1a:67:7a:89:0c:f4:c7:5f:48:74:d4:72: ea:17:48:69:12:69:a4:ea:3f:6d:4e:6e:e3:39:ce: 37:3c:71:56:d7:2c:56:a7:de:8c:97:0c:5e:de:99: 50:e5:02:83:b1:41:82:c6:7b:93:df:70:4a:52:26: 8d:fb:4b:6e:3e:24:5d:8f:e1:cf:b5:08:f3:4d:38: 51:16:d0:3b:44:8d:c7:32:1f:4f:c3:08:93:f4:f2: fb:a5:f0:b4:6f:6c:41:9a:f9:26:25:b7:f7:88:72: dc:aa:18:21:88:9d:7c:16:27:a0:59:75:d4:18:16: b4:e1:6e:0b:98:a0:d2:61:7c:d9:24:a3:8c:81:15: b8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4D:C8:94:48:4C:C9:00:42:A8:FC:FF:B6:AE:E7:A3:FD:49:94:FC X509v3 Authority Key Identifier: keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:c4:cb:7d:98:d9:73:38:01:9d:ce:94:91:02:04:fa:cf:c2: d3:32:85:fb:14:30:34:54:dc:d8:ab:75:1e:84:07:1b:4d:08: 7a:85:d6:50:bc:7b:ff:21:1f:af:f7:bf:97:0f:b8:34:64:0c: a5:c7:a6:ff:24:05:a1:3f:7b:36:ac:bd:07:67:f1:a4:74:f5: ac:1c:1b:fd:bf:9a:1f:ef:00:7e:05:74:08:54:70:cd:a4:20: 65:02:1b:a5:87:b1:9c:27:09:dd:bf:27:a5:e1:31:64:d4:c7: a0:ce:71:4a:03:cb:06:cc:dd:6e:05:13:e2:6a:59:50:1b:b3: f7:0e:74:92:34:51:2a:2c:2e:05:2e:87:ef:30:d3:7d:3d:ad: 9b:3c:4e:47:00:17:b9:27:f5:ce:93:77:61:77:a2:ec:f3:f3: f7:b3:6a:93:49:96:ad:ea:a3:f0:a4:1c:5d:4b:48:e8:da:9e: e9:9e:64:b1:63:63:ab:a2:17:8d:e4:7e:f3:fb:28:b1:9f:b9: 7d:aa:b8:d8:7b:08:10:f1:cf:56:7e:af:ab:3f:f0:82:42:d7: 19:32:74:3d:17:e6:d8:64:9e:a9:84:fc:a0:26:2c:e7:4c:2c: ce:2e:91:e2:06:ff:4f:b8:20:6a:e9:ca:bc:29:c2:10:a6:cb: 25:f1:11:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGRDIxMTAvBgNVBAUTKDkzNzg2OTFENUE4M0NDMDI2QjhEMUYyMzI4MDYwMDgz NzFCRURDMDQwHhcNMjYwMTI0MjAyNDEyWhcNMjYwMTMxMjAyNDEyWjAYMRYwFAYD VQQDDA02OTc1MmE2Yy1iMDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybO8K9Xro+UA8NLVRvAFHLSo5liq42sVIonnWpZBdMamlqpyfBIJmQUUMfqp Cst5mSPu3vkfL2JCdw8Rl3mNxOtx6e3VMqOwZyor31e7P+tzmFPCVk+tR5y8abvx /HTWxHlfwf40aZwCAESrvYp2FooJEKSB/6ap5JwaZ3qJDPTHX0h01HLqF0hpEmmk 6j9tTm7jOc43PHFW1yxWp96Mlwxe3plQ5QKDsUGCxnuT33BKUiaN+0tuPiRdj+HP tQjzTThRFtA7RI3HMh9PwwiT9PL7pfC0b2xBmvkmJbf3iHLcqhghiJ18FiegWXXU GBa04W4LmKDSYXzZJKOMgRW4DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNNyJRI TMkAQqj8/7au56P9SZT8MB8GA1UdIwQYMBaAFJN4aR1ag8wCa40fIygGAINxvtwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEZEMi9COTRCNEY3QzBD MzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpBSnJqUjhqS0FZQWczRy0z QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szaHBIVnFEekFKcmpSOGpLQVlBZzNHLTNBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEZEMi9COTRCNEY3QzBDMzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpB SnJqUjhqS0FZQWczRy0zQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8xMt9mNlzOAGdzpSRAgT6z8LTMoX7FDA0VNzYq3UehAcbTQh6hdZQ vHv/IR+v97+XD7g0ZAylx6b/JAWhP3s2rL0HZ/GkdPWsHBv9v5of7wB+BXQIVHDN pCBlAhulh7GcJwndvyel4TFk1MegznFKA8sGzN1uBRPiallQG7P3DnSSNFEqLC4F LofvMNN9Pa2bPE5HABe5J/XOk3dhd6Ls8/P3s2qTSZat6qPwpBxdS0jo2p7pnmSx Y2OroheN5H7z+yixn7l9qrjYewgQ8c9Wfq+rP/CCQtcZMnQ9F+bYZJ6phPygJizn TCzOLpHiBv9PuCBq6cq8KcIQpssl8RHL -----END CERTIFICATE-----Generated at Sun Jan 25 15:34:14 2026 by rpki-client