This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft File: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft (raw, json) Hash identifier: eX5DCypy+Db2n4AqwnSZTj+zHReid4YDQVxAlhx1X0w= Subject key identifier: EE:07:8A:DB:6A:90:C4:75:7E:13:D0:5B:C1:CB:D1:E4:DC:26:17:21 Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C Certificate issuer: /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C Certificate serial: 07D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft Manifest number: 07C2 Signing time: Sat 10 Jan 2026 20:43:58 +0000 Manifest this update: Sat 10 Jan 2026 20:43:58 +0000 Manifest next update: Sat 17 Jan 2026 20:43:58 +0000 Files and hashes: 1: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl (hash: WviI6QrEwIpfuBmuLVROGVUjktrL7Dpd81SGMy7rxL4=) 2: B10AE62CBC4711EFAB43324BC4F9AE02.roa (hash: Cg9ICYE9I7QHfG+L0DGU6D2Wt92m7BQcheqj3kGMwFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 20:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2006 (0x7d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D771, serialNumber=A32153712537600D71342EC069A57F3EED60D70C Validity Not Before: Jan 10 20:43:58 2026 GMT Not After : Jan 17 20:43:58 2026 GMT Subject: CN=6962ba0e-4bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:43:3f:ed:99:51:e3:6c:7e:57:74:4d:0b:a0: 01:01:65:8e:fd:8b:b6:a8:1c:03:fd:81:48:28:c0: bb:50:81:fc:0a:65:e9:37:5e:d2:c3:8a:6b:72:e9: c5:6c:a0:ab:f5:9b:45:9f:f5:7f:27:fa:d1:2e:49: f2:f9:ed:d3:1e:f4:74:9c:a0:49:21:4a:16:33:f3: fb:22:f4:87:8f:1f:6b:43:e9:eb:dc:30:60:8a:b1: 0d:48:68:4f:d5:f8:d0:c7:c3:ed:d1:a6:eb:0e:61: 0c:98:91:a3:c7:99:09:4e:13:06:7b:e4:77:55:2f: 8f:c8:01:5c:cb:bb:d2:10:d3:12:dd:0f:3a:49:31: c4:33:3d:ed:dc:0d:2e:85:cf:ce:c4:5c:db:e5:c0: 9e:7a:bf:d9:00:36:6e:5a:dd:c7:9d:20:fc:6f:0b: e8:a5:e5:38:11:59:ae:3f:4d:2f:35:e3:e8:9f:ee: d8:6f:68:ab:0e:98:7c:b4:9e:aa:cd:21:a2:46:37: 4b:7e:0a:d1:3b:af:ad:34:60:c4:67:99:34:d9:93: b4:9c:ed:3c:1b:ba:12:de:0e:d8:61:6d:e1:93:c9: 5e:92:46:17:ed:88:67:eb:5f:37:3a:a9:7b:71:24: c4:a2:ae:fc:dd:ee:d6:f6:b6:ac:c1:ef:c1:96:dd: bd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:07:8A:DB:6A:90:C4:75:7E:13:D0:5B:C1:CB:D1:E4:DC:26:17:21 X509v3 Authority Key Identifier: keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3a:f9:d1:4c:3b:9e:7f:c8:cd:71:b0:4c:a8:d4:89:22:15: 3b:1b:09:fa:30:b1:ee:40:57:e2:a4:36:c4:28:6d:63:5c:8c: 5b:42:77:84:09:a3:0b:3f:d2:9e:39:c8:ae:d9:f8:e8:ae:9e: 39:6c:e9:49:0a:71:9f:6a:01:43:9c:11:5b:46:b6:00:a8:da: 76:10:dc:14:57:dc:d5:15:43:a5:53:f6:80:1c:c2:a8:5c:f7: e3:5d:ff:ee:33:b9:71:d7:76:eb:dc:2e:19:e3:8f:a3:c2:aa: f0:96:5c:d8:8a:f2:6a:e3:d2:f5:6c:0b:6f:94:df:3a:e6:b2: c8:b8:ab:75:51:82:ab:b7:9a:2c:65:3d:cf:6b:e1:fe:8c:49: 4c:e7:49:cf:f2:4b:5e:87:0d:80:b7:49:50:11:0e:28:70:48: d5:5f:84:7b:24:89:9e:78:51:fe:a8:3f:e9:0b:f1:77:01:6b: 58:17:7f:38:4a:ee:00:a1:2e:64:98:48:04:60:9c:ed:1c:29: d5:c3:d9:9f:6f:39:e6:f5:5f:0b:14:04:94:fa:8b:2f:a9:2f: ea:26:68:e6:f8:4d:4c:13:c7:32:9b:c6:ac:c5:e4:db:4c:01: fa:58:16:b2:a4:19:88:9f:18:4e:dc:20:a2:ac:fc:64:80:64: 13:57:1b:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3NzExMTAvBgNVBAUTKEEzMjE1MzcxMjUzNzYwMEQ3MTM0MkVDMDY5QTU3RjNF RUQ2MEQ3MEMwHhcNMjYwMTEwMjA0MzU4WhcNMjYwMTE3MjA0MzU4WjAYMRYwFAYD VQQDDA02OTYyYmEwZS00YmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kM/7ZlR42x+V3RNC6ABAWWO/Yu2qBwD/YFIKMC7UIH8CmXpN17Sw4prcunF bKCr9ZtFn/V/J/rRLkny+e3THvR0nKBJIUoWM/P7IvSHjx9rQ+nr3DBgirENSGhP 1fjQx8Pt0abrDmEMmJGjx5kJThMGe+R3VS+PyAFcy7vSENMS3Q86STHEMz3t3A0u hc/OxFzb5cCeer/ZADZuWt3HnSD8bwvopeU4EVmuP00vNePon+7Yb2irDph8tJ6q zSGiRjdLfgrRO6+tNGDEZ5k02ZO0nO08G7oS3g7YYW3hk8lekkYX7Yhn6183Oql7 cSTEoq783e7W9raswe/Blt29xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4Hittq kMR1fhPQW8HL0eTcJhchMB8GA1UdIwQYMBaAFKMhU3ElN2ANcTQuwGmlfz7tYNcM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc3MS81MEMwODA0RTI5 NEIxMUVCQTc4QzFCMkZDNEY5QUUwMi9veUZUY1NVM1lBMXhOQzdBYWFWX1B1MWcx d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL295RlRjU1UzWUExeE5DN0FhYVZfUHUxZzF3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDc3MS81MEMwODA0RTI5NEIxMUVCQTc4QzFCMkZDNEY5QUUwMi9veUZUY1NVM1lB MXhOQzdBYWFWX1B1MWcxd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMOvnRTDuef8jNcbBMqNSJIhU7Gwn6MLHuQFfipDbEKG1jXIxbQneE CaMLP9KeOciu2fjorp45bOlJCnGfagFDnBFbRrYAqNp2ENwUV9zVFUOlU/aAHMKo XPfjXf/uM7lx13br3C4Z44+jwqrwllzYivJq49L1bAtvlN865rLIuKt1UYKrt5os ZT3Pa+H+jElM50nP8ktehw2At0lQEQ4ocEjVX4R7JImeeFH+qD/pC/F3AWtYF384 Su4AoS5kmEgEYJztHCnVw9mfbznm9V8LFASU+osvqS/qJmjm+E1ME8cym8asxeTb TAH6WBaypBmInxhO3CCirPxkgGQTVxsz -----END CERTIFICATE-----Generated at Mon Jan 12 14:28:50 2026 by rpki-client