This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json) Hash identifier: IS21rXi3qiwHacv+or18zDA/WMQSpNqAxDWMxZdgX3A= Subject key identifier: EE:02:B7:F1:52:B3:D7:FD:AC:B5:A2:9B:57:91:EF:6F:82:AD:0B:2A Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 09B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft Manifest number: 09AC Signing time: Sat 24 Jan 2026 19:25:56 +0000 Manifest this update: Sat 24 Jan 2026 19:25:55 +0000 Manifest next update: Sat 31 Jan 2026 19:25:55 +0000 Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: fVzS3QgAcuLmoTbdD6W9TWYIlnXfWmk23HLWYFXpaik=) 2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: 4ExF2O2Frz9RSsUL7YBwRkgASJlP9BcJdkByxRonGSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2485 (0x9b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: Jan 24 19:25:55 2026 GMT Not After : Jan 31 19:25:55 2026 GMT Subject: CN=69751cc3-78aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:e0:16:84:31:91:22:c3:64:2c:2d:02:27: 56:58:6c:51:17:7c:40:a8:ec:c5:4f:e0:7f:47:ed: 23:06:b3:5d:f3:29:64:4c:f4:77:3c:44:82:31:87: bd:8f:8e:e7:ea:49:8e:5f:12:af:9d:89:be:52:c5: bf:a9:83:43:00:d5:4c:18:8f:f7:c7:67:8d:e4:91: 32:86:e1:ca:7f:e8:1c:9d:68:86:6c:e6:5a:51:d4: 5c:f7:ca:01:47:2b:a4:ef:9f:3b:f1:e3:f9:e5:f3: b3:38:51:a9:f4:a2:8f:6b:f6:91:3a:3d:22:aa:1f: 32:38:7c:a9:9b:fb:61:40:4c:e2:81:98:70:8b:02: 72:31:97:af:ea:65:eb:e4:c5:67:3e:18:fb:b3:e8: bd:b9:c7:75:74:9b:13:de:62:76:99:72:c4:1e:80: c5:41:85:ed:16:f6:08:0e:de:b2:c1:5e:81:f5:20: 35:cc:05:76:52:0b:50:46:87:50:a3:13:7a:d4:72: 2c:3c:83:50:ed:3e:06:7f:32:16:95:66:73:cb:f4: b7:7b:02:4f:ca:bc:56:83:21:de:43:5c:18:80:c3: c3:42:18:6d:51:e8:91:63:bd:68:ca:de:08:91:5c: 88:2a:f0:28:9b:0b:8b:23:c5:24:9e:79:28:d8:9a: 9a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:02:B7:F1:52:B3:D7:FD:AC:B5:A2:9B:57:91:EF:6F:82:AD:0B:2A X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:fe:4a:49:03:f3:79:b1:d7:08:42:8f:ce:79:0f:9a:06:5f: a3:20:04:a0:81:a8:a5:9b:f9:5a:db:1d:b5:6a:bc:ff:5c:f0: 47:ab:72:9f:1d:4e:94:d0:61:cc:6e:67:d5:eb:27:b7:ce:df: 29:17:d9:b9:67:a2:91:6d:94:3f:bb:b1:89:6c:81:40:ce:5e: db:99:83:e0:cb:a5:81:9a:1b:ab:b3:9b:24:75:00:ad:b7:d1: 58:ad:f1:44:8e:fe:ea:03:3a:4e:6f:d4:59:5f:6b:0f:e4:5a: 12:0a:8f:6b:30:c8:f4:62:e8:4f:9a:01:6f:35:ef:26:d0:30: 1d:b1:fc:42:71:70:05:5c:e9:b2:e2:dd:90:20:45:7c:44:8b: 58:83:be:d6:b8:fe:f5:7d:f2:fa:70:24:60:2e:6b:c5:3f:fb: 24:17:9e:97:42:55:24:28:1c:1e:51:d6:a3:be:43:f6:61:71: 74:29:da:c2:17:c8:85:4f:df:b8:04:0f:12:f7:ff:dc:09:0a: b5:83:ec:5d:d2:c3:16:db:f4:c6:68:0a:31:b7:f4:90:98:61: 4d:bb:af:b9:54:47:b0:3c:7d:48:ba:6d:8d:25:48:f2:c5:cc: b3:1a:07:7a:5a:fe:cd:21:0a:09:c8:ba:2c:f9:40:00:0c:35: 06:a3:15:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjYwMTI0MTkyNTU1WhcNMjYwMTMxMTkyNTU1WjAYMRYwFAYD VQQDDA02OTc1MWNjMy03OGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGHgFoQxkSLDZCwtAidWWGxRF3xAqOzFT+B/R+0jBrNd8ylkTPR3PESCMYe9 j47n6kmOXxKvnYm+UsW/qYNDANVMGI/3x2eN5JEyhuHKf+gcnWiGbOZaUdRc98oB Ryuk75878eP55fOzOFGp9KKPa/aROj0iqh8yOHypm/thQEzigZhwiwJyMZev6mXr 5MVnPhj7s+i9ucd1dJsT3mJ2mXLEHoDFQYXtFvYIDt6ywV6B9SA1zAV2UgtQRodQ oxN61HIsPINQ7T4GfzIWlWZzy/S3ewJPyrxWgyHeQ1wYgMPDQhhtUeiRY71oyt4I kVyIKvAomwuLI8Uknnko2Jqa8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4Ct/FS s9f9rLWim1eR72+CrQsqMB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDY4Ny83NkI0M0I2NDlGNDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQt WlhiQUdCQVNVc3NMU0ZmMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg/kpJA/N5sdcIQo/OeQ+aBl+jIASggailm/la2x21arz/XPBHq3Kf HU6U0GHMbmfV6ye3zt8pF9m5Z6KRbZQ/u7GJbIFAzl7bmYPgy6WBmhurs5skdQCt t9FYrfFEjv7qAzpOb9RZX2sP5FoSCo9rMMj0YuhPmgFvNe8m0DAdsfxCcXAFXOmy 4t2QIEV8RItYg77WuP71ffL6cCRgLmvFP/skF56XQlUkKBweUdajvkP2YXF0KdrC F8iFT9+4BA8S9//cCQq1g+xd0sMW2/TGaAoxt/SQmGFNu6+5VEewPH1Ium2NJUjy xcyzGgd6Wv7NIQoJyLos+UAADDUGoxWU -----END CERTIFICATE-----Generated at Sun Jan 25 10:42:42 2026 by rpki-client