This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft File: DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft (raw, json) Hash identifier: vVT7lIZH/Oll41k4OrEWyecbqZQllrSddGYi/r6zKBw= Subject key identifier: 40:A9:72:06:77:5C:91:84:FB:66:FB:B5:FE:54:E2:20:B8:D9:19:D8 Authority key identifier: 0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14 Certificate issuer: /CN=A917D114/serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft Manifest number: 4A Signing time: Fri 23 Jan 2026 06:20:13 +0000 Manifest this update: Fri 23 Jan 2026 06:20:12 +0000 Manifest next update: Fri 30 Jan 2026 06:20:12 +0000 Files and hashes: 1: DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl (hash: q3WZatc/GYPUCL2r2Aebsfho4liAYF2AQVWueGkEM0c=) 2: 77248CD0889111F0810C3E1FC4F9AE02.roa (hash: AQ4Lse7zCFP3/9JvqgPaWnl1J8Ednlxm8McvA0KBIHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D114, serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314 Validity Not Before: Jan 23 06:20:12 2026 GMT Not After : Jan 30 06:20:12 2026 GMT Subject: CN=6973131d-c704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:34:11:cb:d7:f5:1d:d8:74:3c:e4:87:4f:93: 3a:1c:1c:37:f4:81:d8:14:d5:6c:12:c8:d5:b5:f6: 0c:df:b8:a2:2b:65:c1:c8:62:31:61:8e:4d:1d:e2: c9:1f:18:28:80:4f:dc:27:56:9c:42:cd:40:e5:3c: 47:03:0a:b9:a8:da:23:9a:92:6e:95:ed:6b:90:ef: 0f:ed:90:ce:10:93:32:e9:3d:ae:0a:39:ab:e4:e9: e8:6a:89:d3:d6:da:dc:4d:97:f4:f0:36:f0:8e:46: 69:c4:b8:b3:dc:b0:88:3a:c5:1d:4d:d7:a0:1b:cc: bf:aa:e3:69:14:56:21:7e:1f:9a:48:95:97:c8:9e: f3:15:13:fe:3d:0a:fa:db:9c:05:89:2f:8f:7e:9d: 6b:45:78:5f:1f:2c:e3:7e:a9:81:52:47:63:08:c7: da:6f:7d:d4:ba:6e:0e:d9:c0:17:66:18:92:03:06: de:02:fc:8b:d5:ea:09:54:f7:72:e3:72:8d:07:7a: 90:b6:0a:bf:3a:64:31:ea:b7:df:db:51:f4:89:9b: 52:bc:d8:9d:19:ed:7c:22:f5:d0:b7:0b:9b:72:32: cc:ce:34:a0:bf:5e:bb:20:63:78:45:3b:e2:cb:23: fa:37:e7:a9:eb:7d:99:fa:53:1e:6e:18:79:45:72: e8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A9:72:06:77:5C:91:84:FB:66:FB:B5:FE:54:E2:20:B8:D9:19:D8 X509v3 Authority Key Identifier: keyid:0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:4a:55:a7:74:cc:f0:b8:7c:56:f6:25:70:24:82:8c:da:46: f1:f8:e7:21:78:aa:e2:6d:1e:55:d4:d4:b0:67:b6:b9:92:f6: 40:fa:ce:74:02:84:90:d2:ec:50:90:d9:67:85:eb:bd:0a:8d: 76:68:7f:a3:fe:21:8a:51:ed:f7:3c:c0:02:65:db:25:04:91: ae:5b:73:0c:39:d0:24:ed:d8:cf:64:74:3b:e5:2a:71:8e:2e: 53:39:04:c9:54:a4:30:31:0e:bf:22:2c:84:de:6e:2a:2a:57: 22:51:fd:42:92:ad:1d:eb:af:42:60:05:09:d7:37:ff:20:2b: 1e:15:43:c2:c9:e4:fa:23:b1:29:ba:16:0e:d2:93:4c:32:49: bc:ec:09:29:95:61:e1:15:36:ad:9c:d8:c4:63:0a:29:9e:2e: 1e:bb:86:79:48:99:81:f7:91:ff:77:2d:63:c7:03:7f:46:c5: bc:7a:d3:d2:71:b6:25:24:85:a0:a2:94:9f:38:0b:f4:4e:a6: bd:2d:71:cb:44:29:7d:30:74:fc:21:cb:d0:d0:e0:2c:ab:6e: 86:77:61:fa:7c:64:22:91:ce:52:24:44:95:7c:cb:ac:47:f1: d8:08:bb:1c:76:0d:e4:a6:52:37:56:03:16:7e:27:23:e4:2f: 9a:b9:80:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE3 RDExNDExMC8GA1UEBRMoMEQ4QzFGMTEwQkRCMzNEMDUzQjY1NkJCQTAwNzNCOTMw QzY0RjMxNDAeFw0yNjAxMjMwNjIwMTJaFw0yNjAxMzAwNjIwMTJaMBgxFjAUBgNV BAMMDTY5NzMxMzFkLWM3MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8NBHL1/Ud2HQ85IdPkzocHDf0gdgU1WwSyNW19gzfuKIrZcHIYjFhjk0d4skf GCiAT9wnVpxCzUDlPEcDCrmo2iOakm6V7WuQ7w/tkM4QkzLpPa4KOavk6ehqidPW 2txNl/TwNvCORmnEuLPcsIg6xR1N16AbzL+q42kUViF+H5pIlZfInvMVE/49Cvrb nAWJL49+nWtFeF8fLON+qYFSR2MIx9pvfdS6bg7ZwBdmGJIDBt4C/IvV6glU93Lj co0HepC2Cr86ZDHqt9/bUfSJm1K82J0Z7Xwi9dC3C5tyMszONKC/XrsgY3hFO+LL I/o356nrfZn6Ux5uGHlFcujHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQKlyBndc kYT7Zvu1/lTiILjZGdgwHwYDVR0jBBgwFoAUDYwfEQvbM9BTtla7oAc7kwxk8xQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMTE0Lzc5RDQzMEJDODg5 MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlCVHRsYTdvQWM3a3d4azh4 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRFl3ZkVRdmJNOUJUdGxhN29BYzdrd3hrOHhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE MTE0Lzc5RDQzMEJDODg5MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlC VHRsYTdvQWM3a3d4azh4US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAANKVad0zPC4fFb2JXAkgozaRvH45yF4quJtHlXU1LBntrmS9kD6znQC hJDS7FCQ2WeF670KjXZof6P+IYpR7fc8wAJl2yUEka5bcww50CTt2M9kdDvlKnGO LlM5BMlUpDAxDr8iLITebioqVyJR/UKSrR3rr0JgBQnXN/8gKx4VQ8LJ5PojsSm6 Fg7Sk0wySbzsCSmVYeEVNq2c2MRjCimeLh67hnlImYH3kf93LWPHA39Gxbx609Jx tiUkhaCilJ84C/ROpr0tcctEKX0wdPwhy9DQ4CyrboZ3Yfp8ZCKRzlIkRJV8y6xH 8dgIuxx2DeSmUjdWAxZ+JyPkL5q5gF0= -----END CERTIFICATE-----Generated at Sun Jan 25 04:36:28 2026 by rpki-client