This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft File: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft (raw, json) Hash identifier: dx3G2YlQrEKhjPuHhp7BgBjio2DUKSCnfre4pzp72aI= Subject key identifier: D5:B5:E4:03:76:6D:7E:D7:E0:B6:99:35:99:5E:21:74:D3:B6:49:9D Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2 Certificate issuer: /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2 Certificate serial: 35AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft Manifest number: 355E Signing time: Sat 24 Jan 2026 14:41:43 +0000 Manifest this update: Sat 24 Jan 2026 14:41:43 +0000 Manifest next update: Sat 31 Jan 2026 14:41:43 +0000 Files and hashes: 1: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl (hash: w/ji4unR06XCZ6PjzW6O0zvTKsRXCkJcE5Gsxd/Oj8Q=) 2: 677C9A56DFD611F0B4BB7BAF516F56BC.roa (hash: 6lJtKi23LkePthTqcjWfYNBLjiWhHMrFyxcO0AXa4yU=) 3: A88A36D0003A11EEB8430127C4F9AE02.roa (hash: dGU6CJvrS/pXM1BPExEcoLwBj3XVO3Qw6BjkQ3c5uZ8=) 4: 187F92966F0911ED8A7BD268C4F9AE02.roa (hash: d/7DMtiXfQBwX+8qOXb96W9MkSduRe+bpauiOZ+JfzU=) 5: 80B30FA48F5611EA9C04912BC4F9AE02.roa (hash: fT98Wy1t5VScFWJuQupk2LhedSGkV+ojkzEZelCkDWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13739 (0x35ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2 Validity Not Before: Jan 24 14:41:43 2026 GMT Not After : Jan 31 14:41:43 2026 GMT Subject: CN=6974da27-3f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e4:bb:61:3c:19:ff:d1:b5:ad:f1:1a:2b:1e: 0a:18:c6:72:19:d6:ec:8a:fd:d6:a6:45:d6:1a:45: 7c:7b:a6:52:c4:99:5e:54:e5:a1:dd:48:d3:53:61: ad:15:f0:aa:1f:99:c6:c2:6e:2c:57:e7:b3:ac:e1: 0e:a8:66:ab:13:af:cc:df:68:1c:57:8e:39:17:30: 80:29:dc:33:c8:24:bd:fb:d7:55:68:9b:e6:9f:7f: 96:96:b7:ab:1a:ee:e6:5e:bd:60:d4:3c:63:f0:3b: f4:d7:0b:e0:7a:6a:ff:b5:19:10:d3:eb:12:e0:4c: b1:4f:f2:f6:7c:11:c0:73:09:c5:a3:bc:f4:a4:2a: d6:b0:f8:56:bf:09:13:93:8a:9b:b6:fc:22:1f:c2: d2:cf:80:7c:97:21:e0:ab:77:bf:56:09:17:ee:13: 31:08:c1:69:cc:5e:f0:f5:df:86:fd:ae:d6:a2:c8: a4:49:77:10:e8:98:bf:6b:63:00:ac:36:13:eb:a5: c6:bd:05:0d:e5:c7:00:4b:ab:76:fa:ad:d2:49:06: c3:ec:0d:0a:b4:66:23:f6:5c:fd:df:06:f2:24:22: 7a:ef:fe:e4:e8:dc:84:7f:26:83:8d:e1:9f:1f:8f: a4:e9:cb:29:a0:c2:0a:97:38:f2:4b:5a:33:cb:69: 5e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B5:E4:03:76:6D:7E:D7:E0:B6:99:35:99:5E:21:74:D3:B6:49:9D X509v3 Authority Key Identifier: keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:35:f7:ce:43:ac:c9:d8:00:ad:43:c5:73:05:8b:8b:4f:ed: be:38:fc:12:ae:53:83:78:ad:30:46:f1:5a:9b:83:94:20:1a: 4e:bf:af:38:af:41:dc:bc:9f:48:e9:1a:b1:26:96:15:cb:a8: a9:00:78:a2:29:b5:d8:d6:81:85:e8:ad:ae:16:79:c0:47:26: 7b:05:1e:92:4f:4b:19:08:b4:bf:c2:84:c8:d5:55:ed:33:a2: ae:f3:d0:67:31:4b:0c:2e:1c:76:a9:c1:c3:d3:fa:83:2f:db: 00:7a:30:dd:bb:10:a7:08:22:c8:eb:81:bd:a3:1a:14:6d:ca: 33:e9:a0:0b:54:40:a7:c8:0f:e8:06:75:d5:f3:87:9b:8c:c2: 8b:f8:da:cc:c4:d9:2f:c9:d9:3e:e3:70:f7:8b:e8:dd:43:fc: 16:97:71:6b:f5:40:89:d2:1d:55:48:33:f2:1c:0a:47:13:5c: 2d:76:4b:5e:b5:d3:04:82:bd:38:90:6e:0e:c7:58:43:24:c5: ca:2c:ff:6f:af:5e:07:b8:e1:21:de:cd:bb:0d:56:cf:95:0b: da:f9:1a:be:26:72:17:1d:72:e7:7c:51:3b:4d:62:0a:78:18: 20:a7:8b:88:dd:55:17:1c:78:58:f7:7a:bb:ab:76:69:73:ec: 0a:73:d5:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQjAxMTAvBgNVBAUTKDEzMjQwNDMwMjFCQjQ1RDdGRjY2RjIwQUZDNjgzOTM0 MzEzMEMzRjIwHhcNMjYwMTI0MTQ0MTQzWhcNMjYwMTMxMTQ0MTQzWjAYMRYwFAYD VQQDDA02OTc0ZGEyNy0zZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+S7YTwZ/9G1rfEaKx4KGMZyGdbsiv3WpkXWGkV8e6ZSxJleVOWh3UjTU2Gt FfCqH5nGwm4sV+ezrOEOqGarE6/M32gcV445FzCAKdwzyCS9+9dVaJvmn3+Wlrer Gu7mXr1g1Dxj8Dv01wvgemr/tRkQ0+sS4EyxT/L2fBHAcwnFo7z0pCrWsPhWvwkT k4qbtvwiH8LSz4B8lyHgq3e/VgkX7hMxCMFpzF7w9d+G/a7WosikSXcQ6Ji/a2MA rDYT66XGvQUN5ccAS6t2+q3SSQbD7A0KtGYj9lz93wbyJCJ67/7k6NyEfyaDjeGf H4+k6cspoMIKlzjyS1ozy2leuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNW15AN2 bX7X4LaZNZleIXTTtkmdMB8GA1UdIwQYMBaAFBMkBDAhu0XX/2byCvxoOTQxMMPy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCMC9FNTU3QzAwMDFE OTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1JkZl9adklLX0dnNU5ERXd3 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V5UUVNQ0c3UmRmX1p2SUtfR2c1TkRFd3dfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCMC9FNTU3QzAwMDFEOTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1Jk Zl9adklLX0dnNU5ERXd3X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjNffOQ6zJ2ACtQ8VzBYuLT+2+OPwSrlODeK0wRvFam4OUIBpOv684 r0HcvJ9I6RqxJpYVy6ipAHiiKbXY1oGF6K2uFnnARyZ7BR6ST0sZCLS/woTI1VXt M6Ku89BnMUsMLhx2qcHD0/qDL9sAejDduxCnCCLI64G9oxoUbcoz6aALVECnyA/o BnXV84ebjMKL+NrMxNkvydk+43D3i+jdQ/wWl3Fr9UCJ0h1VSDPyHApHE1wtdkte tdMEgr04kG4Ox1hDJMXKLP9vr14HuOEh3s27DVbPlQva+Rq+JnIXHXLnfFE7TWIK eBggp4uI3VUXHHhY93q7q3Zpc+wKc9U5 -----END CERTIFICATE-----Generated at Sun Jan 25 10:57:36 2026 by rpki-client