This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft File: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft (raw, json) Hash identifier: SUe4LTz3WW6Y2gEUnRXfTDaX5iNiuGkRWAZ7z76XHJw= Subject key identifier: 86:4B:44:14:4B:02:46:F9:C7:78:FD:95:6F:BA:95:71:81:91:C7:A3 Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 Certificate issuer: /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Certificate serial: 0411 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft Manifest number: 040A Signing time: Sat 24 Jan 2026 23:39:19 +0000 Manifest this update: Sat 24 Jan 2026 23:39:18 +0000 Manifest next update: Sat 31 Jan 2026 23:39:18 +0000 Files and hashes: 1: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl (hash: eNZRmpnO+/y7eLYjGuM4mNt6c9RiakS+LcvonQPk+Zg=) 2: 5895821AB62611ECB410C81DC4F9AE02.roa (hash: hC/jX3h+m4kRJTL+3r4qE/OapWO5r8a4N2e8hzVBff0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1041 (0x411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1, serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Validity Not Before: Jan 24 23:39:18 2026 GMT Not After : Jan 31 23:39:18 2026 GMT Subject: CN=69755827-7c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:c5:5b:26:04:6b:c2:e4:71:76:94:68:2e: 49:56:2c:8a:72:8f:24:cd:0c:ec:68:2c:8e:c5:62: 1b:ad:8d:0b:32:50:d4:bd:bd:87:aa:24:2a:7c:f8: 2b:12:03:3c:24:03:f3:c9:66:cc:9c:bd:63:c5:92: 84:a2:69:de:26:d7:3f:ba:fc:e0:04:84:43:33:c7: 9a:a7:76:73:3b:2d:ee:a3:b0:38:09:13:d2:9d:09: 6e:9d:43:cc:e8:b4:c9:aa:88:bd:af:1b:a0:fc:47: b3:2d:ad:14:87:45:6a:a2:e6:66:1b:45:7f:5b:cc: 4b:23:9f:1e:8c:1a:07:07:6f:f3:69:e9:0b:43:5a: 72:08:30:a1:a7:1d:b6:ac:17:e4:61:66:a8:9b:45: 65:e6:b5:a6:09:ca:03:2c:97:be:6d:1c:51:71:6f: e3:f4:60:57:40:a5:fa:a8:1b:f5:ba:20:52:01:31: b4:c4:7b:16:94:ec:b1:3f:5b:6d:f7:09:7d:b6:7d: ad:86:f8:96:0c:c8:61:79:71:48:4c:ad:dc:08:69: 0c:cf:3b:c6:9e:46:12:e6:39:37:6f:34:79:e8:eb: ec:69:c5:31:11:5a:31:b9:3e:9d:36:e5:e3:7e:e9: a8:5b:b6:1a:a2:32:87:b9:8b:f1:47:bd:fd:dc:8e: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4B:44:14:4B:02:46:F9:C7:78:FD:95:6F:BA:95:71:81:91:C7:A3 X509v3 Authority Key Identifier: keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e7:c0:f3:73:f8:71:83:3b:63:43:cd:7e:75:11:dd:8e:0c: e3:12:18:88:cd:60:e5:7b:d2:82:48:5f:47:a3:32:b0:63:1f: 5d:95:2b:7d:c7:02:91:44:61:8e:f1:ed:e0:80:a0:54:19:c2: e6:7f:79:b1:5f:12:70:76:38:45:7b:03:f7:78:54:94:7a:7a: 8c:61:55:4a:b3:ce:f5:bf:1a:8f:50:1b:50:32:b9:0e:d0:69: 26:32:f0:ad:75:d3:49:49:17:4d:5e:72:00:dc:24:1a:5c:8c: 5c:f9:01:ee:de:56:69:4c:9b:49:c7:e4:68:7b:a4:fd:88:96: 9c:bc:e2:90:07:6b:6b:54:25:60:6a:91:e6:98:6c:e0:fd:99: 65:d4:93:b7:37:4e:71:c0:29:28:ac:0c:59:79:f5:95:4c:ca: f0:1c:09:39:8f:88:a9:7e:9c:39:8f:5d:d3:0d:20:e4:7d:b6: 02:36:61:da:53:20:ef:78:55:c6:98:bb:c5:40:d0:b8:f5:d0: 57:4d:01:0f:91:f0:48:48:31:d1:6d:a6:55:2b:64:f4:da:04: b8:eb:55:aa:02:8c:34:19:d6:6f:f6:77:cf:3f:70:d9:f2:53: fe:9e:ce:46:75:f2:8f:f6:da:8e:69:24:d8:c5:c2:91:de:75: a3:48:09:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKEVDODRENjBGNzk2QkY0MTZGOEY4MUQxOEJBREEyRkZG ODdDMTVGMjYwHhcNMjYwMTI0MjMzOTE4WhcNMjYwMTMxMjMzOTE4WjAYMRYwFAYD VQQDDA02OTc1NTgyNy03YzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQ7FWyYEa8LkcXaUaC5JViyKco8kzQzsaCyOxWIbrY0LMlDUvb2HqiQqfPgr EgM8JAPzyWbMnL1jxZKEomneJtc/uvzgBIRDM8eap3ZzOy3uo7A4CRPSnQlunUPM 6LTJqoi9rxug/EezLa0Uh0VqouZmG0V/W8xLI58ejBoHB2/zaekLQ1pyCDChpx22 rBfkYWaom0Vl5rWmCcoDLJe+bRxRcW/j9GBXQKX6qBv1uiBSATG0xHsWlOyxP1tt 9wl9tn2thviWDMhheXFITK3cCGkMzzvGnkYS5jk3bzR56OvsacUxEVoxuT6dNuXj fumoW7YaojKHuYvxR7393I7WmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZLRBRL Akb5x3j9lW+6lXGBkcejMB8GA1UdIwQYMBaAFOyE1g95a/QW+PgdGLraL/+HwV8m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS84NjgzNTUwNkEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlCYjQtQjBZdXRvdl80ZkJY eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJVFdEM2xyOUJiNC1CMFl1dG92XzRmQlh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNGMS84NjgzNTUwNkEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlC YjQtQjBZdXRvdl80ZkJYeVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ58Dzc/hxgztjQ81+dRHdjgzjEhiIzWDle9KCSF9HozKwYx9dlSt9 xwKRRGGO8e3ggKBUGcLmf3mxXxJwdjhFewP3eFSUenqMYVVKs871vxqPUBtQMrkO 0GkmMvCtddNJSRdNXnIA3CQaXIxc+QHu3lZpTJtJx+Roe6T9iJacvOKQB2trVCVg apHmmGzg/Zll1JO3N05xwCkorAxZefWVTMrwHAk5j4ipfpw5j13TDSDkfbYCNmHa UyDveFXGmLvFQNC49dBXTQEPkfBISDHRbaZVK2T02gS461WqAow0GdZv9nfPP3DZ 8lP+ns5GdfKP9tqOaSTYxcKR3nWjSAl9 -----END CERTIFICATE-----Generated at Sun Jan 25 13:59:14 2026 by rpki-client