This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft File: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json) Hash identifier: GzviRr+MuUbBTUZUM0p9IT+nOVxawN4zlODNFDqRMyI= Subject key identifier: E6:D5:C7:4D:29:05:07:38:D7:76:C5:4F:67:6B:E3:59:3C:F1:AC:8B Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Certificate serial: 09C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft Manifest number: 09A0 Signing time: Sat 24 Jan 2026 19:28:59 +0000 Manifest this update: Sat 24 Jan 2026 19:28:58 +0000 Manifest next update: Sat 31 Jan 2026 19:28:58 +0000 Files and hashes: 1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: UyrzqXt/uEXUix7kiO7aR1KI+YKnzCDMH2j9QzH/yHg=) 2: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: jIPkDEf13TMiFg2C0rBtFKVkCQXwsHcdNzopb74LLvA=) 3: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: kkd/CbtVIoWblEY1duaDls2Uy2Uyf0EyvNKyp/C3IM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2497 (0x9c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Validity Not Before: Jan 24 19:28:58 2026 GMT Not After : Jan 31 19:28:58 2026 GMT Subject: CN=69751d7a-e587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d8:2d:60:7d:42:f3:fc:21:40:29:1c:f9:44: 13:3f:9f:a6:12:2a:61:a1:2f:c6:94:1f:09:45:5c: f9:08:f5:c0:e7:30:9e:ab:3a:77:a3:6a:b5:25:52: 3e:b7:0d:64:83:aa:d2:e1:02:68:19:3a:39:c0:4b: 09:b3:ee:2d:2e:d7:e5:49:52:b1:71:e8:55:75:03: 01:d6:32:33:c6:58:30:7f:fb:ea:80:8f:f0:5c:b7: c7:d7:f3:48:fb:05:b1:58:84:b8:45:6b:7d:46:02: 38:3a:73:ab:c4:fe:14:cf:5c:cd:0d:38:83:b6:be: 47:d5:5c:a4:4c:ae:84:cd:02:9c:33:3a:02:85:1f: 64:d4:47:5c:6e:49:28:60:b2:dd:7d:9c:d7:ae:a2: 27:f3:60:10:71:2c:99:9e:84:45:08:e0:02:2f:73: f7:23:b7:91:3a:88:6c:57:8e:e3:65:bc:6c:7b:3c: 20:17:15:4f:ba:26:a0:7c:0f:fd:a3:9f:46:25:46: 08:8d:55:1b:6c:c1:4d:56:52:6d:4c:ba:c2:26:24: 62:c5:86:03:fa:45:69:fc:43:ba:3a:52:12:cd:a3: 84:eb:df:ca:c4:0b:61:84:13:d1:9f:50:70:1b:03: 68:1d:6b:14:f8:c6:d8:20:56:8f:71:e3:19:c5:09: a5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D5:C7:4D:29:05:07:38:D7:76:C5:4F:67:6B:E3:59:3C:F1:AC:8B X509v3 Authority Key Identifier: keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:24:5b:b8:ca:63:05:ec:bb:f6:3b:74:10:6f:90:60:d6:22: 74:a6:11:a4:97:86:8f:af:b4:10:0a:88:d9:69:8f:20:19:e2: a9:f0:33:36:b0:56:5c:28:53:0b:c5:fa:d4:81:50:8f:cd:a8: ee:fb:e4:4b:ab:c3:5b:b2:7d:41:6b:9e:69:fe:0f:97:98:4a: ca:fd:44:cd:4e:bc:76:c5:19:54:96:d0:e5:be:13:1a:0c:4a: 8b:ff:69:21:df:12:1a:32:cc:2a:a3:a0:4e:39:57:1e:e1:ff: 0b:e0:b7:9d:1d:87:19:d5:dc:c2:97:37:c0:aa:9c:58:03:2f: cb:0d:90:67:ea:12:b1:af:3f:3a:cd:ea:93:0b:ef:1a:fd:0a: f4:a2:99:f8:61:27:23:24:fd:d0:3a:a0:1f:17:83:86:b0:d5: c9:8c:1b:0b:c0:69:22:a9:51:7f:ea:3a:bc:ba:12:1c:07:54: dc:a8:49:4a:ef:41:5a:bb:91:0d:31:79:5f:35:76:80:ca:92: 59:e2:6f:94:2c:46:54:1e:37:a2:84:15:7a:a3:a7:fc:77:46: 9e:61:8b:b5:52:c2:a2:d4:42:72:85:04:75:4e:ea:23:59:57: 10:b1:00:35:e3:96:0c:1c:87:45:21:1b:af:b6:c0:9d:2a:de: 5e:fb:25:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThEMEYxMTAvBgNVBAUTKDQzRTFFOEM0MjYxQ0UwN0Q0RjhFNENGQjdBM0Y4MzNG QkI0NkI4OEMwHhcNMjYwMTI0MTkyODU4WhcNMjYwMTMxMTkyODU4WjAYMRYwFAYD VQQDDA02OTc1MWQ3YS1lNTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdgtYH1C8/whQCkc+UQTP5+mEiphoS/GlB8JRVz5CPXA5zCeqzp3o2q1JVI+ tw1kg6rS4QJoGTo5wEsJs+4tLtflSVKxcehVdQMB1jIzxlgwf/vqgI/wXLfH1/NI +wWxWIS4RWt9RgI4OnOrxP4Uz1zNDTiDtr5H1VykTK6EzQKcMzoChR9k1Edcbkko YLLdfZzXrqIn82AQcSyZnoRFCOACL3P3I7eROohsV47jZbxsezwgFxVPuiagfA/9 o59GJUYIjVUbbMFNVlJtTLrCJiRixYYD+kVp/EO6OlISzaOE69/KxAthhBPRn1Bw GwNoHWsU+MbYIFaPceMZxQmlGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObVx00p BQc413bFT2dr41k88ayLMB8GA1UdIwQYMBaAFEPh6MQmHOB9T45M+3o/gz+7RriM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEQwRi83RDIyNzNCNEE2 NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRIMVBqa3o3ZWotRFA3dEd1 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtSG94Q1ljNEgxUGprejdlai1EUDd0R3VJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEQwRi83RDIyNzNCNEE2NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRI MVBqa3o3ZWotRFA3dEd1SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEJFu4ymMF7Lv2O3QQb5Bg1iJ0phGkl4aPr7QQCojZaY8gGeKp8DM2 sFZcKFMLxfrUgVCPzaju++RLq8Nbsn1Ba55p/g+XmErK/UTNTrx2xRlUltDlvhMa DEqL/2kh3xIaMswqo6BOOVce4f8L4LedHYcZ1dzClzfAqpxYAy/LDZBn6hKxrz86 zeqTC+8a/Qr0opn4YScjJP3QOqAfF4OGsNXJjBsLwGkiqVF/6jq8uhIcB1TcqElK 70Fau5ENMXlfNXaAypJZ4m+ULEZUHjeihBV6o6f8d0aeYYu1UsKi1EJyhQR1Tuoj WVcQsQA145YMHIdFIRuvtsCdKt5e+yXx -----END CERTIFICATE-----Generated at Sun Jan 25 08:01:08 2026 by rpki-client