This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft File: 28IYSbtMFwTSMZPEG3DGaxqWVi8.mft (raw, json) Hash identifier: BS3haZbhMqy5Y8CGKFdUnk6fzYpclfaPHw066aopUGU= Subject key identifier: C9:68:CD:A8:51:87:A1:0E:79:5F:2D:5A:45:D5:EE:3D:DD:8A:44:4D Authority key identifier: DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F Certificate issuer: /CN=A919C233/serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Certificate serial: 15BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft Manifest number: 15B1 Signing time: Sat 24 Jan 2026 16:29:59 +0000 Manifest this update: Sat 24 Jan 2026 16:29:58 +0000 Manifest next update: Sat 31 Jan 2026 16:29:58 +0000 Files and hashes: 1: 28IYSbtMFwTSMZPEG3DGaxqWVi8.crl (hash: ncWKAFj6XpzV4HpxAD3TXJ2rnYQnVblc2eiLCiIq+ew=) 2: 13EB2806503611F0AE9ACE86C4F9AE02.roa (hash: 5U+qNAcyg11e1mcFFeSSmJQHAt3E5ngFjCNuSAbr96I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5565 (0x15bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C233, serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Validity Not Before: Jan 24 16:29:58 2026 GMT Not After : Jan 31 16:29:58 2026 GMT Subject: CN=6974f386-df2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c1:fd:0b:52:f5:e4:c1:e0:be:6c:b8:73:49: 87:59:21:f0:f5:75:ef:d3:eb:07:67:53:cf:c2:6b: 4b:34:65:88:f5:35:3a:74:49:22:4f:25:1d:3b:90: cb:89:54:c0:ef:90:80:32:5e:e6:71:04:81:46:c7: 35:02:ca:4e:e6:37:0a:5a:a4:7e:2c:1f:e5:be:7f: 2a:6d:8b:1e:77:eb:c3:20:67:f2:ba:6e:d1:e7:99: 2e:17:a5:af:00:3f:7e:6f:d2:e1:2d:57:91:c7:b8: 1a:68:60:7c:84:65:13:eb:08:2d:47:69:8b:4f:32: 95:d7:90:2d:3d:39:b5:8d:df:b7:b8:21:03:be:33: b8:71:60:d4:67:00:11:99:68:d2:6f:43:31:5b:f8: 37:96:88:7d:49:83:c9:42:c5:46:ab:ef:26:a7:46: 2c:a9:d5:4d:da:88:3a:53:8f:77:5f:2c:23:ed:8b: 68:48:f0:a8:f1:aa:e9:00:92:95:0b:a2:56:6a:c7: 76:84:d5:bb:2a:48:a0:3f:dd:03:74:36:da:21:0b: de:96:36:9f:95:b3:dc:0d:bb:bb:6f:d0:53:38:08: ba:b8:c8:72:10:24:a4:4b:4b:68:3e:b3:65:a6:f3: 29:40:91:c4:3d:de:87:e7:9b:24:69:36:82:ab:a2: 51:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:68:CD:A8:51:87:A1:0E:79:5F:2D:5A:45:D5:EE:3D:DD:8A:44:4D X509v3 Authority Key Identifier: keyid:DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:3a:cc:aa:4f:fe:c0:ef:96:c7:78:c1:ea:c2:ea:51:89:3d: 16:e1:17:89:e2:de:94:c8:0d:92:fe:bf:9c:ac:f7:b6:81:22: 32:25:16:a8:a8:93:f8:b3:ff:36:3a:a2:ad:1b:43:c4:c1:6a: 9c:c4:19:54:da:75:e4:5a:34:76:24:e5:6a:4e:4d:e2:58:f6: 5d:6b:33:a0:7e:10:61:e5:49:3c:0b:c9:8a:c4:f8:6a:76:02: f8:81:91:b6:7d:f3:69:72:53:9a:8a:33:5f:71:4d:53:47:2e: 9f:60:6d:0c:12:f8:06:eb:f4:9a:70:21:b1:d5:32:62:44:df: dc:d2:5f:a7:32:2a:4f:f8:23:8a:02:59:48:e4:fe:b4:22:fa: d4:ee:d8:67:23:1a:b3:6a:aa:e9:37:02:28:f4:b2:ae:79:02: a4:43:5b:9b:60:c3:c2:87:f4:d3:11:82:d4:33:a2:89:87:35: 62:7d:3c:79:3a:23:51:fd:69:06:59:fa:f1:f9:b8:48:80:2d: 3d:f0:81:dd:44:15:66:a3:c4:44:9e:6e:0a:e5:bd:33:d2:d6: 36:05:6f:44:fb:a1:18:43:a4:8e:8d:14:c8:17:0e:02:b5:c3: 70:1a:80:eb:48:b3:ed:62:7c:35:ac:14:7c:da:c0:87:02:22: f5:c5:48:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzMxMTAvBgNVBAUTKERCQzIxODQ5QkI0QzE3MDREMjMxOTNDNDFCNzBDNjZC MUE5NjU2MkYwHhcNMjYwMTI0MTYyOTU4WhcNMjYwMTMxMTYyOTU4WjAYMRYwFAYD VQQDDA02OTc0ZjM4Ni1kZjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcH9C1L15MHgvmy4c0mHWSHw9XXv0+sHZ1PPwmtLNGWI9TU6dEkiTyUdO5DL iVTA75CAMl7mcQSBRsc1AspO5jcKWqR+LB/lvn8qbYsed+vDIGfyum7R55kuF6Wv AD9+b9LhLVeRx7gaaGB8hGUT6wgtR2mLTzKV15AtPTm1jd+3uCEDvjO4cWDUZwAR mWjSb0MxW/g3loh9SYPJQsVGq+8mp0YsqdVN2og6U493Xywj7YtoSPCo8arpAJKV C6JWasd2hNW7KkigP90DdDbaIQveljaflbPcDbu7b9BTOAi6uMhyECSkS0toPrNl pvMpQJHEPd6H55skaTaCq6JRlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlozahR h6EOeV8tWkXV7j3dikRNMB8GA1UdIwQYMBaAFNvCGEm7TBcE0jGTxBtwxmsallYv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMy8xRkRBRkQ2MjQz RTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3VFNNWlBFRzNER2F4cVdW aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4SVlTYnRNRndUU01aUEVHM0RHYXhxV1ZpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMy8xRkRBRkQ2MjQzRTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3 VFNNWlBFRzNER2F4cVdWaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCOsyqT/7A75bHeMHqwupRiT0W4ReJ4t6UyA2S/r+crPe2gSIyJRao qJP4s/82OqKtG0PEwWqcxBlU2nXkWjR2JOVqTk3iWPZdazOgfhBh5Uk8C8mKxPhq dgL4gZG2ffNpclOaijNfcU1TRy6fYG0MEvgG6/SacCGx1TJiRN/c0l+nMipP+COK AllI5P60IvrU7thnIxqzaqrpNwIo9LKueQKkQ1ubYMPCh/TTEYLUM6KJhzVifTx5 OiNR/WkGWfrx+bhIgC098IHdRBVmo8REnm4K5b0z0tY2BW9E+6EYQ6SOjRTIFw4C tcNwGoDrSLPtYnw1rBR82sCHAiL1xUhc -----END CERTIFICATE-----Generated at Sun Jan 25 07:45:20 2026 by rpki-client