This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: vRngAx2cQTXjyQluEh/lHDj345+0cnp4NtLT7qad4N8= Subject key identifier: 47:0B:88:4E:37:3E:3F:5C:EC:97:C5:C6:F4:A2:6B:C0:72:F2:D7:FF Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 192F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 16AC Signing time: Sat 24 Jan 2026 16:50:50 +0000 Manifest this update: Sat 24 Jan 2026 16:50:49 +0000 Manifest next update: Sat 31 Jan 2026 16:50:49 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: aWtvDoBk0zK7fy3HLqL9t1pB2t+QtyPUjs6Qi+K6peo=) 2: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: Pc10a6GPcU3p3R3kb/3/eOvdX0ZEnj42VYzm9PFnls8=) 3: 8580D066931A11F0BE28F434C4F9AE02.roa (hash: k1O7Fs0MniO1DrY0aTiiF+0RzSR/XxsQvVPO+365FqM=) 4: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: XdNJgDmkOAWh0JRm8SzUVD6J0pIjuQDztKGWx3vGffA=) 5: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: OhDgkR/eb4CJB4ksY3ZloSiagkrp2T2wP36NarAULn4=) 6: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: dKYtICER5+Vrv6r3o9V0PfpxWh5ROGS5ONF+u9Xmzy4=) 7: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: PpfeoNLGQRLdh5JBWtYvIsWk1BQGQBviJdo1MDzsyAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6447 (0x192f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Jan 24 16:50:49 2026 GMT Not After : Jan 31 16:50:49 2026 GMT Subject: CN=6974f869-7f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:84:9d:2f:b0:23:de:64:37:19:f6:5d:7b: 34:cf:54:a1:f6:12:16:ba:c6:c3:9c:5b:2a:b3:97: ab:5d:1c:07:cb:0a:c5:61:b6:60:e2:60:16:5e:2b: bf:f8:f2:1a:c1:72:44:16:5d:10:83:fc:2f:c9:0d: 9a:f9:d3:7c:11:0c:2c:66:23:2a:ae:ba:50:92:ca: c9:ea:bb:05:8e:b1:23:ba:49:5c:20:0e:cb:05:86: 56:51:56:09:8b:b2:24:0b:d4:30:a8:f3:3b:80:8d: dd:77:ef:9e:6b:93:d9:54:68:f0:c7:55:82:72:ec: 63:95:9b:2d:af:cd:42:10:70:6f:ec:d4:84:7c:fb: c3:d9:91:fd:b0:3e:88:b8:8a:e4:bd:e4:b1:52:dc: 85:26:8c:5c:96:80:7c:12:20:ff:2b:d8:e2:b3:54: cc:df:9d:d7:75:49:d4:87:10:5b:db:9b:b7:92:34: 30:a5:c5:e5:a2:4f:98:73:78:25:d3:57:1f:a3:47: c2:fb:ea:47:0c:2b:48:55:d9:b8:37:a7:9e:de:a9: 67:9c:64:13:32:35:98:29:a0:16:a8:55:e8:d6:ee: ba:c4:a3:d9:8a:63:8c:59:8d:1a:eb:00:aa:cc:4c: f5:46:8e:3e:44:66:a8:ae:c9:87:64:76:b0:09:94: b3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0B:88:4E:37:3E:3F:5C:EC:97:C5:C6:F4:A2:6B:C0:72:F2:D7:FF X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:65:ce:c4:7a:47:a5:2c:df:39:69:6a:36:e8:6a:9e:6b:c2: fe:02:63:5d:0a:e7:eb:71:7c:f5:a2:83:95:f1:b8:af:49:48: 2b:37:4b:4a:d4:45:29:fb:fd:91:cc:56:3d:a5:02:2f:da:88: 2a:3a:89:91:b0:67:b4:65:eb:78:99:c5:47:0f:a9:a4:0a:20: 58:21:16:f8:7b:70:51:c2:11:ea:ae:b5:2e:39:08:10:e9:e0: 56:59:65:09:17:cc:45:d9:d2:87:9c:10:fc:7c:d2:bb:bc:9a: 44:3e:d3:4f:e8:6e:0b:b9:d5:33:2f:46:fa:e2:21:93:80:d0: 03:73:02:7d:d3:5f:4d:ac:a2:37:9e:20:48:4c:36:b2:28:07: 5f:61:73:89:3b:71:c3:88:14:0d:2d:75:22:40:0e:ae:8f:78: 4d:58:b8:7f:94:4d:b1:90:e4:a2:60:10:e8:1e:7f:b7:43:18: 5e:af:ae:01:5c:14:58:c3:cb:84:c0:44:4f:a0:91:9b:b6:39: 9c:be:0b:35:b4:38:45:4b:48:73:82:74:8c:60:dc:01:ee:49: f6:92:3b:c9:bf:22:b5:96:d1:42:a9:c2:c0:03:d1:ee:35:a7: be:f0:eb:02:d6:4d:29:4d:dc:1d:6f:cb:ad:97:5c:c3:f3:3f: c5:9a:c0:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjYwMTI0MTY1MDQ5WhcNMjYwMTMxMTY1MDQ5WjAYMRYwFAYD VQQDDA02OTc0Zjg2OS03ZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVCEnS+wI95kNxn2XXs0z1Sh9hIWusbDnFsqs5erXRwHywrFYbZg4mAWXiu/ +PIawXJEFl0Qg/wvyQ2a+dN8EQwsZiMqrrpQksrJ6rsFjrEjuklcIA7LBYZWUVYJ i7IkC9QwqPM7gI3dd++ea5PZVGjwx1WCcuxjlZstr81CEHBv7NSEfPvD2ZH9sD6I uIrkveSxUtyFJoxcloB8EiD/K9jis1TM353XdUnUhxBb25u3kjQwpcXlok+Yc3gl 01cfo0fC++pHDCtIVdm4N6ee3qlnnGQTMjWYKaAWqFXo1u66xKPZimOMWY0a6wCq zEz1Ro4+RGaorsmHZHawCZSz8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcLiE43 Pj9c7JfFxvSia8By8tf/MB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFZc7EekelLN85aWo26Gqea8L+AmNdCufrcXz1ooOV8bivSUgrN0tK 1EUp+/2RzFY9pQIv2ogqOomRsGe0Zet4mcVHD6mkCiBYIRb4e3BRwhHqrrUuOQgQ 6eBWWWUJF8xF2dKHnBD8fNK7vJpEPtNP6G4LudUzL0b64iGTgNADcwJ9019NrKI3 niBITDayKAdfYXOJO3HDiBQNLXUiQA6uj3hNWLh/lE2xkOSiYBDoHn+3Qxher64B XBRYw8uEwERPoJGbtjmcvgs1tDhFS0hzgnSMYNwB7kn2kjvJvyK1ltFCqcLAA9Hu Nae+8OsC1k0pTdwdb8utl1zD8z/FmsD+ -----END CERTIFICATE-----Generated at Sun Jan 25 14:11:47 2026 by rpki-client