This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft File: CDWHSXi6MJ7X2kZz53OdkyLyYps.mft (raw, json) Hash identifier: ReuP//MJn4ABsli+96ExuXzSr6toxAiBzYmKJ5Ca7OQ= Subject key identifier: 46:AC:03:0F:12:23:46:30:E7:FA:CE:60:7F:46:C6:49:D1:90:D7:20 Authority key identifier: 08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B Certificate issuer: /CN=A917E00F/serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft Manifest number: C0 Signing time: Sat 24 Jan 2026 22:17:25 +0000 Manifest this update: Sat 24 Jan 2026 22:17:24 +0000 Manifest next update: Sat 31 Jan 2026 22:17:24 +0000 Files and hashes: 1: CDWHSXi6MJ7X2kZz53OdkyLyYps.crl (hash: bTETknAPryh5vnFkJjm6jRD3SpbFOyCcbm6YmwkCoNY=) 2: 2DA549EAE23E11EFB267422EC4F9AE02.roa (hash: IwOryXN0CLNaxtv7IBy7ZDsktAOlHn3+ya1AEPZi2Ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Validity Not Before: Jan 24 22:17:24 2026 GMT Not After : Jan 31 22:17:24 2026 GMT Subject: CN=697544f5-0829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4e:73:1a:fb:5d:95:44:85:37:10:72:bf:af: b4:c1:55:5c:15:bd:6c:c4:27:3c:61:09:97:be:d2: 19:b4:ca:4d:ea:99:cc:c9:58:ff:6e:17:81:32:60: b6:eb:1f:88:4b:7c:da:f4:b7:21:90:b4:8e:71:2d: 3a:1f:17:65:41:93:9b:eb:ea:a3:45:00:e6:d2:c5: aa:42:89:aa:21:71:51:a2:7c:8a:de:31:a8:89:8b: 86:12:27:2d:50:55:5a:8f:bf:46:5b:b5:56:b2:a8: e1:52:0b:c6:53:84:be:52:81:cb:c4:89:49:1a:eb: 08:2e:b0:18:40:22:1f:c3:f6:6b:b8:f9:9a:e8:d1: d2:2c:23:ad:50:14:24:c8:35:2f:aa:84:4c:f6:03: 60:71:11:99:f1:1d:b0:a8:c5:21:73:b0:32:2e:60: 87:30:ef:ab:c9:0e:65:01:40:71:50:0e:2c:9c:c1: 20:bd:db:80:11:56:a7:3c:a7:f4:a4:12:56:97:da: 2f:03:cd:06:b1:4c:80:8b:9f:ec:7d:b3:11:25:34: 07:14:a6:1c:08:5e:e3:a4:0d:76:da:21:df:d0:4b: f2:54:45:63:75:91:4f:b8:94:1d:fb:9a:f0:70:93: 69:1f:21:25:ac:13:08:b7:6d:24:81:85:97:09:53: fa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AC:03:0F:12:23:46:30:E7:FA:CE:60:7F:46:C6:49:D1:90:D7:20 X509v3 Authority Key Identifier: keyid:08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0c:e0:6a:85:7e:15:ad:79:8d:b7:8b:63:ed:b4:e6:a7:4c: 31:7b:3c:ae:9b:04:5d:7c:32:04:83:6c:85:bc:ac:bd:ae:72: 2d:ad:e8:5e:3a:46:d3:2a:48:d7:dc:e2:45:6b:a5:47:28:a9: f0:19:06:2d:6a:9f:0d:2e:3e:3c:dc:ff:45:47:13:95:98:46: 89:b1:87:89:b1:02:1b:12:9f:4e:b5:24:19:00:cd:37:b1:96: 4d:13:93:16:c5:1f:dc:6e:11:3a:99:12:1d:6b:35:9b:fd:ca: 6b:a9:3a:d9:da:e4:2e:6d:ab:c5:1f:65:79:74:d6:dc:e9:f6: 14:d1:1e:13:50:f3:57:e8:c1:18:5b:af:29:90:ef:55:d1:5a: a2:76:41:f9:b4:0b:43:4f:17:02:2c:f0:b0:dd:81:25:9d:68: 5f:35:1c:fc:10:41:ef:1a:09:bd:0d:4e:a1:02:c0:e6:32:41: d9:59:e9:aa:0c:0c:cd:b1:d1:b5:19:6a:e3:ec:10:9f:95:11: cb:a3:fd:60:83:06:ca:fd:ba:6b:6d:91:c6:c2:85:eb:f2:5c: 18:78:ff:59:2f:fb:7f:aa:6a:bb:28:fd:9d:31:67:14:e3:be: 3d:07:2c:65:46:e3:9f:c6:c5:85:b3:38:f9:fc:41:22:4b:86: 8f:ba:35:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDA4MzU4NzQ5NzhCQTMwOUVEN0RBNDY3M0U3NzM5RDkz MjJGMjYyOUIwHhcNMjYwMTI0MjIxNzI0WhcNMjYwMTMxMjIxNzI0WjAYMRYwFAYD VQQDDA02OTc1NDRmNS0wODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoU5zGvtdlUSFNxByv6+0wVVcFb1sxCc8YQmXvtIZtMpN6pnMyVj/bheBMmC2 6x+IS3za9LchkLSOcS06HxdlQZOb6+qjRQDm0sWqQomqIXFRonyK3jGoiYuGEict UFVaj79GW7VWsqjhUgvGU4S+UoHLxIlJGusILrAYQCIfw/ZruPma6NHSLCOtUBQk yDUvqoRM9gNgcRGZ8R2wqMUhc7AyLmCHMO+ryQ5lAUBxUA4snMEgvduAEVanPKf0 pBJWl9ovA80GsUyAi5/sfbMRJTQHFKYcCF7jpA122iHf0EvyVEVjdZFPuJQd+5rw cJNpHyElrBMIt20kgYWXCVP6QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEasAw8S I0Yw5/rOYH9GxknRkNcgMB8GA1UdIwQYMBaAFAg1h0l4ujCe19pGc+dznZMi8mKb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi83RDJCMURGMEQ3 RDAxMUVGOUVGQzkxMERDNEY5QUUwMi9DRFdIU1hpNk1KN1gya1p6NTNPZGt5THlZ cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NEV0hTWGk2TUo3WDJrWno1M09ka3lMeVlwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi83RDJCMURGMEQ3RDAxMUVGOUVGQzkxMERDNEY5QUUwMi9DRFdIU1hpNk1K N1gya1p6NTNPZGt5THlZcHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvDOBqhX4VrXmNt4tj7bTmp0wxezyumwRdfDIEg2yFvKy9rnItrehe OkbTKkjX3OJFa6VHKKnwGQYtap8NLj483P9FRxOVmEaJsYeJsQIbEp9OtSQZAM03 sZZNE5MWxR/cbhE6mRIdazWb/cprqTrZ2uQubavFH2V5dNbc6fYU0R4TUPNX6MEY W68pkO9V0VqidkH5tAtDTxcCLPCw3YElnWhfNRz8EEHvGgm9DU6hAsDmMkHZWemq DAzNsdG1GWrj7BCflRHLo/1ggwbK/bprbZHGwoXr8lwYeP9ZL/t/qmq7KP2dMWcU 4749ByxlRuOfxsWFszj5/EEiS4aPujVV -----END CERTIFICATE-----Generated at Sun Jan 25 18:27:45 2026 by rpki-client