This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft File: -3sFh4NlHpP6MN2W1iZebi81JVQ.mft (raw, json) Hash identifier: xzXtvxH0OQojBgE+OqXsGetYiBwcBZHjHv2iA9qV2yc= Subject key identifier: CD:DB:A5:CA:53:BD:E0:D3:DF:07:59:04:D2:4F:28:C9:0F:D6:D1:CF Authority key identifier: FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54 Certificate issuer: /CN=A916C473/serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft Manifest number: 65 Signing time: Fri 23 Jan 2026 06:03:42 +0000 Manifest this update: Fri 23 Jan 2026 06:03:42 +0000 Manifest next update: Fri 30 Jan 2026 06:03:42 +0000 Files and hashes: 1: -3sFh4NlHpP6MN2W1iZebi81JVQ.crl (hash: o7iWB01Z3Y7WGZ6+n4wB6qKLHTGtsn+Ms9YnM12tpHc=) 2: 2BB9711E5DE111F09B775D76C4F9AE02.roa (hash: p5eDJJHEh4Ku0YkaqmxVa+vpX9QHKpmMPC5rYwtTVzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C473, serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554 Validity Not Before: Jan 23 06:03:42 2026 GMT Not After : Jan 30 06:03:42 2026 GMT Subject: CN=69730f3e-8b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1f:fd:8a:d2:11:c3:6a:cf:c5:f8:07:56:ff: 35:89:53:0f:ce:2a:44:b2:45:a5:62:df:59:01:76: 72:62:5b:85:36:e6:e0:53:5d:ee:1b:88:64:b9:5a: 09:7d:2e:c3:d6:1a:8c:79:0c:4f:42:f6:4e:5c:96: 0a:4e:78:e5:66:09:a0:93:d3:10:26:7b:f8:0f:53: 94:ed:91:d2:0b:c0:8f:a2:fa:26:87:5d:ae:1f:15: 24:e7:e6:57:51:6e:d9:60:c1:2d:9d:ab:c2:91:dc: 82:e0:d7:8f:06:e1:39:04:ea:28:ab:82:93:8c:76: 46:14:63:68:ff:5c:8a:bf:e0:16:f6:81:ac:e3:ba: be:e1:3b:d1:91:13:22:f7:b6:e2:9d:6f:97:e8:25: 5b:e2:07:c1:f9:80:8d:da:43:e5:7c:64:91:3a:fb: de:46:5d:0c:61:e5:6b:ce:b3:9e:86:d0:9c:74:f3: 0c:ba:7f:f8:03:69:4c:bd:2d:a5:fa:0e:84:cf:fe: 41:5a:72:89:96:ad:2e:87:0f:7b:82:81:f1:45:e3: e9:db:bd:d3:3e:06:9d:4d:90:b6:30:db:e0:f5:1c: 31:9e:a8:c5:ff:e9:e2:33:7d:5e:5e:0f:6a:0d:7c: 29:9d:a9:a4:43:75:b4:89:1b:cb:e0:45:39:70:10: fc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DB:A5:CA:53:BD:E0:D3:DF:07:59:04:D2:4F:28:C9:0F:D6:D1:CF X509v3 Authority Key Identifier: keyid:FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ce:9e:84:95:89:97:71:d4:d8:00:95:af:32:6f:ad:72:c6: e2:ca:19:14:cc:f5:ce:b9:aa:d3:ab:bb:f8:f4:ec:0b:1f:72: 46:05:e5:44:c2:a0:e7:56:4c:68:d4:dc:4c:83:a2:20:c3:94: 28:11:13:ca:0a:17:49:e7:01:48:c8:1c:8f:27:c4:f6:6a:8b: f8:7f:a5:f2:eb:d5:e0:84:45:8c:d7:ee:34:a0:2a:86:e3:e9: 52:01:ea:ba:c7:c7:37:cf:46:e7:7f:03:5e:3d:3a:55:15:34: a8:7c:fc:b0:9f:1d:82:39:b1:24:8b:b6:05:54:64:2c:e6:71: 36:34:fd:d1:c6:b4:85:91:d1:08:ed:74:18:25:75:0a:52:56: c9:0b:2d:93:e9:fe:7e:48:65:64:73:3f:9b:d2:0c:9d:23:c1: 39:ae:34:fd:4f:e6:42:16:8d:37:06:fc:67:18:2f:38:5e:6a: a7:63:d9:1f:bc:7b:13:83:03:ff:ef:f8:3b:33:c2:fd:9f:5f: d2:45:c8:94:83:94:f2:c3:0d:0b:cc:ca:4b:8b:b3:be:e7:f9: 7f:23:d1:d8:0d:27:58:4d:7c:19:0b:8c:57:4d:37:d3:1c:d9: a2:82:64:f2:fc:37:65:b3:af:1b:1c:81:72:43:d5:f9:48:5e: a0:2a:7b:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzQ3MzExMC8GA1UEBRMoRkI3QjA1ODc4MzY1MUU5M0ZBMzBERDk2RDYyNjVFNkUy RjM1MjU1NDAeFw0yNjAxMjMwNjAzNDJaFw0yNjAxMzAwNjAzNDJaMBgxFjAUBgNV BAMMDTY5NzMwZjNlLThiNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqH/2K0hHDas/F+AdW/zWJUw/OKkSyRaVi31kBdnJiW4U25uBTXe4biGS5Wgl9 LsPWGox5DE9C9k5clgpOeOVmCaCT0xAme/gPU5TtkdILwI+i+iaHXa4fFSTn5ldR btlgwS2dq8KR3ILg148G4TkE6iirgpOMdkYUY2j/XIq/4Bb2gazjur7hO9GREyL3 tuKdb5foJVviB8H5gI3aQ+V8ZJE6+95GXQxh5WvOs56G0Jx08wy6f/gDaUy9LaX6 DoTP/kFacomWrS6HD3uCgfFF4+nbvdM+Bp1NkLYw2+D1HDGeqMX/6eIzfV5eD2oN fCmdqaRDdbSJG8vgRTlwEPwJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzdulylO9 4NPfB1kE0k8oyQ/W0c8wHwYDVR0jBBgwFoAU+3sFh4NlHpP6MN2W1iZebi81JVQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNDczL0ZFQUUxMkEyNURE RjExRjBBNUJGRDY2RkM0RjlBRTAyLy0zc0ZoNE5sSHBQNk1OMlcxaVplYmk4MUpW US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTNzRmg0TmxIcFA2TU4yVzFpWmViaTgxSlZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NDczL0ZFQUUxMkEyNURERjExRjBBNUJGRDY2RkM0RjlBRTAyLy0zc0ZoNE5sSHBQ Nk1OMlcxaVplYmk4MUpWUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABvOnoSViZdx1NgAla8yb61yxuLKGRTM9c65qtOru/j07AsfckYF5UTC oOdWTGjU3EyDoiDDlCgRE8oKF0nnAUjIHI8nxPZqi/h/pfLr1eCERYzX7jSgKobj 6VIB6rrHxzfPRud/A149OlUVNKh8/LCfHYI5sSSLtgVUZCzmcTY0/dHGtIWR0Qjt dBgldQpSVskLLZPp/n5IZWRzP5vSDJ0jwTmuNP1P5kIWjTcG/GcYLzheaqdj2R+8 exODA//v+Dszwv2fX9JFyJSDlPLDDQvMykuLs77n+X8j0dgNJ1hNfBkLjFdNN9Mc 2aKCZPL8N2WzrxscgXJD1flIXqAqe5o= -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:03 2026 by rpki-client