This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft File: H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft (raw, json) Hash identifier: Gihlv8s1Zp0Sdtoav/sdUaF69j3C9wUK9XQY5RjTo1o= Subject key identifier: EF:98:3E:66:DF:53:FD:C6:91:71:93:99:A4:B7:9F:64:D1:C3:A2:C3 Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF Certificate serial: 2938 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft Manifest number: 28C4 Signing time: Tue 06 Jan 2026 15:28:35 +0000 Manifest this update: Tue 06 Jan 2026 15:28:35 +0000 Manifest next update: Tue 13 Jan 2026 15:28:35 +0000 Files and hashes: 1: H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl (hash: pY8jQckt9BUWtX07sruIiLte483Wb5anW98+xGC/zss=) 2: 57D5BBF870F211F086293675C4F9AE02.roa (hash: MfxJKHAl2OU7PVOYPpiK4bilcuV1ajcVyr3SRatYOEw=) 3: 7F3D1128DC7811EFA7D7DB49C4F9AE02.roa (hash: Oiuj+Kbic3HQuA1OyKape4/HDdacy+ZxoCUL9iL91SY=) 4: 4B65B208288F11EFB3C88742C4F9AE02.roa (hash: r2GAe+G1s6g34WU+Ia+gD4xaBN9kiFwzFN+koW6QJQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 15:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10552 (0x2938) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF Validity Not Before: Jan 6 15:28:35 2026 GMT Not After : Jan 13 15:28:35 2026 GMT Subject: CN=695d2a23-47b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:da:64:f1:ae:f5:cf:02:bf:1a:43:c8:4c:1b: 2d:a9:a0:a7:fb:09:57:e6:b9:59:d8:15:4c:54:38: 77:2c:33:86:9a:54:a9:71:40:24:d0:1a:6a:a3:30: 77:47:88:b9:64:64:86:76:c6:18:ec:42:c9:0f:fc: b2:df:a9:aa:cd:00:c5:1e:63:06:b5:25:2e:9a:d2: bc:36:b3:ba:4a:9b:a0:5c:25:f0:89:53:60:1c:b4: 8a:a1:9d:d4:9f:ae:0e:80:08:fa:66:96:4e:71:94: 8e:bf:4f:b7:75:fa:3e:bf:80:dd:38:45:59:85:27: f7:e6:ba:71:b2:4f:0c:42:bb:ea:5e:29:fa:a9:c8: 7c:e1:81:93:b9:a1:93:d6:06:7d:bd:96:96:28:17: de:4e:48:95:91:07:43:2c:64:a1:b0:bf:6e:64:58: f6:7d:4f:e5:80:16:a5:c7:94:19:26:b5:20:1d:66: 3f:e8:cb:7f:12:aa:ec:86:37:9a:3a:9a:f2:fa:00: 1f:9f:0e:c1:b9:7d:c3:f9:fb:13:88:c9:e9:01:db: 3e:3e:44:92:b1:ac:2a:bb:fa:c0:f9:5c:83:b4:aa: c5:99:3d:64:be:bf:8b:14:85:3a:5c:6e:d4:85:9d: 54:86:ab:3e:f8:10:b0:de:69:9f:c6:1e:fe:83:65: 44:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:98:3E:66:DF:53:FD:C6:91:71:93:99:A4:B7:9F:64:D1:C3:A2:C3 X509v3 Authority Key Identifier: keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:a3:3c:33:0c:02:77:2b:d2:2a:5c:2a:36:a8:56:26:f9:28: 9f:4c:3f:99:af:2e:11:dd:50:c3:70:41:a6:7a:8e:f9:11:33: 30:4a:63:f8:d6:8e:fd:94:d6:e4:9d:bd:6f:25:64:53:fc:d5: 0d:cb:29:d5:a2:ee:06:f7:79:ec:46:db:76:5b:55:bc:ad:f3: 9a:41:af:89:7f:4e:ff:6a:cb:6b:63:ac:ba:c6:20:6f:1e:69: ce:d4:c9:45:a3:9b:d1:0b:b7:da:69:2f:e6:fc:a0:f8:fb:21: 4a:d3:27:e4:f9:c0:d3:00:8c:0f:08:b6:60:23:4f:32:7b:13: 56:73:9a:55:0d:1f:44:ae:49:bc:80:4a:f6:63:85:ae:ef:aa: bc:d5:7e:29:db:7d:91:47:e4:84:97:0e:35:ab:2f:0e:ca:46: 26:d9:d7:1e:45:d3:cc:bf:7f:14:28:2a:a3:d1:ce:e5:aa:c1: 5f:56:c4:a8:63:7b:22:82:e4:69:2a:78:41:90:39:43:19:d8: cc:88:e6:c7:12:74:87:6f:1b:86:63:d7:df:d6:ed:54:d8:22: db:11:14:7b:b1:ed:4e:a5:18:a0:e6:c5:3c:d6:d8:68:52:21: 3a:2f:86:0a:02:3f:1f:a8:68:59:18:c7:43:f6:c8:00:b7:13: cc:fb:4d:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE0NDcxMTAvBgNVBAUTKDFGNjgyNThDNTI2QzVEQkM3MTU0MzQzNTdEMzgwMDIw MTQ2NDQwRUYwHhcNMjYwMTA2MTUyODM1WhcNMjYwMTEzMTUyODM1WjAYMRYwFAYD VQQDDA02OTVkMmEyMy00N2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgdpk8a71zwK/GkPITBstqaCn+wlX5rlZ2BVMVDh3LDOGmlSpcUAk0BpqozB3 R4i5ZGSGdsYY7ELJD/yy36mqzQDFHmMGtSUumtK8NrO6SpugXCXwiVNgHLSKoZ3U n64OgAj6ZpZOcZSOv0+3dfo+v4DdOEVZhSf35rpxsk8MQrvqXin6qch84YGTuaGT 1gZ9vZaWKBfeTkiVkQdDLGShsL9uZFj2fU/lgBalx5QZJrUgHWY/6Mt/Eqrshjea Opry+gAfnw7BuX3D+fsTiMnpAds+PkSSsawqu/rA+VyDtKrFmT1kvr+LFIU6XG7U hZ1Uhqs++BCw3mmfxh7+g2VENQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+YPmbf U/3GkXGTmaS3n2TRw6LDMB8GA1UdIwQYMBaAFB9oJYxSbF28cVQ0NX04ACAUZEDv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTQ0Ny9EMjA3NTgxNEEw OUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hieHhWRFExZlRnQUlCUmtR TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyZ2xqRkpzWGJ4eFZEUTFmVGdBSUJSa1FPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTQ0Ny9EMjA3NTgxNEEwOUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hi eHhWRFExZlRnQUlCUmtRTzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGozwzDAJ3K9IqXCo2qFYm+SifTD+Zry4R3VDDcEGmeo75ETMwSmP4 1o79lNbknb1vJWRT/NUNyynVou4G93nsRtt2W1W8rfOaQa+Jf07/astrY6y6xiBv HmnO1MlFo5vRC7faaS/m/KD4+yFK0yfk+cDTAIwPCLZgI08yexNWc5pVDR9Erkm8 gEr2Y4Wu76q81X4p232RR+SElw41qy8OykYm2dceRdPMv38UKCqj0c7lqsFfVsSo Y3siguRpKnhBkDlDGdjMiObHEnSHbxuGY9ff1u1U2CLbERR7se1OpRig5sU81tho UiE6L4YKAj8fqGhZGMdD9sgAtxPM+02N -----END CERTIFICATE-----Generated at Wed Jan 7 22:13:06 2026 by rpki-client