This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: GAuImLkBVDamQu8SjsSVQRcE26SZH9dkX7MC11VPFMs= Subject key identifier: 34:19:ED:2F:0A:39:40:43:E0:B2:8F:49:9B:A7:B6:82:F1:5D:1D:07 Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: 0144 Signing time: Thu 01 Jan 2026 03:57:09 +0000 Manifest this update: Thu 01 Jan 2026 03:57:08 +0000 Manifest next update: Thu 08 Jan 2026 03:57:08 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: GqXOkgDHui+y6OPm1ktpAqPa5JVBS+S0uANNxE4jU/I=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: j6g0qkyBnbC6ObzWJzLVBlWvAyU9t4dwcYlCD4aOUWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 03:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Validity Not Before: Jan 1 03:57:08 2026 GMT Not After : Jan 8 03:57:08 2026 GMT Subject: CN=6955f095-bcca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4e:ca:12:fa:12:8f:f7:f8:9d:ab:b8:f3:e7: 64:9b:71:68:da:04:37:d2:3b:d9:b6:3b:c9:6b:10: eb:47:2e:18:6c:8c:6a:c0:fd:f9:a3:53:29:51:0a: 60:77:c6:df:73:db:2c:34:f3:76:96:1c:c3:38:a8: bc:7b:6b:3b:78:19:a6:a6:e1:aa:40:c4:c9:84:9b: 90:dd:a7:1e:0b:79:fb:67:5f:e5:47:76:c5:5f:8d: b2:26:9a:bc:cf:a7:0a:d0:8c:6c:5a:24:c1:a3:bb: d7:b0:07:ae:a3:69:6b:4c:b5:91:0d:fd:2c:ad:55: fe:a5:85:28:f0:83:50:55:46:5a:ef:fd:04:73:91: 8c:00:ee:2a:ec:b5:ba:55:25:39:1f:6d:4b:68:b9: 18:af:50:18:7e:61:14:42:d6:e7:5e:93:ce:95:d6: 10:b1:8d:db:9b:f0:64:2d:6e:ea:c8:48:72:28:68: 4a:73:2e:23:27:d1:3b:7a:00:9f:28:40:70:91:b3: 26:d2:60:f9:8d:c5:97:17:be:67:c5:07:85:29:7c: 51:e9:54:2d:7d:5a:e8:cc:d1:86:1a:83:d9:b5:36: e4:19:31:f8:a4:b1:70:70:13:bd:dd:84:ab:61:7b: d1:fd:37:c5:32:51:eb:51:8d:b6:a6:52:e3:e1:35: 9b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:19:ED:2F:0A:39:40:43:E0:B2:8F:49:9B:A7:B6:82:F1:5D:1D:07 X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d9:ae:be:11:a7:17:2b:ed:49:0e:48:5c:42:c0:66:65:e2: 0d:39:33:a7:90:e3:fb:2c:b3:ee:9c:b2:2d:7b:b1:6e:d7:df: b5:8d:d4:d9:5c:5c:51:23:a7:de:dc:96:57:b8:fe:ae:fa:62: 7c:c9:5b:92:ea:ce:26:c4:af:82:87:fe:9c:49:4c:31:64:1e: 4a:0e:fe:8e:03:cd:e0:2f:6d:77:85:2c:2e:37:6e:5c:47:96: f6:8a:2a:d6:cc:24:6c:c6:31:65:6c:37:7b:2a:2a:4b:d8:15: 0d:83:59:6b:fd:72:60:c9:e5:91:1d:5a:ff:6c:50:f7:71:a5: e2:d0:ee:30:e3:f4:78:03:2f:65:a1:79:85:e3:ae:cf:aa:57: f9:02:d3:ad:20:23:fb:88:6f:e6:13:5e:ca:5e:e7:0b:64:96: 95:40:b3:43:01:fd:d4:dc:9b:d2:b7:b0:73:fd:a5:bc:fd:12: a7:17:21:37:c1:8e:6e:a3:75:2e:03:6e:d2:cb:f9:4c:3c:c4: 20:08:80:ba:3d:a3:39:55:a7:78:bd:15:8d:46:55:19:e8:64: 26:85:1c:2f:29:9e:db:01:9f:4c:bd:ad:a3:4b:65:98:06:33: a9:84:de:4b:92:5b:dd:eb:52:9f:d3:cb:d9:6a:04:30:28:1e: f9:53:6c:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF RTcyMDM5NTUwHhcNMjYwMTAxMDM1NzA4WhcNMjYwMTA4MDM1NzA4WjAYMRYwFAYD VQQDDA02OTU1ZjA5NS1iY2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsk7KEvoSj/f4nau48+dkm3Fo2gQ30jvZtjvJaxDrRy4YbIxqwP35o1MpUQpg d8bfc9ssNPN2lhzDOKi8e2s7eBmmpuGqQMTJhJuQ3aceC3n7Z1/lR3bFX42yJpq8 z6cK0IxsWiTBo7vXsAeuo2lrTLWRDf0srVX+pYUo8INQVUZa7/0Ec5GMAO4q7LW6 VSU5H21LaLkYr1AYfmEUQtbnXpPOldYQsY3bm/BkLW7qyEhyKGhKcy4jJ9E7egCf KEBwkbMm0mD5jcWXF75nxQeFKXxR6VQtfVrozNGGGoPZtTbkGTH4pLFwcBO93YSr YXvR/TfFMlHrUY22plLj4TWbgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQZ7S8K OUBD4LKPSZuntoLxXR0HMB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3 MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN SjlmOElCYzRYU1B1Y2dPVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB2a6+EacXK+1JDkhcQsBmZeINOTOnkOP7LLPunLIte7Fu19+1jdTZ XFxRI6fe3JZXuP6u+mJ8yVuS6s4mxK+Ch/6cSUwxZB5KDv6OA83gL213hSwuN25c R5b2iirWzCRsxjFlbDd7KipL2BUNg1lr/XJgyeWRHVr/bFD3caXi0O4w4/R4Ay9l oXmF467Pqlf5AtOtICP7iG/mE17KXucLZJaVQLNDAf3U3JvSt7Bz/aW8/RKnFyE3 wY5uo3UuA27Sy/lMPMQgCIC6PaM5Vad4vRWNRlUZ6GQmhRwvKZ7bAZ9Mva2jS2WY BjOphN5Lklvd61Kf08vZagQwKB75U2xT -----END CERTIFICATE-----Generated at Thu Jan 1 11:02:53 2026 by rpki-client