This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft File: A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json) Hash identifier: 34b5vekwlBArLwKi+26apoo5DgpWIMuuBa40iilISCE= Subject key identifier: 9F:E6:F2:80:8C:98:A7:D9:88:A0:BA:B6:BE:61:72:F9:FB:AE:24:E5 Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 Certificate issuer: /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft Manifest number: 0154 Signing time: Sun 25 Jan 2026 03:24:19 +0000 Manifest this update: Sun 25 Jan 2026 03:24:19 +0000 Manifest next update: Sun 01 Feb 2026 03:24:19 +0000 Files and hashes: 1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: CjabMfv8I3OXC0hoxfCu7cCp2RRaqCHau2roMWSZA8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD, serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Validity Not Before: Jan 25 03:24:19 2026 GMT Not After : Feb 1 03:24:19 2026 GMT Subject: CN=69758ce3-970a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:62:24:2d:e2:36:4e:23:79:36:41:b1:1d:98: b9:a1:03:56:08:e0:d3:4c:9e:99:fa:69:b2:b8:55: ae:3c:51:6c:fa:cc:8b:b5:cd:84:f2:db:46:71:65: 60:1a:7d:c8:64:8f:5c:cd:9e:14:5e:9a:f7:35:5f: 9c:a5:8d:22:45:2f:93:39:7f:7a:75:ec:3b:c2:7f: a6:12:fe:f8:9e:13:9a:1c:bb:e7:52:f4:11:06:ff: 2f:e5:53:f1:29:30:26:a3:67:2e:d2:11:bd:07:a7: ca:6b:ba:53:f0:dd:c7:53:b3:55:dd:68:19:e8:bd: 20:4d:37:1d:b7:4b:d3:d4:ad:2e:c0:9f:fb:45:be: bd:39:9d:9e:99:b6:56:99:04:be:d6:39:db:f7:dd: ae:47:67:d4:30:fa:42:9a:62:a7:e4:c3:fa:09:d2: 42:44:26:11:fe:2c:2e:74:8d:66:fa:bc:0c:b2:9a: 54:71:b9:0b:a7:ee:3e:2b:e0:c2:e4:60:71:c7:82: e7:0d:0a:4c:38:e0:11:f9:1f:73:1e:7d:23:48:f9: c6:81:99:68:8e:eb:1b:2b:1f:ff:35:8d:37:c2:86: 5b:d0:79:f3:7f:15:9b:6d:a4:c0:5e:ad:8e:2e:3b: cc:f8:0d:b8:cf:03:4b:a3:b0:5d:2c:55:9d:be:c5: 4e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E6:F2:80:8C:98:A7:D9:88:A0:BA:B6:BE:61:72:F9:FB:AE:24:E5 X509v3 Authority Key Identifier: keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:d3:68:4b:d2:d4:7f:1d:06:f4:d2:55:13:14:28:02:e3:ce: a8:dd:62:2b:ea:aa:96:d0:9a:1b:79:9b:48:07:cd:6a:55:9f: 60:32:1f:f6:a8:d3:cf:03:c7:6a:8f:1a:07:ae:20:6a:cd:e6: 73:61:b5:ef:63:d5:ea:c6:ec:1a:9b:c3:8d:83:f6:bb:a9:cd: 4b:12:d9:2e:f6:79:31:48:0b:b7:95:28:fc:8e:5f:81:39:e3: aa:2a:c2:5b:85:96:de:80:af:2e:be:29:e8:66:2d:32:e2:74: 57:55:00:08:95:d4:ef:85:58:a0:fc:9b:b1:87:d7:7a:d9:18: a3:b6:29:9c:e6:9b:40:eb:0a:ab:b0:60:b5:83:b5:53:62:5f: 97:8f:af:dd:3b:0c:7b:76:53:d8:a2:04:bc:f2:01:cb:3a:1c: 79:0d:2f:cc:fd:63:d8:43:7a:26:c5:40:76:af:19:00:3d:43: 3d:51:d2:8d:1e:52:2f:31:af:b4:7e:89:77:2c:0b:83:5d:b1: 03:49:ac:76:17:d1:16:eb:26:a5:af:8a:30:55:5a:2b:57:4f: 1d:d4:28:19:27:8a:f1:ae:f7:fa:13:35:2a:a4:2f:d5:fb:df: b4:66:61:4b:08:6f:23:1d:a4:93:46:09:10:a8:a4:c3:d1:83: e2:64:c5:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENGQUQxMTAvBgNVBAUTKDAzRkYwNjU3QzBFQ0Y4NzM5ODMwMzNGN0M2QzY0ODhC MzM3ODlDNDMwHhcNMjYwMTI1MDMyNDE5WhcNMjYwMjAxMDMyNDE5WjAYMRYwFAYD VQQDDA02OTc1OGNlMy05NzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12IkLeI2TiN5NkGxHZi5oQNWCODTTJ6Z+mmyuFWuPFFs+syLtc2E8ttGcWVg Gn3IZI9czZ4UXpr3NV+cpY0iRS+TOX96dew7wn+mEv74nhOaHLvnUvQRBv8v5VPx KTAmo2cu0hG9B6fKa7pT8N3HU7NV3WgZ6L0gTTcdt0vT1K0uwJ/7Rb69OZ2embZW mQS+1jnb992uR2fUMPpCmmKn5MP6CdJCRCYR/iwudI1m+rwMsppUcbkLp+4+K+DC 5GBxx4LnDQpMOOAR+R9zHn0jSPnGgZlojusbKx//NY03woZb0HnzfxWbbaTAXq2O LjvM+A24zwNLo7BdLFWdvsVO+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/m8oCM mKfZiKC6tr5hcvn7riTlMB8GA1UdIwQYMBaAFAP/BlfA7PhzmDAz98bGSIszeJxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC81NjFENjYyRUVB MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1IT1lNRFAzeHNaSWl6TjRu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FfOEdWOERzLUhPWU1EUDN4c1pJaXpONG5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ZBRC81NjFENjYyRUVBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1I T1lNRFAzeHNaSWl6TjRuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV02hL0tR/HQb00lUTFCgC486o3WIr6qqW0JobeZtIB81qVZ9gMh/2 qNPPA8dqjxoHriBqzeZzYbXvY9Xqxuwam8ONg/a7qc1LEtku9nkxSAu3lSj8jl+B OeOqKsJbhZbegK8uvinoZi0y4nRXVQAIldTvhVig/Juxh9d62Rijtimc5ptA6wqr sGC1g7VTYl+Xj6/dOwx7dlPYogS88gHLOhx5DS/M/WPYQ3omxUB2rxkAPUM9UdKN HlIvMa+0fol3LAuDXbEDSax2F9EW6yalr4owVVorV08d1CgZJ4rxrvf6EzUqpC/V +9+0ZmFLCG8jHaSTRgkQqKTD0YPiZMVa -----END CERTIFICATE-----Generated at Sun Jan 25 10:46:57 2026 by rpki-client