This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft File: HsQsG2nhb183xz2Bv5-rH0ukIyk.mft (raw, json) Hash identifier: JqVkoAufJrA54osk5Vo7S84HUCRSV441ZYEmhSDbzhE= Subject key identifier: 4E:CD:E4:13:64:E8:2E:1F:E4:19:FB:8A:C7:A7:B4:6C:8B:B6:1B:AA Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Certificate serial: 0B03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft Manifest number: 0A9A Signing time: Sat 24 Jan 2026 19:11:21 +0000 Manifest this update: Sat 24 Jan 2026 19:11:21 +0000 Manifest next update: Sat 31 Jan 2026 19:11:21 +0000 Files and hashes: 1: HsQsG2nhb183xz2Bv5-rH0ukIyk.crl (hash: v3uDr3LkO02MLYba8DdC/vAA/Lw7DMNjjwxIVCMM4AM=) 2: 73DC26744B0611EF8698EB13C4F9AE02.roa (hash: R1OUwwbFhRrvM5hkT+3nm1/8xxFGqJcsm+CwuQRS+mE=) 3: B8D18508EDE011EF88407251C4F9AE02.roa (hash: hQatOvTRlWcPgRC3V8TR5lAol6xY99LUllDa1PgoJQw=) 4: A7A72BF24B0611EF91534014C4F9AE02.roa (hash: rkEEq1NU0ZB0iJ206DwCqyTIcCk221/XirQFCrxsWtw=) 5: D42F0D06B51611EEADC7924BC4F9AE02.roa (hash: A9NzHssGcVbJE0bf4/leZQkSAZrkt2X7yYhptv+SQB8=) 6: D9AFDBC2400111EFBB30C475C4F9AE02.roa (hash: DOOQJ3+cGj42ubOtQXY1kZrabEjzpiZAb+fDiUicu64=) 7: 6C68485C5A1D11EFA9989052C4F9AE02.roa (hash: lt4zwgbzAIBl7L3nQCHbMTOSBOw22MQtzbieQ01mlLI=) 8: A81364AC4B0611EF91534014C4F9AE02.roa (hash: efnu/0Jtb/6C3HwcOejChV2lA0Y4knvd4d3kMkHw2tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2819 (0xb03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Validity Not Before: Jan 24 19:11:21 2026 GMT Not After : Jan 31 19:11:21 2026 GMT Subject: CN=69751959-da3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:b0:b2:25:bd:12:52:f1:0e:f8:30:e6:f6: 23:4b:2b:a8:a0:e8:1c:79:e6:45:e6:f8:e3:5d:29: 88:a1:24:58:bb:0b:9e:40:51:1d:43:e6:61:d7:a2: f3:5c:af:71:42:60:11:06:59:05:91:ca:04:b1:8e: c3:d4:a7:f9:06:45:eb:2a:87:f5:87:24:a4:e8:a4: 35:93:ff:19:2c:5d:90:84:f8:52:03:5f:a9:a3:f9: 6b:5d:5b:52:3a:79:a1:14:ce:76:cc:41:a1:22:cd: 52:34:9c:b2:f3:53:0d:e4:4e:70:5a:49:5c:1e:b4: f1:3a:54:f1:d7:32:b7:f8:dc:f8:8f:02:fd:85:4a: 13:d5:91:bd:42:28:06:8c:1c:e7:23:b1:51:09:5d: b4:ba:5e:57:20:f8:b1:74:0c:9f:ea:ef:12:fc:a4: 03:02:3a:ad:c1:06:de:6e:7a:70:ce:dd:8b:aa:9b: 7d:17:7b:2a:c8:cd:73:09:87:c9:2a:89:c8:69:4f: d5:79:76:d4:c7:5b:bb:e4:49:3e:d7:2b:ab:f4:f0: 12:79:d4:20:38:2c:9f:b8:80:11:7d:a5:1e:c4:69: 