This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft File: m3GXbfcKU0c1AkN1KyIJIeANL6E.mft (raw, json) Hash identifier: 6wrAPMzSc6QMevhwzEIpNGnYSGc7OcnPbJQgbNSz+v0= Subject key identifier: 9B:79:96:59:D3:23:00:B5:40:DF:9E:5B:D3:65:94:BC:9A:13:9B:4E Authority key identifier: 9B:71:97:6D:F7:0A:53:47:35:02:43:75:2B:22:09:21:E0:0D:2F:A1 Certificate issuer: /CN=A917A2E5/serialNumber=9B71976DF70A5347350243752B220921E00D2FA1 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft Manifest number: 46 Signing time: Fri 23 Jan 2026 06:21:32 +0000 Manifest this update: Fri 23 Jan 2026 06:21:32 +0000 Manifest next update: Fri 30 Jan 2026 06:21:32 +0000 Files and hashes: 1: m3GXbfcKU0c1AkN1KyIJIeANL6E.crl (hash: UDIIM5o4JzUjbQ4c8qYIojTcjKaRdzFjZFiQU1+pbuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.crl rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2E5, serialNumber=9B71976DF70A5347350243752B220921E00D2FA1 Validity Not Before: Jan 23 06:21:32 2026 GMT Not After : Jan 30 06:21:32 2026 GMT Subject: CN=6973136c-b5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b3:3e:93:e2:9e:67:8b:88:73:ad:87:97:d5: 93:9f:1c:40:9f:be:47:dc:e7:5a:cb:16:3a:88:27: dc:41:87:da:7d:51:49:c1:c1:a9:8b:3f:6f:d8:1b: ab:47:1b:49:ae:3f:01:cf:a8:37:ce:cf:e5:ab:22: 63:35:1d:7e:a8:b3:65:3b:ae:40:a3:9a:32:d9:b7: 3a:a1:eb:7b:c9:19:84:be:eb:cd:5c:ae:f8:e3:4b: 92:89:35:b4:a1:6e:e4:e7:e3:cd:b5:11:5a:33:a4: 9e:57:c7:60:16:b5:f7:cf:87:2f:dc:79:a8:0d:a9: 8c:82:46:f1:69:a6:e3:ca:bf:e2:80:3e:f5:77:62: cf:ab:71:b6:fb:2b:c1:73:6b:5e:f5:82:50:5a:92: 0f:98:a6:83:bb:3b:22:20:2c:16:b3:7e:bb:70:a3: 24:8d:2e:23:8c:86:56:73:0c:77:ed:17:df:ff:2f: a0:25:44:8c:a6:5f:b0:c1:74:b2:07:9b:82:11:7e: a0:1b:be:33:c4:8c:42:6b:42:6a:e5:64:7e:91:8e: b6:c6:95:4f:ed:c5:43:7f:17:32:20:b1:ec:71:c4: 5c:28:5b:b3:40:75:3e:22:52:dd:d4:40:f0:0e:a6: 58:43:8b:77:66:52:b2:9a:b5:0d:b9:9d:62:17:29: 2a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:79:96:59:D3:23:00:B5:40:DF:9E:5B:D3:65:94:BC:9A:13:9B:4E X509v3 Authority Key Identifier: keyid:9B:71:97:6D:F7:0A:53:47:35:02:43:75:2B:22:09:21:E0:0D:2F:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:77:5c:d5:5b:f0:0a:ce:83:4c:ba:a0:71:21:f9:76:df:61: 9a:c2:83:00:0c:17:10:2e:39:64:55:9c:4f:17:40:65:5e:07: