This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft File: kw3fQQEGkDvrmRnJm94BY4cGVa4.mft (raw, json) Hash identifier: N2oDmV85pkhbAt2Xll+Qog2dA0/M5v/QSjGzgEPeKgs= Subject key identifier: 2B:2C:B2:D9:F7:ED:A7:82:46:10:FC:EE:AA:2B:DC:9B:FB:FC:E0:EA Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE Certificate issuer: /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft Manifest number: C5 Signing time: Sun 25 Jan 2026 05:07:18 +0000 Manifest this update: Sun 25 Jan 2026 05:07:18 +0000 Manifest next update: Sun 01 Feb 2026 05:07:18 +0000 Files and hashes: 1: kw3fQQEGkDvrmRnJm94BY4cGVa4.crl (hash: RKA26kD+uZhjjHipJeQx40HLGI/BZIkcc5K8dk0DziE=) 2: B56BC994E18A11EF94F99968C4F9AE02.roa (hash: kIQgeEH3cWGmbVTGuCqHD9A6uxzSFfhUI3qigsLKKDA=) 3: 5042D03ED2EF11EFBA610425C4F9AE02.roa (hash: WZrBwoOurpDQ7WWhSutjgFaenWEpcVR+50/xxPnjbM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Validity Not Before: Jan 25 05:07:18 2026 GMT Not After : Feb 1 05:07:18 2026 GMT Subject: CN=6975a506-59ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:31:a9:a3:1f:16:f9:be:97:ed:68:77:8f:d5: 73:eb:1f:42:62:bc:fb:e4:69:31:44:4d:0c:bb:73: 04:6e:ae:8b:7c:97:1b:fd:5c:a0:ab:2b:5c:e3:52: 02:8b:36:3c:a8:a9:14:75:61:8a:5f:55:01:07:a1: 5d:8c:9d:b5:fc:de:25:0d:2d:34:e9:e1:7a:4b:8e: e1:cb:d1:ac:2e:f2:1d:f4:9c:fc:5d:54:39:94:c5: 6d:64:8d:c9:55:d2:ad:d3:43:c6:0e:e0:25:c0:ae: 31:11:7a:b9:7c:c1:e6:ef:e5:ca:ad:f7:7a:65:f5: 3f:60:c3:1a:a6:b4:50:d3:0a:c9:c3:b3:be:5b:cd: bd:01:79:6b:2b:1f:e8:26:31:1f:c0:3e:2a:1c:b9: d1:cc:be:50:0a:34:b5:6f:10:28:71:d0:4f:6e:4c: d9:55:8f:bb:ac:7e:f8:16:45:15:34:1d:88:b2:9d: bc:59:b6:c2:fc:8b:5a:00:22:d5:ac:27:15:7d:d8: ec:98:31:23:b0:25:c5:e3:ec:e8:ef:75:9a:ab:8f: ac:10:b7:0a:29:5f:78:56:f1:ec:f1:b9:10:91:41: df:26:0d:64:a4:ad:5a:28:33:40:41:e4:bd:00:5f: 88:df:91:83:01:4e:d5:d8:58:57:c5:47:68:88:ea: 65:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2C:B2:D9:F7:ED:A7:82:46:10:FC:EE:AA:2B:DC:9B:FB:FC:E0:EA X509v3 Authority Key Identifier: keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:96:34:3f:8a:9e:5b:3b:81:91:b8:fa:58:b7:a5:fb:4f:1f: 3f:27:c6:c0:b5:39:e4:3f:b0:7e:dc:9d:79:f7:f7:62:2c:2d: 32:94:98:7f:26:4c:0e:f5:50:ca:b0:62:5a:8c:c9:2b:1e:f5: