This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft File: TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json) Hash identifier: hgcKLP1KxPuKpzOUoyXhqWp66Y12BNChmiWN6d6iqwQ= Subject key identifier: 1D:FF:E7:92:73:C5:69:77:7E:82:3C:8F:AD:B9:49:E1:9B:27:5B:D3 Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 195F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft Manifest number: 1923 Signing time: Sat 24 Jan 2026 16:14:07 +0000 Manifest this update: Sat 24 Jan 2026 16:14:07 +0000 Manifest next update: Sat 31 Jan 2026 16:14:07 +0000 Files and hashes: 1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: YZQrpIoj9/QzNSZ2Xj157d9CJky6FphCX8sUFSzZRtY=) 2: 974F9BA0A87011EFB3944C13C4F9AE02.roa (hash: NzpnX1WtE2mpf3lFdoR3wJBuVxtYUfmLPisZNTkOWjQ=) 3: 9680FCD2A87011EFB3944C13C4F9AE02.roa (hash: w+b4Zgmg30gS69MI8U4GqE5qtsO8Z+Rqu1UuRVApfYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6495 (0x195f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: Jan 24 16:14:07 2026 GMT Not After : Jan 31 16:14:07 2026 GMT Subject: CN=6974efcf-456d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3f:8e:b6:65:96:d5:28:57:ad:d8:fe:4c:ce: 08:23:fc:69:41:db:8c:d6:af:66:5f:e5:aa:7b:57: 1d:c4:60:76:86:fe:e8:1b:b0:2a:e5:8a:a5:1d:c7: f8:06:12:49:31:aa:2c:cb:27:96:d9:36:a1:d6:de: 9b:a7:44:27:e8:c1:1b:b9:2e:a7:ec:5c:bc:2f:54: 9d:2f:d0:cf:55:83:c7:07:46:14:7c:79:2a:68:4d: 42:f9:2e:17:64:43:d8:d1:4a:d2:94:0c:ea:df:6e: 7b:0f:10:00:98:d2:75:41:7a:7d:00:0e:c1:a1:1b: 44:5d:ea:5f:44:31:b1:5b:53:4a:b2:2c:15:0f:9d: 35:7e:f7:71:9f:e0:50:47:7f:ee:69:fb:1d:cc:bf: 59:36:f1:7b:c4:56:be:c9:b1:11:f3:6e:a4:d5:d5: 50:8a:f0:15:e5:52:34:13:f9:c9:ef:c8:b2:9b:13: aa:c0:1b:a3:32:43:68:98:84:67:52:a2:1c:d1:82: 4d:bd:56:6b:51:98:4f:f6:29:22:77:a7:49:48:27: 82:6b:a5:f0:73:60:2a:2b:ae:32:74:be:71:10:c3: 83:82:cc:e4:71:2f:fa:c9:4b:b1:d5:49:f7:0f:9c: 21:6d:a8:bf:62:82:7a:d5:bd:a4:3f:bf:78:ca:4b: 93:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FF:E7:92:73:C5:69:77:7E:82:3C:8F:AD:B9:49:E1:9B:27:5B:D3 X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:36:7e:52:b8:df:9b:78:e8:1f:f3:39:dc:e5:b5:d3:69:17: 11:53:57:83:f5:04:09:79:2a:ba:7f:33:cb:93:64:27:17:46: d1:cc:4f:16:56:dc:9c:2d:e1:46:18:cb:58:bc:ae:dd:b3:db: 74:00:cb:63:a4:8a:95:91:4b:1d:22:3c:f6:d0:e0:9b:57:4b: 1e:0a:fb:71:3e:a2:a2:79:0c:d0:7b:ac:e5:3d:f9:7b:95:f5: c4:66:29:16:6e:81:e2:4a:ea:a7:32:3f:1e:bd:dc:fd:f9:cc: c4:ac:90:29:92:69:b1:3f:4f:94:bc:40:fe:83:ca:4f:8f:3e: 6d:02:77:9f:36:f2:af:3b:53:8d:d2:cf:55:4e:6a:95:e4:8b: 09:c0:ec:61:a6:20:e8:98:9d:56:bf:33:55:62:53:99:fa:1b: 8c:aa:64:cf:3e:08:ac:a3:44:fd:2b:1b:7f:a6:bf:10:a6:51: 65:17:34:f0:e0:5a:35:57:74:cf:11:ea:e5:90:e5:82:a4:6c: 7c:9d:cb:fc:5a:8c:17:71:b5:64:f8:0c:3c:c5:75:0a:10:78: 83:af:2c:87:e1:bc:3c:15:e5:6d:2a:be:10:f4:de:bd:86:30: 8f:d8:3c:7d:e1:94:ee:0d:0c:1d:86:7b:c8:78:d6:bb:0e:56: dd:06:a0:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjYwMTI0MTYxNDA3WhcNMjYwMTMxMTYxNDA3WjAYMRYwFAYD VQQDDA02OTc0ZWZjZi00NTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkT+OtmWW1ShXrdj+TM4II/xpQduM1q9mX+Wqe1cdxGB2hv7oG7Aq5YqlHcf4 BhJJMaosyyeW2Tah1t6bp0Qn6MEbuS6n7Fy8L1SdL9DPVYPHB0YUfHkqaE1C+S4X ZEPY0UrSlAzq3257DxAAmNJ1QXp9AA7BoRtEXepfRDGxW1NKsiwVD501fvdxn+BQ R3/uafsdzL9ZNvF7xFa+ybER826k1dVQivAV5VI0E/nJ78iymxOqwBujMkNomIRn UqIc0YJNvVZrUZhP9ikid6dJSCeCa6Xwc2AqK64ydL5xEMODgszkcS/6yUux1Un3 D5whbai/YoJ61b2kP794ykuTPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3/55Jz xWl3foI8j625SeGbJ1vTMB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDZCRi9FMzYxQkEyMEE1QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1 S1Yzc1ljR3pLazdtaXRfU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9Nn5SuN+beOgf8znc5bXTaRcRU1eD9QQJeSq6fzPLk2QnF0bRzE8W VtycLeFGGMtYvK7ds9t0AMtjpIqVkUsdIjz20OCbV0seCvtxPqKieQzQe6zlPfl7 lfXEZikWboHiSuqnMj8evdz9+czErJApkmmxP0+UvED+g8pPjz5tAnefNvKvO1ON 0s9VTmqV5IsJwOxhpiDomJ1WvzNVYlOZ+huMqmTPPgiso0T9Kxt/pr8QplFlFzTw 4Fo1V3TPEerlkOWCpGx8ncv8WowXcbVk+Aw8xXUKEHiDryyH4bw8FeVtKr4Q9N69 hjCP2Dx94ZTuDQwdhnvIeNa7DlbdBqDA -----END CERTIFICATE-----Generated at Sun Jan 25 08:02:53 2026 by rpki-client