This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft File: I2o4zV7FL3Doi4BtcV63sELNfr8.mft (raw, json) Hash identifier: SK/4vq2NUUv3te6dkHo8IbPalA3SKIgGocBjybnht5o= Subject key identifier: 9D:58:05:88:27:0F:E5:80:C6:A5:0E:15:4E:F5:12:25:DD:BE:79:70 Authority key identifier: 23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF Certificate issuer: /CN=A918120B/serialNumber=236A38CD5EC52F70E88B806D715EB7B042CD7EBF Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft Manifest number: 15 Signing time: Sun 25 Jan 2026 07:02:01 +0000 Manifest this update: Sun 25 Jan 2026 07:02:00 +0000 Manifest next update: Sun 01 Feb 2026 07:02:00 +0000 Files and hashes: 1: I2o4zV7FL3Doi4BtcV63sELNfr8.crl (hash: to78Uqvhlx7kPFrW8DRXxUiMjK+i9BTUpsXoeA4Vong=) 2: 4C5380C8E0B211F084C35B824B6F56BC.roa (hash: SE2/WD+koqRbIH32USZFh08PVySdtJ4g1P4mAg0qHDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.crl rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918120B, serialNumber=236A38CD5EC52F70E88B806D715EB7B042CD7EBF Validity Not Before: Jan 25 07:02:00 2026 GMT Not After : Feb 1 07:02:00 2026 GMT Subject: CN=6975bfe8-d19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:cb:4b:7a:81:62:ef:81:d7:9e:a1:91:27: 27:2d:ce:09:a8:0a:2b:09:3a:26:f9:a5:3d:e0:ec: b7:19:ae:f4:31:9f:2a:17:a3:06:39:ad:3d:27:39: ab:44:ad:a0:1c:46:ab:7b:0b:85:35:fd:5d:b7:04: 59:04:1a:bb:42:22:56:56:2c:91:1d:30:05:19:ac: 7f:46:00:66:00:67:d2:0a:55:6c:da:ca:bc:4d:ff: 7b:24:e4:62:34:10:38:18:c8:c4:0a:c4:a7:7b:e2: 12:50:ed:63:20:0e:68:5f:54:fe:d1:f1:01:66:4b: ea:6c:aa:b2:e4:16:77:4c:c2:c8:8d:2c:ea:ba:f7: dd:46:3d:fa:df:8e:10:e8:a6:48:86:46:d4:5f:63: 21:44:34:72:da:de:24:0a:22:cb:4d:69:2e:65:f9: 81:f9:4d:ac:5e:f0:95:0a:14:09:f8:26:77:2b:6b: cb:b2:0b:e5:d5:89:9e:b3:55:6a:f1:78:da:fb:6a: 66:66:d5:24:1a:27:2d:c1:f1:7e:57:91:da:f3:75: 44:34:e0:ed:48:3e:0c:b3:af:50:7b:4f:75:b9:dc: d0:63:a4:7a:d7:81:8e:78:51:cf:b2:83:e6:88:ea: 06:7f:f2:e9:2b:f6:72:94:56:57:ad:61:dd:13:59: ec:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:58:05:88:27:0F:E5:80:C6:A5:0E:15:4E:F5:12:25:DD:BE:79:70 X509v3 Authority Key Identifier: keyid:23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:67:91:a7:02:be:c5:52:46:60:a3:de:26:bd:ee:eb:1c:3c: 1b:bb:e3:2a:da:fe:34:da:c0:1c:25:f8:40:7b:c8:09:fd:1c: