This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json) Hash identifier: xei8OQd+60Tx3pqfDuGn5vMbFnF24LwWfrMHnSGEkfE= Subject key identifier: 2F:7C:7C:82:7F:BA:C3:83:E7:CF:96:D7:93:43:12:C2:13:82:B6:0C Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: 0270 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft Manifest number: 0245 Signing time: Sun 25 Jan 2026 01:28:31 +0000 Manifest this update: Sun 25 Jan 2026 01:28:31 +0000 Manifest next update: Sun 01 Feb 2026 01:28:31 +0000 Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: R+Z3Q6hYGBizMoHyR5kHIFJ1tmDZzfYxsMo04SvF8xA=) 2: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: p5sOlQdOsm0uuNV7G6DKNuM9BbnStZ2ZIjZVpc+0Hyo=) 3: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: VkPzYi2ZNs0vU05onLKrq1O6hJdtK/SNgO3aXYDbRas=) 4: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: OIJRm8GaBU5y1XIhl90QydPQzIYTf07qs+pUpIzxFiU=) 5: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: YAG2MNWzPx3qv2gqkqHL4HomQQn9WRVJ3LMr6N4DzO8=) 6: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: vc7xFL7n/2DvUqwMvBAa7Bpo4jcv0S1d4kEos5vCVco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Validity Not Before: Jan 25 01:28:31 2026 GMT Not After : Feb 1 01:28:31 2026 GMT Subject: CN=697571bf-4858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:45:02:9d:fd:43:96:17:92:f3:f5:9d:82: 99:11:e1:17:e8:1a:fb:de:1c:54:ba:80:88:1d:98: 79:65:24:d1:2d:a7:69:15:61:fb:5d:32:c2:88:56: bd:a3:64:d7:e4:78:85:8e:45:1f:04:02:d1:4e:2a: 5e:6d:3d:77:26:16:25:60:35:3a:db:a6:b1:83:ba: d6:62:ba:a1:f1:78:3b:25:ef:53:9f:77:03:2d:30: 5e:5e:8c:2b:a9:58:bf:66:8d:c9:0f:7e:b0:d2:89: 72:ac:2d:8d:a1:ee:3e:3a:c7:6b:a7:e8:cf:b1:fd: 3e:1e:cd:36:e6:0f:f2:59:48:8d:1d:97:46:1f:c6: 5e:e6:73:78:86:22:2c:6f:fb:a2:bd:b7:e1:0f:a9: f7:77:73:7f:95:23:0a:25:84:b9:6d:62:61:3d:76: 4d:c4:ed:27:9e:ea:17:85:72:d7:d9:2d:e2:1e:d9: e2:0d:49:69:7f:c3:1e:4d:1c:6c:2d:86:52:8d:8c: d5:c7:44:fa:67:17:25:87:4f:5c:1f:a6:f2:8e:09: c0:03:8c:4a:c6:56:56:0e:bf:5c:e7:19:c0:95:ea: 4d:65:f3:5a:6e:58:40:f7:78:df:54:22:d3:d0:e3: 11:8e:21:81:88:2c:4c:73:3b:10:55:75:2f:90:5f: 2d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7C:7C:82:7F:BA:C3:83:E7:CF:96:D7:93:43:12:C2:13:82:B6:0C X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:e4:62:50:7f:5c:f8:e4:6f:8a:20:f3:11:5d:2e:ef:cc:9b: 2c:ea:be:af:fd:b4:f6:1c:e1:01:61:43:8e:21:8e:ce:d8:88: 0a:d9:0f:36:02:b9:1c:ba:87:fc:bc:81:d0:d4:fd:0f:82:54: cf:9d:21:dd:72:cd:a7:f9:92:68:1f:22:1f:6f:be:97:9b:d1: 78:41:3f:b5:ef:a4:40:25:37:13:91:d5:4e:00:82:fd:e9:67: 17:45:6b:5b:f1:30:61:0f:36:4a:ac:e0:7a:a1:46:68:8c:01: 59:b3:2d:37:a7:e7:71:2a:b8:54:f3:eb:bf:2e:f5:26:8a:98: ee:85:4b:02:ac:2d:88:60:63:7f:5f:d2:5d:9f:ba:f8:0d:de: 6c:9b:e4:5c:c1:57:2c:fd:c5:d9:3b:b1:bf:b3:4e:00:e3:ab: 92:ff:80:2e:69:b9:13:1f:42:eb:1a:77:11:63:30:86:3b:af: 46:51:fa:df:da:e4:38:01:84:85:29:75:c8:24:ee:a7:aa:7b: 75:68:ff:d1:6c:0a:6a:45:96:e0:c3:a7:0a:7e:6b:12:c4:36: d7:92:2b:35:f1:72:21:82:18:a9:5e:a7:5c:32:e7:4f:71:06: a4:aa:18:b4:fc:7c:f2:9c:0b:0d:24:1c:fe:7b:7e:d4:92:e4: 0a:ff:bf:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjYwMTI1MDEyODMxWhcNMjYwMjAxMDEyODMxWjAYMRYwFAYD VQQDDA02OTc1NzFiZi00ODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIJFAp39Q5YXkvP1nYKZEeEX6Br73hxUuoCIHZh5ZSTRLadpFWH7XTLCiFa9 o2TX5HiFjkUfBALRTipebT13JhYlYDU626axg7rWYrqh8Xg7Je9Tn3cDLTBeXowr qVi/Zo3JD36w0olyrC2Noe4+Osdrp+jPsf0+Hs025g/yWUiNHZdGH8Ze5nN4hiIs b/uivbfhD6n3d3N/lSMKJYS5bWJhPXZNxO0nnuoXhXLX2S3iHtniDUlpf8MeTRxs LYZSjYzVx0T6Zxclh09cH6byjgnAA4xKxlZWDr9c5xnAlepNZfNablhA93jfVCLT 0OMRjiGBiCxMczsQVXUvkF8tTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC98fIJ/ usOD58+W15NDEsITgrYMMB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzlo WlFOaWxENXRfdmxSdVhkX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC65GJQf1z45G+KIPMRXS7vzJss6r6v/bT2HOEBYUOOIY7O2IgK2Q82 Arkcuof8vIHQ1P0PglTPnSHdcs2n+ZJoHyIfb76Xm9F4QT+176RAJTcTkdVOAIL9 6WcXRWtb8TBhDzZKrOB6oUZojAFZsy03p+dxKrhU8+u/LvUmipjuhUsCrC2IYGN/ X9Jdn7r4Dd5sm+RcwVcs/cXZO7G/s04A46uS/4AuabkTH0LrGncRYzCGO69GUfrf 2uQ4AYSFKXXIJO6nqnt1aP/RbApqRZbgw6cKfmsSxDbXkis18XIhghipXqdcMudP cQakqhi0/HzynAsNJBz+e37UkuQK/7/Y -----END CERTIFICATE-----Generated at Sun Jan 25 20:07:44 2026 by rpki-client