This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft File: T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft (raw, json) Hash identifier: yYldxJPMlSxY+/m/mkx9DW0kZUlUTjctwQkTfOboHiY= Subject key identifier: 59:99:0B:A7:E8:DC:76:ED:7B:E7:BF:E7:A5:EB:B0:4F:9E:91:79:80 Authority key identifier: 4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 Certificate issuer: /CN=A9194815/serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Certificate serial: 068E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft Manifest number: 0689 Signing time: Sat 24 Jan 2026 21:46:26 +0000 Manifest this update: Sat 24 Jan 2026 21:46:25 +0000 Manifest next update: Sat 31 Jan 2026 21:46:25 +0000 Files and hashes: 1: T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl (hash: nbuu1eN3PLCRV2V0XImPG1micTDAzvwwpzGgMBkXa28=) 2: 873D9ADEA1C411EB9F4FE15EC4F9AE02.roa (hash: Fr5NAXSgAa9hVkhIVMm09Qkrw1we8d2exICvkLCxNcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194815, serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Validity Not Before: Jan 24 21:46:25 2026 GMT Not After : Jan 31 21:46:25 2026 GMT Subject: CN=69753db2-6f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c7:bb:b3:0e:74:a3:a7:b5:0f:e5:98:cc:83: 92:62:a8:82:2b:43:89:49:93:29:98:c9:8b:b8:30: fd:3c:e2:32:55:d8:0f:eb:cf:55:51:50:82:0b:cf: b1:8e:b1:d3:7b:af:18:f4:42:bd:2c:16:97:e7:3c: 56:36:4e:2a:80:d4:45:3e:bb:86:71:4d:2c:cb:b7: e1:70:bd:c1:d5:40:6c:a5:9b:3d:04:6c:6a:d4:04: 72:1a:8b:5c:fb:b0:e8:ba:1b:54:fe:fe:fe:9f:38: 0d:bf:ef:e2:1a:b0:21:fa:97:7b:57:a0:cd:c7:33: 4f:8c:1d:8d:4b:8f:9f:8e:ef:dc:e0:3d:20:ae:68: 6a:fc:5d:7e:29:75:5d:06:ee:5d:df:58:5b:1c:a6: 6b:9c:5d:e6:ac:e0:ff:39:3e:b2:b2:fd:77:a9:88: 21:4f:8f:43:76:e3:9c:84:88:e6:0f:61:4f:ec:7d: 61:de:25:24:85:39:99:7b:36:ad:bc:1f:d5:88:98: 1e:7d:45:f2:bf:2e:72:d3:46:49:ea:9a:8a:57:3d: 3f:83:f4:b2:d7:12:e4:13:b0:60:16:02:68:53:57: d2:77:8a:b0:88:83:56:7e:d4:86:51:72:d0:08:52: 85:80:c7:f4:37:97:29:40:cb:93:e8:ac:cf:8f:fd: 64:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:99:0B:A7:E8:DC:76:ED:7B:E7:BF:E7:A5:EB:B0:4F:9E:91:79:80 X509v3 Authority Key Identifier: keyid:4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b1:35:50:31:44:ea:fd:6e:4a:a3:b7:41:ed:b1:60:55:f3: 52:c1:7c:68:c6:bf:6a:66:61:9c:e0:ff:24:a7:9a:5d:74:2e: 4f:4a:b0:2b:e2:ba:0f:e7:4b:e5:9c:53:a0:4d:5e:1e:fb:de: 84:4d:ed:fb:cf:e5:12:31:2d:34:db:47:bb:6b:74:f3:d6:1e: e6:72:81:3b:a0:cf:80:62:db:9c:5d:11:57:af:41:e1:6f:7c: 97:ad:7e:58:dd:b7:1a:de:d7:d3:47:3d:d1:bd:2c:dd:2b:70: e1:13:db:25:07:e5:97:76:e8:58:58:f0:f7:8a:00:2e:c4:c1: 68:e2:55:c0:ac:71:1f:63:48:15:c5:f6:58:b6:94:14:58:ac: 69:92:32:1b:8d:72:1c:e0:93:87:52:39:2c:49:6b:fc:fb:4c: db:72:be:ca:94:91:2d:a4:f3:c9:2b:e5:80:ef:72:4a:5f:be: 52:cc:65:0e:c2:3a:52:0f:c6:35:eb:78:58:60:43:4b:40:a9: 8f:2c:bc:ff:b4:92:bd:a0:13:3b:1d:fb:5a:f8:70:08:bb:16: 45:da:bc:64:94:0a:ff:75:57:9f:79:9f:57:48:b0:d3:1d:df: 31:d4:f4:c2:dd:ae:80:18:0c:2e:84:97:ac:53:bc:8a:cd:b3: b8:3f:0f:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4MTUxMTAvBgNVBAUTKDRGNzQ0QzNDMEFBNzk3OUE4NTg0OUY1NkVFQjdCOTg3 QUIyM0QyNTgwHhcNMjYwMTI0MjE0NjI1WhcNMjYwMTMxMjE0NjI1WjAYMRYwFAYD VQQDDA02OTc1M2RiMi02ZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmse7sw50o6e1D+WYzIOSYqiCK0OJSZMpmMmLuDD9POIyVdgP689VUVCCC8+x jrHTe68Y9EK9LBaX5zxWNk4qgNRFPruGcU0sy7fhcL3B1UBspZs9BGxq1ARyGotc +7DouhtU/v7+nzgNv+/iGrAh+pd7V6DNxzNPjB2NS4+fju/c4D0grmhq/F1+KXVd Bu5d31hbHKZrnF3mrOD/OT6ysv13qYghT49DduOchIjmD2FP7H1h3iUkhTmZezat vB/ViJgefUXyvy5y00ZJ6pqKVz0/g/Sy1xLkE7BgFgJoU1fSd4qwiINWftSGUXLQ CFKFgMf0N5cpQMuT6KzPj/1kNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmZC6fo 3Hbte+e/56XrsE+ekXmAMB8GA1UdIwQYMBaAFE90TDwKp5eahYSfVu63uYerI9JY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDgxNS8xQjYzRTdEOEEx QzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1cUZoSjlXN3JlNWg2c2ow bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QzUk1QQXFubDVxRmhKOVc3cmU1aDZzajBsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDgxNS8xQjYzRTdEOEExQzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1 cUZoSjlXN3JlNWg2c2owbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGsTVQMUTq/W5Ko7dB7bFgVfNSwXxoxr9qZmGc4P8kp5pddC5PSrAr 4roP50vlnFOgTV4e+96ETe37z+USMS0020e7a3Tz1h7mcoE7oM+AYtucXRFXr0Hh b3yXrX5Y3bca3tfTRz3RvSzdK3DhE9slB+WXduhYWPD3igAuxMFo4lXArHEfY0gV xfZYtpQUWKxpkjIbjXIc4JOHUjksSWv8+0zbcr7KlJEtpPPJK+WA73JKX75SzGUO wjpSD8Y163hYYENLQKmPLLz/tJK9oBM7Hfta+HAIuxZF2rxklAr/dVefeZ9XSLDT Hd8x1PTC3a6AGAwuhJesU7yKzbO4Pw/U -----END CERTIFICATE-----Generated at Sun Jan 25 02:59:03 2026 by rpki-client