This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft File: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft (raw, json) Hash identifier: 24kG/o6waGFxgY7OEcCErGfv0uSGrsWIlbPF6r8Za88= Subject key identifier: D4:50:A3:27:C0:28:0B:AE:42:45:87:4A:AD:28:F0:49:F6:95:48:53 Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Certificate serial: 0CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft Manifest number: 0C90 Signing time: Mon 26 Jan 2026 18:08:22 +0000 Manifest this update: Mon 26 Jan 2026 18:08:21 +0000 Manifest next update: Mon 02 Feb 2026 18:08:21 +0000 Files and hashes: 1: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl (hash: z/hvfS1wtKpVA0HSbRUFp938/NMhSo/gWailzAEE9JY=) 2: 89EA369C2A7411F09A757F45C4F9AE02.roa (hash: qZ3WHC7Uzfdz/tVUKGRkSRxqqkmsAfOeaIWYl8nNrfQ=) 3: B32668C4D98C11EB905D7281C4F9AE02.roa (hash: ZlTrLF7sUZ+SlecWA9syBWYq4ZBPMaI/qFvMwjXDo9I=) 4: B688C61E2A7411F09C50DF45C4F9AE02.roa (hash: ewGnN7hc9g0hE2viXLZFCs+BCr01/VYOfqNiGnRW5q8=) 5: 183DE570057A11EC822F230EC4F9AE02.roa (hash: GXLgHDoiJJX9ZG6YHax+vfsHDqeC2/UtO4pFuqnfqF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 18:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CBF3, serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Validity Not Before: Jan 26 18:08:21 2026 GMT Not After : Feb 2 18:08:21 2026 GMT Subject: CN=6977ad96-fae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6c:b0:cc:3d:fe:c0:6d:06:5d:31:70:25:b4: f7:97:ad:87:d4:76:3f:87:44:d7:2e:a8:03:f5:25: 07:6f:0b:28:85:dc:1e:e7:ec:22:b2:54:f8:cb:51: 22:4e:72:91:bd:a9:0a:68:97:38:51:31:08:27:6b: f1:21:4c:ce:a9:6b:2f:64:ae:6d:0c:d7:da:82:d1: 2a:ec:1c:a7:9a:f5:d9:51:bf:7f:95:a6:67:5d:98: 34:1a:60:ed:6c:e2:e8:d6:0c:4b:8d:b2:63:d0:23: c9:9f:c7:e4:1c:07:bf:84:4f:86:42:5f:2e:05:b6: b4:e1:a1:71:96:1e:f3:db:9a:d8:d9:60:f2:64:72: 4e:d3:a7:f1:1f:58:a0:60:b0:f2:41:b9:12:93:e7: db:f2:e9:0c:cd:95:5e:83:ba:5f:80:7f:ee:04:71: ba:32:40:0e:e4:73:c1:da:c7:c8:d2:ca:b9:a9:87: ed:e3:fb:91:d2:ee:69:5e:6e:fd:77:c0:2e:e5:7e: 4f:91:10:26:e4:dc:d8:1d:4e:36:eb:f1:90:71:7e: 01:78:67:bd:ca:31:9b:04:98:32:80:f4:84:9a:87: 1c:48:79:e9:45:b2:85:8b:7b:20:47:42:35:d8:7c: f2:f7:12:52:0b:80:13:d7:9e:10:6f:b0:98:75:c5: 1e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:50:A3:27:C0:28:0B:AE:42:45:87:4A:AD:28:F0:49:F6:95:48:53 X509v3 Authority Key Identifier: keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:86:98:ec:a4:cb:27:2f:36:5d:41:80:1e:e6:73:5e:a6:c2: ca:5b:a4:fd:57:13:cd:cc:72:b0:8a:c7:7b:4a:cb:84:96:ef: f2:d8:7e:78:83:b4:5e:c7:b1:30:0d:aa:aa:ab:b4:d6:9d:bf: b8:52:10:01:37:45:ee:5d:f6:4b:76:a9:e7:0a:01:79:23:a8: a7:cd:f0:8f:45:b2:4d:a7:97:15:c4:5d:64:11:9a:d6:1b:43: 9f:06:ae:69:71:31:71:39:fb:07:ff:8c:2e:ff:e6:14:84:56: d4:64:7e:3f:22:c9:52:f2:e6:f5:68:70:62:6d:68:72:a2:34: b6:dc:76:47:ab:b7:f1:36:6d:88:53:ad:88:e4:a2:10:6f:e6: 84:16:22:b7:6d:4e:73:f8:c8:b4:0d:ac:a6:65:56:a8:1e:77: 33:88:16:8b:a5:11:fd:24:ee:d9:ac:83:c5:7f:d6:9e:01:4b: 2d:f6:08:20:b4:53:09:fc:51:32:4c:1a:63:c8:5f:85:30:aa: 39:8b:b6:b6:9f:59:44:54:00:bd:67:a0:52:b5:74:79:01:08: 37:a1:4f:7d:0c:d2:7c:b7:7a:b9:2a:3d:75:a7:73:9e:e5:94: 27:09:de:8b:62:ee:c4:6c:43:41:09:c0:15:b2:d2:87:f1:27: ec:81:a7:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQyQzdDQ0M2REQx OTM1MTA3MDcwHhcNMjYwMTI2MTgwODIxWhcNMjYwMjAyMTgwODIxWjAYMRYwFAYD VQQDDA02OTc3YWQ5Ni1mYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGywzD3+wG0GXTFwJbT3l62H1HY/h0TXLqgD9SUHbwsohdwe5+wislT4y1Ei TnKRvakKaJc4UTEIJ2vxIUzOqWsvZK5tDNfagtEq7BynmvXZUb9/laZnXZg0GmDt bOLo1gxLjbJj0CPJn8fkHAe/hE+GQl8uBba04aFxlh7z25rY2WDyZHJO06fxH1ig YLDyQbkSk+fb8ukMzZVeg7pfgH/uBHG6MkAO5HPB2sfI0sq5qYft4/uR0u5pXm79 d8Au5X5PkRAm5NzYHU426/GQcX4BeGe9yjGbBJgygPSEmoccSHnpRbKFi3sgR0I1 2Hzy9xJSC4AT154Qb7CYdcUeaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRQoyfA KAuuQkWHSq0o8En2lUhTMB8GA1UdIwQYMBaAFOJEnjEiIBMeLnbELHzMbdGTUQcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0JGMy8xQkM2RUIyMDEx RTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4NHVkc1FzZk14dDBaTlJC d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrU2VNU0lnRXg0dWRzUXNmTXh0MFpOUkJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0JGMy8xQkM2RUIyMDExRTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4 NHVkc1FzZk14dDBaTlJCd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCThpjspMsnLzZdQYAe5nNepsLKW6T9VxPNzHKwisd7SsuElu/y2H54 g7Rex7EwDaqqq7TWnb+4UhABN0XuXfZLdqnnCgF5I6inzfCPRbJNp5cVxF1kEZrW G0OfBq5pcTFxOfsH/4wu/+YUhFbUZH4/IslS8ub1aHBibWhyojS23HZHq7fxNm2I U62I5KIQb+aEFiK3bU5z+Mi0DaymZVaoHncziBaLpRH9JO7ZrIPFf9aeAUst9ggg tFMJ/FEyTBpjyF+FMKo5i7a2n1lEVAC9Z6BStXR5AQg3oU99DNJ8t3q5Kj11p3Oe 5ZQnCd6LYu7EbENBCcAVstKH8Sfsgaf5 -----END CERTIFICATE-----Generated at Tue Jan 27 23:17:28 2026 by rpki-client