This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft File: 1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft (raw, json) Hash identifier: NH47IiOssHSj1fUnhu18QGHkWVXNEUeYk72MTeLNQe8= Subject key identifier: 42:9F:1C:47:07:13:6F:27:65:70:E3:6C:E5:4C:F2:95:47:8E:06:85 Authority key identifier: D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9 Certificate issuer: /CN=A9116B0C/serialNumber=D5B16768914A80C93124629610CC40502AAED0E9 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft Manifest number: 08 Signing time: Fri 23 Jan 2026 07:09:08 +0000 Manifest this update: Fri 23 Jan 2026 07:09:08 +0000 Manifest next update: Fri 30 Jan 2026 07:09:08 +0000 Files and hashes: 1: 1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl (hash: 3Q3OYskfkvuuo6qhYrC6DfjNJm0jAQanzBewfuRwU60=) 2: F5568448F11C11F0AC52AD484D6F56BC.roa (hash: 6/trWiaSA3ovsHAmS9jB/q9ctDGoHF8hJHb19ZOIPWM=) 3: 2235EF78F12011F0BFBF3F154E6F56BC.roa (hash: fBLKl5jgTUMvzH803oj5W057wVg5s8TT2eU4MMmeh6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 07:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B0C, serialNumber=D5B16768914A80C93124629610CC40502AAED0E9 Validity Not Before: Jan 23 07:09:08 2026 GMT Not After : Jan 30 07:09:08 2026 GMT Subject: CN=69731e94-af0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:76:15:95:5a:d1:89:18:2d:ae:fa:b7:c0:11: ca:8a:11:f4:e5:5a:25:ed:4e:1d:43:64:82:44:89: 78:16:e2:d8:aa:ee:c6:c8:f3:56:d0:be:d9:fe:67: 24:9d:b6:f4:eb:d7:37:dd:ac:ca:22:84:a7:7e:fe: a9:c4:f7:a9:67:7f:f6:da:a4:99:06:88:87:42:0f: ba:2c:79:f2:9a:ee:be:d2:65:2a:7c:93:28:4e:f7: b7:7d:98:08:ef:21:7c:f1:cb:4c:4f:be:6a:25:82: 42:e0:4c:1c:c4:46:3b:81:e8:84:08:2c:86:27:29: d7:d0:22:19:cd:3a:89:d4:34:23:6f:2d:a1:45:7f: f7:7e:b2:5c:a1:0c:35:91:67:0d:ba:5a:aa:67:21: 04:15:d7:fa:d0:e4:08:ee:70:6c:e7:11:cd:2e:df: d9:3f:da:ee:0e:1b:2e:90:90:1c:cf:21:43:1b:b9: ee:f7:4b:ef:a5:83:0e:14:0f:e5:a6:42:88:a2:37: 02:50:bd:f8:50:e3:26:ab:c9:21:4c:42:85:45:50: df:15:ea:b1:ae:33:66:dc:44:93:42:41:d9:b0:e9: 79:f6:1c:12:ab:dc:fc:cd:32:91:65:dd:83:a4:ac: 8f:b1:c0:fb:7b:d0:8d:7c:c6:01:d3:96:ed:c3:1f: 9d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9F:1C:47:07:13:6F:27:65:70:E3:6C:E5:4C:F2:95:47:8E:06:85 X509v3 Authority Key Identifier: keyid:D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:2e:3b:01:56:7c:bd:1e:25:bb:8e:dc:a1:3f:ba:51:59:d9: