This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json) Hash identifier: Q2rZkJMatvDKBxQuxOXDxLRNng1wfr0Q3eNsh/DobOk= Subject key identifier: A5:83:C9:6D:2F:C8:45:0C:33:13:E2:D8:8B:18:9A:F0:08:B4:F3:31 Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft Manifest number: 0113 Signing time: Sun 25 Jan 2026 04:07:44 +0000 Manifest this update: Sun 25 Jan 2026 04:07:43 +0000 Manifest next update: Sun 01 Feb 2026 04:07:43 +0000 Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: nBYsVVCfMiCIY4/BfyJxzvpk8H8smH0g7JZx5Mh/Kgk=) 2: 06F73C70ABD011F0977C9F10C4F9AE02.roa (hash: qVJeghg9xFTUN1CD6PkiZIjv0lu5fKKjik0h1AgrzM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Validity Not Before: Jan 25 04:07:43 2026 GMT Not After : Feb 1 04:07:43 2026 GMT Subject: CN=6975970f-f394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:df:75:cb:64:97:c0:6a:1e:33:a4:4c:b2: c8:4b:73:41:1f:b7:a5:30:50:57:f7:1c:ac:da:4d: 6c:5b:d4:76:bd:4e:64:c7:73:99:df:b4:ad:bb:7b: 3c:4b:55:0c:1a:81:fc:54:03:55:a7:74:7d:19:67: 58:3b:e5:28:ce:d0:8c:74:b1:3e:a6:fd:00:22:a5: f0:60:97:9d:fa:6b:60:69:82:67:06:dc:40:15:d8: b6:65:28:00:5b:64:6a:15:1a:ae:5e:cf:45:77:68: f8:c2:79:39:86:ff:fe:fe:a7:54:21:43:1d:30:5a: 37:cf:3a:f7:b7:d6:57:e3:11:09:e4:a1:c0:9c:2b: 71:4e:37:ee:d6:f2:03:50:16:ac:a6:6b:a4:66:f0: 32:57:19:49:d4:61:f5:dc:55:f2:34:d4:ec:46:22: 40:fe:ba:7d:f4:0e:68:3c:3d:b7:df:14:72:76:4b: 9f:9b:fe:cb:3f:f0:aa:a3:54:8a:e7:55:a0:20:d6: ed:f9:1c:18:4e:bf:32:4d:5a:d9:f1:d5:42:8f:39: c3:bf:43:3d:eb:cb:85:ab:0e:6e:5c:4f:80:1e:f6: 9d:3a:00:2b:5b:0e:2d:75:4c:ee:98:fe:e4:bc:1a: 95:dd:e8:48:ae:ae:81:11:b2:0c:10:f3:3c:21:b8: f0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:83:C9:6D:2F:C8:45:0C:33:13:E2:D8:8B:18:9A:F0:08:B4:F3:31 X509v3 Authority Key Identifier: keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:0f:a5:30:d6:58:eb:13:53:8e:e2:cd:ad:06:f3:ac:ee:dc: 0e:7a:4d:87:7f:70:0f:da:17:76:42:9b:1f:c3:3b:07:f7:b2: f2:47:e4:cb:cb:08:97:de:48:09:2c:9c:e4:d6:8b:ab:34:e4: 32:74:cd:98:e6:5c:dc:70:f1:ee:03:04:07:e5:71:62:bb:52: cc:3a:b1:ad:5b:92:63:38:d3:f6:32:40:59:a9:47:ae:df:96: 9e:c8:23:9e:46:fc:96:02:b8:e2:08:a2:58:16:b1:55:6a:b7: eb:5e:1e:91:e3:4f:3e:38:5c:55:30:50:94:09:4a:6a:cd:43: e0:b1:8c:3b:8a:fc:01:11:7c:3a:83:01:1d:60:0f:87:c3:58: 6e:21:c5:ce:70:e7:0b:5c:0d:dc:08:b5:f8:5b:bd:92:6e:39: 9c:61:7a:38:41:8a:53:aa:68:fe:d4:95:39:59:fd:a4:e8:67: 94:50:c2:2e:51:11:bd:01:5d:f8:b6:b1:2e:24:e3:a2:43:81: 69:c3:81:ce:42:39:24:e5:3f:8d:46:e3:cf:57:82:e8:b6:2f: 14:e8:70:d4:03:06:1f:a1:f7:ff:27:e4:3b:10:97:5b:1d:b0: e3:dd:5f:fb:07:e4:60:ef:f9:5e:54:89:01:62:c1:19:a6:6b: 76:f8:00:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQkExMTAvBgNVBAUTKDg1QUU2MjE5Rjg2MjY5NDE0QkUxNzZCNzgyNUYxNkNE REQ0MjQyRDQwHhcNMjYwMTI1MDQwNzQzWhcNMjYwMjAxMDQwNzQzWjAYMRYwFAYD VQQDDA02OTc1OTcwZi1mMzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAug3fdctkl8BqHjOkTLLIS3NBH7elMFBX9xys2k1sW9R2vU5kx3OZ37Stu3s8 S1UMGoH8VANVp3R9GWdYO+UoztCMdLE+pv0AIqXwYJed+mtgaYJnBtxAFdi2ZSgA W2RqFRquXs9Fd2j4wnk5hv/+/qdUIUMdMFo3zzr3t9ZX4xEJ5KHAnCtxTjfu1vID UBaspmukZvAyVxlJ1GH13FXyNNTsRiJA/rp99A5oPD233xRydkufm/7LP/Cqo1SK 51WgINbt+RwYTr8yTVrZ8dVCjznDv0M968uFqw5uXE+AHvadOgArWw4tdUzumP7k vBqV3ehIrq6BEbIMEPM8Ibjw9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWDyW0v yEUMMxPi2IsYmvAItPMxMB8GA1UdIwQYMBaAFIWuYhn4YmlBS+F2t4JfFs3dQkLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVCQS9GQTMyMENEQTVB REMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFVRkw0WGEzZ2w4V3pkMUNR dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVCQS9GQTMyMENEQTVBREMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFV Rkw0WGEzZ2w4V3pkMUNRdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHD6Uw1ljrE1OO4s2tBvOs7twOek2Hf3AP2hd2QpsfwzsH97LyR+TL ywiX3kgJLJzk1ourNOQydM2Y5lzccPHuAwQH5XFiu1LMOrGtW5JjONP2MkBZqUeu 35aeyCOeRvyWArjiCKJYFrFVarfrXh6R408+OFxVMFCUCUpqzUPgsYw7ivwBEXw6 gwEdYA+Hw1huIcXOcOcLXA3cCLX4W72SbjmcYXo4QYpTqmj+1JU5Wf2k6GeUUMIu URG9AV34trEuJOOiQ4Fpw4HOQjkk5T+NRuPPV4Loti8U6HDUAwYfoff/J+Q7EJdb HbDj3V/7B+Rg7/leVIkBYsEZpmt2+ABn -----END CERTIFICATE-----Generated at Sun Jan 25 17:27:04 2026 by rpki-client