This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: AMvXSegq6RG/bb582LXYooGFiN8LwN8BiTGFxWfd8UE= Subject key identifier: F0:82:5A:72:EE:E2:9A:89:37:E6:07:BC:14:F8:D9:DA:C0:6F:C2:70 Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0EA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0E80 Signing time: Sat 24 Jan 2026 17:24:37 +0000 Manifest this update: Sat 24 Jan 2026 17:24:36 +0000 Manifest next update: Sat 31 Jan 2026 17:24:36 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: 4kpdWBcV6abTbUpKRXpYb8dyAP738mEWh1MIcbiIHYM=) 2: 670DF186232111EB9896B783C4F9AE02.roa (hash: QRv08V7HqtcB3bHnZdM9X+W4jlFsB6z2SpL2l3Cbxgo=) 3: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: qtVktuatmgxYDOUKpmx9+4mvFE8ErGGHadU2rZXHHOI=) 4: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: lbAPfcc0myVwdYbEISgNYKY5g+qS8g/HzTgMPDxOCGE=) 5: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: 6vTa2jFZRIl18mXvmJhTh/HGMJaVZWt9h8uikA4SPmc=) 6: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: rV1Z8AbpTv1d+o44R7LlYsk8JevP6flWo0s81DQ5Rok=) 7: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: 1hlPRZQBD73jEyWKbHC8ZRWrArjylE9If913X/Jb57A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3752 (0xea8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: Jan 24 17:24:36 2026 GMT Not After : Jan 31 17:24:36 2026 GMT Subject: CN=69750055-6414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:49:49:4d:4b:61:df:b0:84:ee:48:97:78:59: 30:54:bb:bf:21:a7:98:98:07:b6:8b:74:5b:88:c3: 49:ce:d1:f4:be:d9:41:1f:d0:8c:47:48:c1:0c:df: c0:62:e6:4e:65:8c:45:25:05:ab:a5:58:9f:40:bf: 0f:97:00:57:c6:e2:f9:1e:cf:db:e7:63:18:cb:98: 33:87:66:41:11:c8:da:1a:67:41:50:18:8d:2c:c4: fc:96:c1:bd:a7:cb:f3:eb:f9:03:3c:b1:d8:cf:95: 5c:a0:0c:1b:18:a0:8b:f5:1d:31:5c:37:be:5b:ec: fb:9a:b6:a4:5d:c7:f0:03:97:87:f4:96:a6:ac:80: ea:0d:58:00:dc:72:fd:b8:05:be:62:ff:a1:b0:a1: 63:bd:72:cb:88:15:b1:94:8a:e4:d6:a0:62:6c:79: b8:c6:77:ae:e5:f8:30:a5:5d:09:82:ce:34:5f:b2: cf:26:f8:4c:1c:c8:b0:d2:d9:45:c8:70:89:eb:20: e1:10:14:00:45:70:ec:a8:3f:39:2a:cc:78:ae:54: d8:e0:dc:38:ce:fc:28:b7:32:de:b3:c3:f7:5b:8a: d9:b7:c7:fa:e5:95:5e:8e:b9:98:08:fe:92:00:00: 46:4d:ed:62:10:2a:a5:86:3d:eb:8d:78:a6:9f:01: c1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:82:5A:72:EE:E2:9A:89:37:E6:07:BC:14:F8:D9:DA:C0:6F:C2:70 X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:31:9a:72:0e:c8:41:39:8b:23:38:8d:57:0e:18:3d:78:ea: 68:f8:1a:51:3c:19:e6:12:ec:a8:07:f7:37:4e:2b:4e:95:51: d8:aa:93:c3:12:1d:77:f1:0f:d9:60:01:2f:6a:4d:bc:1c:52: c3:8a:f2:01:df:50:f2:ee:ee:1d:9a:1d:72:4c:89:fd:b2:97: 17:d7:1c:54:b2:ee:cd:99:4c:75:6b:38:47:f9:06:1a:29:6e: f6:2e:5f:1a:e5:5d:59:af:aa:9a:48:77:bc:91:23:91:da:59: eb:80:98:c5:2c:b7:e9:13:90:d7:30:72:18:8b:58:ae:33:95: 18:75:34:7e:1a:05:ab:e6:32:1c:5b:21:11:ca:2f:40:3d:78: e0:0b:0f:ec:5a:3e:53:fa:93:e4:66:a6:19:2a:ac:49:31:b1: c9:97:6c:1e:3f:86:94:ae:a1:ef:b5:b6:64:7d:14:f9:1f:c4: c2:02:04:61:70:93:aa:da:54:d4:18:87:35:c3:96:f6:e6:bd: 9e:0c:c0:78:21:f9:1b:1a:90:76:81:13:5d:e4:e7:dd:37:5f: 0f:7a:30:6a:13:8d:92:3e:d3:d2:8c:cd:05:56:89:ae:c9:ad: 5c:6e:02:f3:51:72:af:6f:7b:d8:c2:2b:33:c9:95:73:a4:bc: 88:d8:af:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjYwMTI0MTcyNDM2WhcNMjYwMTMxMTcyNDM2WjAYMRYwFAYD VQQDDA02OTc1MDA1NS02NDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9UlJTUth37CE7kiXeFkwVLu/IaeYmAe2i3RbiMNJztH0vtlBH9CMR0jBDN/A YuZOZYxFJQWrpVifQL8PlwBXxuL5Hs/b52MYy5gzh2ZBEcjaGmdBUBiNLMT8lsG9 p8vz6/kDPLHYz5VcoAwbGKCL9R0xXDe+W+z7mrakXcfwA5eH9JamrIDqDVgA3HL9 uAW+Yv+hsKFjvXLLiBWxlIrk1qBibHm4xneu5fgwpV0Jgs40X7LPJvhMHMiw0tlF yHCJ6yDhEBQARXDsqD85Ksx4rlTY4Nw4zvwotzLes8P3W4rZt8f65ZVejrmYCP6S AABGTe1iECqlhj3rjXimnwHBIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCCWnLu 4pqJN+YHvBT42drAb8JwMB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxMZpyDshBOYsjOI1XDhg9eOpo+BpRPBnmEuyoB/c3TitOlVHYqpPD Eh138Q/ZYAEvak28HFLDivIB31Dy7u4dmh1yTIn9spcX1xxUsu7NmUx1azhH+QYa KW72Ll8a5V1Zr6qaSHe8kSOR2lnrgJjFLLfpE5DXMHIYi1iuM5UYdTR+GgWr5jIc WyERyi9APXjgCw/sWj5T+pPkZqYZKqxJMbHJl2weP4aUrqHvtbZkfRT5H8TCAgRh cJOq2lTUGIc1w5b25r2eDMB4IfkbGpB2gRNd5OfdN18PejBqE42SPtPSjM0FVomu ya1cbgLzUXKvb3vYwiszyZVzpLyI2K/g -----END CERTIFICATE-----Generated at Sun Jan 25 15:34:10 2026 by rpki-client