ee:e7:10:21:39:90:9b:77:cd:05:c0:1a:51:5c:09:bb:4d:8d: 39:f3:74:fd:72:70:9c:58:e7:9f:45:f1:65:97:b0:64:79:5c: 5f:34:21:8d:e0:18:23:e9:5d:20:53:a1:78:36:49:c1:b4:de: 18:e2:25:0d:95:b8:df:cf:5c:b1:b9:56:3a:77:90:fb:70:4d: 4f:36:80:3b:11:dc:07:5b:16:c4:28:4a:68:5a:e7:b6:37:98: 68:92:10:0c:1d:ce:5b:10:3a:9b:9e:06:40:8c:88:f3:27:78: f2:fe:c3:9d:d7:97:d1:f3:76:ae:e1:96:cd:05:a5:59:0e:ea: d3:57:f5:b1:f6:07:ea:7d:7f:68:72:0a:24:c5:8a:15:c5:48: b9:49:bf:8d:f0:58:40:49:5b:1e:52:fc:d0:59:a7:4a:06:f6: 80:d5:d5:85:85:d0:85:b7:68:03:98:a1:61:f4:9e:f5:13:7b: 01:9a:3b:4a:ee:90:16:31:61:f9:a7:58:8a:e2:d0:a2:00:11: 04:0d:e3:68:83:8c:44:42:d4:4b:db:8b:8c:bc:11:96:b9:36: 4a:08:8d:a8:6a:e0:00:0a:63:29:df:a1:19:0f:f4:4a:b8:6d: 8c:98:d1:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEx NkIwQzExMC8GA1UEBRMoRDVCMTY3Njg5MTRBODBDOTMxMjQ2Mjk2MTBDQzQwNTAy QUFFRDBFOTAeFw0yNjAxMjMwNzA5MDhaFw0yNjAxMzAwNzA5MDhaMBgxFjAUBgNV BAMMDTY5NzMxZTk0LWFmMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtdhWVWtGJGC2u+rfAEcqKEfTlWiXtTh1DZIJEiXgW4tiq7sbI81bQvtn+ZySd tvTr1zfdrMoihKd+/qnE96lnf/bapJkGiIdCD7osefKa7r7SZSp8kyhO97d9mAjv IXzxy0xPvmolgkLgTBzERjuB6IQILIYnKdfQIhnNOonUNCNvLaFFf/d+slyhDDWR Zw26WqpnIQQV1/rQ5AjucGznEc0u39k/2u4OGy6QkBzPIUMbue73S++lgw4UD+Wm QoiiNwJQvfhQ4yarySFMQoVFUN8V6rGuM2bcRJNCQdmw6Xn2HBKr3PzNMpFl3YOk rI+xwPt70I18xgHTlu3DH50FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQp8cRwcT bydlcONs5UzylUeOBoUwHwYDVR0jBBgwFoAU1bFnaJFKgMkxJGKWEMxAUCqu0Okw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2QjBDL0I2MTM4NkU2RjEx QzExRjBBMzhGMjg0NzRENkY1NkJDLzFiRm5hSkZLZ01reEpHS1dFTXhBVUNxdTBP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMWJGbmFKRktnTWt4SkdLV0VNeEFVQ3F1ME9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 QjBDL0I2MTM4NkU2RjExQzExRjBBMzhGMjg0NzRENkY1NkJDLzFiRm5hSkZLZ01r eEpHS1dFTXhBVUNxdTBPay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFYuOwFWfL0eJbuO3KE/ulFZ2e7nECE5kJt3zQXAGlFcCbtNjTnzdP1y cJxY559F8WWXsGR5XF80IY3gGCPpXSBToXg2ScG03hjiJQ2VuN/PXLG5Vjp3kPtw TU82gDsR3AdbFsQoSmha57Y3mGiSEAwdzlsQOpueBkCMiPMnePL+w53Xl9Hzdq7h ls0FpVkO6tNX9bH2B+p9f2hyCiTFihXFSLlJv43wWEBJWx5S/NBZp0oG9oDV1YWF 0IW3aAOYoWH0nvUTewGaO0rukBYxYfmnWIri0KIAEQQN42iDjERC1Evbi4y8EZa5 NkoIjahq4AAKYynfoRkP9Eq4bYyY0YM= -----END CERTIFICATE-----Generated at Sun Jan 25 05:56:43 2026 by rpki-client