This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: r7WyxSuP8kbD6ohU56tYykII2K3xkGs9UvCnJ8Jh94w= Subject key identifier: 29:8C:1A:EF:71:9E:85:47:D4:1D:CD:D6:F2:AC:A5:E4:9E:B1:C3:B8 Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0CAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0CA7 Signing time: Sat 24 Jan 2026 18:00:11 +0000 Manifest this update: Sat 24 Jan 2026 18:00:11 +0000 Manifest next update: Sat 31 Jan 2026 18:00:11 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: m04RyppsroeR/cUzQHLM3VKEM7t7rZaWITV+Dbsg3XE=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: jTKb6UqoxVKwoNueFvf3BZWhxggm3hq3OfDJsuiV3HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3247 (0xcaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B, serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: Jan 24 18:00:11 2026 GMT Not After : Jan 31 18:00:11 2026 GMT Subject: CN=697508ab-f7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:00:c9:ed:c8:f9:a5:47:c5:d7:cb:99:cb:61: ef:12:5f:57:d0:2e:1a:3e:f0:7b:9b:73:d7:0a:b4: 9d:76:42:93:5b:58:22:63:b4:d0:63:0b:cf:bd:db: cd:b4:b2:02:68:d9:b2:7f:94:4d:81:0d:c8:16:0c: e1:ad:80:ee:dc:54:64:93:04:f3:fb:b0:d0:c9:3e: ce:22:9b:15:41:68:9a:cf:15:93:ac:20:26:67:05: e5:aa:6f:0b:62:fa:3e:42:61:d4:ad:2d:a0:d7:88: 3c:d7:c0:33:e7:5c:5e:95:9f:2e:d9:a1:b5:48:bd: b3:32:ba:c9:5a:71:79:f4:ad:fe:6d:1f:62:bf:bf: c9:7f:38:98:5a:a8:1e:41:e4:f7:7f:e7:5b:a9:45: 3c:ad:ff:99:17:e8:12:37:10:42:11:7c:6c:69:72: dd:4b:af:55:ee:ce:76:47:25:42:69:48:96:e9:6b: 70:4c:33:a7:63:5f:1c:d2:00:85:46:20:15:10:8f: ce:f6:2b:8e:48:fc:6a:68:06:80:a1:01:ac:4d:67: 48:d6:91:4c:10:64:06:c6:0d:12:21:40:57:94:b8: 10:29:dd:ce:89:cf:d8:72:ee:7a:69:a8:51:2e:14: 3f:5c:68:99:49:31:0d:a5:c8:9b:47:81:d2:80:50: 5e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8C:1A:EF:71:9E:85:47:D4:1D:CD:D6:F2:AC:A5:E4:9E:B1:C3:B8 X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f3:9d:02:ff:17:60:1f:1f:00:f5:db:bd:44:cf:b7:f5:6e: 1b:77:2a:c5:f8:97:34:06:72:76:88:b7:64:43:4d:05:bf:d5: 68:69:41:37:86:05:e9:8f:3e:66:4a:e8:b4:dd:c6:0e:e0:8b: 86:91:d6:d5:d9:c0:94:3a:49:c3:5f:6b:30:7b:08:fd:a8:09: df:9a:66:62:18:6b:6e:d4:72:58:64:bc:69:f2:f0:84:9c:08: 1f:9d:26:fa:ac:0e:e0:ed:e3:e5:bc:28:95:9f:77:3e:de:83: 20:f8:d9:cd:3f:20:9f:24:31:1c:3d:d0:89:a5:f2:71:01:81: c6:da:55:a7:c4:fe:cf:b1:5b:b7:18:02:23:d6:ac:d1:6a:c6: 17:c2:7a:99:97:f0:24:dd:0e:c0:e5:34:af:58:3e:b8:c3:6d: f9:16:d6:bd:4e:07:be:cd:99:0e:1d:75:5b:8a:ea:21:89:71: e0:ea:bf:72:a4:54:94:78:69:b3:44:41:cb:82:44:e6:f0:52: 3c:ed:b6:13:6c:1b:23:3a:76:68:61:19:2a:1d:eb:f4:a7:fa: bb:1d:be:21:02:9b:1c:ec:b3:1c:55:b6:2e:d9:3a:09:94:13: c1:17:cc:a7:ab:59:8d:3b:bb:c1:56:be:61:f2:36:8a:53:2c: 16:3b:b2:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjYwMTI0MTgwMDExWhcNMjYwMTMxMTgwMDExWjAYMRYwFAYD VQQDDA02OTc1MDhhYi1mN2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqADJ7cj5pUfF18uZy2HvEl9X0C4aPvB7m3PXCrSddkKTW1giY7TQYwvPvdvN tLICaNmyf5RNgQ3IFgzhrYDu3FRkkwTz+7DQyT7OIpsVQWiazxWTrCAmZwXlqm8L Yvo+QmHUrS2g14g818Az51xelZ8u2aG1SL2zMrrJWnF59K3+bR9iv7/JfziYWqge QeT3f+dbqUU8rf+ZF+gSNxBCEXxsaXLdS69V7s52RyVCaUiW6WtwTDOnY18c0gCF RiAVEI/O9iuOSPxqaAaAoQGsTWdI1pFMEGQGxg0SIUBXlLgQKd3Oic/Ycu56aahR LhQ/XGiZSTENpcibR4HSgFBeaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmMGu9x noVH1B3N1vKspeSescO4MB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc850C/xdgHx8A9du9RM+39W4bdyrF+Jc0BnJ2iLdkQ00Fv9VoaUE3 hgXpjz5mSui03cYO4IuGkdbV2cCUOknDX2swewj9qAnfmmZiGGtu1HJYZLxp8vCE nAgfnSb6rA7g7ePlvCiVn3c+3oMg+NnNPyCfJDEcPdCJpfJxAYHG2lWnxP7PsVu3 GAIj1qzRasYXwnqZl/Ak3Q7A5TSvWD64w235Fta9Tge+zZkOHXVbiuohiXHg6r9y pFSUeGmzREHLgkTm8FI87bYTbBsjOnZoYRkqHev0p/q7Hb4hApsc7LMcVbYu2ToJ lBPBF8ynq1mNO7vBVr5h8jaKUywWO7LJ -----END CERTIFICATE-----Generated at Sun Jan 25 12:21:03 2026 by rpki-client