This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft File: tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json) Hash identifier: cyz9xjH/odB920t79G2cWD/a7XBW+UIfTxmTJBQl68c= Subject key identifier: 51:4C:02:6D:62:21:FB:6B:16:6A:3D:E4:F1:BE:EB:46:40:DC:CF:09 Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft Manifest number: 0200 Signing time: Wed 21 Jan 2026 01:52:47 +0000 Manifest this update: Wed 21 Jan 2026 01:52:47 +0000 Manifest next update: Wed 28 Jan 2026 01:52:47 +0000 Files and hashes: 1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: lgXtjUWsGK+B9t5aaQ8zhjh9OAcJ+qHbn415YuwN5Gk=) 2: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: YHLvsfLb9vn+sTC103ywcZHpPAhWQQaEGzE/L4SadW0=) 3: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: sKzlG98yhfvA0cZ5DMZFsMl5sTXVOn8rst+hGNnB2OA=) 4: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: GzY2mja93XMB8v0gofsGbfBeQdmx/oTQdYYP656riXY=) 5: 2D450BA8B58211F094C92178C4F9AE02.roa (hash: iIj9yJVCt0RNLEHDnqyR+A4ssEqyV6ayKCnQGatPpAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Validity Not Before: Jan 21 01:52:47 2026 GMT Not After : Jan 28 01:52:47 2026 GMT Subject: CN=6970316f-8d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4e:50:69:76:d8:54:97:9a:a3:9e:b0:f0:72: dc:47:bd:e9:c6:8f:08:15:15:36:9a:92:ab:17:35: a7:14:f5:d8:10:2c:ce:5c:3a:72:d1:bb:68:01:fb: bf:86:b7:db:b6:d2:fe:37:48:50:93:d5:f4:a7:43: 9c:98:e8:cc:6d:54:c3:45:1a:03:f1:81:d9:3c:8a: 6d:bc:8f:79:36:2d:87:36:8e:ea:e8:c0:3e:07:38: b4:a8:5e:d6:27:39:03:0a:9f:61:ec:67:6d:d8:a9: 6f:64:ca:24:54:14:ee:84:61:f2:bc:65:dc:36:37: 57:3c:fe:cb:57:33:3f:77:c0:6c:31:c7:04:0f:46: 35:a3:0f:a1:ed:36:86:1d:0a:80:eb:0a:7b:c7:56: 4f:cf:6f:80:bd:ca:f1:02:f4:5a:30:11:b3:fd:d0: 0a:8e:07:db:f9:52:90:09:1b:8c:fd:85:9a:72:f3: da:18:4e:33:a8:ec:7d:25:8c:7b:43:be:b2:a7:49: e5:1b:ab:ba:69:77:83:5e:08:80:e1:ea:61:cf:a2: d1:2a:6d:75:af:dd:1f:e4:5d:9f:75:ae:a4:4b:3c: 94:1a:0a:d9:43:b7:8c:7a:85:e6:ae:31:b8:6d:2e: f7:65:27:42:ec:30:9a:a8:b5:52:b6:21:f9:8f:a8: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4C:02:6D:62:21:FB:6B:16:6A:3D:E4:F1:BE:EB:46:40:DC:CF:09 X509v3 Authority Key Identifier: keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e5:bd:54:ef:38:5b:65:f2:e2:bc:6e:01:40:a9:9c:ac:e9: 77:9e:57:5f:16:bc:9d:3e:c4:ed:d3:4a:b6:4c:38:38:2a:be: 83:cf:36:fb:7f:49:3b:e7:b1:c8:15:7b:33:e0:5b:f5:92:e5: 47:ac:ee:a4:36:6e:95:a5:0c:12:12:07:da:4f:2e:a9:c6:3b: 28:79:45:c2:08:23:c7:59:e8:78:7d:59:86:d5:ce:b9:ec:5b: 19:a3:20:fd:a7:c3:b4:5f:e2:db:51:58:8f:db:12:a5:b0:ab: fb:25:16:dc:94:7d:44:de:6c:1a:3b:bd:eb:0b:99:8c:d3:f3: 61:81:9b:9b:b6:d3:bc:b9:37:83:84:c8:12:18:4c:d0:df:11: 52:21:c8:22:40:52:49:45:e0:0a:51:dc:ec:4b:9a:ce:1e:ac: 32:cb:c9:6f:6e:e5:aa:1b:3a:01:96:3a:93:62:ed:d1:60:89: 4a:a9:83:80:53:3e:74:04:e2:b4:16:76:08:3a:4d:c5:34:05: 41:7b:d8:ad:91:fe:cd:e0:a1:c3:75:1b:3d:a7:19:a1:21:b8: c8:3b:51:99:ac:8d:a6:5b:7b:d2:e6:63:c3:73:66:1e:cc:57: b4:c6:3a:cf:24:f6:d1:03:6d:78:16:77:5d:bf:50:c2:1b:71: 1c:8f:45:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5 NTY1Qzk0RDgwHhcNMjYwMTIxMDE1MjQ3WhcNMjYwMTI4MDE1MjQ3WjAYMRYwFAYD VQQDDA02OTcwMzE2Zi04ZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmU5QaXbYVJeao56w8HLcR73pxo8IFRU2mpKrFzWnFPXYECzOXDpy0btoAfu/ hrfbttL+N0hQk9X0p0OcmOjMbVTDRRoD8YHZPIptvI95Ni2HNo7q6MA+Bzi0qF7W JzkDCp9h7Gdt2KlvZMokVBTuhGHyvGXcNjdXPP7LVzM/d8BsMccED0Y1ow+h7TaG HQqA6wp7x1ZPz2+AvcrxAvRaMBGz/dAKjgfb+VKQCRuM/YWacvPaGE4zqOx9JYx7 Q76yp0nlG6u6aXeDXgiA4ephz6LRKm11r90f5F2fda6kSzyUGgrZQ7eMeoXmrjG4 bS73ZSdC7DCaqLVStiH5j6iv5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFMAm1i IftrFmo95PG+60ZA3M8JMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0RC81N0MzN0UzODBBNTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0 Z3pVNFFnTGItN09WWmNsTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA75b1U7zhbZfLivG4BQKmcrOl3nldfFrydPsTt00q2TDg4Kr6Dzzb7 f0k757HIFXsz4Fv1kuVHrO6kNm6VpQwSEgfaTy6pxjsoeUXCCCPHWeh4fVmG1c65 7FsZoyD9p8O0X+LbUViP2xKlsKv7JRbclH1E3mwaO73rC5mM0/NhgZubttO8uTeD hMgSGEzQ3xFSIcgiQFJJReAKUdzsS5rOHqwyy8lvbuWqGzoBljqTYu3RYIlKqYOA Uz50BOK0FnYIOk3FNAVBe9itkf7N4KHDdRs9pxmhIbjIO1GZrI2mW3vS5mPDc2Ye zFe0xjrPJPbRA214Fnddv1DCG3Ecj0VD -----END CERTIFICATE-----Generated at Thu Jan 22 17:04:37 2026 by rpki-client