cc:f0:33:2b:67:0c:8c:9b:b3:71:fa:8b:2a:2e:7b:95:59:20: c0:04:23:58:37:f0:da:ec:82:a6:30:13:c1:cc:83:55:6b:44: 34:4b:b2:16:e2:6c:fa:35:91:4b:b1:6b:df:cf:2a:51:c0:86: ce:f5:fe:27:7c:82:3e:d3:f8:11:b1:57:51:4b:71:91:de:40: 09:fa:54:d8:01:09:e3:39:00:1d:2b:f9:04:4c:6d:1a:33:ba: 0e:c3:ec:82:70:f8:41:1d:84:19:ad:f2:3a:aa:e0:d6:e2:41: 90:19:c4:d5:ec:64:a4:38:ee:5d:cb:a6:31:d5:fd:4f:ce:c6: 9f:d7:41:80:d7:a3:68:0e:ae:da:4b:3c:00:6d:fe:12:19:e9: f9:c2:97:cd:3b:3a:65:e3:a5:51:03:58:bd:f0:f0:ca:c6:df: 30:87:08:59:40:2a:56:b2:50:ea:df:e2:9a:34:fa:4f:8b:c4: d8:11:a3:5a:76:51:04:16:fe:93:9b:20:c9:13:41:29:2c:76: fc:3e:8d:44:7a:08:7d:9d:6b:a3:fe:ba:77:ac:90:8d:45:4f: 73:67:91:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE4 MTIwQjExMC8GA1UEBRMoMjM2QTM4Q0Q1RUM1MkY3MEU4OEI4MDZENzE1RUI3QjA0 MkNEN0VCRjAeFw0yNjAxMjUwNzAyMDBaFw0yNjAyMDEwNzAyMDBaMBgxFjAUBgNV BAMMDTY5NzViZmU4LWQxOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwq8tLeoFi74HXnqGRJyctzgmoCisJOib5pT3g7LcZrvQxnyoXowY5rT0nOatE raAcRqt7C4U1/V23BFkEGrtCIlZWLJEdMAUZrH9GAGYAZ9IKVWzayrxN/3sk5GI0 EDgYyMQKxKd74hJQ7WMgDmhfVP7R8QFmS+psqrLkFndMwsiNLOq6991GPfrfjhDo pkiGRtRfYyFENHLa3iQKIstNaS5l+YH5Taxe8JUKFAn4Jncra8uyC+XViZ6zVWrx eNr7amZm1SQaJy3B8X5XkdrzdUQ04O1IPgyzr1B7T3W53NBjpHrXgY54Uc+yg+aI 6gZ/8ukr9nKUVletYd0TWeyfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnVgFiCcP 5YDGpQ4VTvUSJd2+eXAwHwYDVR0jBBgwFoAUI2o4zV7FL3Doi4BtcV63sELNfr8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMjBCL0M0MkUzNDNFRTBB RTExRjA5NkQ3RTI4ODQ5NkY1NkJDL0kybzR6VjdGTDNEb2k0QnRjVjYzc0VMTmZy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSTJvNHpWN0ZMM0RvaTRCdGNWNjNzRUxOZnI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx MjBCL0M0MkUzNDNFRTBBRTExRjA5NkQ3RTI4ODQ5NkY1NkJDL0kybzR6VjdGTDNE b2k0QnRjVjYzc0VMTmZyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFpnkacCvsVSRmCj3ia97uscPBu74yra/jTawBwl+EB7yAn9HMzwMytn DIybs3H6iyoue5VZIMAEI1g38NrsgqYwE8HMg1VrRDRLshbibPo1kUuxa9/PKlHA hs71/id8gj7T+BGxV1FLcZHeQAn6VNgBCeM5AB0r+QRMbRozug7D7IJw+EEdhBmt 8jqq4NbiQZAZxNXsZKQ47l3LpjHV/U/Oxp/XQYDXo2gOrtpLPABt/hIZ6fnCl807 OmXjpVEDWL3w8MrG3zCHCFlAKlayUOrf4po0+k+LxNgRo1p2UQQW/pObIMkTQSks dvw+jUR6CH2da6P+uneskI1FT3Nnkec= -----END CERTIFICATE-----Generated at Sun Jan 25 10:10:53 2026 by rpki-client