This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft File: RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json) Hash identifier: u/ifU/6tcQ5kfvANQzsZy4+CvgsD+Co66SWvL0OcczY= Subject key identifier: AA:A1:71:50:21:79:F6:3E:EC:22:00:AE:AC:4E:9B:63:36:96:54:AB Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 Certificate issuer: /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft Manifest number: 0216 Signing time: Sat 17 Jan 2026 01:28:57 +0000 Manifest this update: Sat 17 Jan 2026 01:28:57 +0000 Manifest next update: Sat 24 Jan 2026 01:28:57 +0000 Files and hashes: 1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: NhKJ+d7gBGJvENoKjJwasY9symrlc+QYTEGxQAjFgQE=) 2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: Xj60cy/+MCefwRh5zgDSO/B9QlgMD6CuyCY3oxVXaNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 01:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Validity Not Before: Jan 17 01:28:57 2026 GMT Not After : Jan 24 01:28:57 2026 GMT Subject: CN=696ae5d9-ab46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f5:3e:2f:b2:94:64:1e:e3:ba:b3:c6:dc:f4: 33:7b:0f:a7:0b:21:c3:01:79:f0:0b:8a:14:c1:e9: 45:7b:aa:51:8f:41:62:ab:47:d7:fc:a8:3b:24:a3: e5:f3:42:5a:34:09:a7:42:77:bc:45:f2:3b:03:2d: 58:43:3a:90:91:0c:8c:c4:80:00:f4:40:17:d7:60: 17:cb:b6:f2:22:bb:d2:34:05:ff:76:c6:96:ea:6b: 7d:48:f2:fe:6c:2e:a3:42:ae:c1:3e:de:98:65:38: ce:6f:14:a2:df:cf:96:31:21:4c:83:35:46:7c:e4: 3a:05:9e:4f:db:d0:fc:36:78:35:3f:97:89:e0:69: 47:a0:88:d8:7d:98:a7:a2:83:e8:c6:c7:7e:ec:e3: c9:33:6d:ed:20:7e:19:01:e0:d2:f4:ef:dd:69:f0: 9c:92:72:12:73:f1:99:3f:4c:76:ca:a3:5b:85:b8: 80:95:25:d3:d0:97:90:7f:78:bd:42:a1:96:95:5f: 0b:07:a3:8d:9b:92:2c:08:41:38:7a:c6:63:5f:5a: a4:f9:07:49:fa:f4:df:50:f1:7b:a3:e9:92:18:07: 52:1f:ed:9d:d6:0c:f0:19:da:79:59:99:fb:2d:1d: 05:f3:e6:81:07:61:63:62:c6:df:0c:c9:99:16:f0: 28:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A1:71:50:21:79:F6:3E:EC:22:00:AE:AC:4E:9B:63:36:96:54:AB X509v3 Authority Key Identifier: keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:f4:00:85:2a:9d:7a:a2:58:61:df:b0:f5:30:57:7b:8a:64: 56:c9:84:fc:ef:a6:2f:a9:c5:50:d2:43:df:8e:ed:25:9e:ab: d2:af:7b:f8:45:e5:9a:cb:07:a1:22:72:1c:c4:3c:dc:40:af: 5a:37:c9:5f:54:22:d9:00:8d:f2:de:72:00:88:97:56:26:3b: f6:5c:9e:ac:b4:6b:e1:15:5e:e9:e8:7a:9f:6e:72:3e:df:a2: e8:94:5d:0b:46:bd:0e:67:a1:ff:06:68:29:ad:83:c4:a8:10: 4c:44:63:6f:d0:a2:ac:3f:74:f2:b8:c2:e9:27:80:6b:79:1d: d2:a1:c6:bf:16:c2:b8:5b:8a:44:bd:45:8f:49:77:1f:c0:5a: 8a:c3:07:6f:d1:84:d0:2c:bf:3b:7a:86:35:69:7a:f2:30:1b: 05:35:00:2d:83:d0:ec:ee:ae:09:06:60:89:a8:98:2f:0e:40: 5b:8a:db:99:b9:6b:34:8e:bc:9e:9b:61:5f:ee:79:58:7c:1c: ee:77:07:59:b5:5d:92:f8:b6:22:56:4a:04:6c:7d:2f:44:78: 24:1f:16:86:0f:59:11:37:d3:21:54:d7:05:f8:76:29:9c:c7: eb:80:c1:8b:47:05:12:52:46:b9:34:4d:b7:20:56:e3:b2:48: c7:fd:de:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKDQ2OEM2QTc5MkFCQjNFNDVGRUVFMjIyOEQyOEU3ODAz MTM3MkI0NTUwHhcNMjYwMTE3MDEyODU3WhcNMjYwMTI0MDEyODU3WjAYMRYwFAYD VQQDDA02OTZhZTVkOS1hYjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPU+L7KUZB7jurPG3PQzew+nCyHDAXnwC4oUwelFe6pRj0Fiq0fX/Kg7JKPl 80JaNAmnQne8RfI7Ay1YQzqQkQyMxIAA9EAX12AXy7byIrvSNAX/dsaW6mt9SPL+ bC6jQq7BPt6YZTjObxSi38+WMSFMgzVGfOQ6BZ5P29D8Nng1P5eJ4GlHoIjYfZin ooPoxsd+7OPJM23tIH4ZAeDS9O/dafCcknISc/GZP0x2yqNbhbiAlSXT0JeQf3i9 QqGWlV8LB6ONm5IsCEE4esZjX1qk+QdJ+vTfUPF7o+mSGAdSH+2d1gzwGdp5WZn7 LR0F8+aBB2FjYsbfDMmZFvAo0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqhcVAh efY+7CIArqxOm2M2llSrMB8GA1UdIwQYMBaAFEaMankquz5F/u4iKNKOeAMTcrRV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9CREFEQTg2MEND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1BrWC03aUlvMG81NEF4Tnl0 RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JveHFlU3E3UGtYLTdpSW8wbzU0QXhOeXRGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9CREFEQTg2MENDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1Br WC03aUlvMG81NEF4Tnl0RlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg9ACFKp16olhh37D1MFd7imRWyYT876YvqcVQ0kPfju0lnqvSr3v4 ReWaywehInIcxDzcQK9aN8lfVCLZAI3y3nIAiJdWJjv2XJ6stGvhFV7p6HqfbnI+ 36LolF0LRr0OZ6H/BmgprYPEqBBMRGNv0KKsP3TyuMLpJ4BreR3Soca/FsK4W4pE vUWPSXcfwFqKwwdv0YTQLL87eoY1aXryMBsFNQAtg9Ds7q4JBmCJqJgvDkBbituZ uWs0jryem2Ff7nlYfBzudwdZtV2S+LYiVkoEbH0vRHgkHxaGD1kRN9MhVNcF+HYp nMfrgMGLRwUSUka5NE23IFbjskjH/d79 -----END CERTIFICATE-----Generated at Sun Jan 18 03:16:36 2026 by rpki-client