This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft File: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json) Hash identifier: a7pS/hfVwa14FL3DGe51UCtWkLLElqiOeI8RrLWMxjk= Subject key identifier: 42:C2:35:E0:00:C3:B1:96:BF:01:CF:48:3E:7E:C6:4F:77:AD:68:AF Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Certificate serial: 363D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft Manifest number: 35BA Signing time: Sat 24 Jan 2026 14:22:41 +0000 Manifest this update: Sat 24 Jan 2026 14:22:41 +0000 Manifest next update: Sat 31 Jan 2026 14:22:41 +0000 Files and hashes: 1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: NvZ0ca0O9IZsRCzVR4g2IaU9RZwvjAimsaUc/KSGlaI=) 2: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (hash: rAOd8xVKvANxmyBwOeyZF3qLA857c4wVbRSif1s6BJM=) 3: 1A938A72619D11F0B4D0AB3BC4F9AE02.roa (hash: MNI6wSEESEbHrkvuX9WUxP9QninqH4z0ey0y6anlGpE=) 4: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (hash: khYjfuRKyk9d4qvk9tSAFWiSBjcko00fCsRP/3vjlB0=) 5: 3217A18E809711EFB1A3805FC4F9AE02.roa (hash: agkjmUvruNWx97AQQ1tqZMJkgxJIavfnk0MQ7A0ZaCQ=) 6: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: K1247atG6VcquFBVwBls5U4Yo0bOwGwF2rk8wL92RbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13885 (0x363d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Validity Not Before: Jan 24 14:22:41 2026 GMT Not After : Jan 31 14:22:41 2026 GMT Subject: CN=6974d5b1-e8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:fb:ea:69:e7:c9:22:91:3a:97:ff:e0:3d: 7c:45:e0:66:1e:a1:15:48:dd:45:dd:06:cc:1c:c9: 50:53:16:dd:f7:9f:41:67:07:4e:52:46:54:8e:f3: ce:cc:6d:b8:c3:9f:44:cd:eb:ed:19:ef:89:f0:6f: 55:d9:59:b7:e6:63:f2:6b:fd:8a:00:64:32:ce:6b: 13:cb:fa:3c:21:ff:c7:55:32:46:f5:be:e4:79:ba: 5d:f2:58:06:1a:99:06:ce:6d:c0:73:7a:99:3a:e8: f3:5b:c9:67:17:8e:b6:d0:61:c8:52:62:a9:3a:cf: 49:e9:63:95:f9:13:11:45:d0:85:37:ef:62:4c:02: 2d:24:a8:fd:6b:08:ca:e4:ca:01:b1:72:4b:b4:6d: 0f:40:29:90:4d:58:08:f2:9b:0f:7e:76:a3:0f:7c: 2b:38:86:1b:e1:dc:54:49:82:69:f0:ad:70:95:91: 6d:61:ad:dc:ef:50:4b:f1:00:ce:62:d6:b4:22:e4: 66:63:b9:b6:49:be:84:90:50:ad:96:a8:45:52:59: cf:8f:37:f4:aa:03:6c:a5:9f:f3:9b:9c:f2:10:2b: 99:00:8c:8d:47:af:54:83:12:d1:9f:61:e4:91:84: 7b:9d:0d:23:c7:d8:67:5d:0c:71:fb:95:b1:cc:1b: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C2:35:E0:00:C3:B1:96:BF:01:CF:48:3E:7E:C6:4F:77:AD:68:AF X509v3 Authority Key Identifier: keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:62:b6:81:1b:4b:24:36:63:e9:52:74:5b:7e:24:01:a4:08: 02:a8:65:14:b7:d6:12:70:51:c4:dd:11:e3:c8:31:5b:30:9a: a0:8e:66:6b:13:46:0c:a7:76:c5:34:76:d4:b8:ba:87:07:b4: 37:f2:f0:1d:10:90:e4:0e:b1:90:f4:d4:7a:b6:54:06:9b:5c: a9:22:c8:46:89:f6:51:14:a0:03:43:65:26:ba:4e:a3:83:8f: 21:66:8b:4f:f9:d9:29:2f:24:1d:b9:cb:e0:00:9c:17:81:ee: ff:be:d2:2b:36:28:1c:d9:a1:14:8e:d6:a0:d2:8c:9a:db:10: 6a:e4:b5:03:15:02:3d:63:18:2a:cd:f4:21:19:55:cd:41:a3: 12:71:b3:3f:b1:8f:9b:aa:83:93:75:43:d2:2a:37:da:c6:20: f0:a4:90:04:d0:4e:8b:d1:1d:83:46:af:18:56:16:4d:61:61: 60:7d:6d:0e:12:bc:9b:90:6b:df:f5:99:c9:1b:07:f0:0b:73: af:93:3e:9a:a7:46:7c:d6:77:5b:59:0a:86:b8:79:59:3d:d0: bb:15:7d:27:6d:b6:65:87:03:1b:65:f9:62:25:8e:8e:88:b1: 33:95:46:90:57:f0:d1:84:83:64:76:2f:96:35:c4:8b:54:6d: 7c:99:66:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE Q0E0RkM3RDYwHhcNMjYwMTI0MTQyMjQxWhcNMjYwMTMxMTQyMjQxWjAYMRYwFAYD VQQDDA02OTc0ZDViMS1lOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Cb76mnnySKROpf/4D18ReBmHqEVSN1F3QbMHMlQUxbd959BZwdOUkZUjvPO zG24w59EzevtGe+J8G9V2Vm35mPya/2KAGQyzmsTy/o8If/HVTJG9b7kebpd8lgG GpkGzm3Ac3qZOujzW8lnF4620GHIUmKpOs9J6WOV+RMRRdCFN+9iTAItJKj9awjK 5MoBsXJLtG0PQCmQTVgI8psPfnajD3wrOIYb4dxUSYJp8K1wlZFtYa3c71BL8QDO Yta0IuRmY7m2Sb6EkFCtlqhFUlnPjzf0qgNspZ/zm5zyECuZAIyNR69UgxLRn2Hk kYR7nQ0jx9hnXQxx+5WxzBtqmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELCNeAA w7GWvwHPSD5+xk93rWivMB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy9CQkM1NEJBNDFEODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNY Yk9CRm1sXzNDY1hjcFB4OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQYraBG0skNmPpUnRbfiQBpAgCqGUUt9YScFHE3RHjyDFbMJqgjmZr E0YMp3bFNHbUuLqHB7Q38vAdEJDkDrGQ9NR6tlQGm1ypIshGifZRFKADQ2Umuk6j g48hZotP+dkpLyQducvgAJwXge7/vtIrNigc2aEUjtag0oya2xBq5LUDFQI9Yxgq zfQhGVXNQaMScbM/sY+bqoOTdUPSKjfaxiDwpJAE0E6L0R2DRq8YVhZNYWFgfW0O ErybkGvf9ZnJGwfwC3Ovkz6ap0Z81ndbWQqGuHlZPdC7FX0nbbZlhwMbZfliJY6O iLEzlUaQV/DRhINkdi+WNcSLVG18mWYK -----END CERTIFICATE-----Generated at Sun Jan 25 09:12:01 2026 by rpki-client