This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft File: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft (raw, json) Hash identifier: GtVf4zoyaB4psGfwcgIr9jej4riZQ9+SyNTcu1wktGY= Subject key identifier: 6C:B0:8F:99:C8:9B:C6:AC:FA:79:22:3F:20:B0:63:BC:8D:08:9C:15 Authority key identifier: 4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B Certificate issuer: /CN=A916C4BC/serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B Certificate serial: 04D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft Manifest number: 04D3 Signing time: Sat 24 Jan 2026 23:02:09 +0000 Manifest this update: Sat 24 Jan 2026 23:02:09 +0000 Manifest next update: Sat 31 Jan 2026 23:02:09 +0000 Files and hashes: 1: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl (hash: Sd31ySNEJlsrQJYoFb3xT/i3bTe/QkA7R33jg6aGUko=) 2: F593443851B011ECB5188E24C4F9AE02.roa (hash: u6WvYhAV0I8MI//f7K66UR4RMWrbxxWj/3CiMmcMy7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1240 (0x4d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4BC, serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B Validity Not Before: Jan 24 23:02:09 2026 GMT Not After : Jan 31 23:02:09 2026 GMT Subject: CN=69754f71-304b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b1:de:37:03:95:a5:3b:8c:cf:6b:dd:00:32: 8b:26:aa:00:18:6e:2b:2e:08:0f:f3:b1:61:a8:bf: 36:28:45:69:03:9b:70:7b:0e:93:0c:4d:9d:66:5e: 77:ef:52:be:fd:7d:da:e8:46:9a:b6:1a:f1:36:9a: 65:ac:33:0d:06:5c:2a:c1:cf:58:56:dd:9c:b3:38: 2a:fb:6c:74:08:8d:31:aa:55:da:07:d1:6b:5a:ea: 01:a0:be:65:e9:0f:22:30:6e:9d:ba:c9:64:51:80: e6:59:5d:eb:a7:9e:1c:81:b3:b4:ae:df:bb:61:9f: f8:18:a8:37:7c:03:50:f9:9b:f5:08:1a:7c:02:35: 83:b2:fe:45:2a:1d:bc:62:df:e9:56:c0:ea:34:c1: 6d:5a:ab:8e:4e:82:c6:6f:7e:09:71:bb:31:d6:9e: 3b:90:1e:91:9b:81:02:0e:57:5a:a8:c9:be:57:33: 06:a5:e9:1b:f9:0f:64:1f:2f:61:82:34:3f:a1:49: d5:54:87:f6:50:be:af:1b:13:41:3f:d4:c6:8c:1c: 8a:bf:b6:9a:2f:4b:eb:db:9b:6a:74:fd:da:1e:0b: 4a:c4:56:86:6b:5f:f2:4c:7a:5b:41:5d:25:e6:cd: 0a:f7:af:30:de:0c:7f:58:ca:7d:87:b3:93:1d:2b: f6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B0:8F:99:C8:9B:C6:AC:FA:79:22:3F:20:B0:63:BC:8D:08:9C:15 X509v3 Authority Key Identifier: keyid:4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:7f:b5:3a:56:0e:4c:64:d6:98:3b:7f:07:6d:6d:1c:ff:e2: 0c:6a:48:78:80:97:7a:88:09:50:a4:17:92:29:06:a2:f8:03: 07:23:f9:47:1f:8a:3b:33:dd:fb:ae:d7:82:0a:1a:1e:c8:5a: cb:01:f9:4f:a2:17:37:60:58:4d:db:6c:4f:21:6a:9e:41:08: 7c:11:c4:3d:3f:1f:d2:b1:bd:aa:22:12:ec:0b:0a:f6:ff:9f: 2e:c6:8e:12:84:a2:69:96:a0:4f:e1:12:b8:23:c3:80:9b:77: d9:cf:30:83:7b:88:34:4c:aa:55:ab:04:66:bf:21:6a:4a:86: d9:87:e0:39:a0:44:b0:3e:df:f0:73:7e:e3:c7:70:14:ef:c2: cf:2c:28:23:b7:52:94:c9:7c:0b:fc:3e:67:56:dc:61:84:03: 98:65:e0:5a:cf:7d:d9:88:d0:55:89:82:28:b0:86:7d:50:a0: 0f:d5:57:ec:dd:a4:64:72:96:1f:52:25:58:32:ae:a8:cd:48: 62:6e:7e:f1:35:9c:03:83:22:66:07:1a:f9:9e:68:8e:cb:6b: 4b:2d:28:70:28:c4:f7:7f:2d:99:27:c6:42:70:8c:63:79:96: 1b:e9:86:c9:93:89:b5:c9:e1:3a:ea:86:ec:09:81:0f:47:40: e4:8d:1a:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NkM0QkMxMTAvBgNVBAUTKDRERkVDMzQzN0M5MEJGNDE0RDA1MTg4QjQ4MkM3ODQ4 RTZGMzE2MUIwHhcNMjYwMTI0MjMwMjA5WhcNMjYwMTMxMjMwMjA5WjAYMRYwFAYD VQQDDA02OTc1NGY3MS0zMDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbHeNwOVpTuMz2vdADKLJqoAGG4rLggP87FhqL82KEVpA5twew6TDE2dZl53 71K+/X3a6EaathrxNpplrDMNBlwqwc9YVt2cszgq+2x0CI0xqlXaB9FrWuoBoL5l 6Q8iMG6duslkUYDmWV3rp54cgbO0rt+7YZ/4GKg3fANQ+Zv1CBp8AjWDsv5FKh28 Yt/pVsDqNMFtWquOToLGb34Jcbsx1p47kB6Rm4ECDldaqMm+VzMGpekb+Q9kHy9h gjQ/oUnVVIf2UL6vGxNBP9TGjByKv7aaL0vr25tqdP3aHgtKxFaGa1/yTHpbQV0l 5s0K968w3gx/WMp9h7OTHSv2owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGywj5nI m8as+nkiPyCwY7yNCJwVMB8GA1UdIwQYMBaAFE3+w0N8kL9BTQUYi0gseEjm8xYb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRCQy9BOTcwQjJFQzUx QUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5UXYwRk5CUmlMU0N4NFNPYnpG aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RmN0RRM3lRdjBGTkJSaUxTQ3g0U09iekZocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRCQy9BOTcwQjJFQzUxQUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5UXYw Rk5CUmlMU0N4NFNPYnpGaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGf7U6Vg5MZNaYO38HbW0c/+IMakh4gJd6iAlQpBeSKQai+AMHI/lH H4o7M937rteCChoeyFrLAflPohc3YFhN22xPIWqeQQh8EcQ9Px/Ssb2qIhLsCwr2 /58uxo4ShKJplqBP4RK4I8OAm3fZzzCDe4g0TKpVqwRmvyFqSobZh+A5oESwPt/w c37jx3AU78LPLCgjt1KUyXwL/D5nVtxhhAOYZeBaz33ZiNBViYIosIZ9UKAP1Vfs 3aRkcpYfUiVYMq6ozUhibn7xNZwDgyJmBxr5nmiOy2tLLShwKMT3fy2ZJ8ZCcIxj eZYb6YbJk4m1yeE66obsCYEPR0DkjRr0 -----END CERTIFICATE-----Generated at Sun Jan 25 07:49:32 2026 by rpki-client