This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json) Hash identifier: /ZkZXNKp6bwIlBMs24ZZVXZvuLoaR323V+yY1JeoxPQ= Subject key identifier: 23:21:75:71:09:7B:4C:5F:19:FD:DE:32:6F:73:D8:4F:AE:48:12:6A Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 0457 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft Manifest number: 0440 Signing time: Sat 24 Jan 2026 23:29:36 +0000 Manifest this update: Sat 24 Jan 2026 23:29:35 +0000 Manifest next update: Sat 31 Jan 2026 23:29:35 +0000 Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: ZWlKgVSb2ekioq2/b5eTD6qnD5BdAkHono/wM+cUmHI=) 2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: pCfOqKvpPAi6jCM2mIS9Dx/Yc8Tm67F8AtZbfbW0m70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1111 (0x457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: Jan 24 23:29:35 2026 GMT Not After : Jan 31 23:29:35 2026 GMT Subject: CN=697555e0-d6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f3:4e:c7:4a:8e:73:f3:cd:81:ea:53:a6:b5: 06:d0:8f:1f:7c:b2:7f:e3:79:7a:a1:15:8a:99:76: e8:99:b2:b7:67:7e:2e:6f:2b:50:de:61:ec:fe:47: 52:69:92:08:6a:3e:62:cf:87:36:41:e0:7e:55:c5: c0:01:34:6a:7b:1d:e9:ee:af:33:26:88:ac:c5:a6: 79:57:8d:d0:d9:04:99:dd:8f:f8:2e:c8:5e:a5:1d: 7b:58:7d:b4:6e:b0:52:99:67:1b:86:f2:86:f9:02: 1d:23:93:e8:a3:b1:e2:bc:2a:d1:10:6a:20:df:ab: 8b:d3:c2:45:d5:c6:f5:8e:24:e6:06:b2:8b:e1:02: fc:88:62:62:a1:e5:e5:42:b0:32:88:03:88:c1:40: 0b:b2:2c:c2:d1:da:93:c9:ae:da:34:61:60:57:e4: 24:0a:1f:79:d3:9b:b6:fa:e3:fd:34:74:50:1f:7f: e3:b5:5e:2d:e6:13:fb:84:1e:41:74:51:ee:f6:c3: 24:33:6e:a1:da:6a:b4:0b:11:bd:57:7c:d3:76:3d: 28:dd:39:5d:b8:bc:b1:2d:13:9f:84:a0:6d:26:b5: 62:38:2a:63:21:9b:03:33:6a:67:71:bc:14:bb:a1: 53:05:79:e4:8b:60:44:43:68:4f:0c:d1:d2:c3:c0: a7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:21:75:71:09:7B:4C:5F:19:FD:DE:32:6F:73:D8:4F:AE:48:12:6A X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:2e:ec:ba:bd:49:26:35:7f:ce:9c:2b:fe:de:1f:c2:9a:3a: 57:f2:e3:b8:ba:49:d8:e0:87:d7:95:e6:37:ab:46:9e:c5:3c: 91:e9:5b:e8:7f:61:90:11:b0:0f:b1:e4:a9:58:b3:01:f8:b7: 37:92:dd:2e:bf:d7:22:98:f7:52:d5:37:4a:1b:31:04:79:81: aa:35:3e:3c:62:16:5d:95:e9:10:91:a8:ab:9a:73:fe:32:d7: 0c:33:62:77:be:d5:b1:9a:4e:96:8d:bd:27:2b:39:6d:f6:1e: 57:18:11:99:b0:c5:94:b7:af:ca:18:a8:84:e8:cd:3e:58:9a: 58:5e:3e:36:fc:c8:22:63:16:ec:69:e3:1f:dc:d0:78:a6:e0: 96:8c:a7:03:25:5e:58:60:d1:4a:66:e3:1c:4d:c9:aa:3e:f1: 54:46:18:68:79:43:b1:0c:2c:b2:fa:f6:5a:4b:fd:c7:d8:fc: b8:e8:a1:c6:95:51:79:50:dc:ba:bf:35:a3:f0:2c:90:7b:40: 3c:63:dd:cd:66:d8:88:2d:27:44:6a:68:d9:fb:9f:40:63:e9: 11:08:8d:1c:b2:c5:d4:6d:c7:14:76:34:67:74:f3:61:82:40: bb:b7:4c:07:e4:46:d2:4f:fa:9c:ad:e0:c1:1c:7f:f1:93:85: 86:fd:b0:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjYwMTI0MjMyOTM1WhcNMjYwMTMxMjMyOTM1WjAYMRYwFAYD VQQDDA02OTc1NTVlMC1kNmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfNOx0qOc/PNgepTprUG0I8ffLJ/43l6oRWKmXbombK3Z34ubytQ3mHs/kdS aZIIaj5iz4c2QeB+VcXAATRqex3p7q8zJoisxaZ5V43Q2QSZ3Y/4LshepR17WH20 brBSmWcbhvKG+QIdI5Poo7HivCrREGog36uL08JF1cb1jiTmBrKL4QL8iGJioeXl QrAyiAOIwUALsizC0dqTya7aNGFgV+QkCh9505u2+uP9NHRQH3/jtV4t5hP7hB5B dFHu9sMkM26h2mq0CxG9V3zTdj0o3TlduLyxLROfhKBtJrViOCpjIZsDM2pncbwU u6FTBXnki2BEQ2hPDNHSw8Cn8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMhdXEJ e0xfGf3eMm9z2E+uSBJqMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+Luy6vUkmNX/OnCv+3h/CmjpX8uO4uknY4IfXleY3q0aexTyR6Vvo f2GQEbAPseSpWLMB+Lc3kt0uv9cimPdS1TdKGzEEeYGqNT48YhZdlekQkairmnP+ MtcMM2J3vtWxmk6Wjb0nKzlt9h5XGBGZsMWUt6/KGKiE6M0+WJpYXj42/MgiYxbs aeMf3NB4puCWjKcDJV5YYNFKZuMcTcmqPvFURhhoeUOxDCyy+vZaS/3H2Py46KHG lVF5UNy6vzWj8CyQe0A8Y93NZtiILSdEamjZ+59AY+kRCI0cssXUbccUdjRndPNh gkC7t0wH5EbST/qcreDBHH/xk4WG/bBf -----END CERTIFICATE-----Generated at Sun Jan 25 17:03:30 2026 by rpki-client