This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: g+aJ0YSBbqnEp6iliTtP7dmX3GMf+UYCm3K9uZbawqU= Subject key identifier: E5:2B:A9:D9:81:29:3C:C9:B3:16:31:FC:10:60:30:E7:0D:11:D8:CC Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 04EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 04E5 Signing time: Sat 24 Jan 2026 22:59:06 +0000 Manifest this update: Sat 24 Jan 2026 22:59:05 +0000 Manifest next update: Sat 31 Jan 2026 22:59:05 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: Gu/2kAf1EDiPoeH2gyUFc7Qc7176IeUgGY78R/zzu/c=) 2: E097013E910C11EFB994E187C4F9AE02.roa (hash: vrgdHN+EQa1Kq7q/Jj9Y5Q0FA9lEQE1lA2kxOo5yBEc=) 3: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: FXBB9DdsLSCSLqmcy5GfEeeUEH9NAw4i9aMiOHO8iOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1262 (0x4ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: Jan 24 22:59:05 2026 GMT Not After : Jan 31 22:59:05 2026 GMT Subject: CN=69754eb9-9ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:51:f8:24:f0:fd:13:70:8b:6c:75:20:42: 2b:4f:2f:60:2e:8f:19:72:a8:3b:1e:68:2a:e1:72: 7d:43:d3:ed:4f:d5:37:81:e0:f3:fa:80:a1:59:c6: ef:55:68:0b:b9:14:c3:e8:15:25:21:fa:42:54:54: 5d:6b:08:55:10:52:04:e1:6c:2a:2e:2f:f4:97:d6: f8:c4:d8:94:cd:4f:00:0d:65:12:ba:28:f3:ef:68: 88:99:84:e0:f9:c9:ed:19:47:0a:7b:93:c7:65:7c: f5:ca:bb:9a:1b:1d:87:85:e9:3a:c7:6e:ff:74:c6: 18:0b:91:8f:09:34:88:90:18:76:fb:64:9f:44:12: b9:c5:50:e4:25:f2:3c:8d:cc:ce:45:1d:6d:d9:89: 2f:c1:dd:93:89:91:71:d8:27:93:9a:54:56:f0:e9: 64:79:a9:0f:7d:18:d2:84:eb:e6:88:5f:8f:2b:e8: 82:88:52:8a:34:b2:c9:1a:5f:9d:67:44:8c:8c:24: 9e:6b:5b:06:41:81:80:30:8f:1e:71:b2:7c:f8:56: fa:ce:1e:9b:db:b2:ea:70:ed:a3:71:3e:3c:64:9e: 44:fe:6c:ef:50:01:a4:a4:e6:25:8f:63:04:c1:2b: 7b:dc:16:ec:19:53:f9:37:42:42:34:c1:71:bd:18: c1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2B:A9:D9:81:29:3C:C9:B3:16:31:FC:10:60:30:E7:0D:11:D8:CC X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:2a:a3:91:20:c5:d8:aa:79:ed:d9:d3:4b:f4:ba:24:5b:d3: 82:63:6f:a3:29:46:4c:02:29:76:f4:c2:58:7f:37:e0:e9:85: 79:70:87:61:6e:dd:b3:74:6d:cb:3b:bd:de:1a:d5:2f:f9:c4: 5f:04:73:5e:05:20:bc:3b:a9:1e:7d:4c:b4:93:eb:98:98:fd: 8c:8c:5a:ac:88:43:45:16:b7:dd:2f:70:65:07:ee:2d:97:16: 09:1c:6d:2b:f4:13:a4:22:66:2c:dd:5b:d9:73:57:a9:9a:38: b3:a1:66:9c:05:fc:26:fc:d4:09:02:88:af:dc:dc:9e:ec:fb: d0:7c:97:75:23:c5:3a:c3:09:e7:c2:76:9c:6f:37:3f:2a:24: f3:45:7e:93:1c:64:da:4a:19:15:3a:2f:c2:2e:c0:d0:25:4b: 81:6e:f0:c7:5b:66:a6:c1:d9:9e:63:2b:af:0c:52:00:2a:23: 39:a0:f7:be:19:2b:7b:41:80:3a:d9:9d:5b:29:78:9b:b4:ef: b8:8a:a1:62:dd:df:d1:e2:0b:a2:15:04:f5:10:ee:68:f0:17: e2:24:e1:90:bb:30:08:a2:2b:95:9c:01:45:6f:2a:17:5f:56: 7e:ea:55:91:df:71:3b:d4:b7:6b:ef:69:03:7a:fd:a2:95:c9: 93:c1:a7:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjYwMTI0MjI1OTA1WhcNMjYwMTMxMjI1OTA1WjAYMRYwFAYD VQQDDA02OTc1NGViOS05Y2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKNR+CTw/RNwi2x1IEIrTy9gLo8Zcqg7Hmgq4XJ9Q9PtT9U3geDz+oChWcbv VWgLuRTD6BUlIfpCVFRdawhVEFIE4WwqLi/0l9b4xNiUzU8ADWUSuijz72iImYTg +cntGUcKe5PHZXz1yruaGx2Hhek6x27/dMYYC5GPCTSIkBh2+2SfRBK5xVDkJfI8 jczORR1t2Ykvwd2TiZFx2CeTmlRW8OlkeakPfRjShOvmiF+PK+iCiFKKNLLJGl+d Z0SMjCSea1sGQYGAMI8ecbJ8+Fb6zh6b27LqcO2jcT48ZJ5E/mzvUAGkpOYlj2ME wSt73BbsGVP5N0JCNMFxvRjBowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUrqdmB KTzJsxYx/BBgMOcNEdjMMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApKqORIMXYqnnt2dNL9LokW9OCY2+jKUZMAil29MJYfzfg6YV5cIdh bt2zdG3LO73eGtUv+cRfBHNeBSC8O6kefUy0k+uYmP2MjFqsiENFFrfdL3BlB+4t lxYJHG0r9BOkImYs3VvZc1epmjizoWacBfwm/NQJAoiv3Nye7PvQfJd1I8U6wwnn wnacbzc/KiTzRX6THGTaShkVOi/CLsDQJUuBbvDHW2amwdmeYyuvDFIAKiM5oPe+ GSt7QYA62Z1bKXibtO+4iqFi3d/R4guiFQT1EO5o8BfiJOGQuzAIoiuVnAFFbyoX X1Z+6lWR33E71Ldr72kDev2ilcmTwac3 -----END CERTIFICATE-----Generated at Sun Jan 25 14:07:28 2026 by rpki-client