This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft File: BFtcCGfeWB0rdIQv74BFwad76L0.mft (raw, json) Hash identifier: d+ut/n72gbl7GP8vk7/iEr18FRxyeIgKSF9kSeWg2Wk= Subject key identifier: 38:64:34:16:D4:B5:0D:D8:73:03:AC:3A:27:6B:67:B1:31:59:CD:88 Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD Certificate issuer: /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD Certificate serial: 246A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft Manifest number: 2430 Signing time: Sat 24 Jan 2026 15:38:28 +0000 Manifest this update: Sat 24 Jan 2026 15:38:28 +0000 Manifest next update: Sat 31 Jan 2026 15:38:28 +0000 Files and hashes: 1: BFtcCGfeWB0rdIQv74BFwad76L0.crl (hash: E7xXLjOgqUnJ8NIDAoD3gTbddu7luuhwgKCKembahUU=) 2: FB87E4C4B10D11E5894F4D1CC4F9AE02.roa (hash: Xr4axXAE5xhZlqvtubxZ2pb3RMbCF82Tss/A5eKchFs=) 3: F9ED1B16B10D11E5894F4D1CC4F9AE02.roa (hash: fkO78SaWxLHL6UEeOmDkgAwdKa1QD3bVWVMip2dHju0=) 4: F8623718B10D11E5894F4D1CC4F9AE02.roa (hash: 2VqKtLp4I4n3i3xfxJ0a0zauep05yhz4m6vcbsayeiY=) 5: FCF0A580B10D11E5894F4D1CC4F9AE02.roa (hash: +2MMI4KCUim/55I1v/CcFFWM8c4do3z3Prc4iRx7/lQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9322 (0x246a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917412F, serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD Validity Not Before: Jan 24 15:38:28 2026 GMT Not After : Jan 31 15:38:28 2026 GMT Subject: CN=6974e774-de32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4a:12:b5:c6:4c:e5:a3:63:46:8d:04:0e:31: d8:2e:5d:ab:0c:25:d5:2a:69:f4:28:66:04:4e:10: bd:b3:87:21:1d:98:95:3f:34:15:75:61:f5:98:7a: ae:be:fa:2f:b6:4c:b6:7d:80:b9:36:c1:f1:cd:ff: 16:f4:2d:68:2a:25:c1:7f:22:c6:d4:20:35:bc:84: f7:2b:ad:4b:8f:37:25:fd:22:56:9b:f6:d3:05:6f: 43:59:23:a5:ea:c8:b5:03:66:b2:5a:1f:99:9d:e1: 2d:3d:5d:dd:d2:75:f7:30:22:4b:f5:17:78:f5:38: cd:ef:15:62:6e:b7:b3:6e:68:a6:b4:2c:7a:b5:25: 39:53:5a:fe:75:fd:d6:42:3c:3d:6a:ff:cd:50:1f: 6f:55:6a:0a:b6:4c:38:c0:a6:68:40:0a:7c:82:c4: 52:86:59:c7:7a:4e:35:d9:e8:5f:39:2f:66:74:87: b2:26:86:09:da:ac:6e:83:db:f1:a1:06:b3:93:e8: ac:10:4c:80:1d:f4:6e:8b:3b:da:f3:32:48:86:09: de:2b:ea:66:65:f1:81:e8:d2:70:84:47:bb:aa:f3: 1e:84:57:16:b7:47:e1:5a:46:38:84:92:6b:e3:98: 90:c0:8c:3e:c1:c7:77:20:8e:4d:26:3b:0a:ba:8b: 72:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:64:34:16:D4:B5:0D:D8:73:03:AC:3A:27:6B:67:B1:31:59:CD:88 X509v3 Authority Key Identifier: keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:ea:57:8c:02:2c:6e:62:73:7e:b3:9b:e2:2e:9a:10:8a:b3: 33:58:c0:0f:5b:23:0f:f0:09:9c:2a:32:55:85:38:c5:47:41: 01:42:03:2b:cd:44:77:d0:ad:01:a8:76:14:1d:8d:99:78:81: 9c:e1:84:64:2b:fc:3c:75:a1:2c:fa:02:af:3c:42:d3:fa:3c: 23:2d:26:45:58:1b:55:c3:ad:bd:f8:2d:24:a1:8e:d2:fe:53: b4:9f:d0:5c:dc:db:32:c0:55:f6:f5:00:54:b8:bd:23:f9:b4: 4b:dd:8f:0c:a2:12:04:7b:77:3b:a7:89:4d:0c:36:2a:56:ca: d6:d9:d2:5a:02:f6:e8:27:bf:8b:2a:8a:2e:47:3f:9a:73:44: b3:7a:e8:b9:29:d8:e2:b8:43:43:66:98:93:81:e5:97:2a:a5: e4:4e:ec:09:d9:a2:99:d7:5b:3b:97:4b:4a:fa:72:3b:f7:f8: 9b:51:a5:2a:88:69:c2:bb:a6:6b:e0:bd:ac:29:c1:4f:7f:c3: 7f:49:8b:4e:13:c9:93:88:b0:f5:1e:3f:9c:b6:75:d3:24:ef: 97:93:4e:31:90:d0:62:1f:ea:13:f7:87:85:e1:4c:cc:fa:6a: 39:2f:be:d3:2d:2a:d6:ad:ab:31:97:34:ff:ee:9c:2a:ab:44: e4:2f:dc:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxMkYxMTAvBgNVBAUTKDA0NUI1QzA4NjdERTU4MUQyQjc0ODQyRkVGODA0NUMx QTc3QkU4QkQwHhcNMjYwMTI0MTUzODI4WhcNMjYwMTMxMTUzODI4WjAYMRYwFAYD VQQDDA02OTc0ZTc3NC1kZTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UoStcZM5aNjRo0EDjHYLl2rDCXVKmn0KGYEThC9s4chHZiVPzQVdWH1mHqu vvovtky2fYC5NsHxzf8W9C1oKiXBfyLG1CA1vIT3K61Ljzcl/SJWm/bTBW9DWSOl 6si1A2ayWh+ZneEtPV3d0nX3MCJL9Rd49TjN7xVibrezbmimtCx6tSU5U1r+df3W Qjw9av/NUB9vVWoKtkw4wKZoQAp8gsRShlnHek412ehfOS9mdIeyJoYJ2qxug9vx oQazk+isEEyAHfRuizva8zJIhgneK+pmZfGB6NJwhEe7qvMehFcWt0fhWkY4hJJr 45iQwIw+wcd3II5NJjsKuotybwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhkNBbU tQ3YcwOsOidrZ7ExWc2IMB8GA1UdIwQYMBaAFARbXAhn3lgdK3SEL++ARcGne+i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDEyRi9ENDExNDE0QzZE NTYxMUU1OTBEODc0NzJDNEY5QUUwMi9CRnRjQ0dmZVdCMHJkSVF2NzRCRndhZDc2 TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JGdGNDR2ZlV0IwcmRJUXY3NEJGd2FkNzZMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDEyRi9ENDExNDE0QzZENTYxMUU1OTBEODc0NzJDNEY5QUUwMi9CRnRjQ0dmZVdC MHJkSVF2NzRCRndhZDc2TDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI6leMAixuYnN+s5viLpoQirMzWMAPWyMP8AmcKjJVhTjFR0EBQgMr zUR30K0BqHYUHY2ZeIGc4YRkK/w8daEs+gKvPELT+jwjLSZFWBtVw629+C0koY7S /lO0n9Bc3NsywFX29QBUuL0j+bRL3Y8MohIEe3c7p4lNDDYqVsrW2dJaAvboJ7+L KoouRz+ac0Szeui5KdjiuENDZpiTgeWXKqXkTuwJ2aKZ11s7l0tK+nI79/ibUaUq iGnCu6Zr4L2sKcFPf8N/SYtOE8mTiLD1Hj+ctnXTJO+Xk04xkNBiH+oT94eF4UzM +mo5L77TLSrWrasxlzT/7pwqq0TkL9wN -----END CERTIFICATE-----Generated at Sun Jan 25 02:52:12 2026 by rpki-client