This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft File: h2JAwXQl4PPi4Vds30t527-rVe4.mft (raw, json) Hash identifier: eIzQXOGbAeSh57/9+a4Rct+MdL9Su4mF1pF9ucuhZCQ= Subject key identifier: 22:5C:59:D5:13:9E:95:AA:13:CB:A0:30:4E:49:0E:16:8A:F8:4E:E5 Authority key identifier: 87:62:40:C1:74:25:E0:F3:E2:E1:57:6C:DF:4B:79:DB:BF:AB:55:EE Certificate issuer: /CN=A918FE4B/serialNumber=876240C17425E0F3E2E1576CDF4B79DBBFAB55EE Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft Manifest number: 02BD Signing time: Sun 25 Jan 2026 01:12:56 +0000 Manifest this update: Sun 25 Jan 2026 01:12:55 +0000 Manifest next update: Sun 01 Feb 2026 01:12:55 +0000 Files and hashes: 1: h2JAwXQl4PPi4Vds30t527-rVe4.crl (hash: gFkJlk2Tc9kyY9Y2oiYPi5E8FCib8+Ytek9k1HHaKqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.crl rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FE4B, serialNumber=876240C17425E0F3E2E1576CDF4B79DBBFAB55EE Validity Not Before: Jan 25 01:12:55 2026 GMT Not After : Feb 1 01:12:55 2026 GMT Subject: CN=69756e17-6ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f1:1c:18:45:15:b6:da:a2:6b:10:37:76:bc: 88:2a:8e:78:fd:d9:ab:f5:4a:cb:c3:a1:64:5b:9e: e4:25:0f:20:60:07:00:53:75:2a:c1:92:9d:8f:44: cc:46:c6:e3:05:97:c8:96:60:32:60:d4:4a:81:4b: dc:ba:a3:ed:99:f6:12:ec:ca:49:8c:d1:f2:a3:23: 7d:6b:27:87:1b:d5:2e:13:b7:09:4d:d7:84:fd:1f: 93:ec:94:10:09:31:a2:a8:08:82:2e:ad:8c:2b:b5: 3c:ce:91:ea:19:2a:28:e1:c6:5f:6e:ea:a7:80:14: 82:1d:8f:ef:e9:cd:21:11:c7:f6:de:c8:65:49:1a: 31:ce:af:65:fd:ca:05:b8:57:22:41:70:04:8d:b0: 89:c6:9f:41:a7:cf:7b:e0:b1:b8:75:4b:95:97:c1: a2:80:92:30:8f:b5:cf:0b:e0:33:99:15:01:2d:c7: ad:3c:d2:67:c3:04:76:94:6e:2e:49:de:9a:4b:53: 8a:c2:45:6d:11:37:c9:59:c3:7b:a6:eb:07:9d:b3: c9:c7:be:da:46:9e:25:2e:34:7e:08:bb:e4:f1:b9: 97:f3:7c:c3:94:8f:71:7c:cc:7e:1d:dc:aa:43:06: 1d:03:f8:8b:8a:b5:ac:23:6a:4f:a7:3b:16:5a:d4: fc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5C:59:D5:13:9E:95:AA:13:CB:A0:30:4E:49:0E:16:8A:F8:4E:E5 X509v3 Authority Key Identifier: keyid:87:62:40:C1:74:25:E0:F3:E2:E1:57:6C:DF:4B:79:DB:BF:AB:55:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:1b:51:11:ed:cb:b9:ae:38:c8:5d:5e:46:9e:2d:40:aa:51: a5:f7:08:a1:db:7d:76:50:1c:84:92:55:da:da:74:c3:79:89: 