This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft File: bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft (raw, json) Hash identifier: fN3ZBo8VzcmE3FBdOICTbIk+aIsBIJB357TbPNX5bfQ= Subject key identifier: 84:27:57:C2:EE:50:35:F3:E2:7A:03:67:6E:E8:FD:C9:72:BF:29:3F Authority key identifier: 6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95 Certificate issuer: /CN=A919243F/serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft Manifest number: 2D Signing time: Fri 23 Jan 2026 06:38:52 +0000 Manifest this update: Fri 23 Jan 2026 06:38:51 +0000 Manifest next update: Fri 30 Jan 2026 06:38:51 +0000 Files and hashes: 1: bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl (hash: lSe4EEbSQwa38gIyiPl7jvqWSL3lPAPszUIaWJKLfpg=) 2: 384B24AAB65511F0AE39E37FC4F9AE02.roa (hash: IiFDFyUtI+I6691ygwzpABiGbW4Bf29Vv0LhgY1Qc78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919243F, serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195 Validity Not Before: Jan 23 06:38:51 2026 GMT Not After : Jan 30 06:38:51 2026 GMT Subject: CN=6973177b-65ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:62:03:86:e9:fc:fd:24:cd:35:d1:59:26: c4:51:bd:40:27:d3:0b:db:ee:80:80:45:6e:96:eb: c6:1a:eb:38:a3:56:70:ee:42:ca:17:98:83:61:dc: ec:e0:a5:ea:48:8a:60:a4:b8:d2:5b:dd:40:45:3b: fb:3d:e0:12:38:f3:67:97:04:cb:7c:47:ee:35:e4: ad:57:7c:31:01:a9:50:a8:39:a9:51:23:a8:d7:3e: fe:10:a9:49:52:ee:fd:67:e1:fd:3c:46:12:03:32: ef:bc:69:69:a2:89:dc:bb:f5:7c:2f:3d:0e:bf:69: fb:cf:a6:7c:58:0d:98:7d:a9:65:ef:45:92:07:10: fe:7d:59:15:10:4e:45:2d:47:71:eb:b7:56:62:c8: 91:5c:1a:5f:90:b0:b7:38:7a:ef:24:8c:88:97:a8: f7:40:44:b6:04:e8:44:78:5c:7b:44:79:95:c4:c3: a2:25:39:81:d8:03:e5:8a:f0:0d:a9:a6:e0:d0:09: 3b:68:57:7f:fb:2d:6a:19:bd:3b:2a:70:d1:ce:32: d0:b0:7a:59:3d:5b:b5:81:e5:d3:1a:a0:68:9f:54: 05:01:86:e2:7f:ce:75:12:4b:a0:9c:1e:fa:08:2f: f6:7d:ab:a8:be:f6:52:66:5f:90:4a:77:3f:fc:29: e3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:27:57:C2:EE:50:35:F3:E2:7A:03:67:6E:E8:FD:C9:72:BF:29:3F X509v3 Authority Key Identifier: keyid:6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:91:dd:e0:ac:82:f5:f4:ef:8f:c5:0b:30:0a:f6:66:cb:64: 01:63:71:18:85:1b:40:04:07:71:b3:05:1a:f9:ef:3e:f7:48: a3:de:d6:42:09:8b:5b:c0:bf:8d:29:77:1b:03:0b:16:6e:73: 83:13:25:00:d4:ba:61:45:c8:2f:86:e0:dd:73:4e:2b:46:35: 08:c9:9b:b4:ef:37:43:49:74:65:d5:2f:38:f4:43:5b:e1:30: fa:c4:37:12:16:cf:5b:15:6d:aa:d4:ca:8e:56:96:2f:cc:12: b3:9e:53:30:d6:44:a0:e4:d5:85:a6:e9:1d:ec:89:e5:8e:32: 76:84:88:24:be:ad:30:40:db:78:2c:61:b3:8f:9f:54:0b:11: 30:97:aa:5b:67:82:4f:5b:64:22:2e:40:dc:17:3e:36:0f:0f: 09:9a:cf:e9:68:8e:bb:de:49:da:c2:ce:10:32:6f:98:74:70: 8c:2e:c9:81:6a:48:34:7f:e6:e9:fa:04:ba:dd:65:63:5f:02: 38:32:1b:dc:bd:bd:4d:30:83:b7:3e:88:1a:fb:43:2d:86:48: 31:08:75:26:bc:61:f8:55:20:80:6b:97:3e:f9:31:64:fb:72: 9b:3f:ae:d7:ee:7e:2c:06:04:a5:ac:ab:72:80:be:39:91:76: 20:1d:dc:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjQzRjExMC8GA1UEBRMoNkUxRjEyNDA5Q0YzOUJGOTEzQzQzMkI1ODc2RkZBRkQ5 RkQwNjE5NTAeFw0yNjAxMjMwNjM4NTFaFw0yNjAxMzAwNjM4NTFaMBgxFjAUBgNV BAMMDTY5NzMxNzdiLTY1YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/qmIDhun8/STNNdFZJsRRvUAn0wvb7oCARW6W68Ya6zijVnDuQsoXmINh3Ozg pepIimCkuNJb3UBFO/s94BI482eXBMt8R+415K1XfDEBqVCoOalRI6jXPv4QqUlS 7v1n4f08RhIDMu+8aWmiidy79XwvPQ6/afvPpnxYDZh9qWXvRZIHEP59WRUQTkUt R3Hrt1ZiyJFcGl+QsLc4eu8kjIiXqPdARLYE6ER4XHtEeZXEw6IlOYHYA+WK8A2p puDQCTtoV3/7LWoZvTsqcNHOMtCwelk9W7WB5dMaoGifVAUBhuJ/znUSS6CcHvoI L/Z9q6i+9lJmX5BKdz/8KeN9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhCdXwu5Q NfPiegNnbuj9yXK/KT8wHwYDVR0jBBgwFoAUbh8SQJzzm/kTxDK1h2/6/Z/QYZUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyNDNGL0U4RENBNjMyQjY1 NDExRjA5RUNGNEI3RkM0RjlBRTAyL2JoOFNRSnp6bV9rVHhESzFoMl82X1pfUVla VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYmg4U1FKenptX2tUeERLMWgyXzZfWl9RWVpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky NDNGL0U4RENBNjMyQjY1NDExRjA5RUNGNEI3RkM0RjlBRTAyL2JoOFNRSnp6bV9r VHhESzFoMl82X1pfUVlaVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKeR3eCsgvX074/FCzAK9mbLZAFjcRiFG0AEB3GzBRr57z73SKPe1kIJ i1vAv40pdxsDCxZuc4MTJQDUumFFyC+G4N1zTitGNQjJm7TvN0NJdGXVLzj0Q1vh MPrENxIWz1sVbarUyo5Wli/MErOeUzDWRKDk1YWm6R3sieWOMnaEiCS+rTBA23gs YbOPn1QLETCXqltngk9bZCIuQNwXPjYPDwmaz+lojrveSdrCzhAyb5h0cIwuyYFq SDR/5un6BLrdZWNfAjgyG9y9vU0wg7c+iBr7Qy2GSDEIdSa8YfhVIIBrlz75MWT7 cps/rtfufiwGBKWsq3KAvjmRdiAd3NI= -----END CERTIFICATE-----Generated at Sun Jan 25 06:17:34 2026 by rpki-client