This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft File: bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft (raw, json) Hash identifier: ILA2sIpAxMYFSMFGGa4LtHyb28I932HuQGWIhMt31y0= Subject key identifier: BE:52:75:4E:FA:E4:70:6C:5E:22:AA:AD:18:23:E4:E6:AD:43:8C:3A Authority key identifier: 6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC Certificate issuer: /CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Certificate serial: 0CB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft Manifest number: 0D46 Signing time: Sat 24 Jan 2026 18:04:55 +0000 Manifest this update: Sat 24 Jan 2026 18:04:55 +0000 Manifest next update: Sat 31 Jan 2026 18:04:55 +0000 Files and hashes: 1: bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl (hash: 9tJSdaTgPCacahClDBUB7cUo6TE1TMqI9g35lR/3XVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3253 (0xcb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119010, serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Validity Not Before: Jan 24 18:04:55 2026 GMT Not After : Jan 31 18:04:55 2026 GMT Subject: CN=697509c7-4c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:cb:b5:3f:1f:a8:a9:66:6a:95:d5:7b:67: ed:e8:fa:0d:79:25:ab:48:67:82:bc:4c:c0:ef:74: 6c:83:d5:fa:32:5c:eb:7d:10:7a:17:39:4a:82:f6: 09:2e:0a:65:1f:46:02:42:2b:5c:d7:d4:dc:bf:5f: 24:21:24:b2:10:1a:63:11:9e:82:88:e3:ac:a8:59: 48:f9:83:60:bf:78:84:79:c7:a8:00:f6:c0:ac:5b: 05:f7:b9:95:ea:a1:42:37:6c:57:e4:6e:54:1b:6e: 33:2f:f7:3d:17:ff:04:53:14:f5:76:3e:fc:3f:ca: f3:f1:db:34:0f:60:70:e4:c8:06:72:1d:be:e8:d5: 5a:28:6c:46:48:0c:54:43:0d:b9:97:45:c6:10:e2: 9e:92:ce:22:16:02:2a:7c:2b:1a:b8:25:6b:20:47: 4b:75:e1:a9:27:ea:fe:e4:0a:5a:8b:3f:6b:a4:46: ca:80:1b:81:89:8d:45:03:fa:e0:e3:c7:cc:13:4d: dd:d4:ca:ce:ba:e7:08:b8:90:db:e9:41:11:a3:99: 16:29:3c:9a:92:57:cd:a7:9c:5d:7c:58:c5:79:c6: 46:18:d0:09:10:c6:08:90:f6:3b:2c:b6:d6:ed:dc: 5c:fa:d9:48:06:68:44:17:37:ed:75:d7:f3:16:3a: 6e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:52:75:4E:FA:E4:70:6C:5E:22:AA:AD:18:23:E4:E6:AD:43:8C:3A X509v3 Authority Key Identifier: keyid:6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:7b:40:d9:ae:63:f9:17:63:12:8d:33:32:22:4f:63:57:7f: b6:ea:de:96:8e:fc:ec:24:df:83:34:ee:5e:98:47:b6:a1:39: 2b:98:64:9a:e1:f7:95:1a:cc:e8:98:f3:a1:34:f3:43:ff:f8: 4f:c6:6b:2c:f2:ff:5e:e4:cf:4f:3c:ea:10:7d:ef:6f:ba:5a: 1c:56:27:6d:d6:36:b5:d8:55:56:1c:42:32:47:5f:64:38:14: 79:5b:87:37:8e:6e:3d:22:5f:20:3c:a3:d4:dd:f9:ec:69:1b: d9:1f:ff:07:01:11:b4:79:9f:67:da:7c:47:a6:f1:a6:c6:34: 9a:9e:44:7a:40:de:fe:12:74:b3:75:75:78:75:9c:3c:e2:6b: ee:5c:9f:64:21:fb:38:b0:3e:d3:70:38:b1:01:ae:8d:58:22: eb:7e:65:3c:b4:6d:11:a9:43:a4:36:df:80:2f:b3:eb:c7:4c: e7:c6:90:e6:c2:08:17:03:86:7e:7a:57:62:6f:bd:19:d2:6d: d6:76:f5:78:44:6c:57:02:6f:4c:0b:5b:e2:a4:4f:dc:76:58: eb:18:84:2a:ca:a1:69:f7:de:e9:f2:05:7b:bc:f4:14:68:6c: dc:ab:ab:85:96:58:b8:7c:90:f0:f1:72:d7:d2:94:32:57:a6: 4c:97:59:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MTkwMTAxMTAvBgNVBAUTKDZDMDVFRUFGM0Y2ODcwNDFENTlBNDlCQTE3MDlCODMw MzJCNzRDREMwHhcNMjYwMTI0MTgwNDU1WhcNMjYwMTMxMTgwNDU1WjAYMRYwFAYD VQQDDA02OTc1MDljNy00YzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMPLtT8fqKlmapXVe2ft6PoNeSWrSGeCvEzA73Rsg9X6MlzrfRB6FzlKgvYJ LgplH0YCQitc19Tcv18kISSyEBpjEZ6CiOOsqFlI+YNgv3iEeceoAPbArFsF97mV 6qFCN2xX5G5UG24zL/c9F/8EUxT1dj78P8rz8ds0D2Bw5MgGch2+6NVaKGxGSAxU Qw25l0XGEOKeks4iFgIqfCsauCVrIEdLdeGpJ+r+5Apaiz9rpEbKgBuBiY1FA/rg 48fME03d1MrOuucIuJDb6UERo5kWKTyaklfNp5xdfFjFecZGGNAJEMYIkPY7LLbW 7dxc+tlIBmhEFzftddfzFjpucQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5SdU76 5HBsXiKqrRgj5OatQ4w6MB8GA1UdIwQYMBaAFGwF7q8/aHBB1ZpJuhcJuDAyt0zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTAxMC82QTdFOTQwQTBD M0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NFSFZta202RndtNE1ESzNU TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBWHVyejlvY0VIVm1rbTZGd200TURLM1ROdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTAxMC82QTdFOTQwQTBDM0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NF SFZta202RndtNE1ESzNUTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDe0DZrmP5F2MSjTMyIk9jV3+26t6WjvzsJN+DNO5emEe2oTkrmGSa 4feVGszomPOhNPND//hPxmss8v9e5M9PPOoQfe9vulocVidt1ja12FVWHEIyR19k OBR5W4c3jm49Il8gPKPU3fnsaRvZH/8HARG0eZ9n2nxHpvGmxjSankR6QN7+EnSz dXV4dZw84mvuXJ9kIfs4sD7TcDixAa6NWCLrfmU8tG0RqUOkNt+AL7Prx0znxpDm wggXA4Z+eldib70Z0m3WdvV4RGxXAm9MC1vipE/cdljrGIQqyqFp997p8gV7vPQU aGzcq6uFlli4fJDw8XLX0pQyV6ZMl1kH -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:17 2026 by rpki-client