This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft File: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft (raw, json) Hash identifier: HLmr/kd3rGrxsFiBQfF5tmwT85YpA2CapJpgep4+oJU= Subject key identifier: 2A:CE:2E:E4:A0:3A:20:40:D8:BD:80:46:AF:A8:20:71:E9:A7:4C:83 Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4 Certificate issuer: /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft Manifest number: 011B Signing time: Thu 01 Jan 2026 04:20:10 +0000 Manifest this update: Thu 01 Jan 2026 04:20:10 +0000 Manifest next update: Thu 08 Jan 2026 04:20:10 +0000 Files and hashes: 1: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl (hash: RbZs1nVVhS1HuibTWinpnXaKkaGRNeE8xdNbalv4zs0=) 2: 836F847C340011EFA88BE541C4F9AE02.roa (hash: C6HUwf1FQ1jXt6f1hhjL5V8WYMVbIiest2VH946jwa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 04:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4 Validity Not Before: Jan 1 04:20:10 2026 GMT Not After : Jan 8 04:20:10 2026 GMT Subject: CN=6955f5fa-8026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c3:91:a3:19:74:84:84:96:40:3f:00:06:97: 79:44:90:03:b9:88:08:ef:c9:9b:0d:0f:3c:9b:98: 71:1c:dd:d3:fe:83:de:74:b6:a9:f9:80:4b:e4:b5: dd:bc:7a:ee:8f:34:fe:da:ba:cf:5b:78:bb:23:81: 56:77:74:b2:db:07:2e:ab:c7:49:fb:7e:fc:3d:c7: 1f:e0:14:6c:b0:c3:70:4a:eb:3e:a4:80:87:6e:19: 76:44:0b:da:93:b8:84:ae:54:6b:d9:25:41:a6:67: f7:ae:24:56:25:c3:8d:13:c3:18:23:b2:f1:04:b8: e1:ad:52:28:68:ab:88:63:74:05:d6:20:88:ef:18: be:7c:b9:b8:ee:0f:e1:08:10:34:39:25:01:b3:98: 27:74:5b:fe:1b:34:08:14:66:23:cb:00:a8:a3:3c: 4e:42:e0:e4:70:d6:87:b3:e3:5e:3f:61:1c:f5:76: 52:e6:ed:8e:96:8d:cf:fa:4b:6c:af:d6:75:f8:7b: 84:90:ee:14:11:78:f4:97:c4:32:5b:78:27:25:9c: f4:2e:69:ac:4b:5e:eb:4c:52:84:8a:fc:c1:db:a0: 77:a2:ff:f5:c7:45:93:49:b5:93:2a:ec:55:1d:3e: 87:0e:00:40:7b:9d:9c:14:e7:bf:d6:2c:d4:b3:af: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CE:2E:E4:A0:3A:20:40:D8:BD:80:46:AF:A8:20:71:E9:A7:4C:83 X509v3 Authority Key Identifier: keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a4:73:30:58:32:6f:09:fb:fc:f9:cc:9a:15:21:ca:50:dd: d8:6a:e7:f9:2a:c6:be:2f:e5:a3:7c:27:7d:fa:f9:8c:9d:db: ae:38:cc:1e:49:c5:34:e6:62:a1:c4:09:c1:43:8c:e5:70:60: b2:4c:35:ad:03:f7:c3:63:92:9a:a5:6a:90:39:1a:bb:1f:64: af:28:62:c7:2b:10:65:83:7c:f2:88:50:a2:d0:2c:0a:b3:19: 93:8a:64:b5:f4:d9:e0:d0:86:40:66:10:d4:d4:9f:4c:4e:9c: 54:31:77:ba:e9:63:6e:8a:98:4d:2c:3d:50:c9:63:3c:30:d5: 27:ad:fa:4f:27:dc:0d:bc:b5:a9:09:75:ad:19:28:7a:ff:79: 43:ac:4a:17:fa:98:0d:72:38:75:f3:f8:3e:df:c4:e0:46:2f: b1:70:13:2c:c7:6a:55:6c:0f:20:08:20:b2:18:bc:42:69:1d: bc:d8:bc:31:b8:d2:51:65:f4:e8:5d:2e:d2:8a:a0:12:8f:f4: e4:8e:e7:d1:7e:ce:e7:c0:07:58:6c:21:b5:54:3f:f0:c3:13: 4b:5c:5c:c0:2a:51:ab:ce:1b:f0:fb:1a:3a:8b:f1:a6:d4:a3: 6b:27:f6:70:96:26:0b:85:51:ab:ed:c3:45:21:66:b1:19:82: 37:fe:f7:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0RjAxMTAvBgNVBAUTKDEzNDZGNjVENjI5RkZGOTM2QjBGQzRDRjEyNzUwOUI2 ODJFOEUzRTQwHhcNMjYwMTAxMDQyMDEwWhcNMjYwMTA4MDQyMDEwWjAYMRYwFAYD VQQDDA02OTU1ZjVmYS04MDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MORoxl0hISWQD8ABpd5RJADuYgI78mbDQ88m5hxHN3T/oPedLap+YBL5LXd vHrujzT+2rrPW3i7I4FWd3Sy2wcuq8dJ+378Pccf4BRssMNwSus+pICHbhl2RAva k7iErlRr2SVBpmf3riRWJcONE8MYI7LxBLjhrVIoaKuIY3QF1iCI7xi+fLm47g/h CBA0OSUBs5gndFv+GzQIFGYjywCoozxOQuDkcNaHs+NeP2Ec9XZS5u2Olo3P+kts r9Z1+HuEkO4UEXj0l8QyW3gnJZz0LmmsS17rTFKEivzB26B3ov/1x0WTSbWTKuxV HT6HDgBAe52cFOe/1izUs6+itQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrOLuSg OiBA2L2ARq+oIHHpp0yDMB8GA1UdIwQYMBaAFBNG9l1in/+Taw/EzxJ1CbaC6OPk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzRGMC8wRDQ2Q0JFODM0 MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9FMGIyWFdLZl81TnJEOFRQRW5VSnRvTG80 LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UwYjJYV0tmXzVOckQ4VFBFblVKdG9MbzQtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzRGMC8wRDQ2Q0JFODM0MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9FMGIyWFdLZl81 TnJEOFRQRW5VSnRvTG80LVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQpHMwWDJvCfv8+cyaFSHKUN3Yauf5Ksa+L+WjfCd9+vmMnduuOMwe ScU05mKhxAnBQ4zlcGCyTDWtA/fDY5KapWqQORq7H2SvKGLHKxBlg3zyiFCi0CwK sxmTimS19Nng0IZAZhDU1J9MTpxUMXe66WNuiphNLD1QyWM8MNUnrfpPJ9wNvLWp CXWtGSh6/3lDrEoX+pgNcjh18/g+38TgRi+xcBMsx2pVbA8gCCCyGLxCaR282Lwx uNJRZfToXS7SiqASj/TkjufRfs7nwAdYbCG1VD/wwxNLXFzAKlGrzhvw+xo6i/Gm 1KNrJ/ZwliYLhVGr7cNFIWaxGYI3/vfU -----END CERTIFICATE-----Generated at Fri Jan 2 23:29:37 2026 by rpki-client