88:ac:1b:83:49:90:37:b8:12:9b:b3:6b:85:ca:f1:43:1c:7b: e9:63:95:49:2e:c6:ab:d0:01:07:0a:1f:f1:e7:8e:93:fe:e5: e2:80:cb:ca:a4:21:b9:50:5d:4b:85:72:a1:0d:bc:92:1c:80: 54:13:09:dd:37:3d:bc:37:0c:c4:75:b6:41:a4:0a:92:be:9c: 5c:f9:a1:ac:a7:77:5a:b9:17:8f:85:64:f4:77:27:2d:4c:3e: 9f:58:fc:6c:85:b4:d6:f6:25:f7:27:51:78:4d:98:eb:1d:50: f1:5f:46:70:45:31:4a:d6:c7:0f:68:57:58:6f:29:4f:a1:4e: 0e:ae:be:ce:a2:75:05:b5:38:7a:48:e0:14:f4:8e:e0:d4:d0: 39:60:aa:55:d2:9d:4d:16:a1:ab:08:6c:b3:5e:e9:08:76:86: f4:52:30:77:8e:f6:9f:61:93:ae:ef:9f:9f:d2:0f:f8:85:b3: d5:cd:b7:41:97:ab:7e:c2:f5:7d:f4:0e:ee:da:5e:0b:69:04: d5:ca:98:f7:52:3c:83:06:82:fe:b2:ec:8b:1d:c7:67:89:c6: 12:2c:20:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZFNEIxMTAvBgNVBAUTKDg3NjI0MEMxNzQyNUUwRjNFMkUxNTc2Q0RGNEI3OURC QkZBQjU1RUUwHhcNMjYwMTI1MDExMjU1WhcNMjYwMjAxMDExMjU1WjAYMRYwFAYD VQQDDA02OTc1NmUxNy02YWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/EcGEUVttqiaxA3dryIKo54/dmr9UrLw6FkW57kJQ8gYAcAU3UqwZKdj0TM RsbjBZfIlmAyYNRKgUvcuqPtmfYS7MpJjNHyoyN9ayeHG9UuE7cJTdeE/R+T7JQQ CTGiqAiCLq2MK7U8zpHqGSoo4cZfbuqngBSCHY/v6c0hEcf23shlSRoxzq9l/coF uFciQXAEjbCJxp9Bp8974LG4dUuVl8GigJIwj7XPC+AzmRUBLcetPNJnwwR2lG4u Sd6aS1OKwkVtETfJWcN7pusHnbPJx77aRp4lLjR+CLvk8bmX83zDlI9xfMx+Hdyq QwYdA/iLirWsI2pPpzsWWtT81QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJcWdUT npWqE8ugME5JDhaK+E7lMB8GA1UdIwQYMBaAFIdiQMF0JeDz4uFXbN9Ledu/q1Xu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkU0Qi9DMTQwMTZCNDhE N0YxMUVEQjdEQjg1NENDNEY5QUUwMi9oMkpBd1hRbDRQUGk0VmRzMzB0NTI3LXJW ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gySkF3WFFsNFBQaTRWZHMzMHQ1MjctclZlNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkU0Qi9DMTQwMTZCNDhEN0YxMUVEQjdEQjg1NENDNEY5QUUwMi9oMkpBd1hRbDRQ UGk0VmRzMzB0NTI3LXJWZTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlG1ER7cu5rjjIXV5Gni1AqlGl9wih2312UByEklXa2nTDeYmIrBuD SZA3uBKbs2uFyvFDHHvpY5VJLsar0AEHCh/x546T/uXigMvKpCG5UF1LhXKhDbyS HIBUEwndNz28NwzEdbZBpAqSvpxc+aGsp3dauRePhWT0dyctTD6fWPxshbTW9iX3 J1F4TZjrHVDxX0ZwRTFK1scPaFdYbylPoU4Orr7OonUFtTh6SOAU9I7g1NA5YKpV 0p1NFqGrCGyzXukIdob0UjB3jvafYZOu75+f0g/4hbPVzbdBl6t+wvV99A7u2l4L aQTVypj3UjyDBoL+suyLHcdnicYSLCBK -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:56 2026 by rpki-client