This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft File: S-1YvEVE5-O16XicZ8Y77JHCfN0.mft (raw, json) Hash identifier: ULfyzPybUrWtvXFqEr2ugaA1TgVqADAKGpC1MzSXKKQ= Subject key identifier: 07:76:BB:1E:FA:DD:B2:F3:61:4F:89:10:1D:EE:7B:81:99:F9:63:79 Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD Certificate issuer: /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Certificate serial: 3552 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft Manifest number: 3521 Signing time: Tue 06 Jan 2026 15:10:33 +0000 Manifest this update: Tue 06 Jan 2026 15:10:33 +0000 Manifest next update: Tue 13 Jan 2026 15:10:33 +0000 Files and hashes: 1: S-1YvEVE5-O16XicZ8Y77JHCfN0.crl (hash: kERreyfPUp+90TweO2Iz56ptxXRY5vGo1wFabNv+K7M=) 2: E3D2704667FC11F0AC42A91FC4F9AE02.roa (hash: PqNSkqyewmKuXRkADPgSAahXx6Qh7/X+wfZVSlj+tc8=) 3: 0188487C15AA11E685F66C3CC4F9AE02.roa (hash: XmZ8Xmav06mjCMLENRMHGPiJMlps0XR41qeutzh2QhM=) 4: BAD49C82AA9611F098799D0CC4F9AE02.roa (hash: VLtfIYb4y+A0nG+DSlk1wkc4Va6Hh11pLowd8yB4WrU=) 5: D257C8F88FAB11F0A7F64E1AC4F9AE02.roa (hash: hYZQfUT77wWm9wA8h4SPaexykIcEBdPcCnbabzBH2A4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 15:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13650 (0x3552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912994F, serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Validity Not Before: Jan 6 15:10:33 2026 GMT Not After : Jan 13 15:10:33 2026 GMT Subject: CN=695d25e9-4877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f5:51:c2:9b:c1:4f:ee:cc:80:b0:65:e0:84: 87:7b:89:ae:c7:bd:77:bc:8e:10:35:4e:57:9c:4e: b2:e3:12:bf:56:30:67:a7:62:f2:7a:08:f5:0e:9a: c0:0e:90:44:a0:ab:2a:29:61:d9:56:ba:80:4d:e1: a9:84:b1:72:1a:7d:8a:e1:7e:6d:ab:b0:62:63:ea: c7:5f:56:63:d8:94:7a:00:40:97:fa:66:70:ca:ab: 47:4a:4e:cd:86:e7:65:56:1c:72:cd:f3:2e:ac:8e: 38:c3:f6:45:72:8a:bd:44:fb:b8:0b:26:67:ee:b5: c8:d9:86:a3:9a:ee:00:10:eb:29:73:66:f0:ef:43: be:b4:eb:38:57:a0:9c:67:00:e1:15:66:71:e8:04: 6b:61:89:a4:ab:f6:7b:57:10:81:eb:fd:ba:0c:ba: 8b:e1:c4:5b:23:88:99:9c:6a:b6:42:fc:ec:9f:f5: f5:9a:34:16:5d:2e:39:85:00:d9:04:51:a7:48:3b: 6a:84:a7:e4:87:c9:75:96:eb:57:e6:9b:c4:6d:90: 57:e5:c0:ba:65:5c:e6:85:52:70:9c:25:8b:32:09: 67:d3:08:c8:84:cf:c7:53:c2:65:d3:a5:be:34:67: 97:a4:45:5a:c6:8c:e9:a2:2d:e0:14:e3:c7:0c:65: 47:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:76:BB:1E:FA:DD:B2:F3:61:4F:89:10:1D:EE:7B:81:99:F9:63:79 X509v3 Authority Key