This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft File: HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft (raw, json) Hash identifier: xJKkIGqvm2zDwwwyu9OacwrKsOCkC7JUwh11pxSnLVk= Subject key identifier: 04:C5:0E:62:68:A6:B6:5E:1C:BA:31:AC:C2:63:FE:43:4F:D1:07:E7 Authority key identifier: 1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A Certificate issuer: /CN=A91707D0/serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft Manifest number: A2 Signing time: Sun 25 Jan 2026 05:28:06 +0000 Manifest this update: Sun 25 Jan 2026 05:28:05 +0000 Manifest next update: Sun 01 Feb 2026 05:28:05 +0000 Files and hashes: 1: HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl (hash: b1q2XTGTi3KTiH6RD08XO1bmVnXUoJe/hTbKgpIeAZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91707D0, serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A Validity Not Before: Jan 25 05:28:05 2026 GMT Not After : Feb 1 05:28:05 2026 GMT Subject: CN=6975a9e6-0afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9a:9b:74:3e:fd:0e:16:34:54:dd:23:29:cc: 11:42:e8:0b:e0:43:04:38:26:30:55:14:87:4c:16: 03:50:c3:00:1c:06:b2:af:80:98:57:cd:3f:1a:3d: 9a:33:b3:4f:48:95:f0:e5:23:56:31:bd:d3:70:13: ec:db:04:7f:fb:50:b5:b1:19:34:74:f0:db:e5:a4: 7d:e2:f0:3e:0b:f1:0f:f7:da:1d:95:e1:cd:e6:62: aa:7b:29:08:96:80:86:65:f3:26:b7:77:e4:ce:45: 87:69:35:b0:c6:1c:fb:9f:9d:98:a8:5b:48:aa:71: 78:4f:3f:c7:bd:46:0a:c7:7e:1c:9d:5b:9a:1a:19: 5e:19:d2:07:4e:f5:88:11:6e:91:b1:bc:08:14:a3: 7a:a4:fd:fa:e1:50:76:e7:16:4f:9a:89:12:bf:53: e2:65:3b:00:af:6f:46:8c:64:84:05:61:2e:dc:90: b0:80:53:05:a7:da:2c:29:bd:71:44:36:9b:e8:b0: 11:48:09:e6:d4:46:0a:15:d5:26:cc:ff:6d:fc:e7: e7:a9:6b:b0:27:b7:25:d6:9c:b9:5b:d4:28:52:27: 5e:d2:7a:6b:6f:10:5e:dd:9f:b6:df:11:e5:d4:31: 07:54:13:be:5b:96:62:ab:ec:aa:5b:e7:52:43:01: a2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C5:0E:62:68:A6:B6:5E:1C:BA:31:AC:C2:63:FE:43:4F:D1:07:E7 X509v3 Authority Key Identifier: keyid:1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b0:9a:5d:1b:80:da:04:45:02:79:18:37:18:98:82:42:7d: 2d:8b:67:45:85:a0:59:8d:66:e6:67:d0:35:d9:f6:0c:88:75: ed:ae:3f:be:a6:53:35:36:7f:34:f1:ef:e2:e3:10:73:f9:9a: 4e:49:23:74:50:97:10:6f:8b:06:04:62:ac:91:6f:6c:93:e9: 18:10:09:6c:2c:9e:07:56:4c:f7:a6:ae:3a:82:98:37:f9:19: 89:7d:c7:30:2f:48:e6:7c:56:3c:21:c4:15:ff:d4:a2:59:1b: a1:eb:91:73:87:21:ce:29:f2:82:f8:56:67:18:5f:0e:47:bf: f8:d1:ec:a2:8e:18:f8:ce:e9:29:ab:90:d9:10:f0:52:45:0e: 74:9a:1d:2d:0a:90:f1:c6:72:45:ca:e7:9e:f6:0e:48:f9:87: 24:e5:17:20:53:97:96:eb:94:db:bc:d8:80:5a:42:08:ce:4c: e9:19:13:ab:a2:71:46:a1:06:3d:d7:7d:bd:84:93:0a:83:1f: 0d:7a:67:85:6b:07:64:64:a2:d5:07:10:ce:de:74:ee:bd:78: 3b:2d:b8:dd:70:b0:dd:bf:ef:1c:ff:01:3e:13:0f:e0:24:f4: 61:c8:bc:f9:1c:43:a7:9c:98:72:2b:7b:f3:33:ae:53:0d:ef: 19:8d:8f:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA3RDAxMTAvBgNVBAUTKDFENjM0MTZDNDczQjBDMDkxMkJEQUIzNzEwMjcwMTA5 NUZDNkMzNUEwHhcNMjYwMTI1MDUyODA1WhcNMjYwMjAxMDUyODA1WjAYMRYwFAYD VQQDDA02OTc1YTllNi0wYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5qbdD79DhY0VN0jKcwRQugL4EMEOCYwVRSHTBYDUMMAHAayr4CYV80/Gj2a M7NPSJXw5SNWMb3TcBPs2wR/+1C1sRk0dPDb5aR94vA+C/EP99odleHN5mKqeykI loCGZfMmt3fkzkWHaTWwxhz7n52YqFtIqnF4Tz/HvUYKx34cnVuaGhleGdIHTvWI EW6RsbwIFKN6pP364VB25xZPmokSv1PiZTsAr29GjGSEBWEu3JCwgFMFp9osKb1x RDab6LARSAnm1EYKFdUmzP9t/OfnqWuwJ7cl1py5W9QoUide0nprbxBe3Z+23xHl 1DEHVBO+W5Ziq+yqW+dSQwGiTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATFDmJo prZeHLoxrMJj/kNP0QfnMB8GA1UdIwQYMBaAFB1jQWxHOwwJEr2rNxAnAQlfxsNa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDdEMC82NUI2OEU5NjAw NzIxMUYwQjM2M0RGNUVDNEY5QUUwMi9IV05CYkVjN0RBa1N2YXMzRUNjQkNWX0d3 MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXTkJiRWM3REFrU3ZhczNFQ2NCQ1ZfR3cxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDdEMC82NUI2OEU5NjAwNzIxMUYwQjM2M0RGNUVDNEY5QUUwMi9IV05CYkVjN0RB a1N2YXMzRUNjQkNWX0d3MW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9sJpdG4DaBEUCeRg3GJiCQn0ti2dFhaBZjWbmZ9A12fYMiHXtrj++ plM1Nn808e/i4xBz+ZpOSSN0UJcQb4sGBGKskW9sk+kYEAlsLJ4HVkz3pq46gpg3 +RmJfccwL0jmfFY8IcQV/9SiWRuh65FzhyHOKfKC+FZnGF8OR7/40eyijhj4zukp q5DZEPBSRQ50mh0tCpDxxnJFyuee9g5I+Yck5RcgU5eW65TbvNiAWkIIzkzpGROr onFGoQY91329hJMKgx8NemeFawdkZKLVBxDO3nTuvXg7LbjdcLDdv+8c/wE+Ew/g JPRhyLz5HEOnnJhyK3vzM65TDe8ZjY+0 -----END CERTIFICATE-----Generated at Sun Jan 25 13:51:42 2026 by rpki-client