This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft File: 2y3U_v83CRJX9gGdUKI5MOxG4fs.mft (raw, json) Hash identifier: VPv3VqgKsTzV/SrymZLLKvSKPKtDOY+scO70octGxIM= Subject key identifier: A8:3F:0E:73:DD:55:51:D8:00:FC:82:F6:D3:48:A9:AD:D1:2D:4F:17 Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB Certificate issuer: /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft Manifest number: 73 Signing time: Wed 21 Jan 2026 06:15:35 +0000 Manifest this update: Wed 21 Jan 2026 06:15:35 +0000 Manifest next update: Wed 28 Jan 2026 06:15:35 +0000 Files and hashes: 1: 2y3U_v83CRJX9gGdUKI5MOxG4fs.crl (hash: 84fTqXBbARq0yO4fqa853Jbb9AASKLhBleTXd30RiRE=) 2: 5747D682B8C611F085BFD10DC4F9AE02.roa (hash: Vyslx5mdWdDu9jOFCamKT0Oyx0LSy+sxmYhw6Lcpxhg=) 3: 1210E96E791511F08360054EC4F9AE02.roa (hash: g6fyOzWk0MSz6GfVwk41rvcH/uuupLJzr6cnkak68f0=) 4: 3E9B5E9C791511F09DD1364EC4F9AE02.roa (hash: ryMrdROkWopWtCd24OFF7BPHTxSfEd6I/FfwS8u7uiY=) 5: 029780A8791D11F08A28C96CC4F9AE02.roa (hash: pGPmdLHfowVP5GqjVM5KRZfh3egnrEoSoQis+DjhvBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 06:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Validity Not Before: Jan 21 06:15:35 2026 GMT Not After : Jan 28 06:15:35 2026 GMT Subject: CN=69706f07-e170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:d3:d6:ed:f4:63:ad:7b:25:07:42:45:f7: 03:06:a5:bf:25:e6:51:13:b9:8e:9c:ac:6f:6c:35: bf:5b:7f:5f:fd:33:67:99:4e:a4:55:00:4d:db:59: b1:dd:51:30:70:69:f0:38:10:ef:b2:b8:1d:de:de: d9:06:f4:80:24:63:bc:a7:47:02:54:e9:37:9e:a3: ad:a1:8f:72:e6:33:6e:9d:c2:ea:39:b7:79:30:3d: 77:71:43:2a:81:a7:c6:10:46:a3:4c:ab:ef:0a:8f: c0:39:69:40:39:2c:fc:5c:22:35:34:f3:e7:63:06: 5e:71:15:97:ac:d3:15:f7:cc:1b:eb:2d:97:b5:50: 16:0a:c4:04:98:a4:fb:dc:f6:4b:2f:b4:dc:15:45: 88:24:38:38:d9:94:f5:3c:c1:cb:e0:7c:c7:b1:b0: 0c:50:ba:39:b3:5b:25:68:36:e6:03:38:d3:9c:09: 9e:91:66:9c:0c:27:ca:ab:6f:37:66:87:f7:61:de: a9:7b:5f:a7:bc:99:2d:5c:4f:81:9f:f8:3e:41:4b: 18:20:ca:31:3d:82:37:c1:aa:e9:fb:ae:cd:cc:21: 94:57:a0:8a:61:dd:2e:38:d6:3e:7d:e1:f6:7b:e1: 96:5c:8a:f8:3f:42:3e:00:08:64:05:e1:50:fd:0a: 33:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3F:0E:73:DD:55:51:D8:00:FC:82:F6:D3:48:A9:AD:D1:2D:4F:17 X509v3 Authority Key Identifier: keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:f8:06:29:13:5f:f9:34:c2:b6:43:16:a2:3c:60:af:1e:52: