This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft File: AxycJuW6sbAa8YoLsblwq1dzRWs.mft (raw, json) Hash identifier: 6mi2WA3kuoEOjb3Ujm8CuhWjcwi/KPBDiAyzk59CYPo= Subject key identifier: D3:67:EB:EC:CA:5A:1F:DB:DC:AA:16:1D:7C:C4:1E:AF:56:83:8B:F1 Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B Certificate serial: 06BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft Manifest number: 0676 Signing time: Sat 24 Jan 2026 22:03:22 +0000 Manifest this update: Sat 24 Jan 2026 22:03:21 +0000 Manifest next update: Sat 31 Jan 2026 22:03:21 +0000 Files and hashes: 1: AxycJuW6sbAa8YoLsblwq1dzRWs.crl (hash: QjdRphsqMQtyv1MjA2R64k2AarAJEnh46s/XUsPv6NQ=) 2: 3B428CDA8AE011EF90B73462C4F9AE02.roa (hash: julUD60IOe4snzH6KAoHIbddR6Wsz9f7OuPIVZMmxtE=) 3: E88EE726E93611EF9E3FF729C4F9AE02.roa (hash: N+eEbYkVD1rQLJftLU9dJg7J3BbreENHu+CqmvU/UaM=) 4: 37DF315640B111F0B139F22BC4F9AE02.roa (hash: uvXRDLwc1JaYzg5MqW6mAM2HTAORWpCBvskirYBb8Ws=) 5: F2CF477E50C711EF8B03E673C4F9AE02.roa (hash: t1D9X0qlskpyh1U8naNQpcW7molhAYUJs4Teir9lA1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1723 (0x6bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B Validity Not Before: Jan 24 22:03:21 2026 GMT Not After : Jan 31 22:03:21 2026 GMT Subject: CN=697541aa-4a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:61:82:22:f2:96:4a:9c:df:f6:da:f2:d2:3c: c6:a0:c7:bf:b8:f3:cb:c6:9b:83:79:44:46:d5:5e: 81:90:16:c4:69:39:09:4b:19:a7:78:ea:35:4f:52: 2e:ac:1b:99:85:83:32:3c:f1:34:be:5c:18:1b:76: 37:c8:61:c2:66:29:ab:95:59:15:6f:48:58:56:cd: 48:8d:7c:1a:ef:5e:5b:9d:3b:72:df:26:81:9b:e8: ac:f9:26:39:e9:cc:75:27:9f:93:8d:73:9e:a2:ff: 5f:c6:cd:04:bd:9c:05:19:55:9d:24:64:5e:80:06: 39:a7:8b:20:ef:14:fc:6b:50:01:b5:a4:d6:8b:eb: 8f:29:e0:d1:92:56:65:6c:8b:ef:46:be:4e:af:af: cf:0c:3b:98:1e:8a:53:23:02:00:03:d4:5c:95:b6: 4c:5c:b2:31:7d:07:7f:85:25:0a:2f:35:d1:94:cf: 59:13:f1:95:98:14:a0:5f:c9:87:80:b5:83:20:4c: db:bb:81:59:0f:1f:d1:e0:83:c6:a7:cf:66:fb:1a: aa:8e:77:7c:30:c4:e3:e4:99:7b:c0:89:27:e1:45: 74:2e:74:93:43:e6:03:1d:b8:b6:48:df:22:0e:06: 80:2b:4d:fc:96:48:ab:ec:7a:55:6d:80:21:68:fa: 3b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:67:EB:EC:CA:5A:1F:DB:DC:AA:16:1D:7C:C4:1E:AF:56:83:8B:F1 X509v3 Authority Key Identifier: keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:7c:bc:4b:4c:95:89:13:63:15:7b:a6:df:f6:76:b7:69:e7: 38:a8:87:a2:6b:fb:8f:d8:5f:c3:1e:d0:1c:20:b9:49:7a:49: 7a:5d:09:ae:59:b4:d9:91:8e:71:c5:e1:ae:a9:d6:03:fa:e3: bf:e4:42:42:3a:ed:85:bb:29:ce:75:78:4c:b1:f9:0d:da:92: 98:58:f3:53:c7:ad:cc:c1:0b:40:32:3c:1b:b6:a8:7d:75:c9: 27:7a:ef:ce:f1:a0:2e:d1:c2:12:62:e0:44:25:68:0d:97:55: 38:9a:dc:35:f3:4a:55:b1:83:fd:f7:5c:70:b6:f2:d3:68:0c: fa:54:f3:24:5b:94:3b:36:d9:70:21:8f:25:73:46:6f:d0:59: 28:95:5a:3c:73:02:79:0a:12:fb:77:75:cf:bd:47:f2:4c:5e: 57:03:a0:ab:85:27:18:d5:f5:61:d5:c7:c0:3a:39:ff:b7:91: 2b:d2:0d:1e:92:4e:83:ee:0e:01:27:6c:90:67:77:ed:94:af: b7:79:5f:61:21:98:bd:3d:5e:d7:79:08:23:34:ab:82:4a:3e: d7:ce:75:53:73:f3:15:0e:0e:11:b9:94:e3:95:0c:df:16:31: 45:99:3a:9c:5d:78:6e:fd:d5:ae:40:47:70:ff:e2:22:1a:de: 64:4c:ca:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC NTc3MzQ1NkIwHhcNMjYwMTI0MjIwMzIxWhcNMjYwMTMxMjIwMzIxWjAYMRYwFAYD VQQDDA02OTc1NDFhYS00YTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh2GCIvKWSpzf9try0jzGoMe/uPPLxpuDeURG1V6BkBbEaTkJSxmneOo1T1Iu rBuZhYMyPPE0vlwYG3Y3yGHCZimrlVkVb0hYVs1IjXwa715bnTty3yaBm+is+SY5 6cx1J5+TjXOeov9fxs0EvZwFGVWdJGRegAY5p4sg7xT8a1ABtaTWi+uPKeDRklZl bIvvRr5Or6/PDDuYHopTIwIAA9RclbZMXLIxfQd/hSUKLzXRlM9ZE/GVmBSgX8mH gLWDIEzbu4FZDx/R4IPGp89m+xqqjnd8MMTj5Jl7wIkn4UV0LnSTQ+YDHbi2SN8i DgaAK038lkir7HpVbYAhaPo7lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNn6+zK Wh/b3KoWHXzEHq9Wg4vxMB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4 RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDhEOS81NDgzQkZCNkM4RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNi QWE4WW9Mc2Jsd3ExZHpSV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBofLxLTJWJE2MVe6bf9na3aec4qIeia/uP2F/DHtAcILlJekl6XQmu WbTZkY5xxeGuqdYD+uO/5EJCOu2FuynOdXhMsfkN2pKYWPNTx63MwQtAMjwbtqh9 dckneu/O8aAu0cISYuBEJWgNl1U4mtw180pVsYP991xwtvLTaAz6VPMkW5Q7Ntlw IY8lc0Zv0FkolVo8cwJ5ChL7d3XPvUfyTF5XA6CrhScY1fVh1cfAOjn/t5Er0g0e kk6D7g4BJ2yQZ3ftlK+3eV9hIZi9PV7XeQgjNKuCSj7XznVTc/MVDg4RuZTjlQzf FjFFmTqcXXhu/dWuQEdw/+IiGt5kTMq6 -----END CERTIFICATE-----Generated at Mon Jan 26 18:47:02 2026 by rpki-client