This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft File: h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json) Hash identifier: aQNu+sHpZeyZjso2qqNw1jpPXL9Rs+GicoMDpsQ0f6s= Subject key identifier: 8D:B2:9C:2F:6E:B0:65:33:A8:C0:C6:4A:49:36:1E:35:D9:69:8B:49 Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 Certificate issuer: /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Certificate serial: 3506 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft Manifest number: 3506 Signing time: Tue 20 Jan 2026 14:16:39 +0000 Manifest this update: Tue 20 Jan 2026 14:16:39 +0000 Manifest next update: Tue 27 Jan 2026 14:16:39 +0000 Files and hashes: 1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: i9oWn0hwC/mnnoNEi2BUpa/mb7mACLaeEQK5SWo7xZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13574 (0x3506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Validity Not Before: Jan 20 14:16:39 2026 GMT Not After : Jan 27 14:16:39 2026 GMT Subject: CN=696f8e47-c836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:45:5f:f9:05:ef:77:7d:94:ae:dc:f8:35:e0: 91:fb:1f:fa:fd:f4:0f:e9:b5:88:b8:5c:29:f4:fc: 52:15:bb:87:8d:d2:5d:6f:c0:fc:11:d0:ec:85:5e: 8f:38:65:98:0f:02:8f:61:f3:6d:0d:dc:35:3e:f3: c8:d0:7e:f6:ad:93:00:41:a2:15:f6:18:02:dd:57: 3c:ff:d2:cb:9b:ac:83:ff:24:0b:9a:23:50:30:cb: 4c:d5:5e:ed:1f:e4:68:57:d7:91:14:b1:a3:62:1d: 63:0f:ff:f5:a4:33:33:e3:7f:18:3e:ed:37:b5:6e: 93:84:12:46:0e:3b:68:bd:d0:a1:04:3d:e5:b4:8b: 48:38:ac:be:39:1c:8b:3e:c1:87:ad:6b:be:11:09: ff:c1:94:c0:ff:69:32:5a:9c:d7:90:36:6e:8e:62: 2d:d0:c2:c8:e6:02:49:7c:e0:20:b6:e5:29:57:bb: 88:a2:26:32:41:af:db:85:47:3f:bf:b6:01:ab:b1: 42:10:1e:6b:19:9b:02:bb:3a:60:d5:73:bb:68:7c: 86:eb:48:38:f4:c1:32:74:8e:b3:18:d0:26:4a:67: 16:72:7d:9b:6c:9e:31:41:53:ba:d8:d4:bf:a7:90: b9:61:bb:7c:1c:f6:7f:5f:53:fe:88:63:58:31:5e: c0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B2:9C:2F:6E:B0:65:33:A8:C0:C6:4A:49:36:1E:35:D9:69:8B:49 X509v3 Authority Key Identifier: keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e8:fe:ff:2d:28:b7:82:b6:3b:95:38:7e:7f:2a:0c:b8:78: e0:92:15:68:e7:89:95:9a:df:89:5f:54:a2:00:1f:a3:c9:1b: 02:38:24:9c:3e:9a:97:b7:a0:42:7a:99:ab:cc:87:2f:bc:3d: c5:df:8e:9a:d3:6b:d1:2a:79:80:0c:72:03:de:95:f3:e7:f2: b0:78:b7:29:54:25:dd:82:fe:a4:a5:8f:6e:2c:79:a0:5f:30: 9d:e6:94:36:45:b5:b7:8f:4b:56:da:9a:f6:36:e9:00:8c:aa: 92:c5:c9:1c:93:01:f6:7c:85:73:c9:f7:b5:5a:ee:79:72:f8: 56:7c:df:04:65:e0:01:a7:c7:61:2b:67:f4:a9:7a:92:cc:b9: 78:36:99:06:1e:0c:ce:5d:03:1f:05:40:1a:ff:ef:9c:c2:d0: 02:fc:e1:d6:9c:fb:48:e3:23:84:49:28:57:e0:be:e2:02:51: 77:59:60:85:36:6f:ae:5f:00:d4:06:3f:10:8e:f0:23:48:f3: eb:54:bd:2c:cf:12:1d:7a:ae:89:cd:46:97:6f:09:be:0e:ee: f9:47:a6:48:9a:b7:90:a1:43:e8:ed:96:ea:42:eb:32:27:4f: f5:af:d1:b1:17:28:90:58:29:43:b5:2e:d3:a8:a9:89:41:54: 50:c5:78:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDg3OTA2MjUwM0ZEMjA4NDY2Rjc0RUE5QUY4NzY3MEE4 N0Q4NkE3MzYwHhcNMjYwMTIwMTQxNjM5WhcNMjYwMTI3MTQxNjM5WjAYMRYwFAYD VQQDDA02OTZmOGU0Ny1jODM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlEVf+QXvd32Urtz4NeCR+x/6/fQP6bWIuFwp9PxSFbuHjdJdb8D8EdDshV6P OGWYDwKPYfNtDdw1PvPI0H72rZMAQaIV9hgC3Vc8/9LLm6yD/yQLmiNQMMtM1V7t H+RoV9eRFLGjYh1jD//1pDMz438YPu03tW6ThBJGDjtovdChBD3ltItIOKy+ORyL PsGHrWu+EQn/wZTA/2kyWpzXkDZujmIt0MLI5gJJfOAgtuUpV7uIoiYyQa/bhUc/ v7YBq7FCEB5rGZsCuzpg1XO7aHyG60g49MEydI6zGNAmSmcWcn2bbJ4xQVO62NS/ p5C5Ybt8HPZ/X1P+iGNYMV7AJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2ynC9u sGUzqMDGSkk2HjXZaYtJMB8GA1UdIwQYMBaAFIeQYlA/0ghGb3Tqmvh2cKh9hqc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC84NDZFQzA0MDFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NFWnZkT3FhLUhad3FIMkdw elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2g1QmlVRF9TQ0VadmRPcWEtSFp3cUgyR3B6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC84NDZFQzA0MDFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NF WnZkT3FhLUhad3FIMkdwelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO6P7/LSi3grY7lTh+fyoMuHjgkhVo54mVmt+JX1SiAB+jyRsCOCSc PpqXt6BCepmrzIcvvD3F346a02vRKnmADHID3pXz5/KweLcpVCXdgv6kpY9uLHmg XzCd5pQ2RbW3j0tW2pr2NukAjKqSxckckwH2fIVzyfe1Wu55cvhWfN8EZeABp8dh K2f0qXqSzLl4NpkGHgzOXQMfBUAa/++cwtAC/OHWnPtI4yOESShX4L7iAlF3WWCF Nm+uXwDUBj8QjvAjSPPrVL0szxIdeq6JzUaXbwm+Du75R6ZImreQoUPo7ZbqQusy J0/1r9GxFyiQWClDtS7TqKmJQVRQxXiB -----END CERTIFICATE-----Generated at Wed Jan 21 08:23:00 2026 by rpki-client