This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft File: vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json) Hash identifier: ArnM8AXN2wZJtrYarPF/U33OsbK7Ow/sdfryk8Omqkc= Subject key identifier: 95:A5:06:14:4F:1B:35:91:9F:41:A5:DC:56:59:29:E1:72:E9:19:6D Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 2870 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft Manifest number: 2852 Signing time: Sat 24 Jan 2026 15:28:11 +0000 Manifest this update: Sat 24 Jan 2026 15:28:10 +0000 Manifest next update: Sat 31 Jan 2026 15:28:10 +0000 Files and hashes: 1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: jKsGhmQrHIVySqO0vlxFxvN7aDcEB41crQYpL+vOmC8=) 2: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: jDaEFSep7GpjPRnx9VVt41QI2luPQqoFvxB7UlM+gbc=) 3: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: C8GOv0mgtCfvVDO9P+OpNoWQz5Mw66iUgp/UihX7iUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10352 (0x2870) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Jan 24 15:28:10 2026 GMT Not After : Jan 31 15:28:10 2026 GMT Subject: CN=6974e50a-e963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6c:e8:d1:af:8d:82:88:d1:1c:3c:b7:b6:0a: cc:06:c4:5b:7a:87:b5:31:f1:4e:fa:f3:56:82:fd: 30:b6:58:dd:07:e1:7e:1a:bf:99:c2:7d:c0:6e:4b: d7:eb:2c:40:77:37:1c:bd:7e:1c:80:aa:f0:1d:ee: 5c:23:b1:4b:ed:51:20:bf:93:0a:dc:de:0d:de:57: 00:44:c6:b4:01:13:84:14:88:d9:58:63:96:74:7b: 81:1a:00:a8:44:9f:47:93:4c:11:85:e3:4b:84:cf: c5:b1:c6:76:44:70:4c:33:f0:86:2e:4f:c1:81:b5: a2:ac:2a:bc:95:98:51:38:18:b1:d8:9d:80:a3:82: bb:06:ce:bf:8d:45:de:6a:fb:08:5b:32:02:55:65: 1e:31:2b:ec:96:22:e0:4f:36:25:f7:73:f8:ef:f9: e8:f7:3a:ce:58:a0:10:b2:c7:a6:2c:08:8e:76:f0: ae:a1:4c:af:09:0c:8d:70:d3:92:c3:f8:de:48:dc: 11:e0:32:2f:72:3a:4f:cb:87:70:5e:ff:36:74:78: a7:c3:d2:2b:22:a4:96:a9:ce:9b:d3:30:28:28:9c: 3e:35:d2:84:aa:26:ed:f5:d4:30:3d:14:0b:d0:cd: b9:f2:a8:09:d9:18:97:28:86:52:3d:5c:c9:6e:1a: 72:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A5:06:14:4F:1B:35:91:9F:41:A5:DC:56:59:29:E1:72:E9:19:6D X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2c:b8:2f:fb:5d:d4:02:a6:40:0b:f2:8c:ba:f0:b5:6f:cd: 48:35:c9:57:9f:59:f9:9a:c1:75:6f:97:2c:d1:4e:e2:e8:dc: ed:cd:32:87:40:db:ef:e0:ae:91:c8:73:2d:3f:60:ac:df:e0: ca:aa:6a:6d:47:40:74:80:2f:9e:2b:0e:2a:35:b7:a3:fb:60: 18:04:73:ad:ac:42:ae:2f:92:62:33:6a:2f:cc:2f:57:d1:dd: 36:50:e1:e8:f7:5d:48:48:7f:be:23:85:c4:63:c4:c0:4a:af: 12:52:ff:ec:87:94:22:c2:e6:d3:5f:de:b9:63:6c:17:5d:f5: 85:06:63:1c:20:81:f7:42:bd:bb:71:08:96:24:95:8c:3a:ae: c1:0c:72:d2:15:84:43:70:61:8d:21:d9:08:a2:8b:f5:0d:5b: 68:c9:e0:1b:98:07:ff:c4:23:80:6e:c5:4d:ff:28:2c:9a:77: 48:64:02:a5:d2:05:3b:bd:9d:0a:c0:a0:34:50:01:3c:3f:22: 6e:42:0b:9e:79:5e:a4:95:1e:69:c2:eb:0a:b0:d2:07:1f:09: 1d:53:e4:2c:41:0f:26:d5:95:0f:7b:7f:55:bb:60:c2:ea:17: 83:d5:64:4e:e0:04:f7:17:8c:48:77:07:15:6b:d1:11:00:d5: 93:24:be:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjYwMTI0MTUyODEwWhcNMjYwMTMxMTUyODEwWjAYMRYwFAYD VQQDDA02OTc0ZTUwYS1lOTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2zo0a+NgojRHDy3tgrMBsRbeoe1MfFO+vNWgv0wtljdB+F+Gr+Zwn3AbkvX 6yxAdzccvX4cgKrwHe5cI7FL7VEgv5MK3N4N3lcARMa0AROEFIjZWGOWdHuBGgCo RJ9Hk0wRheNLhM/FscZ2RHBMM/CGLk/BgbWirCq8lZhROBix2J2Ao4K7Bs6/jUXe avsIWzICVWUeMSvsliLgTzYl93P47/no9zrOWKAQssemLAiOdvCuoUyvCQyNcNOS w/jeSNwR4DIvcjpPy4dwXv82dHinw9IrIqSWqc6b0zAoKJw+NdKEqibt9dQwPRQL 0M258qgJ2RiXKIZSPVzJbhpy5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWlBhRP GzWRn0Gl3FZZKeFy6RltMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE2Qi83NTI0NEI2MkExNjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhK M0NwWElFUnNjREZzZkNCbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcLLgv+13UAqZAC/KMuvC1b81INclXn1n5msF1b5cs0U7i6NztzTKH QNvv4K6RyHMtP2Cs3+DKqmptR0B0gC+eKw4qNbej+2AYBHOtrEKuL5JiM2ovzC9X 0d02UOHo911ISH++I4XEY8TASq8SUv/sh5QiwubTX965Y2wXXfWFBmMcIIH3Qr27 cQiWJJWMOq7BDHLSFYRDcGGNIdkIoov1DVtoyeAbmAf/xCOAbsVN/ygsmndIZAKl 0gU7vZ0KwKA0UAE8PyJuQgueeV6klR5pwusKsNIHHwkdU+QsQQ8m1ZUPe39Vu2DC 6heD1WRO4AT3F4xIdwcVa9ERANWTJL51 -----END CERTIFICATE-----Generated at Sun Jan 25 17:04:18 2026 by rpki-client