This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft File: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json) Hash identifier: e/0I6thJwzfQzoHxHILOf8FIQm1olfJ0QDPS0ZRBxhk= Subject key identifier: 6B:B2:50:5F:1D:77:C7:D4:81:3E:D4:9C:D9:E7:4C:48:24:E5:BC:8C Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft Manifest number: BD Signing time: Sun 25 Jan 2026 05:24:52 +0000 Manifest this update: Sun 25 Jan 2026 05:24:52 +0000 Manifest next update: Sun 01 Feb 2026 05:24:52 +0000 Files and hashes: 1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: IPIuk/lt75h0ghYtObDasxDb7Rr73FKt7OdWAjWCQW8=) 2: 07E3560E707B11F08CCE202CC4F9AE02.roa (hash: hsVU/mADy2OXX1cQt4x/FdSd52E8zN5hB6L5qVYRCOM=) 3: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: 4EsnPXpvxqy3HJn3NlZW+cFTXRzXY3NCiOsR6rWCGCE=) 4: 6E68E3C8A05811F0B1978E4CC4F9AE02.roa (hash: K72GRxN+2ab3JpFVQDE8rFQueI0JJ5aBZHWdLQsQchI=) 5: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: YKwfhn84elYu/Y8KsthWeHLfxYMDii6IqoqFACcb2JY=) 6: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: cqpKhHQ429f1vtQzVS9iSS/6yBn8Tr7cOiYSPyhXnqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Validity Not Before: Jan 25 05:24:52 2026 GMT Not After : Feb 1 05:24:52 2026 GMT Subject: CN=6975a924-f227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e7:c6:e4:07:67:e4:0a:45:2b:87:31:f5:34: da:b1:49:2f:ca:25:80:6e:a7:e5:28:f8:19:87:87: 4f:67:d4:18:d4:93:0f:e3:68:5c:af:c9:75:15:cf: 5d:76:8a:43:e7:a5:9b:27:20:a3:98:c6:84:7f:fb: 3f:07:9e:7a:2a:f7:e8:3d:e3:22:64:f9:c1:ad:09: 01:5f:0d:50:65:9e:ba:b5:12:42:83:8c:d2:9f:c6: db:e3:dd:d9:d3:10:ba:fe:0e:a9:d7:64:7b:c6:16: 93:24:65:80:fa:4e:ea:b7:40:37:f6:f2:f7:13:10: 7d:6d:07:ae:00:05:81:6d:2a:0f:e6:84:22:7d:0c: 32:32:04:9b:af:83:83:b3:d0:47:d0:b0:18:9c:b8: e7:38:76:67:a1:cd:90:43:72:4e:af:ae:62:a7:1c: 8d:0a:77:3f:09:44:1c:7b:b5:30:6f:a7:a1:1b:e4: 69:e7:01:33:cf:6a:a8:ab:cc:64:4d:68:ac:5c:d9: a4:d7:8b:2c:8c:f2:b6:4b:ef:19:83:87:17:e2:6e: f2:f9:83:9d:2c:cc:3f:e0:13:1a:f1:a0:fb:bd:f9: 7e:4c:7a:fe:58:8b:9e:82:a1:fa:d8:35:93:99:59: 6b:42:b1:5b:76:11:31:cc:61:10:7f:8a:ad:d2:03: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B2:50:5F:1D:77:C7:D4:81:3E:D4:9C:D9:E7:4C:48:24:E5:BC:8C X509v3 Authority Key Identifier: keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c3:37:26:80:12:74:cb:10:1b:47:ed:4d:39:b3:da:c3:5d: 51:f9:8a:99:fc:b9:e7:10:d1:02:73:d5:ed:db:cb:dd:95:8a: af:5a:10:b7:18:33:85:f6:73:21:8b:f2:5b:e2:b6:20:19:bd: 54:75:c5:12:7f:44:4c:21:6a:ad:d3:40:2f:f1:de:f1:45:6d: eb:65:ad:50:67:83:ad:2b:d8:10:94:e7:47:85:e2:84:34:54: bb:2c:27:88:a9:21:3e:c0:e5:7f:4b:36:fc:54:42:8a:74:75: 73:9f:38:8e:30:27:75:b5:a7:19:d7:7d:ff:43:64:f2:2c:26: b4:96:6a:9c:f9:f0:ae:f7:bf:bf:94:50:07:85:28:b4:8d:f6: 45:f3:ba:b7:16:42:27:a2:ae:3d:b9:be:13:8b:8a:c1:f8:fe: 70:2b:40:a3:7c:f7:bf:03:9f:fc:24:6d:ad:fb:15:97:3a:79: a2:55:64:8c:ae:9e:2c:9a:f5:d9:ca:f5:a1:54:e1:d2:94:63: d9:4e:c1:ac:a4:da:15:3b:45:42:03:ff:25:ef:51:4b:ee:ff: b0:cc:3a:ba:56:6f:d9:62:97:08:c5:05:6a:1c:9b:61:73:bc: f6:30:d7:df:a2:39:81:c1:06:2b:7f:6f:55:e7:97:6e:94:1c: 31:88:19:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwMjYxMTAvBgNVBAUTKEJENzlBQzc2NDBDOTU1QzQzNUM4Q0Y1NUMyOTFGMTIy QjcwRTJGOTkwHhcNMjYwMTI1MDUyNDUyWhcNMjYwMjAxMDUyNDUyWjAYMRYwFAYD VQQDDA02OTc1YTkyNC1mMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ufG5Adn5ApFK4cx9TTasUkvyiWAbqflKPgZh4dPZ9QY1JMP42hcr8l1Fc9d dopD56WbJyCjmMaEf/s/B556KvfoPeMiZPnBrQkBXw1QZZ66tRJCg4zSn8bb493Z 0xC6/g6p12R7xhaTJGWA+k7qt0A39vL3ExB9bQeuAAWBbSoP5oQifQwyMgSbr4OD s9BH0LAYnLjnOHZnoc2QQ3JOr65ipxyNCnc/CUQce7Uwb6ehG+Rp5wEzz2qoq8xk TWisXNmk14ssjPK2S+8Zg4cX4m7y+YOdLMw/4BMa8aD7vfl+THr+WIuegqH62DWT mVlrQrFbdhExzGEQf4qt0gNTqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuyUF8d d8fUgT7UnNnnTEgk5byMMB8GA1UdIwQYMBaAFL15rHZAyVXENcjPVcKR8SK3Di+Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjAyNi8zQkFBQUM0NEZC MjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZjUTF5TTlWd3BIeElyY09M NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYbXNka0RKVmNRMXlNOVZ3cEh4SXJjT0w1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjAyNi8zQkFBQUM0NEZCMjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZj UTF5TTlWd3BIeElyY09MNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKwzcmgBJ0yxAbR+1NObPaw11R+YqZ/LnnENECc9Xt28vdlYqvWhC3 GDOF9nMhi/Jb4rYgGb1UdcUSf0RMIWqt00Av8d7xRW3rZa1QZ4OtK9gQlOdHheKE NFS7LCeIqSE+wOV/Szb8VEKKdHVznziOMCd1tacZ133/Q2TyLCa0lmqc+fCu97+/ lFAHhSi0jfZF87q3FkInoq49ub4Ti4rB+P5wK0CjfPe/A5/8JG2t+xWXOnmiVWSM rp4smvXZyvWhVOHSlGPZTsGspNoVO0VCA/8l71FL7v+wzDq6Vm/ZYpcIxQVqHJth c7z2MNffojmBwQYrf29V55dulBwxiBlr -----END CERTIFICATE-----Generated at Sun Jan 25 10:44:11 2026 by rpki-client