This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft File: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft (raw, json) Hash identifier: MnMMrrVCOgvwo+ZZeQt5PKnBm85Nxwoa9pe1XsKu3wY= Subject key identifier: 29:AC:AC:A4:1B:B2:76:EB:C9:76:F0:F1:6A:7B:F3:11:17:5C:22:0C Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft Manifest number: 19 Signing time: Sun 25 Jan 2026 05:32:38 +0000 Manifest this update: Sun 25 Jan 2026 05:32:38 +0000 Manifest next update: Sun 01 Feb 2026 05:32:38 +0000 Files and hashes: 1: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl (hash: mKj6szDwkkvY8o0YUPxwzuUabELuhADyeuQxJzNFhHk=) 2: 7D2D672CDED711F0AB94945E506F56BC.roa (hash: u2zduMkx4xhg9DLF082d9hmsAswVdTWy9LumUJPHJOI=) 3: 5B694A50EAD711F0B1E9CBE6646F56BC.roa (hash: 3eLRypPEUhfByves6spSdNQSjrY66WsDnd8NSp3B+Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Validity Not Before: Jan 25 05:32:38 2026 GMT Not After : Feb 1 05:32:38 2026 GMT Subject: CN=6975aaf6-841d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:0f:ac:eb:66:7f:b1:a1:ec:9c:bc:a7:dd: d3:7b:aa:3e:d5:67:11:82:f9:26:bb:27:fc:3d:a0: 07:85:80:1b:a7:88:87:7c:e4:92:0a:82:8a:7f:a2: be:14:20:42:c7:5c:ec:ed:c2:2f:15:ac:e2:ac:71: eb:51:12:30:03:20:88:c8:9b:f1:40:8b:eb:89:03: c1:14:f8:90:b6:a4:dd:6f:1d:9c:ff:d4:86:56:1b: 9e:1b:1b:a0:5d:3c:33:2c:da:6a:20:c7:fd:9f:2a: f8:d0:36:cd:70:83:13:f0:d1:bf:6c:6b:96:bc:4c: a5:03:a9:01:a2:5d:f5:0c:b2:41:0f:b5:40:2c:05: 0f:c1:20:67:40:2a:d5:e2:c3:59:de:fa:57:f0:87: a0:c5:9b:3b:0f:6c:5f:8a:b6:71:87:53:c4:0c:2f: f6:a4:ec:63:e2:55:92:bf:37:2c:37:07:67:e5:f1: c8:d0:f5:e4:92:f8:cb:cf:20:05:54:a7:3c:75:79: 82:f7:94:c8:22:91:36:b0:6c:02:de:5c:28:ae:e2: 1a:fc:5c:ae:85:13:ba:a7:38:9d:c3:ee:1c:d8:31: 61:6a:01:36:64:90:ea:fb:0d:e7:ba:39:5a:8a:e3: a1:9b:59:23:ca:6f:44:dd:2f:33:f9:12:3b:0f:7d: 63:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AC:AC:A4:1B:B2:76:EB:C9:76:F0:F1:6A:7B:F3:11:17:5C:22:0C X509v3 Authority Key Identifier: keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:74:a2:5a:b7:61:9a:a3:1b:8f:4c:be:fa:cf:89:79:05:57: 92:a4:4b:a5:ef:c9:f3:67:1e:57:03:50:56:fb:64:ec:32:a6: 6d:8e:93:62:39:e8:80:2e:8e:83:d6:a8:55:94:48:f6:2a:7e: 04:45:3b:ab:8e:34:d0:69:4e:a4:60:7f:f1:58:12:97:f1:29: a3:53:97:30:43:d6:c0:83:b3:f6:a4:24:e7:1b:31:f1:d1:ef: 36:9b:b9:a4:2b:69:61:d8:b0:de:64:f4:25:75:69:0b:e9:d7: ac:b9:64:33:8e:bc:9d:2f:55:f0:e7:47:51:4a:e4:d9:8d:6e: 5c:fd:b5:e3:fe:d2:5c:58:b5:b0:7d:3a:9c:96:e0:50:f3:72: 73:22:b3:56:b2:fd:5a:b4:3f:49:07:e5:25:8d:0c:e2:f9:18: 43:61:d3:52:11:6e:d4:4c:df:9f:60:ee:60:a0:4f:00:ad:a0: 8a:dc:bc:8d:1f:d8:b8:7e:0d:21:1d:75:73:2e:6a:99:9f:2c: 21:7a:53:9d:c2:7f:bf:cf:6e:e6:d3:89:b8:67:22:4f:07:d0: 6b:db:da:d3:17:2e:c3:db:1a:4e:2d:c6:12:da:a9:54:0b:1d: 76:7a:b6:58:eb:aa:a5:d9:e6:99:1d:20:7e:37:33:9e:38:53: 34:82:79:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEx MkZFMTExMC8GA1UEBRMoMEM1OEM2OTY5RUU2NEM0MTkxQUFCNjY5NjNGNDA5RDQ1 QUVBRjY5ODAeFw0yNjAxMjUwNTMyMzhaFw0yNjAyMDEwNTMyMzhaMBgxFjAUBgNV BAMMDTY5NzVhYWY2LTg0MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA8Q+s62Z/saHsnLyn3dN7qj7VZxGC+Sa7J/w9oAeFgBuniId85JIKgop/or4U IELHXOztwi8VrOKscetREjADIIjIm/FAi+uJA8EU+JC2pN1vHZz/1IZWG54bG6Bd PDMs2mogx/2fKvjQNs1wgxPw0b9sa5a8TKUDqQGiXfUMskEPtUAsBQ/BIGdAKtXi w1ne+lfwh6DFmzsPbF+KtnGHU8QML/ak7GPiVZK/Nyw3B2fl8cjQ9eSS+MvPIAVU pzx1eYL3lMgikTawbALeXCiu4hr8XK6FE7qnOJ3D7hzYMWFqATZkkOr7Dee6OVqK 46GbWSPKb0TdLzP5EjsPfWMHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKayspBuy duvJdvDxanvzERdcIgwwHwYDVR0jBBgwFoAUDFjGlp7mTEGRqrZpY/QJ1Frq9pgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0ZCMjhEOUYwREM5 QzExRjA4MTdFODk2MUEyRUU1MjhFL0RGakdscDdtVEVHUnFyWnBZX1FKMUZycTlw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvREZqR2xwN21URUdScXJacFlfUUoxRnJxOXBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0ZCMjhEOUYwREM5QzExRjA4MTdFODk2MUEyRUU1MjhFL0RGakdscDdtVEVH UnFyWnBZX1FKMUZycTlwZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACx0olq3YZqjG49MvvrPiXkFV5KkS6XvyfNnHlcDUFb7ZOwypm2Ok2I5 6IAujoPWqFWUSPYqfgRFO6uONNBpTqRgf/FYEpfxKaNTlzBD1sCDs/akJOcbMfHR 7zabuaQraWHYsN5k9CV1aQvp16y5ZDOOvJ0vVfDnR1FK5NmNblz9teP+0lxYtbB9 OpyW4FDzcnMis1ay/Vq0P0kH5SWNDOL5GENh01IRbtRM359g7mCgTwCtoIrcvI0f 2Lh+DSEddXMuapmfLCF6U53Cf7/PbubTibhnIk8H0Gvb2tMXLsPbGk4txhLaqVQL HXZ6tljrqqXZ5pkdIH43M544UzSCeUc= -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:33 2026 by rpki-client