This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: oT/rQ98H41z1vK7hLgkeEdL6Oxcaf0V9ygyMKYRmRK0= Subject key identifier: 62:D1:41:BB:B5:ED:0B:04:D9:1C:61:33:1D:CC:06:0B:5E:5B:85:46 Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 05A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 0575 Signing time: Sat 24 Jan 2026 22:38:30 +0000 Manifest this update: Sat 24 Jan 2026 22:38:30 +0000 Manifest next update: Sat 31 Jan 2026 22:38:30 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: JZSfKKeyjsnDprB1M890YEIavdRwGzX1+2BSSIdudvo=) 2: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 9x2G7s9XnkzB/aoRrwX0fPhCy+k2H2dG9FDGRVFamnQ=) 3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: /zpbbyMm2w5Xcql5zfUtoN8iPAyG5aFUqVMvzNCSPuM=) 4: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: XSuhAhi3kRB8kUY+l+Kw6bn9CYFf3Y2Di14tTGA1/Oo=) 5: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: vwZIGcuT/wdsi2ov5n4aKBIuwaWae+4rjnxU5e55BsU=) 6: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: 02gdGUoKaGU981qYNAOicujQXSbUOhKyvNrMWXNfXQk=) 7: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: hn+qGaZCtkUKYopOyzVnHKxTxBxzaX/N9RY/bypGInA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1440 (0x5a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Jan 24 22:38:30 2026 GMT Not After : Jan 31 22:38:30 2026 GMT Subject: CN=697549e6-f801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:81:6f:10:49:84:1f:92:e7:3f:8d:98:e3: e2:15:a2:74:2b:4b:87:28:ec:cf:c3:2b:e8:48:1b: 8c:5a:a2:30:8f:c2:7d:c0:91:75:a0:5f:c5:d3:48: 66:d1:d1:6a:ec:85:d3:53:a0:e4:9c:65:4c:77:2c: 90:47:cf:2c:d7:f0:4e:ba:86:af:42:0e:60:b3:0d: e1:18:fe:d6:a2:7e:73:06:37:bc:25:4e:2d:c4:b2: a3:cd:83:3b:d5:05:d3:24:00:71:af:a7:a4:9c:9a: 82:2c:15:fc:3a:17:77:23:d5:09:2a:f7:91:9f:4c: f4:fb:f2:2f:39:f7:ad:a9:c6:ad:ad:d8:07:b1:5c: 8e:2e:07:6e:08:dd:b7:5d:bd:71:72:13:99:0c:ff: f2:f8:04:ca:bb:78:1e:26:3e:7d:da:da:50:54:15: d8:df:c4:48:79:f9:ea:cc:bb:58:ed:1d:3c:fd:73: 20:00:36:c2:83:c8:0d:6f:c6:d8:cb:78:7b:23:19: 70:09:c9:3b:98:92:9b:1f:57:b5:62:25:3d:7f:b7: b6:5d:0e:65:3c:9a:15:fe:fa:fc:3e:d5:d2:6a:1f: bd:96:8c:9b:0b:45:b4:4a:ed:f9:2d:7c:b1:b4:9e: 9b:2e:1b:73:51:ea:22:7a:12:5d:cd:22:b8:d9:99: 29:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D1:41:BB:B5:ED:0B:04:D9:1C:61:33:1D:CC:06:0B:5E:5B:85:46 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:5c:c1:d7:6c:9a:41:30:06:83:f8:ec:4d:da:d6:d8:14:68: fd:0c:6a:78:1c:65:07:7a:c8:c6:14:d8:e9:db:d8:44:8b:bb: 8c:6b:18:fb:4d:9c:05:66:ba:dc:8d:ff:54:18:38:ce:68:e8: d1:0c:c0:eb:7b:54:02:23:33:97:12:51:9c:df:74:35:7f:c6: 55:75:5f:5a:61:51:ff:8b:20:36:24:0b:1b:ed:c3:31:56:ff: dc:eb:be:ec:eb:e6:ab:ae:a9:08:2d:91:2b:47:87:4f:ce:9f: 30:cf:31:eb:ca:aa:d9:d6:f0:39:be:60:22:ae:36:6e:aa:e0: 05:1c:40:c2:37:6a:75:30:81:05:09:56:9f:d5:38:b8:fa:ac: 11:ce:63:3b:f5:24:52:bb:5b:73:8c:c6:7e:73:71:ac:4a:29: df:cb:02:15:47:c1:d3:74:5d:96:af:c1:72:ef:fd:d2:22:52: f8:7b:fb:93:4c:29:6a:61:de:96:88:4e:11:21:34:1e:50:a7: 55:28:be:38:ed:9d:69:9a:10:33:01:22:04:e4:b5:b1:cb:28: 88:f0:53:41:92:e5:6f:7b:2e:ec:84:01:b4:aa:6b:90:db:67: 26:ce:23:e1:4b:32:2e:bf:0d:6e:6b:13:ed:4c:68:1e:46:29: 81:a6:24:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjYwMTI0MjIzODMwWhcNMjYwMTMxMjIzODMwWjAYMRYwFAYD VQQDDA02OTc1NDllNi1mODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqm2BbxBJhB+S5z+NmOPiFaJ0K0uHKOzPwyvoSBuMWqIwj8J9wJF1oF/F00hm 0dFq7IXTU6DknGVMdyyQR88s1/BOuoavQg5gsw3hGP7Won5zBje8JU4txLKjzYM7 1QXTJABxr6eknJqCLBX8Ohd3I9UJKveRn0z0+/IvOfetqcatrdgHsVyOLgduCN23 Xb1xchOZDP/y+ATKu3geJj592tpQVBXY38RIefnqzLtY7R08/XMgADbCg8gNb8bY y3h7IxlwCck7mJKbH1e1YiU9f7e2XQ5lPJoV/vr8PtXSah+9loybC0W0Su35LXyx tJ6bLhtzUeoiehJdzSK42ZkpqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLRQbu1 7QsE2RxhMx3MBgteW4VGMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXXMHXbJpBMAaD+OxN2tbYFGj9DGp4HGUHesjGFNjp29hEi7uMaxj7 TZwFZrrcjf9UGDjOaOjRDMDre1QCIzOXElGc33Q1f8ZVdV9aYVH/iyA2JAsb7cMx Vv/c677s6+arrqkILZErR4dPzp8wzzHryqrZ1vA5vmAirjZuquAFHEDCN2p1MIEF CVaf1Ti4+qwRzmM79SRSu1tzjMZ+c3GsSinfywIVR8HTdF2Wr8Fy7/3SIlL4e/uT TClqYd6WiE4RITQeUKdVKL447Z1pmhAzASIE5LWxyyiI8FNBkuVvey7shAG0qmuQ 22cmziPhSzIuvw1uaxPtTGgeRimBpiRu -----END CERTIFICATE-----Generated at Sun Jan 25 10:48:23 2026 by rpki-client