bc:1e:6f:7e:89:8c:db:12:8d:98:25:f8:a0:14:fe:03:30:d5: 10:f2:96:c9:33:bd:2f:d3:96:b7:5f:7f:70:ce:26:32:49:df: cd:48:2b:0b:02:79:e1:9e:dc:5a:fb:76:d3:98:bd:0d:9b:55: 05:4e:ec:80:e8:43:56:8c:f3:f2:14:de:99:0a:c3:1d:e5:df: e1:e2:b8:4f:a9:fb:e3:c3:90:c4:7f:ca:5b:5a:ba:cf:fd:b9: 6e:fa:22:08:ff:fd:8d:43:c5:b4:80:2f:23:ba:d1:37:0c:95: f8:da:89:6c:48:2b:1f:8f:dc:8b:f6:61:a8:1f:a1:ad:da:7d: 78:b3:e2:0e:b5:c9:d0:16:18:3d:3a:93:54:44:01:7e:a5:3e: a5:1a:c1:ac:d1:ad:22:f0:49:a0:4f:79:0a:9e:02:58:dd:31: 8a:e6:aa:1a:86:70:33:b2:68:64:51:57:6e:1c:37:c0:a8:a7: 9f:ba:d6:a0:8e:c2:1b:2c:71:f3:c0:40:2e:e2:c9:2e:6a:db: 25:bc:3a:bd:5c:d5:aa:f9:98:63:d0:2c:b3:d7:6f:be:13:49: e3:ca:b6:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTJFNTExMC8GA1UEBRMoOUI3MTk3NkRGNzBBNTM0NzM1MDI0Mzc1MkIyMjA5MjFF MDBEMkZBMTAeFw0yNjAxMjMwNjIxMzJaFw0yNjAxMzAwNjIxMzJaMBgxFjAUBgNV BAMMDTY5NzMxMzZjLWI1YjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQsz6T4p5ni4hzrYeX1ZOfHECfvkfc51rLFjqIJ9xBh9p9UUnBwamLP2/YG6tH G0muPwHPqDfOz+WrImM1HX6os2U7rkCjmjLZtzqh63vJGYS+681crvjjS5KJNbSh buTn4821EVozpJ5Xx2AWtffPhy/ceagNqYyCRvFppuPKv+KAPvV3Ys+rcbb7K8Fz a171glBakg+YpoO7OyIgLBazfrtwoySNLiOMhlZzDHftF9//L6AlRIymX7DBdLIH m4IRfqAbvjPEjEJrQmrlZH6RjrbGlU/txUN/FzIgsexxxFwoW7NAdT4iUt3UQPAO plhDi3dmUrKatQ25nWIXKSrhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm3mWWdMj ALVA355b02WUvJoTm04wHwYDVR0jBBgwFoAUm3GXbfcKU0c1AkN1KyIJIeANL6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMkU1L0IwQjI4RkE2OEM5 NzExRjBBMDA5RDU3MkM0RjlBRTAyL20zR1hiZmNLVTBjMUFrTjFLeUlKSWVBTkw2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTNHWGJmY0tVMGMxQWtOMUt5SUpJZUFOTDZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MkU1L0IwQjI4RkE2OEM5NzExRjBBMDA5RDU3MkM0RjlBRTAyL20zR1hiZmNLVTBj MUFrTjFLeUlKSWVBTkw2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAB3XNVb8ArOg0y6oHEh+XbfYZrCgwAMFxAuOWRVnE8XQGVeB7web36J jNsSjZgl+KAU/gMw1RDylskzvS/Tlrdff3DOJjJJ381IKwsCeeGe3Fr7dtOYvQ2b VQVO7IDoQ1aM8/IU3pkKwx3l3+HiuE+p++PDkMR/yltaus/9uW76Igj//Y1DxbSA LyO60TcMlfjaiWxIKx+P3Iv2Yagfoa3afXiz4g61ydAWGD06k1REAX6lPqUawazR rSLwSaBPeQqeAljdMYrmqhqGcDOyaGRRV24cN8Cop5+61qCOwhsscfPAQC7iyS5q 2yW8Or1c1ar5mGPQLLPXb74TSePKtnk= -----END CERTIFICATE-----Generated at Sun Jan 25 02:51:17 2026 by rpki-client