This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft File: 64EbFIiyDxJmTmSKgmJKMFBonyU.mft (raw, json) Hash identifier: WgDL2tmUada9fwRVpfmeFWvKHdylkdWGb5ITrdEEqeE= Subject key identifier: 82:2B:D2:2E:3B:7F:E0:13:C7:34:31:C7:2A:D3:A3:89:ED:6A:92:18 Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25 Certificate issuer: /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25 Certificate serial: 0DF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft Manifest number: 0DC4 Signing time: Sat 10 Jan 2026 17:34:01 +0000 Manifest this update: Sat 10 Jan 2026 17:34:00 +0000 Manifest next update: Sat 17 Jan 2026 17:34:00 +0000 Files and hashes: 1: 64EbFIiyDxJmTmSKgmJKMFBonyU.crl (hash: DMeaCqyacKF/bHPjdI9veSe++ga6oBg9AH6CMv8mvn4=) 2: B48F5974897C11EB9D7AE318C4F9AE02.roa (hash: +lWxM6xxeECAraQ2x33sA7/20shyLjPNQWGuxkqDJ2Y=) 3: 9A1481AAB2F411EF9B46DC64C4F9AE02.roa (hash: 9KIEZWjUexSz+mpVvITqSBKQ/+dm8ULo43WzGRktSYM=) 4: C14E20B6B22511EFA8BCE16EC4F9AE02.roa (hash: hwohW49fWedQsy+fd4dbz9wBMj4JIt/uNwvBjhpvbSM=) 5: F67B28D0B86811EFB4FB3552C4F9AE02.roa (hash: vxFNaLbOS7JerspHLZvnrsy4Tgqwxmarv2ET9LkezA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 17:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3570 (0xdf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D30A, serialNumber=EB811B1488B20F12664E648A82624A3050689F25 Validity Not Before: Jan 10 17:34:00 2026 GMT Not After : Jan 17 17:34:00 2026 GMT Subject: CN=69628d89-523c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9c:30:55:d5:de:04:47:e6:70:20:8b:86:3f: fc:3e:6a:45:29:75:dc:94:45:f2:2b:88:c5:25:1b: 09:3f:2d:77:e6:f4:bb:55:a2:fa:69:8c:9a:4d:93: f5:11:ea:68:83:d2:f1:49:1a:de:79:ac:98:1d:3e: a9:bd:3d:3d:49:37:31:fb:4a:d3:3f:c3:86:f9:1b: df:d4:02:af:eb:96:aa:c5:ae:9d:2d:82:a0:dc:b4: eb:22:1a:da:43:06:e3:92:94:49:f4:f6:6d:d8:34: 3d:cd:d4:24:24:66:46:d4:06:0e:1c:31:f3:7e:39: c5:db:37:6e:6a:a6:a9:1d:40:c0:41:6a:19:c0:1d: bc:c1:5a:80:4c:9c:6a:56:27:8e:b2:27:03:74:a0: 1d:23:c1:9d:32:45:33:bb:cc:4a:38:ad:63:65:99: aa:ed:e4:6d:3c:93:09:b3:5d:53:8f:89:9e:0b:fa: 38:cb:df:38:72:1e:96:ea:42:5d:5d:fe:25:f5:8c: dc:de:5b:ad:5c:7b:52:fc:e5:57:16:29:4f:f8:70: c7:67:ab:18:96:6f:3c:7a:50:b0:12:12:35:e8:39: 7e:d1:9e:ed:6c:fd:14:a1:aa:d3:2a:ae:05:b6:fe: 0f:a3:e2:2e:6d:98:7a:01:1e:79:f4:14:f4:e5:17: dc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2B:D2:2E:3B:7F:E0:13:C7:34:31:C7:2A:D3:A3:89:ED:6A:92:18 X509v3 Authority