This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json) Hash identifier: tH3fqWBoG68nV2zdo3DoXDbr5E8dh+R6+IjPvTsbtLY= Subject key identifier: 1A:B9:54:EC:B9:75:5F:45:6A:B0:D2:D8:20:DE:3D:E5:9D:5B:4A:0B Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0A92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft Manifest number: 0A60 Signing time: Sat 24 Jan 2026 19:11:24 +0000 Manifest this update: Sat 24 Jan 2026 19:11:23 +0000 Manifest next update: Sat 31 Jan 2026 19:11:23 +0000 Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: RcrcxvRO8daavrdGcu0lqYpbSDvCcl+lnOGngW8gEDk=) 2: B11136C4BA5411F0A7CF623BC4F9AE02.roa (hash: SIg196GYVKTKI4+0dgTTvV5a/n2mgtcAZZII1TWWrPY=) 3: 493CABD04FEE11F0B866DF81C4F9AE02.roa (hash: SIqZByFacvV7QJBszq3I4KNn6FmjHo6sDMgTbKvof/I=) 4: 794C43721A5F11F080409056C4F9AE02.roa (hash: kbLH1JljQmw4AlfiWIiOugdUuk6toBMNo8ccK4VwJSI=) 5: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: t91ifCQgIAYbvCsYV/PFl6m9t/3Cnz5ihycZbP3pNnw=) 6: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: BAiJmhyO7qkPml01yhndNUigENcptBFhNprMefBmUts=) 7: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (hash: IopOLzyoiLCS9DuArgxxC5PhW+0+R++YJlwEljeOSys=) 8: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: SfgdNLe8TjsNAAHj/4mi3g/Uo1yjbeHu7qslr0iDVUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2706 (0xa92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Jan 24 19:11:23 2026 GMT Not After : Jan 31 19:11:23 2026 GMT Subject: CN=6975195c-7f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:05:bd:56:94:1e:22:c0:12:a1:bc:af:27:d9: 44:ea:d0:42:db:c4:60:d2:b3:76:0b:02:0d:ce:1c: bf:18:e3:3b:7e:ac:07:0e:72:8e:99:33:57:85:7e: a5:58:9b:05:2d:b3:0e:3c:26:2e:d8:64:60:8e:da: 91:34:0c:1a:bc:73:32:14:2a:7e:00:8a:c4:18:36: 8d:f0:90:a2:7c:6d:36:17:ed:28:ba:8e:87:9e:36: 05:af:21:9d:7e:f6:9b:f0:2c:ca:ea:84:4a:45:2e: 88:90:fb:e4:ea:76:41:55:80:66:4e:29:46:70:01: b5:08:38:7f:05:f8:36:f2:fc:9c:86:83:d8:fb:93: 08:db:80:41:3d:56:f4:c6:76:97:11:4d:00:f0:2a: f9:6c:a8:96:b6:6c:de:31:1b:f4:95:54:e8:62:61: 4a:ab:cc:75:74:9d:ea:f8:5a:aa:07:35:93:79:f3: 84:82:b0:06:db:b1:03:b1:1e:8d:c0:9b:58:0c:6b: 02:b1:0f:e0:0c:87:57:63:0b:c7:ea:3b:83:ff:02: 8d:1a:52:7f:1c:95:ab:05:be:1d:ef:bb:29:3c:33: e2:3b:7b:d8:33:a6:7f:03:71:4f:55:83:53:78:5a: c4:a2:06:f6:4a:0c:d2:4c:c0:ef:68:08:e6:f9:c6: 39:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B9:54:EC:B9:75:5F:45:6A:B0:D2:D8:20:DE:3D:E5:9D:5B:4A:0B X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:1a:c2:9b:4b:0c:50:85:10:ea:39:09:68:80:6b:2e:e6:c4: c1:63:1e:68:1e:81:a9:76:91:12:4a:0e:dd:c2:fd:84:57:50: e9:71:2d:9d:44:64:87:f2:38:1b:39:5e:b6:4c:0b:2e:d1:84: 68:0f:ad:68:e8:6c:53:4b:11:bb:a9:71:0a:d8:9d:e7:a0:30: 2e:f2:b0:df:f1:ec:ed:b6:9f:d0:a0:33:2c:8e:34:58:4b:c7: 26:af:07:f4:49:a8:b4:2c:5f:8f:12:7c:d9:18:2e:de:ca:6e: df:66:03:ac:ae:8e:24:75:af:b8:d8:f6:75:4d:7b:e6:c7:cd: 79:13:1f:5b:84:97:0a:5c:34:67:95:49:bb:79:6c:61:31:7c: de:49:37:76:2a:d2:ef:d4:09:49:20:ed:d9:cc:39:0c:2b:40: 0b:e7:da:19:a6:09:a3:1a:5e:8f:bb:26:d1:32:d9:4a:3c:a0: 24:12:ac:0c:62:80:66:aa:9e:89:7f:58:4a:17:ca:82:36:92: 03:4d:b1:da:c5:82:e0:2f:cd:ac:fa:e8:2b:0d:25:18:c0:f8: fb:55:8f:20:d1:50:be:d0:6a:ca:4e:ae:86:65:12:4f:eb:09: 99:07:22:77:b0:12:3c:0b:cb:4c:ac:7c:c1:c7:1a:b5:eb:d5: 03:8a:eb:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjYwMTI0MTkxMTIzWhcNMjYwMTMxMTkxMTIzWjAYMRYwFAYD VQQDDA02OTc1MTk1Yy03ZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAW9VpQeIsASobyvJ9lE6tBC28Rg0rN2CwINzhy/GOM7fqwHDnKOmTNXhX6l WJsFLbMOPCYu2GRgjtqRNAwavHMyFCp+AIrEGDaN8JCifG02F+0ouo6HnjYFryGd fvab8CzK6oRKRS6IkPvk6nZBVYBmTilGcAG1CDh/Bfg28vychoPY+5MI24BBPVb0 xnaXEU0A8Cr5bKiWtmzeMRv0lVToYmFKq8x1dJ3q+FqqBzWTefOEgrAG27EDsR6N wJtYDGsCsQ/gDIdXYwvH6juD/wKNGlJ/HJWrBb4d77spPDPiO3vYM6Z/A3FPVYNT eFrEogb2SgzSTMDvaAjm+cY5HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq5VOy5 dV9FarDS2CDePeWdW0oLMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wNEFBQjI5RTgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1 dVJibk9RLUpQZ0VBdXBPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwGsKbSwxQhRDqOQlogGsu5sTBYx5oHoGpdpESSg7dwv2EV1DpcS2d RGSH8jgbOV62TAsu0YRoD61o6GxTSxG7qXEK2J3noDAu8rDf8ezttp/QoDMsjjRY S8cmrwf0Sai0LF+PEnzZGC7eym7fZgOsro4kda+42PZ1TXvmx815Ex9bhJcKXDRn lUm7eWxhMXzeSTd2KtLv1AlJIO3ZzDkMK0AL59oZpgmjGl6PuybRMtlKPKAkEqwM YoBmqp6Jf1hKF8qCNpIDTbHaxYLgL82s+ugrDSUYwPj7VY8g0VC+0GrKTq6GZRJP 6wmZByJ3sBI8C8tMrHzBxxq169UDiuvA -----END CERTIFICATE-----Generated at Sun Jan 25 05:41:52 2026 by rpki-client