This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft File: 2y3U_v83CRJX9gGdUKI5MOxG4fs.mft (raw, json) Hash identifier: m1zkj5dqMCax19wUjTtIZ8CV4pykdwh2QEVc8YMeTxI= Subject key identifier: D2:CC:33:1F:3F:EF:B5:A5:D8:5C:08:76:6F:64:CC:AD:B6:DC:BB:4E Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB Certificate issuer: /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft Manifest number: 75 Signing time: Sun 25 Jan 2026 06:14:21 +0000 Manifest this update: Sun 25 Jan 2026 06:14:20 +0000 Manifest next update: Sun 01 Feb 2026 06:14:20 +0000 Files and hashes: 1: 2y3U_v83CRJX9gGdUKI5MOxG4fs.crl (hash: gS/0MMw1IHsA+CxpOnYeR9ZfK+86lJ1PQqJd7TcpSZ8=) 2: 5747D682B8C611F085BFD10DC4F9AE02.roa (hash: Vyslx5mdWdDu9jOFCamKT0Oyx0LSy+sxmYhw6Lcpxhg=) 3: 1210E96E791511F08360054EC4F9AE02.roa (hash: g6fyOzWk0MSz6GfVwk41rvcH/uuupLJzr6cnkak68f0=) 4: 3E9B5E9C791511F09DD1364EC4F9AE02.roa (hash: ryMrdROkWopWtCd24OFF7BPHTxSfEd6I/FfwS8u7uiY=) 5: 029780A8791D11F08A28C96CC4F9AE02.roa (hash: pGPmdLHfowVP5GqjVM5KRZfh3egnrEoSoQis+DjhvBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Validity Not Before: Jan 25 06:14:20 2026 GMT Not After : Feb 1 06:14:20 2026 GMT Subject: CN=6975b4bd-02cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:42:c1:81:95:06:7a:5b:42:fa:9c:28:84: 5e:62:01:e2:08:6e:c8:b8:33:e5:c0:fe:8c:7d:de: 24:53:63:31:e2:3a:fc:eb:97:fa:32:7d:5a:29:d2: b5:d2:fe:69:99:a2:6d:75:60:01:98:b1:eb:01:ab: 97:d3:fc:19:1b:c4:ac:fd:20:a7:9b:46:fb:b4:52: f5:d5:01:78:ab:3e:5f:7b:fa:18:c9:86:03:16:67: a7:b3:24:30:b4:16:9b:69:a6:fc:c9:e0:8c:c2:01: f1:d6:1a:36:5f:38:6f:07:26:e8:ce:42:45:ba:61: 1b:12:3f:af:86:1c:aa:a4:32:fb:8f:e8:07:76:60: 3c:3c:8c:8d:dd:77:ba:77:d5:29:d5:13:88:f7:00: 07:e6:da:a9:df:3e:2a:bb:a7:bb:f7:c3:10:e6:aa: 5a:0b:47:87:ae:0f:73:b7:f6:4f:76:23:31:6f:cf: 2b:32:3e:d7:22:ac:69:42:5a:1f:8c:92:be:b3:6f: d6:62:e6:0a:e2:39:1b:b6:d0:a2:37:94:33:d5:17: 60:0a:86:5f:ff:54:2c:ba:d5:16:5c:b5:fc:a2:42: 58:5b:f9:2d:68:5e:45:6f:c7:e7:82:2c:80:3e:33: 5c:fb:64:32:78:60:96:8b:83:d7:57:4a:cc:36:20: d4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CC:33:1F:3F:EF:B5:A5:D8:5C:08:76:6F:64:CC:AD:B6:DC:BB:4E X509v3 Authority Key Identifier: keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:07:65:9a:e8:68:2d:29:a0:10:28:fd:08:51:a2:0c:a5:7b: 7a:44:60:6b:d6:41:7e:7e:aa:26:a6:a7:d9:f4:91:4b:da:ef: