This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json) Hash identifier: Tqz68JO/qT+MamfA98+0HncmZv98m/SeChQltQccuDg= Subject key identifier: F2:41:C4:2D:BC:DA:8E:BB:85:C0:06:CD:C4:65:3B:C3:F1:CF:32:74 Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft Manifest number: 01CF Signing time: Sun 25 Jan 2026 02:09:35 +0000 Manifest this update: Sun 25 Jan 2026 02:09:35 +0000 Manifest next update: Sun 01 Feb 2026 02:09:35 +0000 Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: Vx8j71OSQO3MrmEmQM82IcJP9M21F8z5u5QyUuBQWbw=) 2: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: mPLM8pUe2jYc/yGUmyUlykE/dN1LWPP09wTlH7B34ok=) 3: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: z9EaBOoQtdVuIHEm9IdKFd2T44FBt8oNShj0hBUX4to=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Validity Not Before: Jan 25 02:09:35 2026 GMT Not After : Feb 1 02:09:35 2026 GMT Subject: CN=69757b5f-0c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3f:aa:b9:64:97:d4:db:6d:03:64:45:a5:04: cc:8e:b8:eb:d8:7b:e2:64:ff:91:e8:fb:97:c0:3f: 7b:8c:91:28:75:64:0c:59:86:17:bc:4e:fd:e9:8b: 5c:26:c9:97:d6:1a:9d:e5:cd:f0:7e:fc:ce:a3:03: c9:df:76:52:14:f4:ed:ca:2b:cb:70:e5:51:e6:76: 56:6f:a7:b2:d8:da:7b:7f:ea:63:7f:15:95:e8:3b: 99:d7:48:8a:8f:52:ce:dc:4a:3b:be:7e:cd:cd:08: 69:78:e7:b6:fa:79:7f:14:65:81:ba:e3:6d:1d:fc: 8f:5a:d9:73:91:67:4d:a7:0a:d5:17:f4:79:39:d9: 94:2f:cb:43:c6:bf:65:6c:d1:25:d3:67:b9:af:17: 60:f6:03:1f:82:53:ea:6b:a6:8e:f6:5c:b3:64:bd: 03:a3:f1:96:af:f6:31:b9:60:0d:25:a2:a5:2c:45: e9:c2:7c:7a:d2:9e:71:69:dc:1b:ec:ff:62:4f:1d: 06:ba:a7:96:6f:87:7f:ac:8a:65:b8:c5:51:a2:11: 72:07:43:99:58:2b:ce:56:a2:4b:a3:9a:c3:fa:5e: b1:26:91:7c:a0:51:df:ff:b1:44:83:60:38:1d:fb: e6:da:72:71:5a:c4:c7:79:0f:2d:9e:71:53:f1:7f: 0d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:41:C4:2D:BC:DA:8E:BB:85:C0:06:CD:C4:65:3B:C3:F1:CF:32:74 X509v3 Authority Key Identifier: keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:9d:d6:a9:05:83:d2:ef:91:79:71:92:47:ed:f5:96:e4:a8: bf:72:b8:49:6c:10:af:f4:2e:88:20:3b:d4:31:6d:fe:13:66: 61:d8:c2:9a:f1:a3:cf:44:f2:7b:76:0e:2a:c3:21:6f:0b:d9: 5f:e6:ea:c9:53:b8:09:37:ad:62:db:ad:11:36:ad:16:7b:68: 2c:57:d2:a9:a8:17:44:17:33:02:22:5f:2a:f9:30:4f:86:81: 04:b9:6c:f9:56:51:27:d3:99:f6:4b:eb:99:2a:35:85:cb:b6: 8a:e1:78:de:5a:98:06:f0:75:5c:41:bf:94:cd:5e:03:35:32: 4d:20:79:27:c9:8f:7c:6a:e3:92:43:13:89:77:7d:bf:95:4a: 1f:b2:de:f9:eb:c7:9d:ed:cb:f0:8f:11:f3:be:43:bb:eb:c8: b6:87:27:03:37:17:a4:5f:6a:44:52:31:60:32:2e:3e:59:94: fc:3c:e9:4c:db:b4:1c:7d:bc:f4:22:2a:10:95:de:55:1c:fa: ab:1e:bd:77:fd:8e:ee:e0:c1:50:0e:b7:5e:d7:87:a7:ac:cf: 75:af:de:ba:7b:98:d9:1a:4d:9b:30:8e:ec:dc:f4:ab:c8:b0: 6a:c2:14:a2:64:e3:1c:ae:d8:29:0c:32:c4:33:83:c7:7b:d8: bb:ab:85:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMUUxMTAvBgNVBAUTKDAwRTQwRDk1NkQ2OEQ2MURBODU4MUU1NEU4QjhDMkRC QTE2Q0IzMjcwHhcNMjYwMTI1MDIwOTM1WhcNMjYwMjAxMDIwOTM1WjAYMRYwFAYD VQQDDA02OTc1N2I1Zi0wYzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0j+quWSX1NttA2RFpQTMjrjr2HviZP+R6PuXwD97jJEodWQMWYYXvE796Ytc JsmX1hqd5c3wfvzOowPJ33ZSFPTtyivLcOVR5nZWb6ey2Np7f+pjfxWV6DuZ10iK j1LO3Eo7vn7NzQhpeOe2+nl/FGWBuuNtHfyPWtlzkWdNpwrVF/R5OdmUL8tDxr9l bNEl02e5rxdg9gMfglPqa6aO9lyzZL0Do/GWr/YxuWANJaKlLEXpwnx60p5xadwb 7P9iTx0GuqeWb4d/rIpluMVRohFyB0OZWCvOVqJLo5rD+l6xJpF8oFHf/7FEg2A4 Hfvm2nJxWsTHeQ8tnnFT8X8NJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJBxC28 2o67hcAGzcRlO8PxzzJ0MB8GA1UdIwQYMBaAFADkDZVtaNYdqFgeVOi4wtuhbLMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxRS8yNTc1Q0ZGMDMy QUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFoMm9XQjVVNkxqQzI2RnNz eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPUU5sVzFvMWgyb1dCNVU2TGpDMjZGc3N5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxRS8yNTc1Q0ZGMDMyQUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFo Mm9XQjVVNkxqQzI2RnNzeWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJndapBYPS75F5cZJH7fWW5Ki/crhJbBCv9C6IIDvUMW3+E2Zh2MKa 8aPPRPJ7dg4qwyFvC9lf5urJU7gJN61i260RNq0We2gsV9KpqBdEFzMCIl8q+TBP hoEEuWz5VlEn05n2S+uZKjWFy7aK4XjeWpgG8HVcQb+UzV4DNTJNIHknyY98auOS QxOJd32/lUofst7568ed7cvwjxHzvkO768i2hycDNxekX2pEUjFgMi4+WZT8POlM 27Qcfbz0IioQld5VHPqrHr13/Y7u4MFQDrde14enrM91r966e5jZGk2bMI7s3PSr yLBqwhSiZOMcrtgpDDLEM4PHe9i7q4W5 -----END CERTIFICATE-----Generated at Sun Jan 25 20:08:46 2026 by rpki-client