This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json) Hash identifier: 6ZtI4wwIVXK1IzybxqTJLOpX45IAZiL65ZSOZ2atxec= Subject key identifier: D5:17:5C:B6:36:56:AA:0B:FA:4C:12:07:49:99:97:DC:11:2C:97:75 Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft Manifest number: 0170 Signing time: Sat 17 Jan 2026 03:03:20 +0000 Manifest this update: Sat 17 Jan 2026 03:03:19 +0000 Manifest next update: Sat 24 Jan 2026 03:03:19 +0000 Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: lBKmixsTExKyWWd16saCsW5YtLi+3d3mecirZxcp2XY=) 2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: yT3Pw8KgyLGtb1vkHoOYSitDAsAc7QcaGePhN0Bj1+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 03:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Validity Not Before: Jan 17 03:03:19 2026 GMT Not After : Jan 24 03:03:19 2026 GMT Subject: CN=696afbf8-ffe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fa:87:d8:73:29:f9:9c:33:96:cd:d1:4e:01: b9:f9:97:ef:e5:7f:d2:da:27:44:c3:6d:9e:84:b8: 64:89:9e:e9:b6:96:a9:32:04:69:e7:bd:ee:f7:5c: bb:86:52:d7:57:01:7b:bb:d6:02:75:ff:b0:e3:f1: 79:32:45:33:df:2e:54:59:b0:ca:a6:e4:2e:7f:51: ed:eb:72:69:da:36:f6:70:0b:45:40:b8:85:ac:d9: 92:32:ce:e3:77:4c:1d:79:d6:ff:1b:ae:48:82:93: dc:b7:87:87:b0:a2:da:39:3a:3f:7d:7a:45:97:6e: 70:1f:8f:d2:e3:7d:e0:51:18:09:e0:5a:c9:5c:59: 79:f9:e0:ad:dd:af:fd:4f:f3:46:14:aa:19:8c:9e: 32:52:a0:25:3b:34:ed:36:db:0a:cf:11:b5:0d:eb: 3d:04:39:96:b1:79:13:d8:e5:c0:74:44:ed:b3:e2: 98:09:59:04:39:94:d3:04:a5:76:9c:b9:82:ca:c0: e1:7a:0e:24:ff:f6:dd:77:2f:4f:6e:58:a1:fa:cf: 65:d8:d2:5e:64:ce:39:9e:99:18:52:29:73:6a:c7: 15:b3:a5:cf:6a:ac:42:09:3d:8e:f5:7f:0e:7b:78: 8c:2a:44:ec:7f:79:ad:d9:ed:fd:06:d7:e8:3e:fc: e3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:17:5C:B6:36:56:AA:0B:FA:4C:12:07:49:99:97:DC:11:2C:97:75 X509v3 Authority Key Identifier: keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:9b:37:ce:0e:e5:36:1a:01:37:80:7b:46:02:05:22:51:6e: fb:de:40:c0:65:12:d4:0d:6e:5c:31:7d:c8:ea:e1:99:f7:b0: d6:ad:c7:99:25:a1:3a:19:58:52:b4:ab:0c:63:85:af:c8:01: 00:98:90:d0:8b:8a:33:f9:a1:53:ed:bd:80:58:be:34:91:ed: e5:ca:d8:c0:74:7d:1d:4c:d2:8e:1e:8a:32:0a:99:d0:35:a7: 82:17:81:43:9f:e2:ed:d6:39:f9:1b:c2:64:7c:dc:60:cc:ba: c1:b0:9a:af:84:50:fd:2f:02:bc:61:ab:f5:13:44:5c:02:8d: 1c:2f:13:04:f2:11:63:37:7b:d1:6d:2e:ca:90:9f:31:b8:ec: 3a:71:97:35:b3:d7:3c:f1:41:07:c8:08:19:d8:fc:8a:83:2a: 5d:41:19:4a:73:c5:c7:16:44:0a:8f:e7:40:57:aa:e1:09:58: d7:53:4e:03:dd:28:7d:34:e2:69:19:64:4c:b1:b0:fd:34:83: a3:7b:24:4a:70:fa:e5:e3:04:a0:d4:fc:79:40:af:68:e8:ed: 0e:4a:23:ee:78:89:43:6c:fd:1e:e8:eb:f5:0d:d1:93:3a:52: f7:d3:33:2e:f6:6d:5d:26:1f:60:91:91:3e:16:c6:6f:0c:fb: fb:41:f7:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKDNFQzRGNzVFNjRCNzJBODg3ODZBRjRCOTdDOTg0ODZD QkQ2RDJGNTYwHhcNMjYwMTE3MDMwMzE5WhcNMjYwMTI0MDMwMzE5WjAYMRYwFAYD VQQDDA02OTZhZmJmOC1mZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfqH2HMp+Zwzls3RTgG5+Zfv5X/S2idEw22ehLhkiZ7ptpapMgRp573u91y7 hlLXVwF7u9YCdf+w4/F5MkUz3y5UWbDKpuQuf1Ht63Jp2jb2cAtFQLiFrNmSMs7j d0wdedb/G65IgpPct4eHsKLaOTo/fXpFl25wH4/S433gURgJ4FrJXFl5+eCt3a/9 T/NGFKoZjJ4yUqAlOzTtNtsKzxG1Des9BDmWsXkT2OXAdETts+KYCVkEOZTTBKV2 nLmCysDheg4k//bddy9Pblih+s9l2NJeZM45npkYUilzascVs6XPaqxCCT2O9X8O e3iMKkTsf3mt2e39BtfoPvzjXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUXXLY2 VqoL+kwSB0mZl9wRLJd1MB8GA1UdIwQYMBaAFD7E915ktyqIeGr0uXyYSGy9bS9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi81RkJFNDNCNEJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tvaDRhdlM1ZkpoSWJMMXRM MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi81RkJFNDNCNEJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tv aDRhdlM1ZkpoSWJMMXRMMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYmzfODuU2GgE3gHtGAgUiUW773kDAZRLUDW5cMX3I6uGZ97DWrceZ JaE6GVhStKsMY4WvyAEAmJDQi4oz+aFT7b2AWL40ke3lytjAdH0dTNKOHooyCpnQ NaeCF4FDn+Lt1jn5G8JkfNxgzLrBsJqvhFD9LwK8Yav1E0RcAo0cLxME8hFjN3vR bS7KkJ8xuOw6cZc1s9c88UEHyAgZ2PyKgypdQRlKc8XHFkQKj+dAV6rhCVjXU04D 3Sh9NOJpGWRMsbD9NIOjeyRKcPrl4wSg1Px5QK9o6O0OSiPueIlDbP0e6Ov1DdGT OlL30zMu9m1dJh9gkZE+FsZvDPv7QfeD -----END CERTIFICATE-----Generated at Sun Jan 18 03:16:14 2026 by rpki-client