This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json) Hash identifier: kK60IWeZKvikBrZ+o0qDvBHLWvBCBlGH3b5NcHG26zs= Subject key identifier: FD:CC:9E:DA:CB:F2:6C:70:2A:9D:CD:41:2E:3A:3F:58:44:71:21:69 Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Certificate serial: 0CD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft Manifest number: 0CCA Signing time: Sat 24 Jan 2026 17:51:28 +0000 Manifest this update: Sat 24 Jan 2026 17:51:27 +0000 Manifest next update: Sat 31 Jan 2026 17:51:27 +0000 Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: xogsJ/m7m0AXvM46sA8mg3j85R65tvkdIsiWRGdXzag=) 2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: wAuAiXUS4UGi4W921WWjTF0DUuwpdozfz9mWVXTfnck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3283 (0xcd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Validity Not Before: Jan 24 17:51:27 2026 GMT Not After : Jan 31 17:51:27 2026 GMT Subject: CN=697506a0-24fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:f0:5b:91:ea:b6:e0:43:7f:64:57:83:4a: 1a:ab:ae:4c:76:50:1a:55:0d:28:c5:ce:c0:7a:99: 48:ca:a1:32:c2:23:b7:9e:6f:47:c2:03:61:6d:26: 73:70:4f:b3:43:c7:85:f8:0a:3c:22:7d:9b:38:3d: 9c:c7:86:41:4c:74:de:1e:62:b4:83:fb:c5:b8:c5: dd:fd:f8:9d:6d:01:bb:ee:c0:d2:aa:06:36:a5:83: 88:d5:58:f2:ff:16:a9:bb:74:a1:30:49:d8:82:f4: 29:d8:5e:be:af:b2:e0:96:b2:5a:a6:d8:c6:a7:84: 38:1f:ff:83:7e:09:cb:02:64:4e:ef:6b:2f:13:c8: df:44:ee:09:67:93:bb:a1:b8:fd:dd:39:36:f0:97: 3e:91:64:8e:f5:0a:59:93:02:bc:e9:a6:c3:04:1e: f6:7f:0a:26:a9:6e:ef:ba:86:de:08:e0:10:90:d3: 2b:93:a2:c1:24:df:7f:48:32:ff:3f:95:46:3d:f8: 7e:82:a8:bf:24:ff:8b:bc:bd:4f:dd:fb:9a:39:1c: 0c:61:51:68:0e:59:76:d6:e7:dc:e5:76:47:5a:04: 65:5e:39:f6:9e:34:da:34:82:43:3b:21:ea:3d:92: 79:e7:a3:67:42:d9:c8:ea:5c:3e:d4:4b:95:09:2d: 35:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CC:9E:DA:CB:F2:6C:70:2A:9D:CD:41:2E:3A:3F:58:44:71:21:69 X509v3 Authority Key Identifier: keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:32:23:81:da:e9:83:e9:f8:af:b5:5c:3a:ce:5f:65:53:ad: 5a:90:fb:67:67:f5:c6:fd:78:c9:65:7b:83:ae:5d:98:a2:c5: d5:5d:1b:18:81:ec:b7:53:a4:99:9f:6d:2c:5f:c9:22:d0:4a: 24:b0:04:0b:87:7e:7d:08:1e:2b:13:e4:d2:43:3a:c5:03:a6: 69:25:24:78:f2:65:e9:fc:e6:33:9e:9c:99:b5:e3:c4:35:17: 15:4f:0a:b9:b0:91:1d:84:4e:f8:73:8f:ba:7f:1b:19:f2:67: 75:94:96:8d:c1:76:28:f8:bc:cf:ea:38:b0:de:6b:29:9c:22: 0b:09:49:b9:17:52:4e:e8:39:62:ec:16:9c:57:18:74:ba:e6: 63:e5:65:58:9f:1e:14:32:18:7e:83:d1:4b:68:2a:ca:a4:7b: 3f:cc:ca:c6:d2:29:e4:47:73:5e:cb:3d:4c:70:c3:e0:1e:9b: 3e:c4:24:1a:a2:1c:56:34:8c:95:e7:70:6a:df:18:4f:c5:bf: 6e:8b:c3:99:ee:f5:4d:8c:f6:b3:7a:71:c0:4e:6c:39:a7:ed: 19:b8:ff:0f:44:35:fa:c1:20:a3:e9:b2:78:38:54:66:81:90: 80:35:53:7c:c5:0c:d5:76:5c:92:ab:64:a4:a8:da:65:ea:8a: e4:fd:07:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy M0Q0RjVBOUUwHhcNMjYwMTI0MTc1MTI3WhcNMjYwMTMxMTc1MTI3WjAYMRYwFAYD VQQDDA02OTc1MDZhMC0yNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdzwW5HqtuBDf2RXg0oaq65MdlAaVQ0oxc7AeplIyqEywiO3nm9HwgNhbSZz cE+zQ8eF+Ao8In2bOD2cx4ZBTHTeHmK0g/vFuMXd/fidbQG77sDSqgY2pYOI1Vjy /xapu3ShMEnYgvQp2F6+r7LglrJaptjGp4Q4H/+DfgnLAmRO72svE8jfRO4JZ5O7 obj93Tk28Jc+kWSO9QpZkwK86abDBB72fwomqW7vuobeCOAQkNMrk6LBJN9/SDL/ P5VGPfh+gqi/JP+LvL1P3fuaORwMYVFoDll21ufc5XZHWgRlXjn2njTaNIJDOyHq PZJ556NnQtnI6lw+1EuVCS01IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3MntrL 8mxwKp3NQS46P1hEcSFpMB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs RC1HTmdfZUNWRndqMVBXcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHMiOB2umD6fivtVw6zl9lU61akPtnZ/XG/XjJZXuDrl2YosXVXRsY gey3U6SZn20sX8ki0EoksAQLh359CB4rE+TSQzrFA6ZpJSR48mXp/OYznpyZtePE NRcVTwq5sJEdhE74c4+6fxsZ8md1lJaNwXYo+LzP6jiw3mspnCILCUm5F1JO6Dli 7BacVxh0uuZj5WVYnx4UMhh+g9FLaCrKpHs/zMrG0inkR3Neyz1McMPgHps+xCQa ohxWNIyV53Bq3xhPxb9ui8OZ7vVNjPazenHATmw5p+0ZuP8PRDX6wSCj6bJ4OFRm gZCANVN8xQzVdlySq2SkqNpl6ork/QdX -----END CERTIFICATE-----Generated at Sun Jan 25 02:51:09 2026 by rpki-client