This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: MKa3kyRJt3rMyhkrdjdcR+xbuMxKm+y80edKvGQjaEE= Subject key identifier: D4:63:86:F1:CB:CB:EA:3A:43:79:14:AF:71:B7:6B:84:29:70:CB:76 Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 05A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 0576 Signing time: Mon 26 Jan 2026 22:36:00 +0000 Manifest this update: Mon 26 Jan 2026 22:35:59 +0000 Manifest next update: Mon 02 Feb 2026 22:35:59 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: 3Uq92+S7uYExCiIjpGv1Hilmfb5gNzRl0rsRT0qfyRw=) 2: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: XSuhAhi3kRB8kUY+l+Kw6bn9CYFf3Y2Di14tTGA1/Oo=) 3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: /zpbbyMm2w5Xcql5zfUtoN8iPAyG5aFUqVMvzNCSPuM=) 4: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: vwZIGcuT/wdsi2ov5n4aKBIuwaWae+4rjnxU5e55BsU=) 5: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 9x2G7s9XnkzB/aoRrwX0fPhCy+k2H2dG9FDGRVFamnQ=) 6: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: 02gdGUoKaGU981qYNAOicujQXSbUOhKyvNrMWXNfXQk=) 7: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: hn+qGaZCtkUKYopOyzVnHKxTxBxzaX/N9RY/bypGInA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 22:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1441 (0x5a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Jan 26 22:35:59 2026 GMT Not After : Feb 2 22:35:59 2026 GMT Subject: CN=6977ec50-e03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:95:01:75:e1:b4:53:3a:55:df:3e:a3:4f:0e: 31:f1:4d:26:93:a2:16:88:d2:24:79:c7:50:de:6a: 02:03:13:14:62:d6:49:9a:4d:09:4a:b5:cd:24:bd: c5:5f:a2:57:20:17:83:81:7e:4c:c0:4d:a6:c6:4a: f8:21:f0:66:de:2c:b9:96:dd:81:23:f2:e9:f2:7d: 85:f4:4e:76:46:7a:1f:21:40:25:14:f4:61:9e:0e: a0:75:ea:ec:3b:72:bc:f0:ed:69:ba:b6:79:28:97: 13:39:c2:7c:1b:97:03:13:ee:e9:c6:ed:d6:e6:4f: 42:bb:94:ca:cd:64:42:5e:06:f5:49:df:59:4a:e4: 5c:58:37:c8:01:c3:c8:49:99:bb:08:ca:a1:65:e9: 4e:f5:cb:d8:09:22:35:82:35:7d:25:81:12:79:21: 95:c9:b6:8a:45:94:9c:6e:ae:bb:ec:15:dc:c3:6c: 38:70:29:52:4b:d6:99:d4:30:21:75:27:38:2e:6d: 3a:0d:cd:07:2f:95:94:0a:ca:3f:9e:24:21:34:62: 6a:f7:5b:28:39:64:53:40:3f:b9:24:96:8c:8a:ec: 1f:e2:55:09:37:89:ba:c5:62:53:66:ef:e3:0d:d1: 75:23:ee:91:eb:80:3e:8f:42:87:91:63:f5:4e:2f: 41:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:63:86:F1:CB:CB:EA:3A:43:79:14:AF:71:B7:6B:84:29:70:CB:76 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d9:63:1a:f7:f2:c6:4c:51:c5:b5:7f:17:91:4f:7f:87:e6: eb:bf:3e:f7:9a:6d:65:04:4f:7d:83:63:0c:4c:a6:f4:be:3d: 1c:9f:61:77:ee:1d:e4:af:33:8f:d3:df:42:a4:4a:41:41:59: 0b:42:75:99:15:ba:0d:55:7f:e3:94:7b:4d:82:9d:aa:ce:87: 97:21:53:90:85:43:fa:f4:b0:d8:65:b4:85:7f:89:97:93:99: b7:aa:5a:42:56:37:fc:7d:31:11:37:32:1a:c2:1c:c9:ea:b6: b9:52:31:21:77:1b:d1:27:69:5e:7a:55:5c:29:23:dc:9c:74: 39:8e:28:4c:e2:e9:c9:0c:a8:d6:2f:e1:2f:fb:1e:b4:52:66: 45:93:d4:84:08:a6:80:a6:1c:e0:86:cf:95:e9:2d:bc:d5:6d: 06:5c:ff:5c:09:1d:c1:88:26:70:70:5a:8c:18:ae:fb:50:e5: 96:ee:4c:99:b2:15:b6:bc:95:87:53:58:0f:c9:c9:d4:d5:ba: e9:45:9f:1f:0d:ca:fa:31:b6:0c:d0:03:87:63:58:f9:91:22: de:71:35:fb:56:10:34:39:b8:db:6c:c6:39:bb:2f:e5:78:aa: 32:05:79:57:11:ea:2a:eb:65:dd:42:ba:62:77:99:2f:86:ce: 19:38:52:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjYwMTI2MjIzNTU5WhcNMjYwMjAyMjIzNTU5WjAYMRYwFAYD VQQDDA02OTc3ZWM1MC1lMDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJUBdeG0UzpV3z6jTw4x8U0mk6IWiNIkecdQ3moCAxMUYtZJmk0JSrXNJL3F X6JXIBeDgX5MwE2mxkr4IfBm3iy5lt2BI/Lp8n2F9E52RnofIUAlFPRhng6gders O3K88O1purZ5KJcTOcJ8G5cDE+7pxu3W5k9Cu5TKzWRCXgb1Sd9ZSuRcWDfIAcPI SZm7CMqhZelO9cvYCSI1gjV9JYESeSGVybaKRZScbq677BXcw2w4cClSS9aZ1DAh dSc4Lm06Dc0HL5WUCso/niQhNGJq91soOWRTQD+5JJaMiuwf4lUJN4m6xWJTZu/j DdF1I+6R64A+j0KHkWP1Ti9BSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRjhvHL y+o6Q3kUr3G3a4QpcMt2MB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX2WMa9/LGTFHFtX8XkU9/h+brvz73mm1lBE99g2MMTKb0vj0cn2F3 7h3krzOP099CpEpBQVkLQnWZFboNVX/jlHtNgp2qzoeXIVOQhUP69LDYZbSFf4mX k5m3qlpCVjf8fTERNzIawhzJ6ra5UjEhdxvRJ2leelVcKSPcnHQ5jihM4unJDKjW L+Ev+x60UmZFk9SECKaAphzghs+V6S281W0GXP9cCR3BiCZwcFqMGK77UOWW7kyZ shW2vJWHU1gPycnU1brpRZ8fDcr6MbYM0AOHY1j5kSLecTX7VhA0ObjbbMY5uy/l eKoyBXlXEeoq62XdQrpid5kvhs4ZOFL0 -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:54 2026 by rpki-client