This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft File: 3rAzsBIsJfawCvHCFkKTMuDSAe4.mft (raw, json) Hash identifier: 18uHOn5ltm+EA2DA6tBmNL02YfI1aHXwClG0v6DlLxs= Subject key identifier: F6:FE:6B:8B:CB:F1:B0:99:D1:7B:93:FC:AB:64:6D:55:63:4F:41:7A Authority key identifier: DE:B0:33:B0:12:2C:25:F6:B0:0A:F1:C2:16:42:93:32:E0:D2:01:EE Certificate issuer: /CN=A9181D2A/serialNumber=DEB033B0122C25F6B00AF1C216429332E0D201EE Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft Manifest number: 30 Signing time: Sun 25 Jan 2026 06:38:31 +0000 Manifest this update: Sun 25 Jan 2026 06:38:31 +0000 Manifest next update: Sun 01 Feb 2026 06:38:31 +0000 Files and hashes: 1: 3rAzsBIsJfawCvHCFkKTMuDSAe4.crl (hash: 5tRjSeNkuv9yPfeKuvdZEmPdu/2Cr4/juSR2eA9+Meg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.crl rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181D2A, serialNumber=DEB033B0122C25F6B00AF1C216429332E0D201EE Validity Not Before: Jan 25 06:38:31 2026 GMT Not After : Feb 1 06:38:31 2026 GMT Subject: CN=6975ba67-8974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:43:cd:62:3f:dc:af:ec:8b:c5:f0:48:13:8f: 6b:a4:36:67:06:b0:3b:4b:9d:45:dd:ac:a3:2d:d4: 5f:32:1e:92:6b:c8:44:46:6f:3f:65:48:f7:2f:78: da:8e:ab:5a:1b:4f:4d:46:03:74:1b:45:8f:c3:9a: da:36:36:05:14:43:11:d7:e0:3b:a0:3e:1d:3c:c3: 76:03:32:78:e0:e8:7b:bd:8c:5b:2c:ef:2a:b4:9a: 03:c8:d6:71:9b:cd:dc:18:85:04:94:6a:99:e4:ac: ff:81:d5:4d:34:5e:c7:67:6f:b6:2f:a9:e5:a9:a2: 65:15:64:dd:1e:e7:ec:29:17:b9:7d:c6:eb:80:f4: e3:54:ab:60:8c:81:b8:84:61:d7:d5:41:e0:96:a8: 47:a9:c8:1f:87:e7:71:c1:ec:27:e9:61:a5:68:b1: 99:c0:6f:27:d6:d1:19:8b:3b:4e:a9:00:71:34:23: b3:4a:a2:57:b4:9b:62:9e:36:5d:98:d5:c7:63:f0: ea:4c:76:18:9d:73:14:9a:d9:87:d2:9b:31:e9:45: c2:c2:47:51:8f:d8:d1:b0:c7:b4:11:ae:16:43:e4: 49:16:75:ee:e8:28:71:85:98:d4:de:32:7b:55:49: ee:64:58:f9:da:9c:42:c3:56:e5:1a:43:82:ae:1a: c9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FE:6B:8B:CB:F1:B0:99:D1:7B:93:FC:AB:64:6D:55:63:4F:41:7A X509v3 Authority Key Identifier: keyid:DE:B0:33:B0:12:2C:25:F6:B0:0A:F1:C2:16:42:93:32:E0:D2:01:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:17:dc:02:8b:66:14:71:50:1c:30:40:73:47:f9:66:14:fc: 73:6f:85:50:1c:7f:07:05:99:f4:f7:5b:a1:23:c7:fa:9f:41: 