This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft File: _Er4bnAJnaC6rC7dx30b70x1qJU.mft (raw, json) Hash identifier: FckaMnKIaxp20NL2CH35/z+TX4oXDsxR32wZrTHiJb0= Subject key identifier: 0F:78:98:43:47:2C:35:DC:FA:FC:A5:80:21:A8:C9:F2:EA:EF:E7:AC Authority key identifier: FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95 Certificate issuer: /CN=A917D31E/serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft Manifest number: 31 Signing time: Sun 25 Jan 2026 06:40:23 +0000 Manifest this update: Sun 25 Jan 2026 06:40:22 +0000 Manifest next update: Sun 01 Feb 2026 06:40:22 +0000 Files and hashes: 1: _Er4bnAJnaC6rC7dx30b70x1qJU.crl (hash: FPAwmXW54SkB7FHkvHSgkjZMqAz7xY3mP2wydZZs6fc=) 2: 3505DC88B6E411F090AAA224C4F9AE02.roa (hash: NC1EW44txePxXOncUvp1UoY7Puvst1exL43E60v3h6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D31E, serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895 Validity Not Before: Jan 25 06:40:22 2026 GMT Not After : Feb 1 06:40:22 2026 GMT Subject: CN=6975bad7-53d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:43:eb:53:27:31:5a:a9:63:6d:c7:c7:ee:74: 71:bc:44:f2:f5:85:38:d4:9b:53:81:59:7c:00:0e: 22:f8:34:a3:d5:68:46:6a:d4:61:0a:ca:eb:81:0d: e6:1d:04:ec:f4:92:b0:9f:d1:5d:44:87:c3:5b:d2: 33:96:fb:42:89:bd:36:e1:18:2a:bf:c6:84:69:1d: 7a:d8:13:29:30:ee:ef:2a:62:94:7c:c0:1b:14:82: 2b:5d:7f:16:84:1b:13:43:e2:88:25:b4:15:ee:97: f1:51:4c:2c:f7:2f:01:cf:03:32:56:51:40:ff:c4: e6:a8:f2:4e:05:fb:3b:89:7e:a7:80:49:5b:1c:f2: 54:28:71:3b:1b:53:9c:5b:a0:7c:3e:bd:ef:15:d0: 30:ea:69:5f:20:82:b2:1e:52:f9:c0:fd:b7:15:88: 58:76:4a:08:cd:a2:e0:b5:ab:63:7c:85:cf:19:25: 52:81:88:13:74:38:2c:6e:9d:3c:4f:fb:af:af:0c: 87:c1:ea:ca:93:c1:1b:cb:ce:28:cf:6b:d7:bd:37: 98:67:73:df:44:fe:3c:19:68:6f:55:50:a3:21:7f: 2f:b0:44:58:88:7f:a7:5e:b8:09:23:00:87:05:12: 42:37:65:37:e0:6a:9e:d0:ab:82:d1:12:f1:d4:63: 5e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:78:98:43:47:2C:35:DC:FA:FC:A5:80:21:A8:C9:F2:EA:EF:E7:AC X509v3 Authority Key Identifier: keyid:FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:86:34:aa:9f:48:72:83:2a:91:f6:eb:0e:b6:ed:2e:25:27: 9e:02:34:fe:14:e2:69:a2:cf:e0:24:47:c1:61:b6:b2:68:ad: 94:38:17:04:91:52:94:f7:b7:9f:69:d9:30:1e:2e:01:bd:b7: 0f:2c:a8:6d:e4:fc:b6:20:12:dc:ac:cc:6e:fd:7e:9c:90:94: f5:96:1e:da:de:86:09:32:4a:00:65:92:45:dc:55:d7:d5:b5: 8a:d7:f5:40:e0:4a:b5:28:66:00:41:0e:fe:68:58:1d:ec:65: 84:00:16:ed:c6:81:4d:e0:00:9a:e1:c9:3e:b8:ac:2b:f0:13: b2:e4:a4:cc:93:67:57:84:15:90:0b:6a:05:88:37:be:aa:f9: f8:df:dd:44:16:06:d6:09:6b:c5:28:08:03:95:5f:1a:01:14: d2:42:04:18:5a:dd:18:f2:7e:31:03:49:d0:9c:03:12:fd:7d: 9d:b1:9d:67:dc:a8:a6:fe:4e:8e:83:1d:6e:e7:70:fe:d8:ce: 4b:60:5a:d2:d8:af:c4:3c:a1:80:0d:7c:14:8c:2f:60:2e:11: 49:fe:7d:ed:2a:80:25:6f:20:70:7a:cb:d2:af:d2:4d:73:ad: e0:5c:92:bb:b4:43:00:b3:ae:5f:33:89:1f:1a:90:1b:03:eb: a1:6a:4f:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDMxRTExMC8GA1UEBRMoRkM0QUY4NkU3MDA5OURBMEJBQUMyRUREQzc3RDFCRUY0 Qzc1QTg5NTAeFw0yNjAxMjUwNjQwMjJaFw0yNjAyMDEwNjQwMjJaMBgxFjAUBgNV BAMMDTY5NzViYWQ3LTUzZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqQ+tTJzFaqWNtx8fudHG8RPL1hTjUm1OBWXwADiL4NKPVaEZq1GEKyuuBDeYd BOz0krCf0V1Eh8Nb0jOW+0KJvTbhGCq/xoRpHXrYEykw7u8qYpR8wBsUgitdfxaE GxND4ogltBXul/FRTCz3LwHPAzJWUUD/xOao8k4F+zuJfqeASVsc8lQocTsbU5xb oHw+ve8V0DDqaV8ggrIeUvnA/bcViFh2SgjNouC1q2N8hc8ZJVKBiBN0OCxunTxP +6+vDIfB6sqTwRvLzijPa9e9N5hnc99E/jwZaG9VUKMhfy+wRFiIf6deuAkjAIcF EkI3ZTfgap7Qq4LREvHUY17pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD3iYQ0cs Ndz6/KWAIajJ8urv56wwHwYDVR0jBBgwFoAU/Er4bnAJnaC6rC7dx30b70x1qJUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMzFFLzUzNzg0NUEwQjRC QjExRjBBMTM1MzcyMkM0RjlBRTAyL19FcjRibkFKbmFDNnJDN2R4MzBiNzB4MXFK VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0VyNGJuQUpuYUM2ckM3ZHgzMGI3MHgxcUpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE MzFFLzUzNzg0NUEwQjRCQjExRjBBMTM1MzcyMkM0RjlBRTAyL19FcjRibkFKbmFD NnJDN2R4MzBiNzB4MXFKVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHaGNKqfSHKDKpH26w627S4lJ54CNP4U4mmiz+AkR8FhtrJorZQ4FwSR UpT3t59p2TAeLgG9tw8sqG3k/LYgEtyszG79fpyQlPWWHtrehgkySgBlkkXcVdfV tYrX9UDgSrUoZgBBDv5oWB3sZYQAFu3GgU3gAJrhyT64rCvwE7LkpMyTZ1eEFZAL agWIN76q+fjf3UQWBtYJa8UoCAOVXxoBFNJCBBha3RjyfjEDSdCcAxL9fZ2xnWfc qKb+To6DHW7ncP7YzktgWtLYr8Q8oYANfBSML2AuEUn+fe0qgCVvIHB6y9Kv0k1z reBckru0QwCzrl8ziR8akBsD66FqTz4= -----END CERTIFICATE-----Generated at Sun Jan 25 12:54:05 2026 by rpki-client