This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json) Hash identifier: 2ZQQN/rRptLuesFTJackFVOCUYAdP1d6EDZ03V6T/Qw= Subject key identifier: A8:8B:BA:58:E8:5A:DD:2D:D1:62:F0:AB:86:2D:8C:44:48:0C:D6:93 Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0E4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft Manifest number: 0E41 Signing time: Sat 24 Jan 2026 17:28:27 +0000 Manifest this update: Sat 24 Jan 2026 17:28:26 +0000 Manifest next update: Sat 31 Jan 2026 17:28:26 +0000 Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: zVJokA1Z7f+UR9R5/f0mHbFtrPqOKAca5nKLOC4s9xA=) 2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: J3asPRjW2OTxFxfAPN+SaGNCDyYHApcc4gcIkuEE9lM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3658 (0xe4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: Jan 24 17:28:26 2026 GMT Not After : Jan 31 17:28:26 2026 GMT Subject: CN=6975013b-fd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4b:c5:f7:33:df:2b:37:e9:bd:e9:26:92:44: e1:dc:3b:74:e9:56:98:0a:04:ad:e0:7c:73:12:0a: 84:46:a1:1a:e4:ce:9e:8f:ae:96:3e:ce:a4:2a:ac: 62:23:fe:11:36:65:42:be:b1:eb:a3:29:a1:6d:a9: 5a:53:2a:49:78:fc:e9:f8:5b:30:23:9e:7b:74:22: a3:9a:d9:4d:95:c4:7d:6e:4a:29:38:9c:11:4f:62: ef:6a:dc:b8:f0:08:63:dd:e6:44:a5:73:3a:34:10: 97:1e:8f:e1:38:60:9c:39:06:31:22:e6:e1:67:12: 4f:70:d5:7f:67:d7:c6:c6:48:4c:73:8e:6f:72:75: cb:2b:4e:93:f0:bd:25:0c:a0:bd:f5:5e:13:ef:61: ea:e1:87:f1:23:73:78:9d:70:a0:29:44:4c:03:f3: 58:ed:b7:cf:9b:df:ee:62:26:84:91:c6:95:3c:b4: c9:dc:11:d8:43:af:dd:ef:a5:76:d0:44:95:aa:8f: cf:db:b6:f1:ef:eb:57:75:60:99:8e:bc:b5:dd:2c: b8:1f:2b:49:bd:0a:95:00:c6:c9:9d:67:ec:df:58: 3b:16:d5:d2:8e:ad:59:ce:20:e9:d5:cb:ce:2a:9e: a6:97:d2:6f:57:29:29:2a:a5:a1:0c:3f:22:e8:7b: 0a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8B:BA:58:E8:5A:DD:2D:D1:62:F0:AB:86:2D:8C:44:48:0C:D6:93 X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:12:ae:8e:ab:be:eb:ee:ea:d0:e5:e5:42:31:72:46:f0:95: 5c:f0:c8:05:76:b2:5d:f0:47:56:75:3b:b4:36:69:b0:0a:db: a9:93:ef:93:53:6a:3f:c5:61:c8:bd:a2:1f:b1:d4:20:da:51: 21:bd:83:5d:f3:2e:9c:57:41:07:dd:0c:de:2e:57:c8:a0:15: 34:e0:b2:5c:a2:3e:72:a1:6b:6b:83:7a:60:a8:f2:91:b8:31: b6:50:a1:25:ae:e4:67:5a:d7:66:4a:20:16:3e:fe:02:40:7b: 34:07:18:a8:fd:5a:4e:71:a0:5c:50:8c:b8:ca:5f:01:37:4d: 28:b3:c1:df:9f:5a:18:7d:ef:28:9a:82:5e:75:6b:42:2c:50: 5d:96:a2:1d:0f:b6:98:d9:1d:1a:79:0c:bd:0e:0c:54:31:79: d6:eb:9d:c7:2b:cc:10:15:50:06:e2:2b:f6:f4:b2:d5:cb:61: 1c:65:88:61:c5:1c:7f:b5:eb:07:6c:0c:1a:2a:6e:13:55:11: 0d:4a:77:b5:68:83:3f:61:01:bf:59:28:18:89:04:b0:30:ae: b9:6b:62:7e:bc:79:05:63:bc:bd:54:78:39:7d:ea:3c:01:ab: da:22:9d:d0:33:33:2a:00:37:2c:37:d9:ca:87:5b:3a:b4:53: e4:59:ab:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjYwMTI0MTcyODI2WhcNMjYwMTMxMTcyODI2WjAYMRYwFAYD VQQDDA02OTc1MDEzYi1mZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl0vF9zPfKzfpvekmkkTh3Dt06VaYCgSt4HxzEgqERqEa5M6ej66WPs6kKqxi I/4RNmVCvrHroymhbalaUypJePzp+FswI557dCKjmtlNlcR9bkopOJwRT2Lvaty4 8Ahj3eZEpXM6NBCXHo/hOGCcOQYxIubhZxJPcNV/Z9fGxkhMc45vcnXLK06T8L0l DKC99V4T72Hq4YfxI3N4nXCgKURMA/NY7bfPm9/uYiaEkcaVPLTJ3BHYQ6/d76V2 0ESVqo/P27bx7+tXdWCZjry13Sy4HytJvQqVAMbJnWfs31g7FtXSjq1ZziDp1cvO Kp6ml9JvVykpKqWhDD8i6HsKDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiLuljo Wt0t0WLwq4YtjERIDNaTMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAREq6Oq77r7urQ5eVCMXJG8JVc8MgFdrJd8EdWdTu0NmmwCtupk++T U2o/xWHIvaIfsdQg2lEhvYNd8y6cV0EH3QzeLlfIoBU04LJcoj5yoWtrg3pgqPKR uDG2UKElruRnWtdmSiAWPv4CQHs0Bxio/VpOcaBcUIy4yl8BN00os8Hfn1oYfe8o moJedWtCLFBdlqIdD7aY2R0aeQy9DgxUMXnW653HK8wQFVAG4iv29LLVy2EcZYhh xRx/tesHbAwaKm4TVRENSne1aIM/YQG/WSgYiQSwMK65a2J+vHkFY7y9VHg5feo8 AavaIp3QMzMqADcsN9nKh1s6tFPkWatr -----END CERTIFICATE-----Generated at Sun Jan 25 04:34:38 2026 by rpki-client