This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft File: stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json) Hash identifier: HGela3ukbiMPOuW4WjoyBHDSfbhZqEi+R7JA4/hTp5c= Subject key identifier: 9E:B1:A2:EA:C8:E6:C1:8B:3B:EE:7B:A3:2D:D6:3B:59:71:B6:78:1A Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 03B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft Manifest number: 03A8 Signing time: Sat 24 Jan 2026 23:54:50 +0000 Manifest this update: Sat 24 Jan 2026 23:54:50 +0000 Manifest next update: Sat 31 Jan 2026 23:54:50 +0000 Files and hashes: 1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: vliRl6Q8H0ER6oVmd4ropSiFvm9HYkys99gzclvOSNU=) 2: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: 3gM1BdbMTDqrDwIX93z+/V+zTYOD4jC/sFTj/5bifAc=) 3: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: 7yly3hdDUnooff1AD5UaEbPn8g4l5l4qpcVVzY6AZJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 944 (0x3b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Validity Not Before: Jan 24 23:54:50 2026 GMT Not After : Jan 31 23:54:50 2026 GMT Subject: CN=69755bca-cb85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fd:b5:36:22:81:39:3d:8e:ca:70:69:57:69: 73:7e:20:75:51:ef:11:f3:9f:2e:77:05:a1:64:0b: 5f:59:7d:35:0a:3c:cb:99:bd:c5:cd:9f:7e:29:7e: 76:c6:dc:d9:97:fd:a9:35:a4:5f:10:e5:48:08:11: 15:77:ba:d1:50:08:1d:7b:65:ed:de:f8:6f:5d:ce: c3:6b:e8:d0:60:34:1c:55:f3:57:ed:c1:a2:8d:d8: 8d:f3:38:49:42:94:61:0a:54:9e:a1:52:56:10:5a: 9d:c1:2a:86:a0:e9:b7:1c:77:c2:a2:cb:66:21:57: 4f:51:f0:08:49:12:24:29:df:bb:42:1e:09:04:46: e3:e5:e3:e9:ee:ff:dc:ec:0e:01:2e:7f:e2:c3:e3: 0b:14:5c:00:d0:39:c2:1b:13:b0:dd:48:2c:40:56: cd:15:e8:f1:56:87:96:e0:79:e1:fe:d4:50:aa:01: 12:d1:db:36:43:66:f3:90:43:46:6e:78:d0:3d:6a: 60:af:6c:a1:c7:bb:17:f5:f9:59:17:a5:70:89:f0: cb:68:96:65:62:82:fb:d4:2a:ce:d4:de:cc:aa:84: 46:94:97:ba:5a:6d:fd:84:0f:d4:15:41:da:b4:a5: 25:77:39:70:02:4f:8d:b8:7b:c3:89:4c:44:aa:74: 7b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B1:A2:EA:C8:E6:C1:8B:3B:EE:7B:A3:2D:D6:3B:59:71:B6:78:1A X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f6:22:21:d0:80:43:a3:73:0a:f7:ab:5c:ad:86:b8:c6:46: 54:1e:15:67:29:74:8f:7e:65:ea:c9:a8:d5:16:f4:95:05:f7: 0a:da:cd:74:46:b2:e9:e9:16:b6:13:23:78:e6:0f:90:22:c3: 85:a7:84:11:9d:e0:16:20:d3:ce:d8:e6:57:13:17:6d:0e:7e: cf:98:6d:90:a1:13:4e:73:98:8a:de:74:94:85:5d:6e:7d:1a: c5:b4:89:d7:17:31:44:40:8f:ec:d1:e1:f0:51:c9:e7:e1:73: 95:6d:af:9c:e7:03:10:40:f0:00:90:b5:ca:57:5e:9f:9d:ef: 94:15:74:b0:a8:be:8e:fb:ef:2e:dd:ce:34:3d:74:0b:4a:f5: 11:09:c4:1e:3f:a5:12:43:49:b8:5c:d6:8b:88:0d:be:69:c4: 0c:6b:57:8d:8f:e1:23:59:fd:f8:e1:a9:f3:24:bc:0b:2c:f5: bd:c7:7c:97:a0:ab:f7:65:bb:89:c6:f3:62:24:b0:7a:39:69: 99:68:8e:f1:f1:8f:e1:cd:08:66:28:3a:dc:42:99:cd:fe:1e: 1f:b2:57:3e:7c:ac:7f:c2:f8:d5:06:91:ac:8e:b2:f4:63:a1: db:00:d9:7d:67:79:3f:41:dc:69:4b:e0:1f:3d:87:b8:7f:06: 2a:be:f3:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjYwMTI0MjM1NDUwWhcNMjYwMTMxMjM1NDUwWjAYMRYwFAYD VQQDDA02OTc1NWJjYS1jYjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3f21NiKBOT2OynBpV2lzfiB1Ue8R858udwWhZAtfWX01CjzLmb3FzZ9+KX52 xtzZl/2pNaRfEOVICBEVd7rRUAgde2Xt3vhvXc7Da+jQYDQcVfNX7cGijdiN8zhJ QpRhClSeoVJWEFqdwSqGoOm3HHfCostmIVdPUfAISRIkKd+7Qh4JBEbj5ePp7v/c 7A4BLn/iw+MLFFwA0DnCGxOw3UgsQFbNFejxVoeW4Hnh/tRQqgES0ds2Q2bzkENG bnjQPWpgr2yhx7sX9flZF6VwifDLaJZlYoL71CrO1N7MqoRGlJe6Wm39hA/UFUHa tKUldzlwAk+NuHvDiUxEqnR76wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6xourI 5sGLO+57oy3WO1lxtngaMB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDFBNC8xRUI5RTNBNkM2QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1 ZnU5eDhEMWxxLXJkS0pMSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB89iIh0IBDo3MK96tcrYa4xkZUHhVnKXSPfmXqyajVFvSVBfcK2s10 RrLp6Ra2EyN45g+QIsOFp4QRneAWINPO2OZXExdtDn7PmG2QoRNOc5iK3nSUhV1u fRrFtInXFzFEQI/s0eHwUcnn4XOVba+c5wMQQPAAkLXKV16fne+UFXSwqL6O++8u 3c40PXQLSvURCcQeP6USQ0m4XNaLiA2+acQMa1eNj+EjWf344anzJLwLLPW9x3yX oKv3ZbuJxvNiJLB6OWmZaI7x8Y/hzQhmKDrcQpnN/h4fslc+fKx/wvjVBpGsjrL0 Y6HbANl9Z3k/QdxpS+AfPYe4fwYqvvOa -----END CERTIFICATE-----Generated at Sun Jan 25 09:24:42 2026 by rpki-client