This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft File: -jVgKfx3KltDJpwxataFxLtaZW0.mft (raw, json) Hash identifier: sw4dKy3OD1rpdiZFxTCpzZ+euGXq+i51wvAcovc56YE= Subject key identifier: 2E:2B:02:E9:F2:2E:C7:CC:07:54:3F:12:9F:5A:8F:93:C8:8F:33:CB Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D Certificate issuer: /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Certificate serial: 069E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft Manifest number: 068A Signing time: Sat 24 Jan 2026 21:47:42 +0000 Manifest this update: Sat 24 Jan 2026 21:47:42 +0000 Manifest next update: Sat 31 Jan 2026 21:47:42 +0000 Files and hashes: 1: -jVgKfx3KltDJpwxataFxLtaZW0.crl (hash: yEHZjX7yM+3R5LViOAxdLtyiQyZxWbbxlP9bmhierhE=) 2: 93E364468FC111EFA7695485C4F9AE02.roa (hash: ehyygnCRmM9eZFq5wp/iMEtE7yHHT0e0DPinhJkSnaE=) 3: 26C5F4148FC111EF84928A68C4F9AE02.roa (hash: oAqC82kEWq2BnUC7wyI1OnAbQ4JABjG40uWiB/vTfHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1694 (0x69e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B5E, serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Validity Not Before: Jan 24 21:47:42 2026 GMT Not After : Jan 31 21:47:42 2026 GMT Subject: CN=69753dfe-4864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:5a:aa:0e:1c:ac:17:68:19:62:6b:32:32: a4:0d:fc:04:e4:be:97:93:4f:c5:f5:d4:8d:05:de: 61:a6:00:4f:94:a2:30:dd:4c:a0:15:3a:d2:69:75: c1:f4:91:4a:72:f3:21:e2:d4:7c:3d:53:e4:aa:b0: 02:fd:f3:6b:4d:2f:fa:b6:25:ed:d5:7b:6a:e1:fd: 93:72:18:b5:84:6d:2c:4d:d4:58:b4:24:af:a4:f0: 54:73:25:1a:83:a6:bd:b8:1e:c9:7e:10:de:e8:5e: d4:49:f5:da:b2:71:97:bd:a8:10:bd:56:32:fb:7a: 12:1d:91:8b:0e:65:12:24:67:f2:fa:26:67:3b:32: 01:c6:68:de:8a:8f:d9:55:cc:63:37:34:f0:66:f8: 6b:c2:b9:fb:6e:3c:2c:35:33:6d:13:24:c6:22:b0: b4:6f:43:4a:a0:4b:d0:a9:67:97:87:5c:92:0d:c1: 8e:61:9c:f7:c3:e9:d7:99:f3:55:bc:be:57:1a:d3: 7c:fb:48:b5:da:66:1a:9a:5a:db:a2:f0:b8:93:89: 2e:c3:02:56:eb:e6:47:78:e7:30:de:9f:3f:94:88: 6d:d5:80:d5:53:2b:cc:58:05:bc:ee:57:e0:6a:3d: f8:be:b7:82:d1:64:33:91:01:1b:f3:f6:f6:3c:dd: c6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2B:02:E9:F2:2E:C7:CC:07:54:3F:12:9F:5A:8F:93:C8:8F:33:CB X509v3 Authority Key Identifier: keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a6:bd:78:17:7c:de:a1:c1:3c:84:fb:b9:9d:80:af:0f:17: be:f5:47:03:1a:97:67:1e:fb:20:f6:2d:03:5b:f9:68:c7:91: aa:fa:52:3a:fd:ec:57:17:7c:b6:0a:df:12:db:7d:d5:a6:74: 4c:ef:84:65:d9:ba:0f:fe:b1:7c:c3:a6:81:b6:2a:34:3d:d6: f8:7c:b6:8e:11:7c:1d:4a:e4:c6:94:80:1b:6b:bb:80:42:44: 05:e3:ce:9f:91:05:32:7e:e4:44:f2:d4:37:4c:01:da:2e:13: a7:5e:e5:26:34:55:f3:98:a5:ae:a0:72:e7:04:5e:ac:fb:95: 33:e8:18:8c:c1:04:5e:42:d2:53:26:66:07:c8:96:e1:7b:71: 84:e1:26:52:bd:97:e2:41:92:a1:4a:b0:59:12:ce:ba:75:c5: 93:54:a8:af:24:d0:b7:40:ff:ca:57:c1:75:47:c3:10:03:56: 68:3b:7e:f9:99:84:22:24:aa:ac:89:79:81:92:ee:42:7e:60: d6:6e:7d:64:04:a1:22:7b:11:eb:5f:5d:c0:56:19:41:db:bc: 88:18:34:de:fa:6f:9f:61:f1:25:6a:e5:32:ee:cc:5d:89:ae: f2:43:78:b2:75:03:21:ca:e6:92:b4:c3:7f:01:03:c1:24:1c: fb:8c:6a:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNUUxMTAvBgNVBAUTKEZBMzU2MDI5RkM3NzJBNUI0MzI2OUMzMTZBRDY4NUM0 QkI1QTY1NkQwHhcNMjYwMTI0MjE0NzQyWhcNMjYwMTMxMjE0NzQyWjAYMRYwFAYD VQQDDA02OTc1M2RmZS00ODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyr1aqg4crBdoGWJrMjKkDfwE5L6Xk0/F9dSNBd5hpgBPlKIw3UygFTrSaXXB 9JFKcvMh4tR8PVPkqrAC/fNrTS/6tiXt1Xtq4f2Tchi1hG0sTdRYtCSvpPBUcyUa g6a9uB7JfhDe6F7USfXasnGXvagQvVYy+3oSHZGLDmUSJGfy+iZnOzIBxmjeio/Z VcxjNzTwZvhrwrn7bjwsNTNtEyTGIrC0b0NKoEvQqWeXh1ySDcGOYZz3w+nXmfNV vL5XGtN8+0i12mYamlrbovC4k4kuwwJW6+ZHeOcw3p8/lIht1YDVUyvMWAW87lfg aj34vreC0WQzkQEb8/b2PN3GiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4rAuny LsfMB1Q/Ep9aj5PIjzPLMB8GA1UdIwQYMBaAFPo1YCn8dypbQyacMWrWhcS7WmVt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI1RS9GNThDNTY5NEE2 RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0tsdERKcHd4YXRhRnhMdGFa VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1qVmdLZngzS2x0REpwd3hhdGFGeEx0YVpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI1RS9GNThDNTY5NEE2RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0ts dERKcHd4YXRhRnhMdGFaVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBspr14F3zeocE8hPu5nYCvDxe+9UcDGpdnHvsg9i0DW/lox5Gq+lI6 /exXF3y2Ct8S233VpnRM74Rl2boP/rF8w6aBtio0Pdb4fLaOEXwdSuTGlIAba7uA QkQF486fkQUyfuRE8tQ3TAHaLhOnXuUmNFXzmKWuoHLnBF6s+5Uz6BiMwQReQtJT JmYHyJbhe3GE4SZSvZfiQZKhSrBZEs66dcWTVKivJNC3QP/KV8F1R8MQA1ZoO375 mYQiJKqsiXmBku5CfmDWbn1kBKEiexHrX13AVhlB27yIGDTe+m+fYfElauUy7sxd ia7yQ3iydQMhyuaStMN/AQPBJBz7jGr+ -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:09 2026 by rpki-client