This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: c+0Al6RxJZ1D6+qs5610oW1JxBF6LazSYjcgoKbBl5s= Subject key identifier: 98:E3:17:7E:C3:45:BC:1C:A9:16:20:A5:22:E6:63:2B:06:56:DE:4C Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: B2 Signing time: Fri 23 Jan 2026 05:30:10 +0000 Manifest this update: Fri 23 Jan 2026 05:30:10 +0000 Manifest next update: Fri 30 Jan 2026 05:30:10 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: 1pSSxefQJZRBTV5gfp+48Tcu4rysh+EU6zOsA6VVaow=) 2: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: zube208I7nc1pgqe/rLjskVR+S+L8lpyAr5nz7YaDzA=) 3: C8171E8EC04D11F081466417C4F9AE02.roa (hash: qD7E81+F84ybq65PJCoOoGx/3Rj26xGdP+iJxj/kXys=) 4: 7E99DBC2F73711F0916171B3376F56BC.roa (hash: q0EmSPjBnfYz635amSUFAosWVVmgeUSEukQMopNPmls=) 5: D87376860A1511F09D97420DC4F9AE02.roa (hash: DBHtGCQQDfMpiwGGsmk/EkvovYeutKnxcD7IbMh0Lsw=) 6: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: ZSY+wrBOCpSTseL5HGKwx+yRvdWTT0pPkpRE5m5XW20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 05:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Jan 23 05:30:10 2026 GMT Not After : Jan 30 05:30:10 2026 GMT Subject: CN=69730762-1a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:f6:64:93:36:78:18:ec:0c:af:3e:7a:11: c8:ce:f7:85:34:d9:54:b1:2a:ff:e6:f4:21:da:bc: 93:da:b4:08:79:13:78:58:68:e5:69:71:35:0c:c5: a3:23:84:37:b9:fe:51:83:ed:c8:63:71:d0:ef:3a: 55:9e:63:20:78:ec:2e:05:ca:92:54:50:0d:7f:e5: 20:2a:2f:e8:8a:93:4d:c4:77:f3:99:7c:fe:01:a8: bf:3e:cc:b9:97:d7:4f:96:8d:0b:74:a6:07:46:80: 2b:12:fe:44:2c:6c:df:8f:52:af:4c:08:23:0b:88: 4f:e3:49:d2:55:2a:b0:c3:fa:bb:f9:3d:8f:e3:52: 4b:21:73:4d:79:5c:d5:f0:5a:5c:84:f3:3c:ee:af: ec:93:41:77:0c:d0:3a:42:20:24:f6:72:3e:84:d4: 42:ea:89:ae:f3:3f:ab:91:64:d2:6a:8a:c6:22:45: 2e:67:16:11:09:40:c0:15:b8:f6:02:ef:e5:47:a3: ef:ff:fd:85:bf:81:e9:24:58:e2:bf:a4:df:de:69: ac:57:d5:00:ef:08:ea:0a:fb:65:b4:c2:37:10:a4: 8e:bb:89:71:9f:76:6c:d4:72:9e:c8:99:d7:82:29: f6:49:56:48:43:d1:41:cb:13:b4:50:c9:05:05:71: d6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E3:17:7E:C3:45:BC:1C:A9:16:20:A5:22:E6:63:2B:06:56:DE:4C X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:5b:6c:b8:c0:c1:59:89:7c:f9:2a:f7:74:5d:a5:d4:e9:0c: ea:c4:e5:7c:f1:83:83:6e:f3:89:0f:e3:2f:a4:30:5e:ad:04: 5f:dc:1b:4c:43:d8:9f:0d:96:ec:04:48:fd:5b:c3:64:84:55: 6d:4e:ff:b4:d4:6c:68:f4:60:75:4f:d2:76:74:61:08:fc:41: 30:bf:25:67:e2:91:75:d3:89:f6:2e:a8:33:71:e0:ca:4f:60: ad:81:01:76:ca:60:a9:f4:2c:8f:82:7b:62:93:bf:d7:23:ed: e0:09:20:33:c3:28:b9:3d:18:0e:9e:f3:d8:11:30:ff:cb:77: 43:f8:75:58:a0:42:ac:4d:9c:19:d1:cf:67:1f:86:ff:5a:b5: 0b:6c:59:85:01:d1:87:73:54:15:22:16:61:f5:80:30:37:26: a6:cb:86:37:aa:71:50:fd:d3:bf:a2:f6:00:43:6e:fb:23:00: 39:d4:74:e2:86:32:b4:b1:40:77:a5:8b:3a:cc:1c:4e:c8:7f: 78:11:7e:2d:3d:49:22:bc:6e:14:b6:27:1d:0d:25:4d:c1:9c: 97:f5:63:91:13:00:ce:7c:30:e4:88:ac:c1:2a:1e:d5:ea:c7: ff:b9:5e:bf:e2:e3:e6:e8:76:3f:18:cc:f9:1e:33:bd:e2:7d: 21:8a:3d:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MTJGRTExMTAvBgNVBAUTKDNEMUZDQjcyNTVDNTI1MDNFMTBBRTU4NEIxMTg5QTE1 Q0Y1NjA3NEUwHhcNMjYwMTIzMDUzMDEwWhcNMjYwMTMwMDUzMDEwWjAYMRYwFAYD VQQDDA02OTczMDc2Mi0xYTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqr2ZJM2eBjsDK8+ehHIzveFNNlUsSr/5vQh2ryT2rQIeRN4WGjlaXE1DMWj I4Q3uf5Rg+3IY3HQ7zpVnmMgeOwuBcqSVFANf+UgKi/oipNNxHfzmXz+Aai/Psy5 l9dPlo0LdKYHRoArEv5ELGzfj1KvTAgjC4hP40nSVSqww/q7+T2P41JLIXNNeVzV 8FpchPM87q/sk0F3DNA6QiAk9nI+hNRC6omu8z+rkWTSaorGIkUuZxYRCUDAFbj2 Au/lR6Pv//2Fv4HpJFjiv6Tf3mmsV9UA7wjqCvtltMI3EKSOu4lxn3Zs1HKeyJnX gin2SVZIQ9FByxO0UMkFBXHWfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjjF37D RbwcqRYgpSLmYysGVt5MMB8GA1UdIwQYMBaAFD0fy3JVxSUD4QrlhLEYmhXPVgdO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9DNDU2MTAyRTA5 RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpRUGhDdVdFc1JpYUZjOVdC MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0IwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFMS9DNDU2MTAyRTA5RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpR UGhDdVdFc1JpYUZjOVdCMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnW2y4wMFZiXz5Kvd0XaXU6QzqxOV88YODbvOJD+MvpDBerQRf3BtM Q9ifDZbsBEj9W8NkhFVtTv+01Gxo9GB1T9J2dGEI/EEwvyVn4pF104n2LqgzceDK T2CtgQF2ymCp9CyPgntik7/XI+3gCSAzwyi5PRgOnvPYETD/y3dD+HVYoEKsTZwZ 0c9nH4b/WrULbFmFAdGHc1QVIhZh9YAwNyamy4Y3qnFQ/dO/ovYAQ277IwA51HTi hjK0sUB3pYs6zBxOyH94EX4tPUkivG4UticdDSVNwZyX9WOREwDOfDDkiKzBKh7V 6sf/uV6/4uPm6HY/GMz5HjO94n0hij2H -----END CERTIFICATE-----Generated at Sun Jan 25 06:05:10 2026 by rpki-client