2e:b8:cc:5d:7d:8f:54:0a:0f:be:c5:35:aa:2b:7a: 33:35:99:93:32:da:56:0f:5a:30:d3:2a:73:ea:0f: a1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CD:E4:13:64:E8:2E:1F:E4:19:FB:8A:C7:A7:B4:6C:8B:B6:1B:AA X509v3 Authority Key Identifier: keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:66:37:8f:88:82:4f:5d:a4:60:bb:d1:4d:1f:84:d4:e3:a7: 46:04:68:d1:2a:71:85:e7:df:bf:ba:21:7c:95:dc:07:ef:b9: 34:b4:56:b7:35:ce:5a:29:0a:e3:96:3b:76:c0:61:9b:99:ce: 3f:d8:b0:06:c7:35:b4:6a:fb:c3:1f:8b:72:5a:0e:6e:9f:37: 03:10:5a:ff:1e:a0:24:cf:15:1d:91:1d:79:c9:12:66:c6:ab: ce:fd:47:51:ad:1a:09:ab:b4:07:6f:06:d4:b5:8e:55:87:f8: de:46:5a:db:50:7f:70:50:1c:f4:df:5f:c8:d9:ef:b0:b1:55: fd:11:40:d5:12:10:e1:de:d9:ad:61:32:06:1c:1d:6b:c5:c8: 06:6e:60:12:d6:85:be:5b:a0:da:86:d9:1c:e5:4b:75:ff:02: 8b:d4:1e:ed:9a:11:9d:77:21:96:08:1a:f0:38:d1:23:52:d7: 84:c5:a9:eb:c2:2b:1f:0a:66:92:7f:8e:bc:45:de:96:40:74: 00:34:0a:6e:f0:83:f1:d7:ba:21:e2:5e:3d:0c:e9:62:62:63: e7:dc:08:fb:0e:b6:8e:5d:06:da:61:ac:ef:10:7b:ae:3d:90: da:fe:43:bd:a0:fe:1e:70:4e:5c:dd:16:5a:02:cc:a4:a6:1e: 6d:e9:27:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG NEJBNDIzMjkwHhcNMjYwMTI0MTkxMTIxWhcNMjYwMTMxMTkxMTIxWjAYMRYwFAYD VQQDDA02OTc1MTk1OS1kYTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAGwsiW9ElLxDvgw5vYjSyuooOgceeZF5vjjXSmIoSRYuwueQFEdQ+Zh16Lz XK9xQmARBlkFkcoEsY7D1Kf5BkXrKof1hySk6KQ1k/8ZLF2QhPhSA1+po/lrXVtS OnmhFM52zEGhIs1SNJyy81MN5E5wWklcHrTxOlTx1zK3+Nz4jwL9hUoT1ZG9QigG jBznI7FRCV20ul5XIPixdAyf6u8S/KQDAjqtwQbebnpwzt2Lqpt9F3sqyM1zCYfJ KonIaU/VeXbUx1u75Ek+1yur9PASedQgOCyfuIARfaUexGkuuMxdfY9UCg++xTWq K3ozNZmTMtpWD1ow0ypz6g+h/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7N5BNk 6C4f5Bn7isentGyLthuqMB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wQkJEOUVBMjgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIx ODN4ejJCdjUtckgwdWtJeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGZjePiIJPXaRgu9FNH4TU46dGBGjRKnGF59+/uiF8ldwH77k0tFa3 Nc5aKQrjljt2wGGbmc4/2LAGxzW0avvDH4tyWg5unzcDEFr/HqAkzxUdkR15yRJm xqvO/UdRrRoJq7QHbwbUtY5Vh/jeRlrbUH9wUBz031/I2e+wsVX9EUDVEhDh3tmt YTIGHB1rxcgGbmAS1oW+W6Dahtkc5Ut1/wKL1B7tmhGddyGWCBrwONEjUteExanr wisfCmaSf468Rd6WQHQANApu8IPx17oh4l49DOliYmPn3Aj7DraOXQbaYazvEHuu PZDa/kO9oP4ecE5c3RZaAsykph5t6Scg -----END CERTIFICATE-----Generated at Sun Jan 25 02:58:21 2026 by rpki-client