This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft File: 1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json) Hash identifier: VgFqcFi35aeVRxRh2VnEpRWd1/KG7uKbWchKVAJXIF0= Subject key identifier: AE:90:67:91:E1:68:E2:A2:9F:03:DF:AF:8A:86:85:71:FD:2D:92:21 Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 35A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft Manifest number: 3551 Signing time: Tue 20 Jan 2026 14:22:06 +0000 Manifest this update: Tue 20 Jan 2026 14:22:06 +0000 Manifest next update: Tue 27 Jan 2026 14:22:06 +0000 Files and hashes: 1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: 0VgvIIwLg6nwQ6LZSPm7dkRn2ZzIKCRgiJr5kcldJyg=) 2: 964F254A4AEC11EF91EC775FC4F9AE02.roa (hash: nUgngne0/Po1woAmp/WM+XljTraQ4HMoQ5pOy9QCPKg=) 3: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: cLWjAQfHB1XuUxPtUJRHi4idez2Y+6Lxv08uwEYGrgM=) 4: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: LDnpUV+i1iRAJrBm2unF32JWcSXChORTnvD3fUQwbdk=) 5: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: xeaHh4f0PcYoja3FW2MKcCuwzba5+DIVdsTI+jNxV6c=) 6: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: MDzjDXZFFOaG6b4Hi2bRVyjseXED7kDvegJ5uB6PIoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13729 (0x35a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: Jan 20 14:22:06 2026 GMT Not After : Jan 27 14:22:06 2026 GMT Subject: CN=696f8f8e-7ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:a7:9a:52:d8:96:9d:6a:11:a0:f9:93:dd: 86:72:8a:bd:b2:18:93:3b:be:7c:1c:dc:69:0f:5f: b7:be:ab:31:3d:12:fc:00:c8:7d:91:d2:d1:3d:89: ab:86:d3:16:2c:94:7d:cd:6b:86:83:fb:39:d2:cc: 33:a2:c3:e7:8c:3d:2f:b4:24:0b:c7:92:a9:f8:92: 49:a1:63:b3:8f:6c:d1:27:40:04:96:ae:62:be:8b: ac:7f:5c:7e:3a:ab:90:f7:69:f2:12:dc:52:84:e4: 0b:bc:b8:a8:ff:28:f9:94:43:72:01:18:d4:f7:3a: c2:64:59:cf:68:22:54:5d:84:32:58:a6:b8:fc:5d: d7:aa:b0:66:1c:f3:5a:12:1f:c5:75:99:49:c1:ab: 87:b1:a9:1f:7f:d8:d2:df:f0:b0:38:52:05:47:41: 89:37:1f:ca:00:39:a5:cf:74:31:31:45:6b:45:76: a1:13:35:bf:eb:92:dc:03:2f:1c:11:73:85:7b:3e: c6:fb:d6:39:38:52:66:30:b7:26:16:5d:ea:87:20: 08:27:3f:ee:00:64:15:11:3e:4f:76:9b:62:59:ab: c7:88:9d:74:7d:7c:52:d9:95:68:b3:85:04:8c:cd: fc:f3:a7:d6:d9:18:f2:6f:60:75:43:d5:0a:13:fd: af:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:90:67:91:E1:68:E2:A2:9F:03:DF:AF:8A:86:85:71:FD:2D:92:21 X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:54:a5:31:d7:ea:a8:eb:e2:5c:51:98:92:94:92:60:59:30: 36:e0:f5:17:9c:a3:fe:0c:7d:79:45:03:1f:c3:28:f6:2f:14: 32:a4:c2:ab:c0:52:36:2b:d9:4c:f1:85:38:26:b1:fe:b1:50: ca:ea:bb:3b:c4:ec:a7:92:d3:0e:4c:7d:75:ba:6a:3a:16:81: 64:62:00:0f:76:c5:64:74:75:b2:93:ce:04:10:f6:d1:37:e0: 3e:76:22:26:da:d0:f9:8b:06:df:4f:01:5e:45:fa:29:20:ad: 24:5d:e5:01:7c:5c:5e:74:f5:58:5f:3b:85:5f:00:31:04:9b: 16:08:98:bc:bf:af:53:a7:96:43:a8:aa:29:59:39:63:e4:b9: fd:2b:41:7b:7e:6c:69:a8:89:26:e4:9c:99:3d:9e:02:1f:b0: e1:da:a4:03:c1:ae:d2:53:cf:89:eb:31:00:83:6c:f1:b6:a6: 52:be:ee:c0:23:af:a7:42:c8:f5:38:ef:04:4d:6d:dc:b2:6d: ba:cf:ba:87:a7:7e:a7:70:da:53:63:44:39:46:45:5e:a9:e6: 7a:e2:0d:08:bb:b4:a1:f7:67:24:1a:03:ea:3d:ef:bb:45:bd: c3:cf:0f:39:d8:a4:fe:dc:5f:7f:a2:87:3c:5f:ff:94:c7:c6: 80:d9:45:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjYwMTIwMTQyMjA2WhcNMjYwMTI3MTQyMjA2WjAYMRYwFAYD VQQDDA02OTZmOGY4ZS03Y2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeGnmlLYlp1qEaD5k92Gcoq9shiTO758HNxpD1+3vqsxPRL8AMh9kdLRPYmr htMWLJR9zWuGg/s50swzosPnjD0vtCQLx5Kp+JJJoWOzj2zRJ0AElq5ivousf1x+ OquQ92nyEtxShOQLvLio/yj5lENyARjU9zrCZFnPaCJUXYQyWKa4/F3XqrBmHPNa Eh/FdZlJwauHsakff9jS3/CwOFIFR0GJNx/KADmlz3QxMUVrRXahEzW/65LcAy8c EXOFez7G+9Y5OFJmMLcmFl3qhyAIJz/uAGQVET5PdptiWavHiJ10fXxS2ZVos4UE jM3886fW2Rjyb2B1Q9UKE/2vLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6QZ5Hh aOKinwPfr4qGhXH9LZIhMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUVKUx1+qo6+JcUZiSlJJgWTA24PUXnKP+DH15RQMfwyj2LxQypMKr wFI2K9lM8YU4JrH+sVDK6rs7xOynktMOTH11umo6FoFkYgAPdsVkdHWyk84EEPbR N+A+diIm2tD5iwbfTwFeRfopIK0kXeUBfFxedPVYXzuFXwAxBJsWCJi8v69Tp5ZD qKopWTlj5Ln9K0F7fmxpqIkm5JyZPZ4CH7Dh2qQDwa7SU8+J6zEAg2zxtqZSvu7A I6+nQsj1OO8ETW3csm26z7qHp36ncNpTY0Q5RkVeqeZ64g0Iu7Sh92ckGgPqPe+7 Rb3Dzw852KT+3F9/ooc8X/+Ux8aA2UWz -----END CERTIFICATE-----Generated at Wed Jan 21 13:36:54 2026 by rpki-client