This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft File: SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json) Hash identifier: 7qW66lrW9y1icvmRXbKynfbMznArc5dftv98OW86m0A= Subject key identifier: 8A:9C:E5:48:80:F8:AE:55:7C:12:8F:26:D3:20:8D:AD:48:7D:40:30 Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A Certificate issuer: /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft Manifest number: 0216 Signing time: Sun 25 Jan 2026 01:33:20 +0000 Manifest this update: Sun 25 Jan 2026 01:33:20 +0000 Manifest next update: Sun 01 Feb 2026 01:33:20 +0000 Files and hashes: 1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: uQcj9jxZlkdbOqZr0PeWAZwpkNVEc5nbjjDoCwy08PE=) 2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: gQgaVP6gsqEmtORlyD8C7NpCpWYfOsLgU2Aae4Tbg5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Validity Not Before: Jan 25 01:33:20 2026 GMT Not After : Feb 1 01:33:20 2026 GMT Subject: CN=697572e0-10ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:db:24:05:57:c6:eb:5a:38:05:c9:4f:47:4c: 9a:bf:f9:a0:96:8e:0f:c2:8d:e1:81:55:59:d3:db: 54:b1:4c:2d:5b:2f:a9:d4:53:67:80:02:bd:9e:81: 4d:6e:43:fd:09:04:7e:38:78:68:a5:7d:f9:7a:f7: e9:a0:55:01:32:9c:f8:18:cc:49:4e:73:bf:fd:06: 94:29:98:1a:d9:e2:d4:a0:a6:49:7f:8d:f4:c2:a8: 9f:8e:cb:fd:98:67:49:ce:2d:30:f0:24:7b:1b:e9: c1:39:d7:de:37:6d:29:e7:f7:87:57:7f:17:43:0f: 1c:ea:4d:57:64:ed:87:01:ed:98:1f:fc:ab:b7:d1: f2:5b:ef:c9:fc:e8:5d:2d:b4:34:88:cf:d0:ad:f5: 6e:89:91:d0:8e:2b:1f:10:0a:4e:ef:de:a2:78:fe: 5c:6e:3b:13:75:72:6c:ae:55:cf:3f:21:4b:c6:a0: 13:c9:29:a2:f4:af:59:0f:fe:24:1c:f5:a3:9f:63: b5:f6:94:57:e5:96:e9:7c:53:ad:a7:c1:3b:a2:4d: 5d:42:a7:73:b0:d5:90:7f:aa:51:a5:bd:d0:3a:21: c2:c6:80:dc:c0:76:21:47:1c:9d:65:d5:0c:54:82: 84:78:fb:8d:de:e5:10:af:4c:d5:52:50:59:a5:9e: 42:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9C:E5:48:80:F8:AE:55:7C:12:8F:26:D3:20:8D:AD:48:7D:40:30 X509v3 Authority Key Identifier: keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:73:40:15:c2:82:b5:f6:99:cf:95:c7:7c:33:5e:e4:9f:d1: ed:bf:4c:5a:98:d9:7a:13:6f:5e:08:37:0e:a0:e6:5c:50:70: d8:1c:9a:2f:4b:1e:53:79:36:cb:1b:c1:17:88:e1:78:3e:b8: 56:78:58:0a:5e:1d:ba:41:d3:b9:0e:0c:55:61:ad:56:da:1a: 83:6d:24:f2:e1:24:ae:5d:d0:e5:8b:46:c5:bf:fd:e8:18:83: 6c:7d:df:cd:c8:4a:1d:2a:4d:94:cb:4e:77:c2:de:59:40:82: ec:ea:69:30:d7:92:57:04:58:31:5b:a7:5c:0b:5c:95:89:92: 83:bc:95:b3:f6:8d:3f:b5:45:6b:7e:0e:3c:25:fc:d4:4e:65: 2f:f7:18:db:02:4f:aa:3a:69:4a:ca:4d:ac:60:bb:1f:cd:c7: 1e:64:ab:1c:df:91:89:9e:7c:14:0b:f8:28:d3:7e:7b:dd:03: b4:70:6f:81:3f:57:6a:34:e0:a3:13:c9:ba:42:a3:3e:81:49: 79:9d:2d:24:f0:dd:89:de:99:ba:24:f0:89:fd:02:73:a7:3f: 28:f1:f2:fd:ed:b5:c5:9c:57:dd:f4:7b:29:5d:1d:2c:d0:53: 72:92:0d:ab:51:33:59:6b:e9:26:aa:ed:63:71:d0:bf:64:25: a2:31:21:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5OUUxMTAvBgNVBAUTKDQ4N0NCNjMzMTcxQTBEREYzOEFDQkI2QUQxRUQ4QUU2 OTY1NTg2MEEwHhcNMjYwMTI1MDEzMzIwWhcNMjYwMjAxMDEzMzIwWjAYMRYwFAYD VQQDDA02OTc1NzJlMC0xMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltskBVfG61o4BclPR0yav/mglo4Pwo3hgVVZ09tUsUwtWy+p1FNngAK9noFN bkP9CQR+OHhopX35evfpoFUBMpz4GMxJTnO//QaUKZga2eLUoKZJf430wqifjsv9 mGdJzi0w8CR7G+nBOdfeN20p5/eHV38XQw8c6k1XZO2HAe2YH/yrt9HyW+/J/Ohd LbQ0iM/QrfVuiZHQjisfEApO796ieP5cbjsTdXJsrlXPPyFLxqATySmi9K9ZD/4k HPWjn2O19pRX5ZbpfFOtp8E7ok1dQqdzsNWQf6pRpb3QOiHCxoDcwHYhRxydZdUM VIKEePuN3uUQr0zVUlBZpZ5C9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqc5UiA +K5VfBKPJtMgja1IfUAwMB8GA1UdIwQYMBaAFEh8tjMXGg3fOKy7atHtiuaWVYYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk5RS82QzEzNTQzNEM5 RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURkODRyTHRxMGUySzVwWlZo Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NIeTJNeGNhRGQ4NHJMdHEwZTJLNXBaVmhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk5RS82QzEzNTQzNEM5RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURk ODRyTHRxMGUySzVwWlZoZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxc0AVwoK19pnPlcd8M17kn9Htv0xamNl6E29eCDcOoOZcUHDYHJov Sx5TeTbLG8EXiOF4PrhWeFgKXh26QdO5DgxVYa1W2hqDbSTy4SSuXdDli0bFv/3o GINsfd/NyEodKk2Uy053wt5ZQILs6mkw15JXBFgxW6dcC1yViZKDvJWz9o0/tUVr fg48JfzUTmUv9xjbAk+qOmlKyk2sYLsfzcceZKsc35GJnnwUC/go03573QO0cG+B P1dqNOCjE8m6QqM+gUl5nS0k8N2J3pm6JPCJ/QJzpz8o8fL97bXFnFfd9HspXR0s 0FNykg2rUTNZa+kmqu1jcdC/ZCWiMSEN -----END CERTIFICATE-----Generated at Sun Jan 25 19:03:46 2026 by rpki-client