This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft File: bBH4O5qMvdIVMt3w6mHek4jRPGs.mft (raw, json) Hash identifier: pjT4NiRsNxTaKmAQ3wpcrO99D13Tm2dApISvY/Y3WjA= Subject key identifier: F1:69:F4:42:AD:7E:39:6C:E6:F7:52:E9:00:85:79:48:CD:27:8E:2C Authority key identifier: 6C:11:F8:3B:9A:8C:BD:D2:15:32:DD:F0:EA:61:DE:93:88:D1:3C:6B Certificate issuer: /CN=A917D958/serialNumber=6C11F83B9A8CBDD21532DDF0EA61DE9388D13C6B Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft Manifest number: D4 Signing time: Sun 25 Jan 2026 04:53:48 +0000 Manifest this update: Sun 25 Jan 2026 04:53:48 +0000 Manifest next update: Sun 01 Feb 2026 04:53:48 +0000 Files and hashes: 1: bBH4O5qMvdIVMt3w6mHek4jRPGs.crl (hash: LSdNtxkiL59fsvsMOMjjRdJGEg/eraBpMSmMEn2befk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.crl rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=6C11F83B9A8CBDD21532DDF0EA61DE9388D13C6B Validity Not Before: Jan 25 04:53:48 2026 GMT Not After : Feb 1 04:53:48 2026 GMT Subject: CN=6975a1dc-87ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d4:a7:93:7f:57:05:58:f0:1d:a7:d6:0f:f2: a7:4a:44:65:94:f9:be:c3:b3:4c:2d:fb:d6:55:4c: ac:f2:c6:a0:71:8f:17:62:9e:a6:5e:c9:b0:4e:df: bf:ac:1f:0a:b4:ea:c1:71:10:53:8c:f3:58:4a:56: df:77:13:1a:ed:aa:2f:7d:8d:84:fe:03:49:2e:79: 24:1d:7b:53:68:ce:cd:8b:2d:d3:83:ef:38:ba:51: 4c:f1:62:07:58:a7:71:88:bd:f5:79:21:72:7a:f6: c3:76:2c:c4:13:f7:e4:31:28:03:63:bd:f9:36:05: 80:fc:66:98:40:5a:70:4b:bb:b2:44:37:f6:f0:1c: 05:8d:94:17:f5:3b:52:47:0b:6b:28:64:8b:02:78: af:01:91:e9:3c:8b:a1:a3:c0:f1:8c:06:97:bc:6d: 26:24:74:a8:ba:91:4b:63:09:44:b1:da:73:b7:20: 68:23:db:2e:4a:0e:56:f7:60:78:f3:26:94:30:fc: 07:01:7c:d7:16:c6:fe:dd:49:8b:3e:ca:3b:26:b0: d6:44:36:59:8a:e3:df:30:a6:22:67:48:13:e6:b1: 02:03:be:60:79:cb:fd:0b:f3:51:52:f5:26:98:49: e8:dd:c6:4c:c6:d6:ec:90:5d:77:4a:24:87:45:0c: 82:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:69:F4:42:AD:7E:39:6C:E6:F7:52:E9:00:85:79:48:CD:27:8E:2C X509v3 Authority Key Identifier: keyid:6C:11:F8:3B:9A:8C:BD:D2:15:32:DD:F0:EA:61:DE:93:88:D1:3C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:3d:c3:b6:b0:c3:ac:70:9b:c2:7c:c7:0b:bb:f4:31:67:c7: cb:bd:40:e6:1a:44:a8:28:5d:81:63:44:b9:1b:d0:4e:98:ba: 