This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft File: tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json) Hash identifier: /1m7xrvTAzDOwK5qKApuxm1h3tvOT8S12ssQp5Y3Xk0= Subject key identifier: 9E:40:75:8E:C1:E4:FA:A4:5B:9E:C5:FE:89:0C:37:77:FA:83:3B:3A Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A Certificate issuer: /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Certificate serial: 0AEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft Manifest number: 0ADD Signing time: Sat 24 Jan 2026 18:56:16 +0000 Manifest this update: Sat 24 Jan 2026 18:56:15 +0000 Manifest next update: Sat 31 Jan 2026 18:56:15 +0000 Files and hashes: 1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: 0iNVSZAsA1zpr4f5kbFJ8TFgWE9+ncgYOq0v2Yv9wa4=) 2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: yEtb/oBRu+Pt3DfxSeSuNm69CyCHMTAD09+IpcdOyrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2798 (0xaee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C230, serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Validity Not Before: Jan 24 18:56:15 2026 GMT Not After : Jan 31 18:56:15 2026 GMT Subject: CN=697515cf-e6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:08:13:b6:a3:db:b6:b2:9a:4e:d4:a6:ae:00: 26:14:a1:0a:ad:aa:00:f2:e3:3b:78:f3:48:d4:50: 76:a7:84:36:82:83:d7:d6:82:cf:5c:cb:d1:a4:c1: 3a:22:93:d8:d5:35:db:5a:f9:d3:b4:37:ce:a6:a5: b9:f4:c9:88:06:35:cc:45:d7:70:20:fb:a7:68:43: 15:d4:f8:eb:b7:19:d2:67:d7:59:62:c7:d7:19:aa: 09:8f:9e:47:e4:f7:20:a9:95:02:38:eb:93:4b:ed: b2:d5:03:d2:d6:93:d9:05:ea:1a:04:6a:dd:56:c1: 05:73:76:71:c9:2d:81:a2:8b:fb:98:74:71:fa:fb: 29:66:e1:c4:81:b5:cd:2b:5d:01:7b:4c:be:32:45: cc:fa:96:e3:e7:35:4b:06:d7:a4:4a:0e:f1:fe:2a: 78:75:6d:14:d1:46:75:a7:04:0a:c2:1e:7e:64:92: 74:1a:fd:d1:14:53:58:92:cc:54:87:50:be:52:24: 15:21:60:2c:ed:5c:6b:9d:6b:e5:05:57:5f:7b:e5: e0:7c:8d:36:ee:7a:2a:9c:8e:04:9f:6d:d2:df:bc: c0:8e:af:42:b6:f5:ab:15:91:a0:aa:d4:5e:5d:c3: 94:9c:48:17:2d:53:9d:49:30:19:e0:06:f7:f6:12: 07:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:40:75:8E:C1:E4:FA:A4:5B:9E:C5:FE:89:0C:37:77:FA:83:3B:3A X509v3 Authority Key Identifier: keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:3e:67:aa:b5:46:7b:af:e4:64:2c:e6:52:b3:ae:1d:2a:6b: c2:75:06:bb:7d:36:53:54:d2:e5:c4:18:1c:a1:f3:61:74:ef: 3f:c6:09:aa:d6:db:40:30:66:3d:65:c2:c9:81:e9:2b:44:1d: 25:95:73:85:24:aa:4b:bf:43:4d:94:bb:33:32:20:1e:fa:c8: cc:41:4e:21:f9:d5:c3:42:2d:ac:fb:77:a1:d6:74:99:fc:92: 75:9d:80:e9:bb:af:cf:3c:b4:f3:d8:6d:f7:d8:33:77:f0:71: 87:38:ad:d9:73:a6:e0:68:7a:c5:d1:7e:ef:2d:05:71:70:33: f3:77:b2:c0:f5:32:6a:ac:67:08:77:4e:ca:c6:d5:84:df:0c: c5:08:92:b0:fe:68:ab:db:65:98:b7:69:ba:80:b6:c5:77:a7: 16:5b:0b:92:03:5a:74:da:c6:75:50:06:12:c6:5c:ef:54:3f: cc:fc:8c:dd:66:3c:f3:a0:aa:ed:ca:a8:69:c5:56:56:fb:15: cb:dc:75:3d:51:23:83:b7:35:6d:19:77:74:3b:01:31:b7:8c: bf:ef:4d:8c:46:0f:f6:fb:59:49:fd:6b:7c:a5:18:80:75:36: 18:a5:ca:ab:c8:ef:d5:e5:48:3e:ef:d8:11:48:e4:5c:1b:91: ed:3c:e1:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzAxMTAvBgNVBAUTKEI1RDQ2QzBGNzVCQkJGMjQxMTI5OEFFQkQyQjU2MkI1 QUE5NUVDNkEwHhcNMjYwMTI0MTg1NjE1WhcNMjYwMTMxMTg1NjE1WjAYMRYwFAYD VQQDDA02OTc1MTVjZi1lNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjwgTtqPbtrKaTtSmrgAmFKEKraoA8uM7ePNI1FB2p4Q2goPX1oLPXMvRpME6 IpPY1TXbWvnTtDfOpqW59MmIBjXMRddwIPunaEMV1PjrtxnSZ9dZYsfXGaoJj55H 5PcgqZUCOOuTS+2y1QPS1pPZBeoaBGrdVsEFc3ZxyS2Boov7mHRx+vspZuHEgbXN K10Be0y+MkXM+pbj5zVLBtekSg7x/ip4dW0U0UZ1pwQKwh5+ZJJ0Gv3RFFNYksxU h1C+UiQVIWAs7VxrnWvlBVdfe+XgfI027noqnI4En23S37zAjq9CtvWrFZGgqtRe XcOUnEgXLVOdSTAZ4Ab39hIH2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5AdY7B 5PqkW57F/okMN3f6gzs6MB8GA1UdIwQYMBaAFLXUbA91u78kESmK69K1YrWqlexq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMC8yOTU0QUJEQzY1 NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5UVJLWXJyMHJWaXRhcVY3 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkUnNEM1c3dnlRUktZcnIwclZpdGFxVjdHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMC8yOTU0QUJEQzY1NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5 UVJLWXJyMHJWaXRhcVY3R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRPmeqtUZ7r+RkLOZSs64dKmvCdQa7fTZTVNLlxBgcofNhdO8/xgmq 1ttAMGY9ZcLJgekrRB0llXOFJKpLv0NNlLszMiAe+sjMQU4h+dXDQi2s+3eh1nSZ /JJ1nYDpu6/PPLTz2G332DN38HGHOK3Zc6bgaHrF0X7vLQVxcDPzd7LA9TJqrGcI d07KxtWE3wzFCJKw/mir22WYt2m6gLbFd6cWWwuSA1p02sZ1UAYSxlzvVD/M/Izd ZjzzoKrtyqhpxVZW+xXL3HU9USODtzVtGXd0OwExt4y/702MRg/2+1lJ/Wt8pRiA dTYYpcqryO/V5Ug+79gRSORcG5HtPOF7 -----END CERTIFICATE-----Generated at Sun Jan 25 09:51:25 2026 by rpki-client