This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft File: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json) Hash identifier: t3tUt+M/15u/blMx7tpQpa8HsZRM/PrpemUp+saFCEI= Subject key identifier: 3E:C4:4C:FE:74:80:63:AB:9B:46:96:CE:44:C7:A8:D4:50:20:7D:73 Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E Certificate issuer: /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft Manifest number: 78 Signing time: Sat 17 Jan 2026 05:54:59 +0000 Manifest this update: Sat 17 Jan 2026 05:54:58 +0000 Manifest next update: Sat 24 Jan 2026 05:54:58 +0000 Files and hashes: 1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: X/JkLArV1w92+AgkVM/DRc0ZlDhojJZQDaDA6DbFFsQ=) 2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: lNd0dhVh9oVMjkR+5hS3U5ljCVkdpvgCie/KVi3bQe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 05:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E Validity Not Before: Jan 17 05:54:58 2026 GMT Not After : Jan 24 05:54:58 2026 GMT Subject: CN=696b2433-1e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3d:a2:99:ee:5e:14:be:96:76:4f:56:91:9c: 4a:10:66:58:c4:1f:6b:8c:0e:f7:5f:d4:80:84:06: b1:23:16:90:88:d2:9d:6c:a3:dd:51:f4:54:fb:b8: 72:3a:e9:c8:73:e2:8b:93:52:79:f8:21:5d:7b:e1: 77:d4:4e:50:8e:ff:ff:c3:43:7b:9c:30:11:d6:ba: 03:9f:5b:24:75:36:1a:32:85:43:a9:77:1c:74:67: 96:3d:ce:5d:48:34:5d:5a:5c:77:d3:ca:10:9e:26: b1:8c:60:41:7c:06:aa:68:28:e0:5d:df:d4:5d:15: fe:1b:74:75:c9:22:82:52:a0:52:05:8b:0b:a2:61: cd:24:d0:db:86:5d:4b:67:d4:a7:43:5c:11:cf:5f: bc:8b:46:0c:a5:86:b7:81:14:00:ec:07:31:1c:c9: f2:02:08:53:0d:07:9c:10:cc:51:cb:53:fb:ce:09: 24:7e:a5:40:cb:13:d8:cb:46:a8:10:da:70:75:ac: 27:fc:26:13:a0:d3:cc:a0:1d:a8:18:29:b4:94:9b: 82:ab:e7:0e:c2:15:c5:52:b0:12:49:c7:df:71:d7: 31:8e:7c:59:e7:36:f1:05:ea:80:b9:8d:6a:4f:55: 91:00:b6:a9:ba:0c:b6:9a:f1:5d:c8:13:c3:79:a6: c2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C4:4C:FE:74:80:63:AB:9B:46:96:CE:44:C7:A8:D4:50:20:7D:73 X509v3 Authority Key Identifier: keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:cb:1a:28:e5:26:1b:a7:2c:48:55:5e:40:eb:52:cf:97:bc: 18:c0:94:3c:9a:61:f6:72:75:4f:dd:a2:1d:12:a5:64:66:5c: e5:b4:9d:47:28:19:61:01:7c:73:20:7d:23:27:fb:84:16:2d: 6a:6c:a4:65:b9:fe:9b:c8:b9:73:c0:ad:be:e8:f6:c6:db:fb: c8:fe:47:cf:75:5d:75:0f:3c:2d:3e:bf:e4:f3:a7:fd:16:8f: ce:36:da:b0:f0:e4:18:a5:b8:ab:c1:3b:d4:2c:30:0d:43:60: c6:c7:ec:95:71:29:03:8e:29:42:03:7d:88:d4:a2:f3:d7:5d: 84:7a:55:06:83:3f:15:a6:ce:d0:78:27:8e:39:16:32:18:7e: f0:9a:ca:4f:4d:c1:56:63:d1:20:89:c6:a5:f0:dc:c4:64:5d: e6:48:8a:5d:2f:bc:6e:fd:62:15:84:a1:a2:2c:30:94:81:bb: 19:52:0a:5c:fb:2b:fd:f6:f2:f9:80:a7:06:5e:37:c9:a8:6e: e9:5f:3a:36:50:86:d5:b3:bf:0f:6c:4b:ec:fa:bf:3c:7c:8b: a8:b6:ab:9d:ee:62:e3:44:80:37:87:a0:6e:4c:93:a2:ff:57: 53:8f:16:3b:34:25:28:5a:d8:fa:04:1a:34:d0:4c:81:db:c5: 0a:31:c2:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTFGQTExMC8GA1UEBRMoRjE1QzVDNUJBNTIxNDUzNzA3QzgxRjVGRUMwODExQkYy MUNGRjQwRTAeFw0yNjAxMTcwNTU0NThaFw0yNjAxMjQwNTU0NThaMBgxFjAUBgNV BAMMDTY5NmIyNDMzLTFlMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNPaKZ7l4UvpZ2T1aRnEoQZljEH2uMDvdf1ICEBrEjFpCI0p1so91R9FT7uHI6 6chz4ouTUnn4IV174XfUTlCO///DQ3ucMBHWugOfWyR1NhoyhUOpdxx0Z5Y9zl1I NF1aXHfTyhCeJrGMYEF8BqpoKOBd39RdFf4bdHXJIoJSoFIFiwuiYc0k0NuGXUtn 1KdDXBHPX7yLRgylhreBFADsBzEcyfICCFMNB5wQzFHLU/vOCSR+pUDLE9jLRqgQ 2nB1rCf8JhOg08ygHagYKbSUm4Kr5w7CFcVSsBJJx99x1zGOfFnnNvEF6oC5jWpP VZEAtqm6DLaa8V3IE8N5psLnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPsRM/nSA Y6ubRpbORMeo1FAgfXMwHwYDVR0jBBgwFoAU8VxcW6UhRTcHyB9f7AgRvyHP9A4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMUZBLzlBODczRUIwNDVB MzExRjA5NUVGRkQ0OEM0RjlBRTAyLzhWeGNXNlVoUlRjSHlCOWY3QWdSdnlIUDlB NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFZ4Y1c2VWhSVGNIeUI5ZjdBZ1J2eUhQOUE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MUZBLzlBODczRUIwNDVBMzExRjA5NUVGRkQ0OEM0RjlBRTAyLzhWeGNXNlVoUlRj SHlCOWY3QWdSdnlIUDlBNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKrLGijlJhunLEhVXkDrUs+XvBjAlDyaYfZydU/doh0SpWRmXOW0nUco GWEBfHMgfSMn+4QWLWpspGW5/pvIuXPArb7o9sbb+8j+R891XXUPPC0+v+Tzp/0W j8422rDw5BiluKvBO9QsMA1DYMbH7JVxKQOOKUIDfYjUovPXXYR6VQaDPxWmztB4 J445FjIYfvCayk9NwVZj0SCJxqXw3MRkXeZIil0vvG79YhWEoaIsMJSBuxlSClz7 K/328vmApwZeN8mobulfOjZQhtWzvw9sS+z6vzx8i6i2q53uYuNEgDeHoG5Mk6L/ V1OPFjs0JSha2PoEGjTQTIHbxQoxwro= -----END CERTIFICATE-----Generated at Sun Jan 18 03:15:22 2026 by rpki-client