This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft File: Ak2PFao5dyF1iDou3BZQFOGSiho.mft (raw, json) Hash identifier: 6ff7GuDWv3SiEGnx33trxNKZ3NYJjSxgHc+fDgHGmv8= Subject key identifier: DE:7A:14:19:F5:33:C8:E5:A6:54:64:C6:CC:F5:57:16:F1:ED:15:0D Authority key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A Certificate issuer: /CN=A917B520/serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft Manifest number: 53 Signing time: Sun 25 Jan 2026 01:41:37 +0000 Manifest this update: Sun 25 Jan 2026 01:41:36 +0000 Manifest next update: Sun 01 Feb 2026 01:41:36 +0000 Files and hashes: 1: Ak2PFao5dyF1iDou3BZQFOGSiho.crl (hash: 4d6JcgeNEt/h0eq9NebPLxwy25zBBfAOqdfzVleYras=) 2: 007686A0D3DD11F08C79D853C4F9AE02.roa (hash: 8k4Q5yQue0fzejcOTfvMtSHEiozPsY58g7SdicIKLKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Validity Not Before: Jan 25 01:41:36 2026 GMT Not After : Feb 1 01:41:36 2026 GMT Subject: CN=697574d0-7e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:52:80:29:8d:19:18:ff:67:49:2b:9b:12: 74:cc:ee:7d:1a:0e:d1:fe:ec:0d:05:e1:55:78:2a: ff:2a:f5:83:85:b3:2c:a7:07:28:3b:a3:64:ab:1f: 73:1a:fb:3b:0a:9b:d2:98:4b:f8:e4:c9:ab:5e:66: 20:50:d0:0b:b3:2f:3f:34:24:9d:02:94:09:85:45: d8:ff:76:43:50:11:7d:66:d0:df:5e:39:bd:cc:0a: e5:01:ce:ca:5d:8e:43:56:71:8f:61:8a:d9:66:cc: eb:d9:ee:52:63:76:de:8a:08:31:9d:a0:89:cd:45: d7:89:89:f0:53:ac:80:fc:fc:20:30:c1:2f:13:c7: fa:67:b2:78:06:d0:f3:bd:e2:33:74:bc:cc:18:2c: 58:2e:68:a9:67:d7:1b:f6:0c:61:24:1b:18:95:23: 83:6b:c2:09:03:f7:2a:7a:9f:24:42:eb:7d:bd:f0: 78:50:23:33:d9:b2:8b:3c:34:5f:b8:93:6f:f8:65: 77:cb:bd:28:c9:2f:d0:c8:ac:80:39:6a:33:b2:dc: 30:cc:b5:38:9c:f2:70:8c:bf:01:ee:8d:6b:01:90: 88:db:f3:3b:41:b7:8b:f4:c5:11:f9:89:26:9c:10: 05:1b:5a:58:d8:50:f2:ed:d6:e2:b1:e8:d0:68:77: f9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7A:14:19:F5:33:C8:E5:A6:54:64:C6:CC:F5:57:16:F1:ED:15:0D X509v3 Authority Key Identifier: keyid:02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f4:cc:20:22:35:f3:b0:39:3c:6a:23:5e:69:2d:f9:9f:13: 3b:57:28:4e:d0:4e:13:f6:83:b9:73:61:2d:ca:29:d6:82:a3: 5a:5d:8e:78:90:2f:9d:44:fc:06:97:f0:93:f1:cf:fd:29:79: f0:5e:a1:e4:9e:c6:30:fb:79:46:4b:80:95:ca:5a:fa:22:3a: 50:42:26:ba:8d:4b:55:ef:bc:9f:69:52:a0:a8:a2:40:a7:34: 47:35:d2:ae:1f:fa:67:31:46:54:79:4f:49:fb:b1:d9:ca:00: 1c:6d:10:79:58:cf:de:18:6f:98:8e:6a:6e:ee:07:17:85:37: 8a:aa:ac:c3:18:fe:55:69:85:02:12:92:74:50:92:20:af:a8: c3:6e:0d:58:8d:4c:33:9b:33:ee:41:b3:ea:1a:1a:13:ac:c1: 60:22:9f:31:de:a4:60:63:db:36:62:ed:2a:c4:8f:f4:50:a2: a4:f2:dc:62:51:c5:16:50:ac:02:c1:c5:7a:fc:32:39:e2:14: 46:66:aa:4f:22:a5:9b:c6:0c:e8:f5:81:0a:21:c2:de:00:53: 02:28:56:64:5b:a4:1f:13:c4:17:4b:f6:28:43:0b:f6:dc:98: 10:c8:5f:1f:56:fa:1a:d9:80:94:1c:97:05:2d:79:ca:4e:e6: 4c:83:c6:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjUyMDExMC8GA1UEBRMoMDI0RDhGMTVBQTM5NzcyMTc1ODgzQTJFREMxNjUwMTRF MTkyOEExQTAeFw0yNjAxMjUwMTQxMzZaFw0yNjAyMDEwMTQxMzZaMBgxFjAUBgNV BAMMDTY5NzU3NGQwLTdlMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6y1KAKY0ZGP9nSSubEnTM7n0aDtH+7A0F4VV4Kv8q9YOFsyynByg7o2SrH3Ma +zsKm9KYS/jkyateZiBQ0AuzLz80JJ0ClAmFRdj/dkNQEX1m0N9eOb3MCuUBzspd jkNWcY9hitlmzOvZ7lJjdt6KCDGdoInNRdeJifBTrID8/CAwwS8Tx/pnsngG0PO9 4jN0vMwYLFguaKln1xv2DGEkGxiVI4NrwgkD9yp6nyRC63298HhQIzPZsos8NF+4 k2/4ZXfLvSjJL9DIrIA5ajOy3DDMtTic8nCMvwHujWsBkIjb8ztBt4v0xRH5iSac EAUbWljYUPLt1uKx6NBod/m1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3noUGfUz yOWmVGTGzPVXFvHtFQ0wHwYDVR0jBBgwFoAUAk2PFao5dyF1iDou3BZQFOGSihow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNTIwLzRBMTJBMzNDODJG NDExRjA5Qjc0MzU0RUM0RjlBRTAyL0FrMlBGYW81ZHlGMWlEb3UzQlpRRk9HU2lo by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvQWsyUEZhbzVkeUYxaURvdTNCWlFGT0dTaWhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC NTIwLzRBMTJBMzNDODJGNDExRjA5Qjc0MzU0RUM0RjlBRTAyL0FrMlBGYW81ZHlG MWlEb3UzQlpRRk9HU2loby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGb0zCAiNfOwOTxqI15pLfmfEztXKE7QThP2g7lzYS3KKdaCo1pdjniQ L51E/AaX8JPxz/0pefBeoeSexjD7eUZLgJXKWvoiOlBCJrqNS1XvvJ9pUqCookCn NEc10q4f+mcxRlR5T0n7sdnKABxtEHlYz94Yb5iOam7uBxeFN4qqrMMY/lVphQIS knRQkiCvqMNuDViNTDObM+5Bs+oaGhOswWAinzHepGBj2zZi7SrEj/RQoqTy3GJR xRZQrALBxXr8MjniFEZmqk8ipZvGDOj1gQohwt4AUwIoVmRbpB8TxBdL9ihDC/bc mBDIXx9W+hrZgJQclwUtecpO5kyDxpU= -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:58 2026 by rpki-client