This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: R+CtVrViFc0SFtu+qPZGNaIa02CtcvB6gK1TpSt9M/A= Subject key identifier: D5:F9:0D:42:6C:19:7D:13:45:53:CD:13:4F:AC:34:5B:34:E3:FF:36 Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: 011F Signing time: Tue 13 Jan 2026 03:50:13 +0000 Manifest this update: Tue 13 Jan 2026 03:50:13 +0000 Manifest next update: Tue 20 Jan 2026 03:50:13 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: XhdEboLVqSgZOi0DvZezFxw6q2RoIpFDpG6Fcf1yGtQ=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: Xtt+dRvGTSadJPsj0h+bYSdSHUpop3mgErELCN/AU2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 03:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Jan 13 03:50:13 2026 GMT Not After : Jan 20 03:50:13 2026 GMT Subject: CN=6965c0f5-ada4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9e:a0:da:13:1d:c0:85:0a:01:5a:c2:7f:aa: c8:4c:75:a8:d2:ca:c2:d0:97:44:d0:aa:34:64:84: 68:91:91:33:be:83:f6:ff:a6:c3:dc:cc:78:e1:ce: 7e:47:e9:ed:8a:65:0f:f0:81:ee:ed:dd:79:39:17: 31:8b:7c:e7:f1:b4:ff:9d:78:8f:04:58:1b:1f:80: 88:1f:93:4d:83:73:5e:16:c4:47:6d:63:83:f1:46: 08:93:6b:51:e2:06:5c:28:8f:8a:c9:3f:ed:f6:26: 29:1e:7f:17:4d:8e:8c:e8:9a:8d:12:80:b5:f2:87: 59:30:d0:10:d0:ea:6c:26:9c:05:60:4f:39:9f:18: f8:e1:99:6e:35:ab:c4:b6:50:39:6b:f4:98:51:08: 26:66:fc:f1:3a:c5:c7:43:c5:43:24:39:9d:bb:19: 4b:eb:04:a9:2c:1b:58:23:19:ee:2e:43:08:56:9d: 9c:b7:6c:ee:76:0a:e3:b8:9d:e0:87:57:2c:fc:9c: f0:09:79:85:5a:f0:8e:ef:bd:1e:9e:04:9f:98:bc: 38:8b:b5:a9:62:82:be:56:2f:00:b1:f9:3c:ab:e6: 3c:32:57:ec:ef:31:e3:38:63:fc:b7:f7:66:92:c7: c0:6b:95:0e:7e:1c:08:e7:a3:64:02:98:0c:bf:42: 30:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F9:0D:42:6C:19:7D:13:45:53:CD:13:4F:AC:34:5B:34:E3:FF:36 X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:fb:87:b1:5f:7b:3b:88:93:05:4c:2c:54:9a:9e:de:f4:99: 68:50:00:e0:47:d8:3c:fa:ef:98:9f:20:81:05:17:5f:8b:2e: 9b:61:60:c8:b9:a2:ca:da:0f:ab:a4:04:06:45:c9:28:d5:4e: 3f:d4:b7:61:e1:16:73:2a:45:e8:42:a7:7a:13:c6:5c:a3:06: f9:2c:7c:e5:30:80:c3:ef:09:10:f2:a8:75:e5:e2:04:95:cb: 10:39:a1:14:8c:7d:85:0a:db:05:07:dd:5a:cc:4b:48:c9:c8: 02:ed:bd:58:d2:09:73:9e:c1:4a:f8:c8:ff:ec:5e:28:8c:92: 6c:61:04:c6:79:50:1c:ee:e6:9e:f4:84:d9:07:ed:d2:b2:7f: 1c:9a:a0:66:1c:89:5e:79:ed:fa:cc:bc:66:c7:d9:b5:29:8d: 78:04:00:0f:24:a4:cc:2f:ee:67:7d:73:47:ef:ea:fd:3a:fb: 0f:94:17:17:a7:cf:70:7a:04:ff:af:05:fe:2b:b2:96:89:f1: c5:d9:67:0a:06:c9:15:79:4d:03:7a:d7:c7:71:1b:50:b9:69: 1c:2e:74:ac:21:2c:b5:73:2a:4b:48:8b:84:8b:c7:e1:a6:86: 99:c6:f8:8d:73:70:65:9f:0c:05:d8:b0:37:86:92:07:d2:23: 99:f5:c2:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKEQxRUVCRDE2MjREQ0RFNTE5NDEwRUQ1RDY0RTZENTEz OTg0Qjc3RDAwHhcNMjYwMTEzMDM1MDEzWhcNMjYwMTIwMDM1MDEzWjAYMRYwFAYD VQQDDA02OTY1YzBmNS1hZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA156g2hMdwIUKAVrCf6rITHWo0srC0JdE0Ko0ZIRokZEzvoP2/6bD3Mx44c5+ R+ntimUP8IHu7d15ORcxi3zn8bT/nXiPBFgbH4CIH5NNg3NeFsRHbWOD8UYIk2tR 4gZcKI+KyT/t9iYpHn8XTY6M6JqNEoC18odZMNAQ0OpsJpwFYE85nxj44ZluNavE tlA5a/SYUQgmZvzxOsXHQ8VDJDmduxlL6wSpLBtYIxnuLkMIVp2ct2zudgrjuJ3g h1cs/JzwCXmFWvCO770engSfmLw4i7WpYoK+Vi8Asfk8q+Y8Mlfs7zHjOGP8t/dm ksfAa5UOfhwI56NkApgMv0IwCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNX5DUJs GX0TRVPNE0+sNFs04/82MB8GA1UdIwQYMBaAFNHuvRYk3N5RlBDtXWTm1ROYS3fQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC8zRUUyNzY3NjM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNsR1VFTzFkWk9iVkU1aExk OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC8zRUUyNzY3NjM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNs R1VFTzFkWk9iVkU1aExkOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9+4exX3s7iJMFTCxUmp7e9JloUADgR9g8+u+YnyCBBRdfiy6bYWDI uaLK2g+rpAQGRcko1U4/1Ldh4RZzKkXoQqd6E8Zcowb5LHzlMIDD7wkQ8qh15eIE lcsQOaEUjH2FCtsFB91azEtIycgC7b1Y0glznsFK+Mj/7F4ojJJsYQTGeVAc7uae 9ITZB+3Ssn8cmqBmHIleee36zLxmx9m1KY14BAAPJKTML+5nfXNH7+r9OvsPlBcX p89wegT/rwX+K7KWifHF2WcKBskVeU0DetfHcRtQuWkcLnSsISy1cypLSIuEi8fh poaZxviNc3BlnwwF2LA3hpIH0iOZ9cKK -----END CERTIFICATE-----Generated at Tue Jan 13 13:46:34 2026 by rpki-client