This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json) Hash identifier: /JL9mqUIHGn821eFq0/MXpRaoK4NClbrty7LKAqw9DA= Subject key identifier: D2:8C:D6:DA:8B:10:B5:CE:72:57:10:33:5B:22:B1:F2:19:85:DF:11 Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft Manifest number: 0274 Signing time: Sun 25 Jan 2026 00:50:54 +0000 Manifest this update: Sun 25 Jan 2026 00:50:54 +0000 Manifest next update: Sun 01 Feb 2026 00:50:54 +0000 Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: vTrZzfRx3nz0tzx9/PkGebH0mRi4d7r/C9/G6RVf/AM=) 2: A4B9732E372211F088B77741C4F9AE02.roa (hash: 0dSvCmKLef9Oa4TUk6FVx6l4EnK1M32ajCwnmpc9ysE=) 3: C1ECF984D07411F0B0B35C27C4F9AE02.roa (hash: Zx7rYsejQ1YlFVO9cuwtdX2i5qCKmmBnnVOVbWpVt7A=) 4: 82A6D4C4373711F0B4C22F6AC4F9AE02.roa (hash: n/PvsW9zebDkTZCp50BwuzM/P+LxZ4UecYhiS0C/Z2s=) 5: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (hash: o8g8BiOgmVHVzswzRKLrO3Y0f0RfD3gZqIklITdkjzE=) 6: 46C3344E346611F0AF16091DC4F9AE02.roa (hash: TDnPqTOeUPSwecuAJae6VdxJudb0os3v67TLQq2OSMs=) 7: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: QKPxnsl5W/cKLCZuMQFferj3l2oedmhBT9kPnPZhJg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: Jan 25 00:50:54 2026 GMT Not After : Feb 1 00:50:54 2026 GMT Subject: CN=697568ee-1b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:47:6c:78:22:6a:44:ad:fc:c9:18:3b:6b:9e: f0:11:b0:d4:cc:95:25:ca:4f:07:e8:37:4f:73:33: 99:90:03:03:20:6f:9d:ed:54:df:ef:d6:48:59:b6: 17:2c:a1:d6:4f:82:ff:b7:53:e0:3f:97:d1:bf:f8: 81:79:a4:5a:5a:97:1a:58:30:57:fc:a9:38:14:75: ab:c3:2f:ff:5e:85:c6:1b:4c:78:b0:a1:a6:2d:4f: 28:c2:6b:50:d4:90:c8:66:42:92:ad:19:02:b6:3e: 75:c5:a3:65:71:e6:27:1a:b9:b2:84:6b:4c:9f:39: 45:4b:29:89:53:58:a9:a4:45:2e:06:63:f1:b2:db: 8f:55:68:b1:9a:e0:cd:ee:2b:5b:b6:3a:09:05:01: 32:30:b0:7f:4c:a9:5f:66:c9:f9:cb:0d:52:19:d9: 6d:83:80:cd:0b:db:2b:cf:69:9a:0d:32:13:c2:f0: fe:02:0a:f9:ba:b8:c6:58:c8:1e:ee:ec:6d:e7:36: b3:5a:e4:0a:0d:2a:fc:ba:28:a3:57:55:4a:ee:ca: 25:69:f9:b1:58:01:08:91:4f:9a:35:6b:75:ce:52: 32:45:6b:0f:dc:6c:e6:f4:6a:60:1b:74:8f:f7:62: 0f:c3:7c:a2:63:18:de:c4:8c:d6:77:5d:16:0e:a2: ac:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8C:D6:DA:8B:10:B5:CE:72:57:10:33:5B:22:B1:F2:19:85:DF:11 X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:17:54:36:99:be:ff:c6:53:83:26:1c:6b:94:3a:96:d6:3a: 6b:6f:8e:b7:db:9f:24:ca:31:50:15:f7:0c:4f:cb:9b:55:d2: 63:3f:b4:38:56:91:fb:fc:52:a7:c6:12:2b:c2:0b:4d:ab:fd: 4b:2d:5c:df:1a:36:50:83:66:49:f4:60:98:7a:71:58:9a:b5: 2c:4f:0a:1b:61:f7:6f:09:fe:75:dc:aa:e7:64:4b:01:a5:e8: 04:b3:c9:ad:20:91:1b:c8:12:d3:22:44:c5:bd:a7:8b:a4:86: 0d:b5:df:1d:86:6b:8d:56:57:17:89:05:be:bf:3b:66:22:c5: e3:3b:a6:cc:df:69:51:4f:ea:b0:70:e3:1d:59:43:82:dd:cc: a2:31:ed:f6:99:e5:d8:3d:b9:42:43:0c:f8:93:76:f7:02:d2: 67:b7:21:dd:24:0b:77:30:b5:ad:61:76:e0:bc:76:11:b4:0e: 93:f1:d0:ff:31:a0:44:b6:11:5e:23:32:d0:e2:e1:ec:8c:61: b2:86:4a:17:16:b1:a6:8e:1f:ca:e6:ea:e1:70:64:0d:89:3c: c9:f4:41:48:38:c9:b3:84:ac:b5:14:85:b4:5c:cd:1d:df:77: 3e:98:c8:05:a2:c1:2d:8f:40:0d:27:53:6f:6c:9c:5a:eb:15: d4:ae:87:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjYwMTI1MDA1MDU0WhcNMjYwMjAxMDA1MDU0WjAYMRYwFAYD VQQDDA02OTc1NjhlZS0xYjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAikdseCJqRK38yRg7a57wEbDUzJUlyk8H6DdPczOZkAMDIG+d7VTf79ZIWbYX LKHWT4L/t1PgP5fRv/iBeaRaWpcaWDBX/Kk4FHWrwy//XoXGG0x4sKGmLU8owmtQ 1JDIZkKSrRkCtj51xaNlceYnGrmyhGtMnzlFSymJU1ippEUuBmPxstuPVWixmuDN 7itbtjoJBQEyMLB/TKlfZsn5yw1SGdltg4DNC9srz2maDTITwvD+Agr5urjGWMge 7uxt5zazWuQKDSr8uiijV1VK7solafmxWAEIkU+aNWt1zlIyRWsP3Gzm9GpgG3SP 92IPw3yiYxjexIzWd10WDqKsYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKM1tqL ELXOclcQM1sisfIZhd8RMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzQ4RS80RDc4OTI2QTRGQTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3 VmtMU1NFdF9BZ1d1ZmN4MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmF1Q2mb7/xlODJhxrlDqW1jprb463258kyjFQFfcMT8ubVdJjP7Q4 VpH7/FKnxhIrwgtNq/1LLVzfGjZQg2ZJ9GCYenFYmrUsTwobYfdvCf513KrnZEsB pegEs8mtIJEbyBLTIkTFvaeLpIYNtd8dhmuNVlcXiQW+vztmIsXjO6bM32lRT+qw cOMdWUOC3cyiMe32meXYPblCQwz4k3b3AtJntyHdJAt3MLWtYXbgvHYRtA6T8dD/ MaBEthFeIzLQ4uHsjGGyhkoXFrGmjh/K5urhcGQNiTzJ9EFIOMmzhKy1FIW0XM0d 33c+mMgFosEtj0ANJ1NvbJxa6xXUrodz -----END CERTIFICATE-----Generated at Sun Jan 25 17:04:54 2026 by rpki-client