Identifier: keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:90:03:e4:01:f1:37:23:bc:07:ad:f6:c8:78:e4:f7:c6:91: 7f:6d:f2:71:44:9e:8e:2a:7c:12:97:18:b7:c2:86:e1:fb:10: e6:c8:a1:1a:a8:91:15:9c:21:4f:da:32:51:9f:31:31:ad:e7: 05:0d:e6:bf:ee:93:9c:2e:18:a4:75:d4:75:03:4f:94:6c:de: b0:f6:4a:57:b8:68:75:55:52:b9:62:61:d9:cb:28:f7:48:cd: 0b:f7:34:06:ef:1a:c9:be:7a:9e:bd:a6:4c:0e:de:65:ef:a7: de:34:21:60:8d:2c:34:0b:6e:37:3f:c6:14:15:f6:60:14:b6: 7a:c2:31:80:a7:b1:54:df:a1:6c:d0:ed:6a:c3:4b:16:da:79: 04:36:47:48:e7:94:4f:92:e6:9b:5b:7b:b9:9d:ae:bd:f8:e5: 76:bc:95:f1:4c:2a:c0:0e:44:9f:79:2e:55:83:91:e6:2b:72: 0d:3c:71:60:74:41:04:19:2b:3a:ec:18:75:ac:94:6b:4b:04: 2a:4a:8d:17:0a:4c:b5:d3:e9:bf:50:e9:67:30:49:12:5b:50: 75:b4:5c:d9:b1:2b:fd:26:f2:1e:7e:e6:4f:f0:c1:01:24:58: f5:89:e6:38:bd:5e:22:2a:ab:3b:61:70:0d:81:d6:7f:3d:32: 46:e5:b6:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NEYxMTAvBgNVBAUTKDRCRUQ1OEJDNDU0NEU3RTNCNUU5Nzg5QzY3QzYzQkVD OTFDMjdDREQwHhcNMjYwMTA2MTUxMDMzWhcNMjYwMTEzMTUxMDMzWjAYMRYwFAYD VQQDDA02OTVkMjVlOS00ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvVRwpvBT+7MgLBl4ISHe4mux713vI4QNU5XnE6y4xK/VjBnp2Lyegj1DprA DpBEoKsqKWHZVrqATeGphLFyGn2K4X5tq7BiY+rHX1Zj2JR6AECX+mZwyqtHSk7N hudlVhxyzfMurI44w/ZFcoq9RPu4CyZn7rXI2Yajmu4AEOspc2bw70O+tOs4V6Cc ZwDhFWZx6ARrYYmkq/Z7VxCB6/26DLqL4cRbI4iZnGq2Qvzsn/X1mjQWXS45hQDZ BFGnSDtqhKfkh8l1lutX5pvEbZBX5cC6ZVzmhVJwnCWLMgln0wjIhM/HU8Jl06W+ NGeXpEVaxozpoi3gFOPHDGVHRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAd2ux76 3bLzYU+JEB3ue4GZ+WN5MB8GA1UdIwQYMBaAFEvtWLxFROfjtel4nGfGO+yRwnzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk0Ri9BMDI5QTUyNjFE QUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUtTzE2WGljWjhZNzdKSENm TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtMVl2RVZFNS1PMTZYaWNaOFk3N0pIQ2ZOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTk0Ri9BMDI5QTUyNjFEQUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUt TzE2WGljWjhZNzdKSENmTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1kAPkAfE3I7wHrfbIeOT3xpF/bfJxRJ6OKnwSlxi3wobh+xDmyKEa qJEVnCFP2jJRnzExrecFDea/7pOcLhikddR1A0+UbN6w9kpXuGh1VVK5YmHZyyj3 SM0L9zQG7xrJvnqevaZMDt5l76feNCFgjSw0C243P8YUFfZgFLZ6wjGAp7FU36Fs 0O1qw0sW2nkENkdI55RPkuabW3u5na69+OV2vJXxTCrADkSfeS5Vg5HmK3INPHFg dEEEGSs67Bh1rJRrSwQqSo0XCky10+m/UOlnMEkSW1B1tFzZsSv9JvIefuZP8MEB JFj1ieY4vV4iKqs7YXANgdZ/PTJG5bba -----END CERTIFICATE-----Generated at Wed Jan 7 22:13:46 2026 by rpki-client