This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft File: rDzLekAZEcjlFT8wFmpUyacWP3s.mft (raw, json) Hash identifier: wVPZfbVfpJKwzLlJT/m2MMwG+19vF8qGFZ3s5yA6Icg= Subject key identifier: 62:C1:9A:70:35:BE:F3:1C:1D:04:E7:C8:82:54:2C:53:9C:4E:CE:86 Authority key identifier: AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B Certificate issuer: /CN=A9189337/serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft Manifest number: 38 Signing time: Sun 25 Jan 2026 06:34:21 +0000 Manifest this update: Sun 25 Jan 2026 06:34:21 +0000 Manifest next update: Sun 01 Feb 2026 06:34:21 +0000 Files and hashes: 1: rDzLekAZEcjlFT8wFmpUyacWP3s.crl (hash: ZFW/jQUlR3PIGAOw/gxQNT6c8MchCM4zN4f5a6bvGKw=) 2: 97B6FD12A81611F0BBD11A74C4F9AE02.roa (hash: GetDT8ar6UQGvcmvjsGOW3aX6ZiD1t+5sWscwddFzJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189337, serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B Validity Not Before: Jan 25 06:34:21 2026 GMT Not After : Feb 1 06:34:21 2026 GMT Subject: CN=6975b96d-7dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ce:ad:e4:9f:f6:94:55:47:ff:d2:2b:b8:b6: b5:2e:e8:95:0c:9b:95:f0:ef:19:eb:dd:c6:ae:a8: c1:14:49:32:84:9f:4a:ba:90:5f:2b:03:73:0d:03: 50:9d:d4:1b:17:b6:6f:67:5a:c7:ec:78:fc:50:68: 65:a5:61:dd:91:cd:44:d0:8a:1f:7e:b9:92:e4:97: d5:1b:37:4c:ce:c8:0d:c6:51:19:5f:76:95:83:81: 94:a1:34:78:e8:9d:04:2b:ea:a4:91:5b:d7:d1:bc: fe:8c:c6:39:84:28:54:ad:a5:b9:cc:4a:0b:0f:3e: dc:e4:82:ef:1d:44:6e:a5:49:cf:ed:e3:22:5c:5f: 21:73:38:92:f9:3d:41:88:0a:0f:c5:35:86:0f:ac: 86:88:11:d9:4d:aa:f0:cb:d6:f6:01:8d:6c:be:87: af:70:5c:75:40:72:83:b4:4f:17:78:2f:1a:f9:24: 35:e4:a8:ee:05:fc:e8:da:cc:6b:e4:16:7e:5e:0a: 82:13:1e:99:ee:83:6d:fd:8f:c8:bf:13:d5:1e:23: bd:03:fa:66:a0:3d:4c:47:17:96:96:9f:75:da:af: 83:49:91:15:5b:be:12:35:49:c7:ac:42:c8:9a:59: e1:7c:7f:c2:3d:b0:2f:02:36:89:d6:3c:44:5c:b8: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C1:9A:70:35:BE:F3:1C:1D:04:E7:C8:82:54:2C:53:9C:4E:CE:86 X509v3 Authority Key Identifier: keyid:AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:8b:da:98:1c:f0:ac:5b:a7:65:3d:72:20:28:c5:da:9a:8c: 99:17:69:8f:b5:c3:fc:ef:33:ce:cb:ae:04:e5:df:bc:ac:ab: a9:ad:c8:0d:1b:e2:65:e9:ca:03:8b:4f:ad:ca:64:0f:76:b5: 3d:43:8d:f3:28:91:5f:59:80:fe:ca:1c:4f:ae:c6:6a:1e:91: 8c:95:fc:06:d5:60:5e:27:aa:ca:4a:8d:ec:31:80:e7:6e:02: 59:48:a5:d7:ed:21:3e:7f:ae:4b:5a:45:b9:d7:e9:5f:0d:f9: 98:e9:64:d0:46:74:13:0b:97:d2:5d:94:c3:5c:08:d3:08:1a: df:81:51:51:d2:b8:db:41:80:71:0a:ae:93:45:ff:9d:a7:04: 08:96:63:01:c2:d5:03:1e:ea:bc:00:06:f4:03:f0:e4:8d:ca: 81:31:61:58:48:1c:5f:0a:a7:a4:fb:74:83:e4:af:32:ca:fe: 24:66:aa:46:a7:35:0b:50:4a:d5:3d:71:ae:7f:50:d0:a3:33: 29:95:29:30:dc:18:6d:ab:16:3e:16:f4:4f:ab:53:a8:a2:90: 88:cf:fd:bd:af:23:0e:c7:51:a0:19:24:a7:4e:b9:df:5b:8c: 96:62:47:81:1c:66:ca:4a:9a:8f:10:6d:d9:18:50:3d:31:97: 42:42:b0:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTMzNzExMC8GA1UEBRMoQUMzQ0NCN0E0MDE5MTFDOEU1MTUzRjMwMTY2QTU0QzlB NzE2M0Y3QjAeFw0yNjAxMjUwNjM0MjFaFw0yNjAyMDEwNjM0MjFaMBgxFjAUBgNV BAMMDTY5NzViOTZkLTdkZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4zq3kn/aUVUf/0iu4trUu6JUMm5Xw7xnr3cauqMEUSTKEn0q6kF8rA3MNA1Cd 1BsXtm9nWsfsePxQaGWlYd2RzUTQih9+uZLkl9UbN0zOyA3GURlfdpWDgZShNHjo nQQr6qSRW9fRvP6MxjmEKFStpbnMSgsPPtzkgu8dRG6lSc/t4yJcXyFzOJL5PUGI Cg/FNYYPrIaIEdlNqvDL1vYBjWy+h69wXHVAcoO0Txd4Lxr5JDXkqO4F/OjazGvk Fn5eCoITHpnug239j8i/E9UeI70D+magPUxHF5aWn3Xar4NJkRVbvhI1ScesQsia WeF8f8I9sC8CNonWPERcuDvnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYsGacDW+ 8xwdBOfIglQsU5xOzoYwHwYDVR0jBBgwFoAUrDzLekAZEcjlFT8wFmpUyacWP3sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5MzM3LzNFMDlGMEU0QTgx NjExRjA4NDk4QUU3MEM0RjlBRTAyL3JEekxla0FaRWNqbEZUOHdGbXBVeWFjV1Az cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvckR6TGVrQVpFY2psRlQ4d0ZtcFV5YWNXUDNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 MzM3LzNFMDlGMEU0QTgxNjExRjA4NDk4QUU3MEM0RjlBRTAyL3JEekxla0FaRWNq bEZUOHdGbXBVeWFjV1Azcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMCL2pgc8Kxbp2U9ciAoxdqajJkXaY+1w/zvM87LrgTl37ysq6mtyA0b 4mXpygOLT63KZA92tT1DjfMokV9ZgP7KHE+uxmoekYyV/AbVYF4nqspKjewxgOdu AllIpdftIT5/rktaRbnX6V8N+ZjpZNBGdBMLl9JdlMNcCNMIGt+BUVHSuNtBgHEK rpNF/52nBAiWYwHC1QMe6rwABvQD8OSNyoExYVhIHF8Kp6T7dIPkrzLK/iRmqkan NQtQStU9ca5/UNCjMymVKTDcGG2rFj4W9E+rU6iikIjP/b2vIw7HUaAZJKdOud9b jJZiR4EcZspKmo8QbdkYUD0xl0JCsCc= -----END CERTIFICATE-----Generated at Sun Jan 25 16:25:08 2026 by rpki-client