This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft File: iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft (raw, json) Hash identifier: 1w58zwzOn2SWiV7AKzvSa7UzJwqawVRQuMPrurQU4S8= Subject key identifier: 18:06:44:29:69:66:25:F3:4E:EF:E8:00:F2:EA:CE:D6:23:34:04:AC Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft Manifest number: 56 Signing time: Tue 27 Jan 2026 06:22:47 +0000 Manifest this update: Tue 27 Jan 2026 06:22:47 +0000 Manifest next update: Tue 03 Feb 2026 06:22:47 +0000 Files and hashes: 1: iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl (hash: ZtkpU7rZaCV/M6kt+IR6KizHPwGpMYg/hWO5FUwvotw=) 2: 8B58F72A7BF511F0BEBF8326C4F9AE02.roa (hash: DPudtrZt3zDLn6cOKt8G2uNXGPQUskKpTDxbAvt9zzA=) 3: 8AF73C7E7BF511F0BEBF8326C4F9AE02.roa (hash: ccXunp3OE2ONSoYTGcr2m1hcygin6LHeeNQEO7if+44=) 4: 5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa (hash: LhJsIUDxJjf34uwAXx8g7B6lkG4erRS20bGVNhkO1Ek=) 5: 8938B9DA7BF511F0BEBF8326C4F9AE02.roa (hash: vQ9ge67AKzH4HNbVsuxX3Mwi95vAo6POwUTMCo0fB8I=) 6: 8A65797E7BF511F0BEBF8326C4F9AE02.roa (hash: 8VEPDf924YuQ0JrYCDPzrjF2qm9rSo7AZ2xnXGQmqpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 06:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Validity Not Before: Jan 27 06:22:47 2026 GMT Not After : Feb 3 06:22:47 2026 GMT Subject: CN=697859b7-1f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:02:c2:66:d0:3b:a5:b7:e0:65:9f:c2:58: 74:69:5d:ee:ed:c3:0b:e8:5f:8d:df:70:0c:54:7b: b0:cb:07:8a:27:df:d2:32:e0:bf:b5:bf:2a:ca:15: af:ad:ad:96:ff:8a:e1:c3:5f:7b:3e:1c:1e:67:78: 09:b1:e5:68:1f:9d:d1:1a:dc:3c:3e:74:9c:83:ce: 0d:f1:70:8d:ce:5b:85:62:2e:09:36:6a:b3:d6:87: 25:ec:66:9c:a3:b9:6d:18:48:1f:c5:80:b5:82:c9: 91:a3:99:d1:20:bb:0f:44:87:34:1d:56:83:10:6d: 6d:2b:8a:91:9e:be:3c:4e:75:04:4c:dc:23:7e:2a: 00:b1:6d:4f:71:fb:a3:3d:80:07:2e:17:03:40:89: 17:06:de:e0:7d:b2:31:3d:1e:4b:af:3a:a1:6c:b6: f3:a4:f8:fa:b1:84:c4:69:8d:d8:20:5c:6e:e1:50: 0c:12:cd:65:10:47:15:92:a7:54:e9:3b:ed:ff:e0: c5:7d:5e:4e:84:97:d9:e9:ae:1f:4e:3b:a9:8c:f0: 58:d2:72:39:9d:3d:03:d7:27:db:e4:42:76:1f:25: 0e:42:46:fc:61:15:91:d0:cf:dd:0d:ee:f1:dd:3e: 54:6b:46:4a:b3:d3:60:f1:5c:fe:83:a3:f0:ea:6d: fd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:06:44:29:69:66:25:F3:4E:EF:E8:00:F2:EA:CE:D6:23:34:04:AC X509v3 Authority Key Identifier: keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3b:e8:65:97:0c:53:59:b5:46:d2:1a:6d:5a:41:d7:41:b2: