This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft File: VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft (raw, json) Hash identifier: PTpRc4W1eF5ubc0snZUtKTScpMGPKDF5ylUImh8904g= Subject key identifier: 05:06:44:83:71:89:70:7D:AC:A7:68:8D:7A:56:37:FD:82:EF:E7:00 Authority key identifier: 55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61 Certificate issuer: /CN=A913E614/serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft Manifest number: 28 Signing time: Sat 17 Jan 2026 06:44:57 +0000 Manifest this update: Sat 17 Jan 2026 06:44:57 +0000 Manifest next update: Sat 24 Jan 2026 06:44:57 +0000 Files and hashes: 1: VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl (hash: oIC0+hXag1eTml0SMTsPXWfqQwLJrRKeuQP659E6HrY=) 2: 390B7BFAC62311F092B8183CC4F9AE02.roa (hash: IttW8lnhM9U/w4yhzUeGX0DYIjEGvnTp18lKA3bXa/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E614, serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661 Validity Not Before: Jan 17 06:44:57 2026 GMT Not After : Jan 24 06:44:57 2026 GMT Subject: CN=696b2fe9-be89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:62:6b:19:da:db:e8:e5:8b:ad:98:72:7a:cd: cf:ec:06:da:fa:85:1e:cb:2f:d7:49:07:b3:0b:12: da:d2:41:ef:fb:b1:46:91:39:a3:f8:b2:d0:1f:96: 04:21:a1:71:0f:3a:32:51:c2:37:ea:9f:4e:38:63: c3:9b:97:f1:67:b7:c2:10:83:eb:32:d2:9c:9a:b6: 02:f7:07:07:ec:ac:49:f6:30:7d:74:f4:00:8a:9d: fa:dd:00:c9:28:be:b9:cf:24:fe:d1:db:3c:e5:1c: 1a:7e:e0:a2:f3:d9:03:d2:16:0f:8c:1a:f2:8e:4a: 41:30:7f:05:3d:52:b3:16:2d:26:fb:14:26:67:78: 39:06:56:d5:2a:e7:7b:31:aa:ed:d4:24:4a:26:59: df:b2:ae:4d:ee:43:29:c4:6f:0e:22:c7:29:46:62: 12:fe:ff:f9:19:f1:05:20:69:3b:b5:a0:60:15:db: 7d:16:ae:eb:32:e5:31:20:eb:e2:66:c7:3f:c3:46: 3c:cc:34:17:fc:54:73:09:4e:0f:24:2f:dc:c4:ec: 1d:e5:75:93:d3:38:a7:90:d1:31:d4:f7:d0:1f:5d: 5c:02:cf:5b:f2:bb:31:95:ae:df:ad:a6:75:1e:ed: c1:4b:55:6a:f3:c9:13:8a:8d:69:48:94:07:f0:b4: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:06:44:83:71:89:70:7D:AC:A7:68:8D:7A:56:37:FD:82:EF:E7:00 X509v3 Authority Key Identifier: keyid:55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:93:a4:81:6c:cb:cb:f3:de:a3:29:b7:8a:78:76:96:28:8b: 4f:9b:52:a2:a2:8d:23:47:4a:d1:f3:64:bc:f3:95:a6:73:b3: e9:ec:7d:e5:c9:32:2e:66:da:18:76:ba:6a:db:d3:b5:c2:1f: 74:25:3e:a1:18:dd:22:21:69:1b:cb:56:26:4e:f6:f4:cf:2e: 32:7b:e9:ac:fb:a3:d7:b8:2e:e7:68:cf:a4:c5:bb:bf:06:ad: 25:20:ca:7f:56:0f:97:00:5d:93:07:22:63:6a:f8:07:02:71: 36:d0:0c:92:88:70:c5:38:b4:a7:04:11:d6:ec:09:99:bf:d0: 37:b3:94:00:5c:ed:79:01:3c:2a:6e:9e:1f:0d:e8:b6:a2:23: 89:c3:1f:14:c0:35:c3:f1:ce:81:8b:fa:f7:64:53:05:69:8f: 35:3a:dd:b7:52:78:b3:f8:c2:df:bd:83:ac:f1:62:bb:4f:db: c7:28:5c:ce:9e:e7:19:64:08:33:6e:a6:8d:3c:71:05:55:74: 03:21:5c:16:29:bb:63:42:21:07:07:01:29:d7:f7:ac:d0:01: 4b:14:53:10:93:ba:e9:fb:6b:16:02:43:bf:99:91:f9:91:4b: d7:b0:03:c4:14:af:be:21:d1:f9:f5:2d:8c:24:a2:44:8a:a2: 29:97:64:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYxNDExMC8GA1UEBRMoNTU3M0M1NjhBRTAxNDgxNEQxQjRERUFGNjhGQTQ2NEY0 OTUyMzY2MTAeFw0yNjAxMTcwNjQ0NTdaFw0yNjAxMjQwNjQ0NTdaMBgxFjAUBgNV BAMMDTY5NmIyZmU5LWJlODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAYmsZ2tvo5YutmHJ6zc/sBtr6hR7LL9dJB7MLEtrSQe/7sUaROaP4stAflgQh oXEPOjJRwjfqn044Y8Obl/Fnt8IQg+sy0pyatgL3BwfsrEn2MH109ACKnfrdAMko vrnPJP7R2zzlHBp+4KLz2QPSFg+MGvKOSkEwfwU9UrMWLSb7FCZneDkGVtUq53sx qu3UJEomWd+yrk3uQynEbw4ixylGYhL+//kZ8QUgaTu1oGAV230Wrusy5TEg6+Jm xz/DRjzMNBf8VHMJTg8kL9zE7B3ldZPTOKeQ0THU99AfXVwCz1vyuzGVrt+tpnUe 7cFLVWrzyROKjWlIlAfwtCiXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBQZEg3GJ cH2sp2iNelY3/YLv5wAwHwYDVR0jBBgwFoAUVXPFaK4BSBTRtN6vaPpGT0lSNmEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjE0LzJGRDkwMEUwQzNB MTExRjA5QjFCQzMzOUM0RjlBRTAyL1ZYUEZhSzRCU0JUUnRONnZhUHBHVDBsU05t RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVlhQRmFLNEJTQlRSdE42dmFQcEdUMGxTTm1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NjE0LzJGRDkwMEUwQzNBMTExRjA5QjFCQzMzOUM0RjlBRTAyL1ZYUEZhSzRCU0JU UnRONnZhUHBHVDBsU05tRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI2TpIFsy8vz3qMpt4p4dpYoi0+bUqKijSNHStHzZLzzlaZzs+nsfeXJ Mi5m2hh2umrb07XCH3QlPqEY3SIhaRvLViZO9vTPLjJ76az7o9e4Ludoz6TFu78G rSUgyn9WD5cAXZMHImNq+AcCcTbQDJKIcMU4tKcEEdbsCZm/0DezlABc7XkBPCpu nh8N6LaiI4nDHxTANcPxzoGL+vdkUwVpjzU63bdSeLP4wt+9g6zxYrtP28coXM6e 5xlkCDNupo08cQVVdAMhXBYpu2NCIQcHASnX96zQAUsUUxCTuun7axYCQ7+ZkfmR S9ewA8QUr74h0fn1LYwkokSKoimXZGI= -----END CERTIFICATE-----Generated at Sun Jan 18 03:16:32 2026 by rpki-client