ff:a9:f6:c4:b2:da:8e:7d:f5:a9:d0:32:03:12:dc:06:8b:15: 70:1e:57:26:33:46:27:12:88:68:98:4d:55:34:e9:de:d3:b3: eb:9a:c7:8c:f2:37:b9:3b:67:f6:1b:6f:d3:ce:00:41:b4:f7: 99:b4:2b:e0:17:59:88:f2:ec:f1:fa:66:06:f2:ac:03:51:87: c3:be:eb:35:5c:11:8a:93:0e:cd:45:68:51:56:8c:01:2e:45: 86:e0:56:4e:45:27:5f:cc:75:1f:a7:9c:d1:e9:1d:6b:18:8e: b9:80:9e:27:ed:6e:d7:2d:22:b6:1f:65:97:33:e7:9c:4b:b3: 7f:f3:31:3d:46:4f:05:32:76:66:ed:8c:76:23:94:4d:73:de: 8c:23:5a:f8:c9:93:19:64:61:f4:1f:e4:46:5d:cd:a5:0a:58: 32:45:5d:99:66:94:e9:50:72:db:31:dc:c4:b7:26:5c:4d:09: 23:62:c3:93:db:f3:e8:99:42:86:d8:5b:de:0a:fe:bc:68:1b: 4b:c0:70:ad:a1:ca:84:83:f0:57:86:c2:0e:ee:04:96:26:28: a0:1e:2d:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YxMTYxMTAvBgNVBAUTKERCMkRENEZFRkYzNzA5MTI1N0Y2MDE5RDUwQTIzOTMw RUM0NkUxRkIwHhcNMjYwMTI1MDYxNDIwWhcNMjYwMjAxMDYxNDIwWjAYMRYwFAYD VQQDDA02OTc1YjRiZC0wMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9ZCwYGVBnpbQvqcKIReYgHiCG7IuDPlwP6Mfd4kU2Mx4jr865f6Mn1aKdK1 0v5pmaJtdWABmLHrAauX0/wZG8Ss/SCnm0b7tFL11QF4qz5fe/oYyYYDFmensyQw tBabaab8yeCMwgHx1ho2XzhvBybozkJFumEbEj+vhhyqpDL7j+gHdmA8PIyN3Xe6 d9Up1ROI9wAH5tqp3z4qu6e798MQ5qpaC0eHrg9zt/ZPdiMxb88rMj7XIqxpQlof jJK+s2/WYuYK4jkbttCiN5Qz1RdgCoZf/1QsutUWXLX8okJYW/ktaF5Fb8fngiyA PjNc+2QyeGCWi4PXV0rMNiDUjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLMMx8/ 77Wl2FwIdm9kzK223LtOMB8GA1UdIwQYMBaAFNst1P7/NwkSV/YBnVCiOTDsRuH7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjExNi84QkNGRkYwNjZF REUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yeTNVX3Y4M0NSSlg5Z0dkVUtJNU1PeEc0 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5M1VfdjgzQ1JKWDlnR2RVS0k1TU94RzRmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjExNi84QkNGRkYwNjZFREUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yeTNVX3Y4M0NS Slg5Z0dkVUtJNU1PeEc0ZnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsB2Wa6GgtKaAQKP0IUaIMpXt6RGBr1kF+fqompqfZ9JFL2u//qfbE stqOffWp0DIDEtwGixVwHlcmM0YnEohomE1VNOne07PrmseM8je5O2f2G2/TzgBB tPeZtCvgF1mI8uzx+mYG8qwDUYfDvus1XBGKkw7NRWhRVowBLkWG4FZORSdfzHUf p5zR6R1rGI65gJ4n7W7XLSK2H2WXM+ecS7N/8zE9Rk8FMnZm7Yx2I5RNc96MI1r4 yZMZZGH0H+RGXc2lClgyRV2ZZpTpUHLbMdzEtyZcTQkjYsOT2/PomUKG2FveCv68 aBtLwHCtocqEg/BXhsIO7gSWJiigHi2M -----END CERTIFICATE-----Generated at Sun Jan 25 14:01:15 2026 by rpki-client