c9:00:8f:e3:bc:13:3d:9a:fa:5e:d1:96:22:74:5d:91:a8:3a: 71:82:b8:9e:ee:a2:45:5f:ca:3b:8e:b1:15:a7:02:6f:e6:da: 4d:53:91:d1:59:77:9f:14:21:2c:73:b4:d3:ba:a1:61:24:e7: eb:02:46:a1:d1:69:30:93:c8:a6:00:7a:d8:7d:52:0e:ee:e8: 18:d1:bb:1e:0b:0d:41:fb:50:74:c4:9c:0a:02:30:17:c4:34: c9:39:f4:97:d5:c3:7f:67:8f:26:43:67:6c:91:5c:d4:0b:f6: 88:c1:05:b6:54:10:9c:06:1c:5d:1d:c6:61:94:7f:93:fb:9d: 6a:b5:13:e6:94:02:29:ff:a5:e1:71:79:92:09:e2:9c:da:23: b7:d6:2a:e3:37:61:bb:b2:68:7b:53:6f:6c:8e:46:2b:69:e3: 9e:70:97:77:22:79:fe:fc:b5:3d:63:e9:60:e0:92:3b:b7:2f: 2a:d4:88:64:16:b7:50:7d:52:f0:ad:37:a6:dc:ef:f4:89:d9: 2e:11:a0:99:8b:b4:fc:a5:fa:2a:bf:e0:2e:f5:5e:f8:75:06: 4c:3d:30:61:ea:e6:50:ab:ce:3a:33:86:a9:bd:51:c4:e5:f0: 75:b6:e5:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDU4ODExMC8GA1UEBRMoODgyODU5RDUyMzAxRjAxNTcxRDlENENGOTUzRjQ1RTA3 NUUwOUE5ODAeFw0yNjAxMjcwNjIyNDdaFw0yNjAyMDMwNjIyNDdaMBgxFjAUBgNV BAMMDTY5Nzg1OWI3LTFmNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp+QLCZtA7pbfgZZ/CWHRpXe7twwvoX43fcAxUe7DLB4on39Iy4L+1vyrKFa+t rZb/iuHDX3s+HB5neAmx5WgfndEa3Dw+dJyDzg3xcI3OW4ViLgk2arPWhyXsZpyj uW0YSB/FgLWCyZGjmdEguw9EhzQdVoMQbW0ripGevjxOdQRM3CN+KgCxbU9x+6M9 gAcuFwNAiRcG3uB9sjE9HkuvOqFstvOk+PqxhMRpjdggXG7hUAwSzWUQRxWSp1Tp O+3/4MV9Xk6El9nprh9OO6mM8FjScjmdPQPXJ9vkQnYfJQ5CRvxhFZHQz90N7vHd PlRrRkqz02DxXP6Do/Dqbf2JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGAZEKWlm JfNO7+gA8urO1iM0BKwwHwYDVR0jBBgwFoAUiChZ1SMB8BVx2dTPlT9F4HXgmpgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlENTg4L0JGN0Q1RTc2N0JG MzExRjBBMDVGQUQ4MkM0RjlBRTAyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21w Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUNoWjFTTUI4QlZ4MmRUUGxUOUY0SFhnbXBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE NTg4L0JGN0Q1RTc2N0JGMzExRjBBMDVGQUQ4MkM0RjlBRTAyL2lDaFoxU01COEJW eDJkVFBsVDlGNEhYZ21wZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA876GWXDFNZtUbSGm1aQddBsskAj+O8Ez2a+l7RliJ0XZGoOnGCuJ7u okVfyjuOsRWnAm/m2k1TkdFZd58UISxztNO6oWEk5+sCRqHRaTCTyKYAeth9Ug7u 6BjRux4LDUH7UHTEnAoCMBfENMk59JfVw39njyZDZ2yRXNQL9ojBBbZUEJwGHF0d xmGUf5P7nWq1E+aUAin/peFxeZIJ4pzaI7fWKuM3YbuyaHtTb2yORitp455wl3ci ef78tT1j6WDgkju3LyrUiGQWt1B9UvCtN6bc7/SJ2S4RoJmLtPyl+iq/4C71Xvh1 Bkw9MGHq5lCrzjozhqm9UcTl8HW25fk= -----END CERTIFICATE-----Generated at Thu Jan 29 01:21:56 2026 by rpki-client