0c:17:2b:7a:35:4b:d7:db:d8:9a:c7:90:8a:ce:e9:aa:40:b3: 98:05:12:ac:bf:57:7c:3c:90:ce:73:ea:53:a3:46:57:90:37: f0:8f:79:67:0a:69:37:e1:c8:08:ce:3c:5a:e2:96:22:fc:7e: 49:eb:c0:89:ca:8c:2a:a2:d3:f5:f2:54:22:d3:1e:00:1c:50: 3b:66:4e:3e:de:eb:cc:d3:52:0a:03:df:54:30:d9:1b:a2:60: d4:91:3b:bc:91:ef:34:11:5c:9c:87:1e:a5:18:4b:d8:61:38: 33:c1:ff:49:a1:41:2d:6a:8e:65:a7:f6:8a:2c:cd:ed:c4:56: 66:d8:e0:4b:7f:ca:40:12:20:cb:0d:d8:0c:b4:81:61:de:f1: a8:b7:ec:b4:f7:06:f3:68:31:92:e6:3a:96:35:70:70:a7:60: 48:61:cf:6d:f3:c3:f2:11:b9:fa:91:cf:a8:4a:47:f7:20:b3: 1d:1b:52:8e:ed:4f:f2:4d:32:f2:56:9e:8e:66:92:63:26:f0: 2f:cd:72:77:85:d2:4f:a4:b6:58:34:50:68:28:a1:b4:3d:bc: aa:c9:09:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5NTgxMTAvBgNVBAUTKDZDMTFGODNCOUE4Q0JERDIxNTMyRERGMEVBNjFERTkz ODhEMTNDNkIwHhcNMjYwMTI1MDQ1MzQ4WhcNMjYwMjAxMDQ1MzQ4WjAYMRYwFAYD VQQDDA02OTc1YTFkYy04N2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dSnk39XBVjwHafWD/KnSkRllPm+w7NMLfvWVUys8sagcY8XYp6mXsmwTt+/ rB8KtOrBcRBTjPNYSlbfdxMa7aovfY2E/gNJLnkkHXtTaM7Niy3Tg+84ulFM8WIH WKdxiL31eSFyevbDdizEE/fkMSgDY735NgWA/GaYQFpwS7uyRDf28BwFjZQX9TtS RwtrKGSLAnivAZHpPIuho8DxjAaXvG0mJHSoupFLYwlEsdpztyBoI9suSg5W92B4 8yaUMPwHAXzXFsb+3UmLPso7JrDWRDZZiuPfMKYiZ0gT5rECA75gecv9C/NRUvUm mEno3cZMxtbskF13SiSHRQyCdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFp9EKt fjls5vdS6QCFeUjNJ44sMB8GA1UdIwQYMBaAFGwR+DuajL3SFTLd8Oph3pOI0Txr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDk1OC82RjYyODM4OEIz OUIxMUVGODBGNjQzNUVDNEY5QUUwMi9iQkg0TzVxTXZkSVZNdDN3Nm1IZWs0alJQ R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCSDRPNXFNdmRJVk10M3c2bUhlazRqUlBHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDk1OC82RjYyODM4OEIzOUIxMUVGODBGNjQzNUVDNEY5QUUwMi9iQkg0TzVxTXZk SVZNdDN3Nm1IZWs0alJQR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXPcO2sMOscJvCfMcLu/QxZ8fLvUDmGkSoKF2BY0S5G9BOmLoMFyt6 NUvX29iax5CKzumqQLOYBRKsv1d8PJDOc+pTo0ZXkDfwj3lnCmk34cgIzjxa4pYi /H5J68CJyowqotP18lQi0x4AHFA7Zk4+3uvM01IKA99UMNkbomDUkTu8ke80EVyc hx6lGEvYYTgzwf9JoUEtao5lp/aKLM3txFZm2OBLf8pAEiDLDdgMtIFh3vGot+y0 9wbzaDGS5jqWNXBwp2BIYc9t88PyEbn6kc+oSkf3ILMdG1KO7U/yTTLyVp6OZpJj JvAvzXJ3hdJPpLZYNFBoKKG0PbyqyQk6 -----END CERTIFICATE-----Generated at Sun Jan 25 20:10:46 2026 by rpki-client