This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: KfFFExL61YaJCuYmaSKP0k25VbelSHf5yTSYyLFttFU= Subject key identifier: 72:42:CB:97:1B:FE:2A:A2:38:A6:03:49:CD:4C:AE:57:FC:75:0D:A5 Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: 0137 Signing time: Sun 25 Jan 2026 03:45:27 +0000 Manifest this update: Sun 25 Jan 2026 03:45:27 +0000 Manifest next update: Sun 01 Feb 2026 03:45:27 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: 5+WTBMDmCLZcLq4QQK55f6r+Mge7ZkgObEES4BCIt3M=) 2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: 2Ea6pfyMHuu7UJGQSJfsHF3FX8pvDKiDVHdhUSz8QqA=) 3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: fSTt/OP/CCIEWdda0wFEWb+9ChFos6G9oFISz4g6itU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: Jan 25 03:45:27 2026 GMT Not After : Feb 1 03:45:27 2026 GMT Subject: CN=697591d7-1d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:87:3e:14:01:1a:de:87:12:1f:65:8f:2c:c9: 4e:3a:eb:0b:97:62:48:d6:e9:f7:db:42:9d:35:26: 2f:4b:a7:4a:50:6f:45:a3:f1:77:b6:85:ec:b9:c5: 1c:04:b1:37:c6:aa:b1:6c:1a:07:b0:7c:42:59:0c: cb:3a:b2:12:74:f9:23:78:89:b0:04:e5:43:e1:12: 4e:59:a7:b6:77:60:d7:38:7c:dc:01:15:55:1c:6d: b4:2b:23:3d:2a:07:2f:59:e6:4a:9f:54:58:bd:53: fb:35:4a:2c:e1:9b:c5:1e:fe:2c:8c:c0:39:da:c8: 4e:72:24:49:8b:ac:7a:90:8f:3e:69:80:27:5a:f8: 19:4a:d7:da:92:c2:51:0b:c5:32:dc:5e:18:c3:27: b1:9c:df:d5:df:b4:0a:2f:ce:80:17:5a:3c:69:46: fc:c9:86:40:60:49:37:fc:e4:ce:00:0b:92:40:5a: 38:9f:32:cd:ca:e3:ec:7b:27:f6:01:6d:cb:82:aa: c3:d1:f6:e6:19:5e:f6:cb:01:a5:9a:c4:28:58:d0: 52:12:6d:fc:07:c4:41:d2:4d:05:76:22:b5:ce:bd: 02:c2:75:d5:5a:28:98:ea:84:1b:58:a6:4d:ca:dd: 6e:79:28:c2:af:ca:39:2e:10:9e:ea:81:d5:20:6d: 11:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:42:CB:97:1B:FE:2A:A2:38:A6:03:49:CD:4C:AE:57:FC:75:0D:A5 X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:73:22:0b:f5:5c:64:d3:b6:3f:d2:1c:e1:36:92:b9:37:a1: bd:ab:95:5c:d9:94:91:11:ec:5e:42:8e:2a:1c:24:10:d8:fa: 49:25:37:39:88:d2:ea:07:26:2e:41:ca:c1:fc:ec:c2:50:c4: 78:fc:db:71:da:97:3c:ad:1b:b9:4b:8b:66:31:56:5e:d9:58: a1:24:aa:26:1c:5f:34:c7:df:92:2f:9e:de:bc:2a:72:1d:fc: 5b:17:dc:36:2e:2f:db:d8:50:a0:80:ed:eb:cc:d4:cf:fa:8d: 70:c6:67:46:81:d7:cc:77:a3:09:3f:4a:54:a6:06:a0:02:4a: 6e:69:9e:22:bf:4b:37:4d:bb:74:5e:e2:b3:20:63:ae:64:86: 7b:e9:41:51:81:e1:2a:59:c3:b0:da:73:56:c7:97:12:6b:5d: 89:ef:db:9a:46:94:4e:be:da:0c:47:41:cb:50:64:a1:70:62: 45:d7:11:32:09:e0:0a:dd:96:2e:87:13:ab:d0:22:b0:cf:8c: c3:a8:74:d2:2c:b2:30:50:7a:23:f5:3f:8b:01:df:1b:ee:72: b6:2c:13:57:87:43:57:95:0f:56:fd:ba:f8:1c:f4:93:7d:62: f1:4c:60:85:b1:f9:b1:5f:6c:aa:31:ea:7a:17:32:e7:c7:e7: 46:10:4b:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB RTZGRjlEMTYwHhcNMjYwMTI1MDM0NTI3WhcNMjYwMjAxMDM0NTI3WjAYMRYwFAYD VQQDDA02OTc1OTFkNy0xZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4c+FAEa3ocSH2WPLMlOOusLl2JI1un320KdNSYvS6dKUG9Fo/F3toXsucUc BLE3xqqxbBoHsHxCWQzLOrISdPkjeImwBOVD4RJOWae2d2DXOHzcARVVHG20KyM9 KgcvWeZKn1RYvVP7NUos4ZvFHv4sjMA52shOciRJi6x6kI8+aYAnWvgZStfaksJR C8Uy3F4YwyexnN/V37QKL86AF1o8aUb8yYZAYEk3/OTOAAuSQFo4nzLNyuPseyf2 AW3LgqrD0fbmGV72ywGlmsQoWNBSEm38B8RB0k0FdiK1zr0CwnXVWiiY6oQbWKZN yt1ueSjCr8o5LhCe6oHVIG0RqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJCy5cb /iqiOKYDSc1Mrlf8dQ2lMB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REZEQS9BRjJENTBFNjIzMDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlN T0RkaXMtay03UEd1Yl9uUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAocyIL9Vxk07Y/0hzhNpK5N6G9q5Vc2ZSREexeQo4qHCQQ2PpJJTc5 iNLqByYuQcrB/OzCUMR4/Ntx2pc8rRu5S4tmMVZe2VihJKomHF80x9+SL57evCpy HfxbF9w2Li/b2FCggO3rzNTP+o1wxmdGgdfMd6MJP0pUpgagAkpuaZ4iv0s3Tbt0 XuKzIGOuZIZ76UFRgeEqWcOw2nNWx5cSa12J79uaRpROvtoMR0HLUGShcGJF1xEy CeAK3ZYuhxOr0CKwz4zDqHTSLLIwUHoj9T+LAd8b7nK2LBNXh0NXlQ9W/br4HPST fWLxTGCFsfmxX2yqMep6FzLnx+dGEEvA -----END CERTIFICATE-----Generated at Sun Jan 25 09:23:24 2026 by rpki-client