This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft File: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json) Hash identifier: QChgsNk0no3vxenoeNBoNuX0KmuUv/mocRfuc+Obo4Y= Subject key identifier: 52:09:E3:9B:93:9F:24:78:06:0C:73:9A:37:59:43:B1:4C:14:5E:09 Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 Certificate issuer: /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Certificate serial: 1BDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft Manifest number: 1B97 Signing time: Sat 24 Jan 2026 16:03:10 +0000 Manifest this update: Sat 24 Jan 2026 16:03:09 +0000 Manifest next update: Sat 31 Jan 2026 16:03:09 +0000 Files and hashes: 1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: CVxooZsHJWY7kvsLnZZhf4lQuEk2da/jhCIS2lXed7E=) 2: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: BhVGdoTEOymIA8YwYSYXIusFUR9i4u6WTAaCMTaRZV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7131 (0x1bdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Validity Not Before: Jan 24 16:03:09 2026 GMT Not After : Jan 31 16:03:09 2026 GMT Subject: CN=6974ed3e-cf64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c1:7f:ad:ad:aa:ce:32:a9:0b:0c:dc:b1:42: 92:be:e6:22:fd:15:a4:dc:ed:8f:a1:4d:ad:ef:e6: f2:ad:c6:ba:f5:2e:2a:3f:f2:ff:fe:64:c0:a8:5a: 43:40:81:ce:db:3f:5f:01:23:30:e5:20:f0:6e:dc: 85:f7:d1:28:ed:b5:dd:2b:e0:83:72:0c:e7:5e:08: 2f:d6:06:a6:25:50:49:b8:03:f6:83:60:b5:60:40: 39:2c:96:5c:32:18:b6:ce:de:d0:68:73:ff:51:97: 12:2e:9a:c1:21:c0:a1:ff:5a:f6:36:a1:02:5b:53: d2:ec:ba:97:9f:b0:7f:2a:77:aa:7c:ac:73:49:14: 7f:40:97:80:84:5c:39:bb:ff:5c:02:4b:83:3f:25: 7f:a4:5b:1d:fe:ad:fa:55:5e:42:d3:90:41:88:a1: 85:4b:c7:76:05:17:a2:33:96:a5:45:62:a4:9a:9b: 88:92:87:53:f2:64:7e:71:8e:1b:e2:4a:eb:7c:44: 3f:57:28:5b:3a:f3:c4:61:f2:ac:9d:45:0d:97:85: 52:d2:3d:f3:fc:7d:dc:1a:23:34:9d:0f:18:3d:b3: f7:0d:1c:b2:f7:71:fe:e1:64:01:95:d3:02:22:f2: 2b:2a:dc:87:a2:41:30:f4:2e:f8:e3:2b:b2:ec:86: 35:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:09:E3:9B:93:9F:24:78:06:0C:73:9A:37:59:43:B1:4C:14:5E:09 X509v3 Authority Key Identifier: keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:34:8a:df:88:37:4d:bc:91:a4:56:54:1d:94:6a:38:e7:f1: 7e:fb:4d:65:49:54:2f:b5:d9:50:46:b5:09:49:56:e2:23:06: ee:b4:61:c2:3d:d7:02:63:ec:45:ee:4d:3f:e5:a9:6e:be:a6: fc:1f:02:4c:08:0e:c5:0f:a8:0c:db:89:bc:05:47:e3:cc:9c: 64:d1:79:98:8a:7c:a3:51:d3:87:af:93:35:90:ae:9e:b1:8b: 1b:a9:bb:90:03:ce:b3:1c:a9:9c:c0:f7:46:63:3d:3b:58:b1: 77:c0:1e:b8:0a:86:85:cd:07:f9:24:10:3c:45:1e:db:ba:d6: d5:4f:ae:d6:9f:61:1c:08:ef:92:d9:90:e3:67:af:0b:bc:70: 91:ef:36:63:d2:1a:cf:cc:63:d6:3a:91:81:c9:cd:08:75:57: d5:f0:a0:76:57:06:1d:60:c0:e0:02:29:83:4b:e2:4f:a5:c9: ee:e4:d4:49:c1:ce:e8:b5:65:3d:a2:50:be:47:01:a9:fe:8d: a0:9a:13:c7:8f:3a:82:ea:36:9f:63:1b:ee:68:10:fc:0f:37: fd:8c:8b:10:d9:a8:8c:ad:22:33:f9:bf:ee:a6:31:7a:ff:90: cf:84:6f:c3:69:a0:a1:cc:71:34:31:68:53:8f:3c:00:74:07: 81:b0:7d:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OUJFREIxMTAvBgNVBAUTKDFFREU1QzZFMDA4MDI4QkNEMkFFMzM2NTEzODFCREUx RkQwN0M1RDQwHhcNMjYwMTI0MTYwMzA5WhcNMjYwMTMxMTYwMzA5WjAYMRYwFAYD VQQDDA02OTc0ZWQzZS1jZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8F/ra2qzjKpCwzcsUKSvuYi/RWk3O2PoU2t7+byrca69S4qP/L//mTAqFpD QIHO2z9fASMw5SDwbtyF99Eo7bXdK+CDcgznXggv1gamJVBJuAP2g2C1YEA5LJZc Mhi2zt7QaHP/UZcSLprBIcCh/1r2NqECW1PS7LqXn7B/KneqfKxzSRR/QJeAhFw5 u/9cAkuDPyV/pFsd/q36VV5C05BBiKGFS8d2BReiM5alRWKkmpuIkodT8mR+cY4b 4krrfEQ/VyhbOvPEYfKsnUUNl4VS0j3z/H3cGiM0nQ8YPbP3DRyy93H+4WQBldMC IvIrKtyHokEw9C744yuy7IY1cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIJ45uT nyR4BgxzmjdZQ7FMFF4JMB8GA1UdIwQYMBaAFB7eXG4AgCi80q4zZROBveH9B8XU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkVEQi81RDg2N0VCQzFG ODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtMelNyak5sRTRHOTRmMEh4 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0NWNiZ0NBS0x6U3JqTmxFNEc5NGYwSHhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkVEQi81RDg2N0VCQzFGODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtM elNyak5sRTRHOTRmMEh4ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFNIrfiDdNvJGkVlQdlGo45/F++01lSVQvtdlQRrUJSVbiIwbutGHC PdcCY+xF7k0/5aluvqb8HwJMCA7FD6gM24m8BUfjzJxk0XmYinyjUdOHr5M1kK6e sYsbqbuQA86zHKmcwPdGYz07WLF3wB64CoaFzQf5JBA8RR7butbVT67Wn2EcCO+S 2ZDjZ68LvHCR7zZj0hrPzGPWOpGByc0IdVfV8KB2VwYdYMDgAimDS+JPpcnu5NRJ wc7otWU9olC+RwGp/o2gmhPHjzqC6jafYxvuaBD8Dzf9jIsQ2aiMrSIz+b/upjF6 /5DPhG/DaaChzHE0MWhTjzwAdAeBsH2R -----END CERTIFICATE-----Generated at Sun Jan 25 04:37:50 2026 by rpki-client