This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json) Hash identifier: 1ftLvRgLtp6671TbccOfHRgam0jSFcSuhLmnLpR/LRM= Subject key identifier: C2:B6:76:31:95:A2:F8:52:0A:50:E0:05:3B:23:EA:07:E1:17:68:75 Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft Manifest number: 14B1 Signing time: Sat 10 Jan 2026 18:07:39 +0000 Manifest this update: Sat 10 Jan 2026 18:07:38 +0000 Manifest next update: Sat 17 Jan 2026 18:07:38 +0000 Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: pFn76YSqVFRURRoikeuD2kVlZ9iBpBWTpKIk9+4TQko=) 2: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: LHvxfj3VCNmuKnrLv2NsZrToWYHoHHWWd+F8Qkfp44A=) 3: 3C73210E29E711F0AB5EBA80C4F9AE02.roa (hash: Y/kIeencj/taxOJRNaw/dIwoKt74Xz/Efsc6Lm3bUIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 17:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Jan 10 18:07:38 2026 GMT Not After : Jan 17 18:07:38 2026 GMT Subject: CN=6962956b-a759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2b:0c:dd:52:e8:f9:6e:8e:91:e9:cc:da:15: 2e:dc:fe:11:ee:ce:d4:60:e2:49:4f:02:a5:3e:5d: 36:41:95:b6:8a:32:88:d4:13:17:23:b9:a7:ce:e1: 97:07:00:6a:57:8b:f1:4e:97:33:01:e3:e1:4d:3c: 1b:bf:6d:57:4d:ab:c7:ec:78:8f:17:83:bf:6f:e6: c6:e3:b9:bb:22:26:2c:1c:1a:17:eb:86:fb:dc:f7: 78:45:06:10:d8:2c:85:6f:0a:7f:92:f3:fb:a0:61: e2:0d:7c:e3:47:ab:e7:ff:dd:10:58:48:8c:e7:34: 22:e8:c9:62:e9:54:f2:d0:b0:e2:6f:41:98:45:60: a5:2f:c5:78:b3:71:59:8c:49:94:e6:41:eb:51:df: 71:45:27:92:e5:18:cb:1b:dd:7e:1f:30:46:26:93: c5:5c:b9:60:32:4e:18:98:2b:95:5f:ba:d7:09:e5: aa:69:1f:30:9b:31:b7:e7:21:36:23:d7:00:e3:e0: 6d:e5:bc:3e:93:06:f1:ee:c1:3a:43:1c:6c:30:a7: 97:1a:1d:a4:18:73:cb:86:48:fb:04:19:8f:6a:5a: 7f:e8:bd:f8:7f:02:4c:df:76:a0:26:97:71:2e:6a: 6a:38:8a:2c:a7:64:02:2e:b3:d7:15:a5:96:36:6d: 9b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B6:76:31:95:A2:F8:52:0A:50:E0:05:3B:23:EA:07:E1:17:68:75 X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0a:ee:c5:ae:a9:9d:b6:13:1a:cc:05:2e:24:f8:50:c0:12: a6:03:96:60:24:84:dc:ff:06:77:ca:7f:55:ed:b0:62:eb:2e: f4:9c:67:ea:9e:80:1c:81:2a:47:0d:d6:bb:28:e7:71:f5:09: 74:ab:60:6e:b6:a8:16:06:bc:a0:d4:ef:1f:7d:07:33:72:40: 1d:3a:60:34:8b:b1:e4:c1:7e:bb:3d:04:0e:f7:f5:8a:a0:4e: a9:01:c6:9d:7f:6b:e2:f1:4a:0a:ef:46:bb:e3:35:74:18:45: 3f:c6:73:5e:08:20:d8:56:42:4c:a0:0f:74:c6:25:6f:39:49: 33:89:e8:53:ba:48:31:2a:16:20:f5:6a:b2:19:bd:1c:9d:d8: ca:b6:43:0b:07:7b:c4:1f:d4:86:89:f9:87:2e:56:a1:dd:25: 16:8a:ee:fb:72:ca:9e:6a:48:5a:14:9f:4c:97:49:39:15:f7: 0d:29:3d:81:72:59:d1:40:10:1c:3f:0a:b8:97:3c:1d:8c:01: 9d:0e:6f:05:4b:ba:6b:12:db:de:16:61:4b:c6:36:21:00:b9: 2f:c0:86:d0:03:09:9c:7c:e3:f0:4f:0d:5b:bd:5f:86:55:09: 60:7b:e6:84:79:b3:ea:4b:b5:6a:d2:32:fb:ea:b3:5e:74:e4: 8c:28:cb:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjYwMTEwMTgwNzM4WhcNMjYwMTE3MTgwNzM4WjAYMRYwFAYD VQQDDA02OTYyOTU2Yi1hNzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlisM3VLo+W6OkenM2hUu3P4R7s7UYOJJTwKlPl02QZW2ijKI1BMXI7mnzuGX BwBqV4vxTpczAePhTTwbv21XTavH7HiPF4O/b+bG47m7IiYsHBoX64b73Pd4RQYQ 2CyFbwp/kvP7oGHiDXzjR6vn/90QWEiM5zQi6Mli6VTy0LDib0GYRWClL8V4s3FZ jEmU5kHrUd9xRSeS5RjLG91+HzBGJpPFXLlgMk4YmCuVX7rXCeWqaR8wmzG35yE2 I9cA4+Bt5bw+kwbx7sE6QxxsMKeXGh2kGHPLhkj7BBmPalp/6L34fwJM33agJpdx LmpqOIosp2QCLrPXFaWWNm2bnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMK2djGV ovhSClDgBTsj6gfhF2h1MB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0 Ulk5VFg4WEczWjItME01emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfCu7FrqmdthMazAUuJPhQwBKmA5ZgJITc/wZ3yn9V7bBi6y70nGfq noAcgSpHDda7KOdx9Ql0q2ButqgWBryg1O8ffQczckAdOmA0i7HkwX67PQQO9/WK oE6pAcadf2vi8UoK70a74zV0GEU/xnNeCCDYVkJMoA90xiVvOUkziehTukgxKhYg 9WqyGb0cndjKtkMLB3vEH9SGifmHLlah3SUWiu77csqeakhaFJ9Ml0k5FfcNKT2B clnRQBAcPwq4lzwdjAGdDm8FS7prEtveFmFLxjYhALkvwIbQAwmcfOPwTw1bvV+G VQlge+aEebPqS7Vq0jL76rNedOSMKMul -----END CERTIFICATE-----Generated at Sat Jan 10 20:53:54 2026 by rpki-client