Key Identifier: keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1e:f7:f1:73:4e:dd:da:8f:ce:8a:38:98:8c:ef:34:45:13: ce:7c:c1:66:5f:6f:8d:46:ba:bd:e7:cc:91:bd:4b:ea:15:a2: 5d:53:34:99:49:eb:ae:d4:f2:75:96:31:1f:f7:05:c7:02:64: 51:73:27:0a:eb:92:63:86:e6:d1:71:a1:18:4b:12:20:4e:c5: 67:f9:75:5c:06:1f:da:8f:88:f3:d2:1e:1d:06:08:6e:eb:67: 6e:47:38:62:9b:bc:0c:8b:63:07:cc:6c:ad:33:a2:2c:ef:08: ff:9a:fa:82:3b:c4:ba:57:46:4d:d8:d6:31:93:a7:bf:d3:8c: 1f:76:e0:df:ed:70:b5:ed:77:bb:c3:40:a4:07:b5:de:02:27: e0:70:bf:46:1f:4e:5d:a2:83:0c:46:a0:b3:6c:c1:cf:84:b8: a5:4d:bf:24:74:85:6c:10:37:bc:12:8e:70:4c:b4:97:db:d2: ee:6d:29:5a:2e:6c:6a:63:c2:ce:a8:49:81:63:62:99:c9:51: 52:21:c6:d3:ba:6f:35:cb:8b:1f:48:ed:02:c2:80:e6:de:6b: de:a9:08:45:33:20:1c:c2:9f:73:8f:ba:32:ec:38:1f:e8:62: 2a:54:13:ad:ea:e3:7d:32:56:67:7e:e0:f9:42:1c:fd:61:0d: 20:9e:0b:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx M0QzMEExMTAvBgNVBAUTKEVCODExQjE0ODhCMjBGMTI2NjRFNjQ4QTgyNjI0QTMw NTA2ODlGMjUwHhcNMjYwMTEwMTczNDAwWhcNMjYwMTE3MTczNDAwWjAYMRYwFAYD VQQDDA02OTYyOGQ4OS01MjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZwwVdXeBEfmcCCLhj/8PmpFKXXclEXyK4jFJRsJPy135vS7VaL6aYyaTZP1 Eepog9LxSRreeayYHT6pvT09STcx+0rTP8OG+Rvf1AKv65aqxa6dLYKg3LTrIhra QwbjkpRJ9PZt2DQ9zdQkJGZG1AYOHDHzfjnF2zduaqapHUDAQWoZwB28wVqATJxq VieOsicDdKAdI8GdMkUzu8xKOK1jZZmq7eRtPJMJs11Tj4meC/o4y984ch6W6kJd Xf4l9Yzc3lutXHtS/OVXFilP+HDHZ6sYlm88elCwEhI16Dl+0Z7tbP0UoarTKq4F tv4Po+IubZh6AR559BT05RfcDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIr0i47 f+ATxzQxxyrTo4ntapIYMB8GA1UdIwQYMBaAFOuBGxSIsg8SZk5kioJiSjBQaJ8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDMwQS9CODU0MjRGOEQ0 OTgxMUU5Qjk0NzQ3MzhDNEY5QUUwMi82NEViRklpeUR4Sm1UbVNLZ21KS01GQm9u eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0RWJGSWl5RHhKbVRtU0tnbUpLTUZCb255VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDMwQS9CODU0MjRGOEQ0OTgxMUU5Qjk0NzQ3MzhDNEY5QUUwMi82NEViRklpeUR4 Sm1UbVNLZ21KS01GQm9ueVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArHvfxc07d2o/OijiYjO80RRPOfMFmX2+NRrq958yRvUvqFaJdUzSZ Seuu1PJ1ljEf9wXHAmRRcycK65JjhubRcaEYSxIgTsVn+XVcBh/aj4jz0h4dBghu 62duRzhim7wMi2MHzGytM6Is7wj/mvqCO8S6V0ZN2NYxk6e/04wfduDf7XC17Xe7 w0CkB7XeAifgcL9GH05dooMMRqCzbMHPhLilTb8kdIVsEDe8Eo5wTLSX29LubSla LmxqY8LOqEmBY2KZyVFSIcbTum81y4sfSO0CwoDm3mveqQhFMyAcwp9zj7oy7Dgf 6GIqVBOt6uN9MlZnfuD5Qhz9YQ0gnguO -----END CERTIFICATE-----Generated at Mon Jan 12 05:04:02 2026 by rpki-client