d2:71:83:45:84:31:81:98:d9:6f:83:f4:06:ca:0c:34:c7:04: e3:d9:38:79:ff:2d:21:31:30:b5:f1:ad:52:0b:93:9b:de:4d: d1:79:75:a8:6a:39:3b:9c:f3:47:6e:9f:43:a7:21:4a:4d:4b: aa:68:81:c2:5a:bb:5d:d6:af:2c:77:33:33:20:9a:f6:7a:b9: d7:f8:3f:e9:6f:94:79:b1:a0:d3:94:9c:c1:e3:73:35:aa:96: c0:b9:b5:28:6c:89:f8:29:3a:36:14:f6:6d:cb:72:4c:b6:81: e6:4c:7b:04:e4:1d:83:84:a4:4c:8a:18:e1:20:7d:16:0c:b1: ab:c2:51:72:69:97:96:6d:ae:10:8f:ec:a8:d7:b6:2f:fb:72: 33:1c:91:0f:ab:8f:49:45:f8:e8:41:be:3a:59:71:cc:95:f0: 36:27:3e:1c:b5:f8:41:14:8b:df:cc:38:a4:42:09:c1:93:ad: 91:bb:6e:86:33:dc:aa:40:14:70:f9:c7:d8:ee:f5:f9:cc:97: 3e:c9:be:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OTg1NTMxMTAvBgNVBAUTKDkzMERERjQxMDEwNjkwM0JFQjk5MTlDOTlCREUwMTYz ODcwNjU1QUUwHhcNMjYwMTI1MDUwNzE4WhcNMjYwMjAxMDUwNzE4WjAYMRYwFAYD VQQDDA02OTc1YTUwNi01OWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zGpox8W+b6X7Wh3j9Vz6x9CYrz75GkxRE0Mu3MEbq6LfJcb/Vygqytc41IC izY8qKkUdWGKX1UBB6FdjJ21/N4lDS006eF6S47hy9GsLvId9Jz8XVQ5lMVtZI3J VdKt00PGDuAlwK4xEXq5fMHm7+XKrfd6ZfU/YMMaprRQ0wrJw7O+W829AXlrKx/o JjEfwD4qHLnRzL5QCjS1bxAocdBPbkzZVY+7rH74FkUVNB2Isp28WbbC/ItaACLV rCcVfdjsmDEjsCXF4+zo73Waq4+sELcKKV94VvHs8bkQkUHfJg1kpK1aKDNAQeS9 AF+I35GDAU7V2FhXxUdoiOpl/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCssstn3 7aeCRhD87qor3Jv7/ODqMB8GA1UdIwQYMBaAFJMN30EBBpA765kZyZveAWOHBlWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODU1My9BNTlCRkZFNEQy RUQxMUVGOERFRTUxMjBDNEY5QUUwMi9rdzNmUVFFR2tEdnJtUm5KbTk0Qlk0Y0dW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2t3M2ZRUUVHa0R2cm1SbkptOTRCWTRjR1ZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODU1My9BNTlCRkZFNEQyRUQxMUVGOERFRTUxMjBDNEY5QUUwMi9rdzNmUVFFR2tE dnJtUm5KbTk0Qlk0Y0dWYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJljQ/ip5bO4GRuPpYt6X7Tx8/J8bAtTnkP7B+3J159/diLC0ylJh/ JkwO9VDKsGJajMkrHvXScYNFhDGBmNlvg/QGygw0xwTj2Th5/y0hMTC18a1SC5Ob 3k3ReXWoajk7nPNHbp9DpyFKTUuqaIHCWrtd1q8sdzMzIJr2ernX+D/pb5R5saDT lJzB43M1qpbAubUobIn4KTo2FPZty3JMtoHmTHsE5B2DhKRMihjhIH0WDLGrwlFy aZeWba4Qj+yo17Yv+3IzHJEPq49JRfjoQb46WXHMlfA2Jz4ctfhBFIvfzDikQgnB k62Ru26GM9yqQBRw+cfY7vX5zJc+yb5c -----END CERTIFICATE-----Generated at Sun Jan 25 20:22:43 2026 by rpki-client