This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft File: sHoKQBnouCACE78tzPxocPheBGY.mft (raw, json) Hash identifier: NWDhwQrx5ssnehCm5r3rc5AcaEhOoYc0Kx7UayPhicY= Subject key identifier: DC:EE:B6:AE:2B:B9:B8:6E:0F:43:17:F2:64:3A:04:21:90:0E:D7:10 Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Certificate serial: 0CAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft Manifest number: 0CA0 Signing time: Sat 10 Jan 2026 18:01:38 +0000 Manifest this update: Sat 10 Jan 2026 18:01:37 +0000 Manifest next update: Sat 17 Jan 2026 18:01:37 +0000 Files and hashes: 1: sHoKQBnouCACE78tzPxocPheBGY.crl (hash: HwBgxg0jp0OfyH9tjsoaIqOpM16hznImqXr9fGqrNFA=) 2: 6ED5481209DF11EAA6052433C4F9AE02.roa (hash: bP4mtdPcC9gJRT9cgoHrxBppsqMyFJRwGR6OCAipZzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 18:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3244 (0xcac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Validity Not Before: Jan 10 18:01:37 2026 GMT Not After : Jan 17 18:01:37 2026 GMT Subject: CN=69629401-cf64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:fa:03:86:39:38:68:f6:cd:20:3c:e5:da: e0:d9:5d:d5:bf:72:54:77:b2:c7:c2:92:30:bf:85: 92:9e:72:88:cd:96:91:b6:df:e0:c2:46:c4:41:5e: e1:8e:0f:b8:44:79:ec:b2:4f:2a:fc:eb:e7:9d:35: a3:8a:1d:3d:e5:c4:31:ba:20:28:ce:18:cb:c0:26: 0d:62:eb:cf:fd:1e:40:69:42:15:12:e8:cf:f6:bb: 68:75:b4:4a:b4:a6:2f:66:77:5f:30:50:eb:80:82: 20:17:24:80:20:3a:04:d5:34:2c:a3:ec:e7:9d:31: 86:9a:c4:a9:92:e9:e4:3f:7a:0e:e9:cd:1d:06:f0: af:db:93:7d:4d:55:00:0d:92:49:e3:15:91:3d:d1: 25:0f:7a:c6:82:b2:59:49:ed:c4:f7:fa:6f:f5:47: 3f:b6:72:9b:03:ec:13:83:3b:a9:1c:5f:e6:4c:71: 17:bc:bf:f9:d3:e5:e0:65:89:da:1c:ec:92:5e:62: b8:60:18:dd:c8:6a:35:61:d3:9e:82:36:7a:7d:14: fc:25:4c:8d:57:bc:24:5c:d6:b3:09:23:b5:55:82: a2:b7:9a:ed:ec:94:30:21:98:b4:4b:f3:e3:94:98: 6c:dc:dd:5b:5f:80:10:cb:8c:75:63:4e:4a:dc:5f: c8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EE:B6:AE:2B:B9:B8:6E:0F:43:17:F2:64:3A:04:21:90:0E:D7:10 X509v3 Authority Key Identifier: keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:4d:52:22:27:bb:f2:6a:e8:1a:7f:d8:3d:07:fd:94:19:7d: 40:07:68:24:c7:37:87:80:4a:4c:02:41:a8:33:c7:ec:d4:bc: 46:52:55:01:15:ae:57:56:e3:e2:05:7f:b7:0f:fa:e2:f7:ce: 05:39:a4:79:b1:4d:42:e7:48:a3:d8:00:0f:ed:af:61:7b:05: 0e:34:99:64:e3:9a:3d:48:23:32:f8:57:89:73:02:30:82:23: 4f:ed:e2:81:d8:8a:b5:05:1c:a4:8b:2c:91:21:af:ca:a0:b9: 46:fa:68:72:c7:41:0b:54:a4:da:1f:1f:64:9b:c4:01:ba:a8: 9c:60:b9:4a:8d:49:e4:7f:69:4d:d9:76:7e:e2:79:40:29:74: f2:17:7f:08:66:30:59:29:96:9c:e8:63:e4:06:30:9e:77:a3: c3:57:f1:e9:54:be:7f:30:2d:1a:ef:45:e3:c9:02:07:1e:1b: d5:b1:94:5e:b7:e3:03:e7:0c:69:27:45:7f:54:0c:c7:7b:a7: f4:e7:fa:cc:51:c5:6c:49:c4:7e:49:56:61:8d:37:41:b8:6a: 10:d0:30:b2:5a:d2:6a:39:2d:8c:e4:4d:ab:0a:fe:94:a4:fb: 56:ba:eb:b5:93:61:98:81:01:8e:1c:95:00:66:6f:10:06:35: 4e:e0:b3:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1RkIxMTAvBgNVBAUTKEIwN0EwQTQwMTlFOEI4MjAwMjEzQkYyRENDRkM2ODcw Rjg1RTA0NjYwHhcNMjYwMTEwMTgwMTM3WhcNMjYwMTE3MTgwMTM3WjAYMRYwFAYD VQQDDA02OTYyOTQwMS1jZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzf6A4Y5OGj2zSA85drg2V3Vv3JUd7LHwpIwv4WSnnKIzZaRtt/gwkbEQV7h jg+4RHnssk8q/OvnnTWjih095cQxuiAozhjLwCYNYuvP/R5AaUIVEujP9rtodbRK tKYvZndfMFDrgIIgFySAIDoE1TQso+znnTGGmsSpkunkP3oO6c0dBvCv25N9TVUA DZJJ4xWRPdElD3rGgrJZSe3E9/pv9Uc/tnKbA+wTgzupHF/mTHEXvL/50+XgZYna HOySXmK4YBjdyGo1YdOegjZ6fRT8JUyNV7wkXNazCSO1VYKit5rt7JQwIZi0S/Pj lJhs3N1bX4AQy4x1Y05K3F/IMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzutq4r ubhuD0MX8mQ6BCGQDtcQMB8GA1UdIwQYMBaAFLB6CkAZ6LggAhO/Lcz8aHD4XgRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTVGQi9DMTU2REY4RTA5 REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VDQUNFNzh0elB4b2NQaGVC R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NIb0tRQm5vdUNBQ0U3OHR6UHhvY1BoZUJHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTVGQi9DMTU2REY4RTA5REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VD QUNFNzh0elB4b2NQaGVCR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRTVIiJ7vyaugaf9g9B/2UGX1AB2gkxzeHgEpMAkGoM8fs1LxGUlUB Fa5XVuPiBX+3D/ri984FOaR5sU1C50ij2AAP7a9hewUONJlk45o9SCMy+FeJcwIw giNP7eKB2Iq1BRykiyyRIa/KoLlG+mhyx0ELVKTaHx9km8QBuqicYLlKjUnkf2lN 2XZ+4nlAKXTyF38IZjBZKZac6GPkBjCed6PDV/HpVL5/MC0a70XjyQIHHhvVsZRe t+MD5wxpJ0V/VAzHe6f05/rMUcVsScR+SVZhjTdBuGoQ0DCyWtJqOS2M5E2rCv6U pPtWuuu1k2GYgQGOHJUAZm8QBjVO4LPF -----END CERTIFICATE-----Generated at Sun Jan 11 09:10:00 2026 by rpki-client