This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft File: CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft (raw, json) Hash identifier: a0CMosiinNs431w7TEdvqjpI6+WqC1nSzsNfl6ujaeo= Subject key identifier: 6C:B2:C3:38:28:18:A0:8D:E4:C6:B6:20:1C:5F:10:C8:E1:D7:94:C5 Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Certificate serial: 0513 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft Manifest number: 04F9 Signing time: Sat 24 Jan 2026 22:57:40 +0000 Manifest this update: Sat 24 Jan 2026 22:57:40 +0000 Manifest next update: Sat 31 Jan 2026 22:57:40 +0000 Files and hashes: 1: CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl (hash: VZqLMvhc9p4nHBGVpQVioc83s6dVXx1R2BUz1X6WBOA=) 2: 41E32C9852E411EC9E19AA2FC4F9AE02.roa (hash: i1mD+r6XwMu6On3/bUlN+PaLdP6khHenZ0Z0HUab9AI=) 3: 413AD9F852E411EC9E19AA2FC4F9AE02.roa (hash: Y2Z1jehKepnssjRVP8joGvXLmK9adM98wErhHrOtaeg=) 4: 02F57BD252E711EC931DB95CC4F9AE02.roa (hash: TGHGZPpqAj2jmtX8lTQMi8kBaI8ojiWWIFj1IWycEgs=) 5: 0517C4F0470311EC9E6FA71DC4F9AE02.roa (hash: o+VIx3yy8oMDW/C3RImP2D9X9JrFefZYlsNOIecQzAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1299 (0x513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Validity Not Before: Jan 24 22:57:40 2026 GMT Not After : Jan 31 22:57:40 2026 GMT Subject: CN=69754e64-261b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:05:f4:58:18:7a:b2:63:bd:b5:04:50:2b: c8:ca:23:81:17:07:14:58:8c:d5:d8:75:10:94:4f: b5:d9:7b:38:79:b4:da:e5:43:24:67:1e:7c:8b:ba: 44:c5:03:68:8d:ec:05:37:cc:65:47:db:5a:85:95: ef:00:8b:98:58:58:91:b3:08:e5:cc:17:ad:1a:63: 25:d5:bf:2a:2f:93:b2:9e:4e:da:f8:7d:23:cb:31: 3d:ca:27:13:ff:de:28:c7:d9:cc:b6:f3:d1:38:ec: e4:81:18:76:c2:ae:61:e9:88:66:37:7f:64:2d:35: a9:94:2d:c5:f2:69:94:28:ef:ca:e8:70:c8:f3:3b: 67:cc:2d:ca:c5:68:df:e3:60:aa:0f:8e:39:0b:99: e7:63:0a:fd:de:8c:b4:63:97:e4:80:b7:86:5e:92: 28:c5:20:8a:a7:ad:61:9c:0f:81:ad:11:be:ab:37: d0:44:91:81:90:d8:47:94:22:8c:c3:c8:fb:0f:9b: 0f:46:cc:23:3b:3f:d5:f1:5e:96:2e:a1:55:a1:18: b4:78:e8:fa:7a:17:68:2c:32:ef:6c:d5:50:05:bc: f4:c3:b8:7e:d3:93:64:1c:46:2b:c3:24:40:35:7d: 53:3b:d8:ba:16:33:62:0c:1e:84:2e:04:90:36:8d: e0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B2:C3:38:28:18:A0:8D:E4:C6:B6:20:1C:5F:10:C8:E1:D7:94:C5 X509v3 Authority Key Identifier: keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:97:3c:60:fa:de:cf:f1:a4:f9:23:1a:10:e8:25:d5:1e:45: 6d:d2:15:a4:18:e0:2f:7a:3a:5f:df:a2:69:5a:0a:9c:c4:9c: 18:c9:93:85:e0:06:31:31:cb:74:cf:55:2f:2a:f9:5c:aa:c3: 22:73:b6:98:f3:49:9c:e8:92:3a:d9:ad:81:47:2c:e1:eb:ea: ad:8b:5a:26:20:f6:e5:2d:bb:ea:51:d4:31:48:36:a7:01:5c: 80:a8:b1:da:64:5e:c0:b5:40:f4:45:96:3f:6f:ff:31:6f:da: b6:17:16:ff:29:43:b9:a9:12:15:97:9c:6a:64:99:a8:75:14: 91:6b:c1:46:79:18:b7:af:88:bc:93:b3:0f:8b:92:26:20:b1: 4c:eb:85:08:37:46:7b:f6:a7:93:7d:11:65:d1:61:19:17:75: d0:18:41:b1:5e:1b:a8:7d:8a:5a:be:02:56:fb:f9:b3:56:61: 42:90:6b:a3:e6:f6:f9:52:08:91:cf:34:0e:6f:24:01:f7:2d: dd:fb:47:db:a9:e4:6c:52:5f:d6:f7:b0:11:82:ae:ef:78:c6: 41:ad:e5:ad:94:7d:af:c8:e2:99:66:0d:73:52:74:e4:d3:de: 4c:2b:d0:cf:8c:d8:83:19:71:f2:e5:fa:ef:9d:53:6e:f6:c8: 40:99:ee:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNDRkYxMTAvBgNVBAUTKDA4MDM2NjJDNTcxMzI1NzI4RjI0RkFBRDhDQjFBNUYx OTAwNzE1RUQwHhcNMjYwMTI0MjI1NzQwWhcNMjYwMTMxMjI1NzQwWjAYMRYwFAYD VQQDDA02OTc1NGU2NC0yNjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsREF9FgYerJjvbUEUCvIyiOBFwcUWIzV2HUQlE+12Xs4ebTa5UMkZx58i7pE xQNojewFN8xlR9tahZXvAIuYWFiRswjlzBetGmMl1b8qL5Oynk7a+H0jyzE9yicT /94ox9nMtvPROOzkgRh2wq5h6YhmN39kLTWplC3F8mmUKO/K6HDI8ztnzC3KxWjf 42CqD445C5nnYwr93oy0Y5fkgLeGXpIoxSCKp61hnA+BrRG+qzfQRJGBkNhHlCKM w8j7D5sPRswjOz/V8V6WLqFVoRi0eOj6ehdoLDLvbNVQBbz0w7h+05NkHEYrwyRA NX1TO9i6FjNiDB6ELgSQNo3gKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyywzgo GKCN5Ma2IBxfEMjh15TFMB8GA1UdIwQYMBaAFAgDZixXEyVyjyT6rYyxpfGQBxXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0NGRi85QTVFQzE2QzQ2 RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpYS1BKUHF0akxHbDhaQUhG ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBTm1MRmNUSlhLUEpQcXRqTEdsOFpBSEZlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0NGRi85QTVFQzE2QzQ2RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpY S1BKUHF0akxHbDhaQUhGZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAplzxg+t7P8aT5IxoQ6CXVHkVt0hWkGOAvejpf36JpWgqcxJwYyZOF 4AYxMct0z1UvKvlcqsMic7aY80mc6JI62a2BRyzh6+qti1omIPblLbvqUdQxSDan AVyAqLHaZF7AtUD0RZY/b/8xb9q2Fxb/KUO5qRIVl5xqZJmodRSRa8FGeRi3r4i8 k7MPi5ImILFM64UIN0Z79qeTfRFl0WEZF3XQGEGxXhuofYpavgJW+/mzVmFCkGuj 5vb5UgiRzzQObyQB9y3d+0fbqeRsUl/W97ARgq7veMZBreWtlH2vyOKZZg1zUnTk 095MK9DPjNiDGXHy5frvnVNu9shAme6B -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:58 2026 by rpki-client