This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json) Hash identifier: bFkLJdm4WyFePzWb2Bwzanm4+SxrUC0IqbozVS34NWM= Subject key identifier: C0:C0:9C:34:DD:DC:56:3C:B4:9E:0A:E9:79:8D:4D:E6:7E:CD:15:A9 Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Certificate serial: 06B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft Manifest number: 0699 Signing time: Sat 24 Jan 2026 21:44:47 +0000 Manifest this update: Sat 24 Jan 2026 21:44:46 +0000 Manifest next update: Sat 31 Jan 2026 21:44:46 +0000 Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: JMgApZKoZDYD5y14o7A9e0xCn0dPZ+4nQO3MkGFyMWw=) 2: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: IsFTUXxsw7oP6sOsJZN0fFgsJ2mQPRr349bOV7EbeEQ=) 3: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: Gp+VrNNQKJoE7nZhj+fgxNCDM9H0dRu0kS108OiQiRY=) 4: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: k5QsNW2UHXx3nyL0zXl6ErEpAH+UnqW9IYvw+MU5620=) 5: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: m0D2GQEuEloT+9a5hd4XJIXteBt7D/lUYhm6KRzzdn0=) 6: FFC2CBFCF2DA11F09E4464B23F6F56BC.roa (hash: X78yiDFZ0fXzQyDjcs0YvWLWmr93tmYzmKmek1pTunw=) 7: 68219776A41311EBBF911855C4F9AE02.roa (hash: d0b5vUBWzMm2pz0E2OMmgEy+tuggoWEtsruTL8xevaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1713 (0x6b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Validity Not Before: Jan 24 21:44:46 2026 GMT Not After : Jan 31 21:44:46 2026 GMT Subject: CN=69753d4f-25ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1b:d3:50:97:fc:b2:19:dd:8b:4f:5a:52:83: 8b:1d:7d:a2:30:06:50:17:ed:43:f7:3f:4e:e0:2e: 80:3b:64:31:04:9a:79:50:c9:c1:13:ee:12:0d:32: d2:28:65:f1:a1:d7:f0:a0:56:84:4c:c5:d4:eb:2f: 9c:3b:64:09:de:24:ae:cd:fe:35:09:a7:4d:46:09: 2a:cd:0b:8d:4e:eb:d1:da:30:94:04:a7:c6:6f:14: f0:51:15:69:2f:b9:22:fd:3b:8a:13:5d:fb:e9:0f: 90:2b:2e:06:e5:60:eb:7b:d3:20:bd:c4:44:dd:49: ab:8c:52:9a:7b:61:5a:d6:ce:91:ec:00:03:44:26: 72:28:f7:bd:3b:97:d5:ce:64:ac:ae:c8:e3:c6:ff: 89:5c:42:2f:0e:6a:d0:6a:f1:bc:e2:fb:04:34:3d: 00:aa:2b:09:72:1d:9e:97:58:9e:ff:42:72:e8:76: 20:3c:d9:93:ea:93:6b:d4:e7:0e:e8:ff:44:4d:f6: 32:28:dd:e2:57:c6:2a:f0:db:83:f2:8c:fa:8e:17: f6:5c:79:7a:b5:cc:30:b0:eb:eb:97:af:48:0f:18: ec:af:9f:c7:3b:11:c1:eb:4a:17:22:98:57:0d:50: 3b:d0:57:11:c4:3f:7d:9b:9d:90:c5:16:75:26:79: f9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C0:9C:34:DD:DC:56:3C:B4:9E:0A:E9:79:8D:4D:E6:7E:CD:15:A9 X509v3 Authority Key Identifier: keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:39:19:13:06:00:38:57:7c:11:c0:50:79:aa:50:73:7e:74: 4f:e1:d4:10:7b:e7:ab:01:95:00:26:62:8e:44:89:74:38:e0: cc:71:6d:18:69:6e:ea:8c:cd:cc:e5:47:03:ca:89:07:88:ef: 12:80:2a:c7:fd:07:00:d7:cf:63:4d:52:47:59:e4:ba:37:1f: 1e:53:22:8d:1e:4e:b8:88:9d:04:c3:f4:95:8b:90:6c:89:98: 5b:05:32:0b:c4:21:81:66:77:3c:62:70:2d:c8:ae:a0:23:70: 68:4c:49:6f:b0:e0:73:7c:3f:52:43:d7:2b:11:a0:cb:cf:f7: a3:d0:54:e6:1b:b4:f1:38:00:6c:a7:24:f1:d7:2b:aa:8c:e7: 32:47:ed:20:cf:52:45:f4:25:b9:8b:5b:2c:90:fe:6d:59:35: 1b:b7:12:70:c2:dd:a2:ab:de:5a:0a:e5:be:6f:fc:42:6b:14: e4:20:e0:e6:6e:a8:bf:cd:a6:00:87:18:77:50:7e:a4:13:7d: 4e:bc:b3:30:bf:9d:ec:29:7c:6b:a5:aa:2f:ef:53:2d:5d:4f: 6a:b9:eb:98:e2:f8:47:35:27:ae:c5:50:98:30:07:4a:a7:82: aa:e9:9b:db:8c:8b:de:c4:64:f8:d2:04:98:b2:d3:f8:f4:2f: a6:bd:7a:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz MzIwODJDNTkwHhcNMjYwMTI0MjE0NDQ2WhcNMjYwMTMxMjE0NDQ2WjAYMRYwFAYD VQQDDA02OTc1M2Q0Zi0yNWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRvTUJf8shndi09aUoOLHX2iMAZQF+1D9z9O4C6AO2QxBJp5UMnBE+4SDTLS KGXxodfwoFaETMXU6y+cO2QJ3iSuzf41CadNRgkqzQuNTuvR2jCUBKfGbxTwURVp L7ki/TuKE1376Q+QKy4G5WDre9MgvcRE3UmrjFKae2Fa1s6R7AADRCZyKPe9O5fV zmSsrsjjxv+JXEIvDmrQavG84vsEND0AqisJch2el1ie/0Jy6HYgPNmT6pNr1OcO 6P9ETfYyKN3iV8Yq8NuD8oz6jhf2XHl6tcwwsOvrl69IDxjsr5/HOxHB60oXIphX DVA70FcRxD99m52QxRZ1Jnn5CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDAnDTd 3FY8tJ4K6XmNTeZ+zRWpMB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRBMy82RDYyQzhDNEEwNDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQ dEVRa1dEMzBTa2N6SUlMRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSORkTBgA4V3wRwFB5qlBzfnRP4dQQe+erAZUAJmKORIl0OODMcW0Y aW7qjM3M5UcDyokHiO8SgCrH/QcA189jTVJHWeS6Nx8eUyKNHk64iJ0Ew/SVi5Bs iZhbBTILxCGBZnc8YnAtyK6gI3BoTElvsOBzfD9SQ9crEaDLz/ej0FTmG7TxOABs pyTx1yuqjOcyR+0gz1JF9CW5i1sskP5tWTUbtxJwwt2iq95aCuW+b/xCaxTkIODm bqi/zaYAhxh3UH6kE31OvLMwv53sKXxrpaov71MtXU9queuY4vhHNSeuxVCYMAdK p4Kq6ZvbjIvexGT40gSYstP49C+mvXoP -----END CERTIFICATE-----Generated at Sun Jan 25 02:59:00 2026 by rpki-client