71:23:8a:2a:db:35:8e:42:3e:4b:3e:9e:90:d3:0c:62:c8:6e: 93:29:0e:24:e6:fa:5c:af:c5:ca:b0:7a:8b:8b:1e:49:22:4e: 1e:4a:d9:1d:e0:c3:70:3a:fa:09:da:ed:59:23:0e:c5:aa:63: 2a:96:b0:df:5f:51:9f:4e:51:60:ba:15:a7:96:e7:f9:bc:94: 47:01:c2:35:fa:3d:35:6d:44:f1:f2:2b:55:68:9c:c7:c7:58: 3c:26:0e:1d:e3:03:53:79:f5:2c:10:8d:53:e1:4d:a6:57:1c: 7d:44:f0:eb:ad:6e:87:d9:ad:17:ec:ef:91:f9:35:fc:a5:dc: 93:4f:5e:7c:2b:7a:83:0e:6e:1b:64:68:86:81:f6:6f:5b:00: 47:dc:f4:ad:a6:72:c4:c1:57:26:cc:4c:d9:be:f0:b7:cc:71: e8:84:75:cd:7f:6c:9d:0f:dc:05:8d:29:b3:8c:ab:50:7d:6e: c7:d3:c7:cd:5c:d0:39:8f:51:0f:1f:ed:ad:ca:b3:5f:31:1b: c1:df:26:01:bb:f6:29:1c:6f:d3:c8:b6:9b:06:33:c4:83:da: 4b:6e:2b:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MUQyQTExMC8GA1UEBRMoREVCMDMzQjAxMjJDMjVGNkIwMEFGMUMyMTY0MjkzMzJF MEQyMDFFRTAeFw0yNjAxMjUwNjM4MzFaFw0yNjAyMDEwNjM4MzFaMBgxFjAUBgNV BAMMDTY5NzViYTY3LTg5NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCFQ81iP9yv7IvF8EgTj2ukNmcGsDtLnUXdrKMt1F8yHpJryERGbz9lSPcveNqO q1obT01GA3QbRY/Dmto2NgUUQxHX4DugPh08w3YDMnjg6Hu9jFss7yq0mgPI1nGb zdwYhQSUapnkrP+B1U00Xsdnb7YvqeWpomUVZN0e5+wpF7l9xuuA9ONUq2CMgbiE YdfVQeCWqEepyB+H53HB7CfpYaVosZnAbyfW0RmLO06pAHE0I7NKole0m2KeNl2Y 1cdj8OpMdhidcxSa2YfSmzHpRcLCR1GP2NGwx7QRrhZD5EkWde7oKHGFmNTeMntV Se5kWPnanELDVuUaQ4KuGsmPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9v5ri8vx sJnRe5P8q2RtVWNPQXowHwYDVR0jBBgwFoAU3rAzsBIsJfawCvHCFkKTMuDSAe4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxRDJBLzI1QTRBNkI2QjMx RjExRjA5RDhBMjY0REM0RjlBRTAyLzNyQXpzQklzSmZhd0N2SENGa0tUTXVEU0Fl NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3JBenNCSXNKZmF3Q3ZIQ0ZrS1RNdURTQWU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx RDJBLzI1QTRBNkI2QjMxRjExRjA5RDhBMjY0REM0RjlBRTAyLzNyQXpzQklzSmZh d0N2SENGa0tUTXVEU0FlNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGkX3AKLZhRxUBwwQHNH+WYU/HNvhVAcfwcFmfT3W6Ejx/qfQXEjiirb NY5CPks+npDTDGLIbpMpDiTm+lyvxcqweouLHkkiTh5K2R3gw3A6+gna7VkjDsWq YyqWsN9fUZ9OUWC6FaeW5/m8lEcBwjX6PTVtRPHyK1VonMfHWDwmDh3jA1N59SwQ jVPhTaZXHH1E8OutbofZrRfs75H5Nfyl3JNPXnwreoMObhtkaIaB9m9bAEfc9K2m csTBVybMTNm+8LfMceiEdc1/bJ0P3AWNKbOMq1B9bsfTx81c0DmPUQ8f7a3Ks18x G8HfJgG79ikcb9PItpsGM8SD2ktuKxk= -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:27 2026 by rpki-client