d3:d9:23:48:80:a2:9d:c2:73:54:88:af:ce:be:fc:b5:d5:ef: af:e8:45:4f:85:a8:20:29:e6:83:b3:8e:ff:6b:71:e3:45:6c: 2e:2f:32:f7:b4:9f:93:51:f5:79:84:5d:74:ba:2f:c8:1a:d9: f1:ad:2c:6e:1e:ed:86:15:eb:89:76:3f:a4:f6:6a:9d:89:3b: 45:0a:32:43:95:c7:67:10:17:14:c4:bb:8b:dc:de:9a:a8:4d: d8:3f:66:7d:cf:47:43:a6:d5:f2:ff:df:77:f7:51:b4:9b:17: 47:24:e2:08:c8:85:2b:c7:20:fe:f7:10:af:e3:e3:14:de:81: 84:b6:8c:31:57:75:88:8a:74:f6:4d:52:c4:ce:ca:1a:91:ce: a6:44:df:bc:cc:0b:e1:5c:d2:1d:31:67:52:17:ef:61:aa:42: 15:b1:4d:ed:d8:4d:d6:4a:b0:9f:52:cb:1b:0e:e4:5b:b2:e7: 39:c2:0a:39:bd:62:be:a6:65:2f:f9:ec:eb:41:2c:f6:dd:fc: c3:5c:87:1d:01:e8:27:02:eb:9b:a4:b6:df:a5:35:3b:fa:63: 4e:aa:0f:d8:3d:ce:e7:2b:87:0c:a4:e5:91:ab:20:95:74:0a: 52:8a:d7:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YxMTYxMTAvBgNVBAUTKERCMkRENEZFRkYzNzA5MTI1N0Y2MDE5RDUwQTIzOTMw RUM0NkUxRkIwHhcNMjYwMTIxMDYxNTM1WhcNMjYwMTI4MDYxNTM1WjAYMRYwFAYD VQQDDA02OTcwNmYwNy1lMTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnLT1u30Y617JQdCRfcDBqW/JeZRE7mOnKxvbDW/W39f/TNnmU6kVQBN21mx 3VEwcGnwOBDvsrgd3t7ZBvSAJGO8p0cCVOk3nqOtoY9y5jNuncLqObd5MD13cUMq gafGEEajTKvvCo/AOWlAOSz8XCI1NPPnYwZecRWXrNMV98wb6y2XtVAWCsQEmKT7 3PZLL7TcFUWIJDg42ZT1PMHL4HzHsbAMULo5s1slaDbmAzjTnAmekWacDCfKq283 Zof3Yd6pe1+nvJktXE+Bn/g+QUsYIMoxPYI3warp+67NzCGUV6CKYd0uONY+feH2 e+GWXIr4P0I+AAhkBeFQ/QozHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKg/DnPd VVHYAPyC9tNIqa3RLU8XMB8GA1UdIwQYMBaAFNst1P7/NwkSV/YBnVCiOTDsRuH7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjExNi84QkNGRkYwNjZF REUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yeTNVX3Y4M0NSSlg5Z0dkVUtJNU1PeEc0 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5M1VfdjgzQ1JKWDlnR2RVS0k1TU94RzRmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjExNi84QkNGRkYwNjZFREUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yeTNVX3Y4M0NS Slg5Z0dkVUtJNU1PeEc0ZnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDM+AYpE1/5NMK2QxaiPGCvHlLT2SNIgKKdwnNUiK/Ovvy11e+v6EVP haggKeaDs47/a3HjRWwuLzL3tJ+TUfV5hF10ui/IGtnxrSxuHu2GFeuJdj+k9mqd iTtFCjJDlcdnEBcUxLuL3N6aqE3YP2Z9z0dDptXy/99391G0mxdHJOIIyIUrxyD+ 9xCv4+MU3oGEtowxV3WIinT2TVLEzsoakc6mRN+8zAvhXNIdMWdSF+9hqkIVsU3t 2E3WSrCfUssbDuRbsuc5wgo5vWK+pmUv+ezrQSz23fzDXIcdAegnAuubpLbfpTU7 +mNOqg/YPc7nK4cMpOWRqyCVdApSitfQ -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:34 2026 by rpki-client