This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft File: Ic_hSZujbpQWt_68gTw8LqkWvEY.mft (raw, json) Hash identifier: vO85bHHVGdIYDdOylp3qFW84VRCJ4/ZnZiFxnq0uyXY= Subject key identifier: 53:A4:C9:D3:BD:03:8A:A0:D1:8D:D9:1B:BB:72:85:57:B1:2F:70:7E Authority key identifier: 21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 Certificate issuer: /CN=A917B413/serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Certificate serial: 0B3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft Manifest number: 0B35 Signing time: Sat 24 Jan 2026 18:46:26 +0000 Manifest this update: Sat 24 Jan 2026 18:46:25 +0000 Manifest next update: Sat 31 Jan 2026 18:46:25 +0000 Files and hashes: 1: Ic_hSZujbpQWt_68gTw8LqkWvEY.crl (hash: 7+u2YbUw6wdGAZuv1PNwkdhWeDSv/mG7X+HTKtDVH30=) 2: 498B6EFE942411EA816FC855C4F9AE02.roa (hash: AU3Frw6p1SnNaYVLPNPNSlHZdunuBupMTCIgXK+Ojng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2878 (0xb3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B413, serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Validity Not Before: Jan 24 18:46:25 2026 GMT Not After : Jan 31 18:46:25 2026 GMT Subject: CN=69751382-ab87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3f:80:ba:fb:91:ef:87:bb:53:29:2a:bf:e7: f1:34:3e:87:79:e7:aa:85:be:8d:f4:3d:f9:51:60: 98:fe:e9:41:cc:22:80:b2:a1:97:4d:4d:fb:5d:19: a1:e0:4a:51:e3:c2:7c:72:b9:3d:9a:05:14:6e:32: 43:48:8b:18:b9:46:33:9d:0b:a1:35:a8:41:c5:52: 93:12:68:ac:13:3d:f7:76:9d:7c:b7:60:97:17:fa: 01:76:1c:f7:d9:28:aa:17:7f:93:df:7d:f8:c4:e6: 11:cf:5b:97:98:6f:67:ad:ae:28:68:ab:84:d1:c8: 93:a9:0b:4e:d6:f6:54:6f:35:37:7b:a2:46:4f:4f: 54:a9:09:ac:16:0a:c5:36:ad:ae:86:66:10:0e:3b: d6:f9:75:50:74:1e:3c:53:ca:80:c2:f6:4b:94:a0: bb:a9:77:b9:c9:91:2f:04:af:05:41:bb:0e:37:f4: 79:e6:d9:97:2f:db:ba:72:ac:e9:97:d7:bc:ff:bc: 87:32:2b:0f:d1:5d:ff:91:80:5b:a9:62:eb:b0:02: 68:dc:db:55:71:60:8d:30:e7:f8:67:6a:41:af:94: 1c:97:bb:10:9a:72:da:79:67:e6:67:83:42:3f:52: 96:d8:11:91:c1:8b:b0:15:45:0e:2e:4b:28:12:ef: ab:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A4:C9:D3:BD:03:8A:A0:D1:8D:D9:1B:BB:72:85:57:B1:2F:70:7E X509v3 Authority Key Identifier: keyid:21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:f0:75:1a:ab:cd:5f:33:39:9c:cd:1b:c0:25:69:41:1e:e7: 97:1e:dc:5d:f0:11:65:bd:c7:77:d5:36:6e:11:1f:26:3e:3d: 2c:73:30:98:6a:56:ed:6c:2c:d4:7b:e5:74:e4:e6:09:37:90: a3:5d:2d:cd:db:60:72:62:2e:8d:75:87:e2:2a:78:7e:84:c4: c1:49:bb:21:dd:97:67:57:56:54:56:ac:fe:4a:b5:f7:47:70: 9d:f1:45:50:eb:6a:86:30:cc:3a:b6:7f:08:7d:19:4d:09:a9: 6e:f9:e8:c8:42:bb:82:60:79:41:d6:89:47:94:04:de:a2:77: 17:e5:bc:4b:dc:09:82:9d:c9:54:7e:0c:bd:db:f9:93:a8:fe: 99:b7:4b:1c:99:21:f5:b7:d6:86:6a:a4:7a:ad:55:88:8c:9e: 86:da:f6:a2:c0:5d:76:d8:b9:22:33:f5:df:a7:10:c0:86:14: 4a:23:5a:89:d1:4d:47:c6:54:fc:96:86:01:cd:8d:1e:54:78: 70:f8:14:c0:3f:0f:40:18:61:90:f2:ee:e0:82:60:df:a5:36: 54:1c:90:04:fd:e6:e9:8d:96:7e:eb:73:da:7a:c0:09:aa:ba: 62:ae:96:be:f4:db:4a:80:6d:51:75:1d:c0:ae:b0:39:27:f2: be:d4:ac:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0MTMxMTAvBgNVBAUTKDIxQ0ZFMTQ5OUJBMzZFOTQxNkI3RkVCQzgxM0MzQzJF QTkxNkJDNDYwHhcNMjYwMTI0MTg0NjI1WhcNMjYwMTMxMTg0NjI1WjAYMRYwFAYD VQQDDA02OTc1MTM4Mi1hYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9j+AuvuR74e7Uykqv+fxND6Heeeqhb6N9D35UWCY/ulBzCKAsqGXTU37XRmh 4EpR48J8crk9mgUUbjJDSIsYuUYznQuhNahBxVKTEmisEz33dp18t2CXF/oBdhz3 2SiqF3+T3334xOYRz1uXmG9nra4oaKuE0ciTqQtO1vZUbzU3e6JGT09UqQmsFgrF Nq2uhmYQDjvW+XVQdB48U8qAwvZLlKC7qXe5yZEvBK8FQbsON/R55tmXL9u6cqzp l9e8/7yHMisP0V3/kYBbqWLrsAJo3NtVcWCNMOf4Z2pBr5Qcl7sQmnLaeWfmZ4NC P1KW2BGRwYuwFUUOLksoEu+rPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOkydO9 A4qg0Y3ZG7tyhVexL3B+MB8GA1UdIwQYMBaAFCHP4Umbo26UFrf+vIE8PC6pFrxG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjQxMy9COEZDQTdCQTUx NkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJwUVd0XzY4Z1R3OExxa1d2 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljX2hTWnVqYnBRV3RfNjhnVHc4THFrV3ZFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjQxMy9COEZDQTdCQTUxNkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJw UVd0XzY4Z1R3OExxa1d2RVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI8HUaq81fMzmczRvAJWlBHueXHtxd8BFlvcd31TZuER8mPj0sczCY albtbCzUe+V05OYJN5CjXS3N22ByYi6NdYfiKnh+hMTBSbsh3ZdnV1ZUVqz+SrX3 R3Cd8UVQ62qGMMw6tn8IfRlNCalu+ejIQruCYHlB1olHlATeoncX5bxL3AmCnclU fgy92/mTqP6Zt0scmSH1t9aGaqR6rVWIjJ6G2vaiwF122LkiM/XfpxDAhhRKI1qJ 0U1HxlT8loYBzY0eVHhw+BTAPw9AGGGQ8u7ggmDfpTZUHJAE/ebpjZZ+63PaesAJ qrpirpa+9NtKgG1RdR3ArrA5J/K+1KyQ -----END CERTIFICATE-----Generated at Sun Jan 25 11:10:43 2026 by rpki-client