This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: Xnaz75kPk6vneA4yJhCaRhIL7hMqhTN1CR471lLMp0g= Subject key identifier: 1F:24:2D:02:7E:AB:8D:44:5B:B2:51:26:12:F7:13:30:97:93:66:34 Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 01AD Signing time: Sun 25 Jan 2026 02:31:48 +0000 Manifest this update: Sun 25 Jan 2026 02:31:47 +0000 Manifest next update: Sun 01 Feb 2026 02:31:47 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: ZTi9lzA/P8gNcD1EMIlHu4VXpXwKM58EuV0ZHZk2q6U=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: OgtSGJ5OXdScPeyQQLIa+zffj6S5x6FMffLKFbYg9qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Jan 25 02:31:47 2026 GMT Not After : Feb 1 02:31:47 2026 GMT Subject: CN=69758094-66a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:96:39:c1:db:b9:23:2c:42:7d:39:b9:4f: 67:4e:12:8d:77:95:95:0b:6d:66:e6:61:50:aa:50: 51:69:35:ae:58:46:62:6d:8e:2f:aa:ad:f2:43:f5: b0:a1:65:81:5e:62:80:2b:4e:a7:f6:15:60:02:ab: fe:23:61:3e:af:b1:e9:15:54:67:49:18:0b:f6:dd: 40:b6:f2:30:90:33:fc:45:fe:f2:fc:30:a1:c4:b4: 5a:cc:36:13:1d:c1:cf:e5:2f:05:00:ed:f5:61:2c: 4f:66:f1:1a:d5:e5:fa:8c:97:25:8c:5b:94:2e:a0: 30:2e:60:a4:7c:aa:89:70:f1:62:e0:2d:af:a6:18: e5:1c:d8:98:8c:ef:3d:27:b2:ff:f5:5a:72:be:27: b3:26:88:11:94:83:65:9b:77:37:b2:47:ba:bf:02: cc:be:89:38:a7:96:30:87:9d:aa:04:c0:47:07:3b: a7:90:82:c6:a6:4f:39:9b:ea:93:43:c8:df:ea:a1: 4e:16:ad:ff:e9:e1:c6:61:6b:e9:d3:09:13:90:64: 3b:bf:75:34:47:cf:0c:f3:2d:86:6b:37:f8:94:b1: 4c:bc:9d:23:04:c2:c4:4c:76:26:51:53:1c:9a:9f: ec:d9:3d:89:43:43:10:c3:83:94:bd:64:0d:b4:88: 3c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:24:2D:02:7E:AB:8D:44:5B:B2:51:26:12:F7:13:30:97:93:66:34 X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:29:71:b5:16:cf:e3:5f:f3:39:e7:27:a9:0c:04:d8:92:8e: 5a:17:23:db:de:fe:52:cf:92:f9:4e:83:71:57:c7:c4:f0:ba: 1c:21:e7:c4:4e:07:42:31:f3:b1:65:3f:74:7f:5e:9e:10:66: 01:9b:cb:7e:62:1f:90:08:5c:23:26:41:a1:42:a1:52:d0:89: ff:3f:1c:03:c2:3d:a2:94:d8:73:b5:9d:0a:f5:41:c7:a2:a5: c7:52:87:5f:8c:4e:1d:75:66:bc:3a:b8:05:5f:1d:58:6a:eb: 9a:40:8f:6e:9e:ad:78:23:59:a7:cb:ba:b5:de:9f:8f:30:19: 9e:bd:d7:17:ab:66:38:a2:7f:36:fc:22:be:84:84:4e:08:c5: de:da:7b:6f:a2:97:3c:a4:a3:87:50:5e:78:05:b4:c9:46:f8: b3:90:a1:51:e9:fa:c4:8e:87:76:35:2a:f7:23:b2:ff:7b:be: e9:1b:ed:bb:aa:71:4b:68:59:83:18:55:a3:cf:c4:99:be:f5: 66:98:08:34:1c:99:aa:78:ee:b3:eb:c1:9f:44:c3:3e:47:91: 88:20:ac:94:65:58:f5:41:c7:37:98:03:14:b7:d7:d4:93:fd: 80:66:ad:db:61:f4:03:c5:75:0e:c9:3f:63:83:60:ec:51:62: b9:e5:2b:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjYwMTI1MDIzMTQ3WhcNMjYwMjAxMDIzMTQ3WjAYMRYwFAYD VQQDDA02OTc1ODA5NC02NmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvOWOcHbuSMsQn05uU9nThKNd5WVC21m5mFQqlBRaTWuWEZibY4vqq3yQ/Ww oWWBXmKAK06n9hVgAqv+I2E+r7HpFVRnSRgL9t1AtvIwkDP8Rf7y/DChxLRazDYT HcHP5S8FAO31YSxPZvEa1eX6jJcljFuULqAwLmCkfKqJcPFi4C2vphjlHNiYjO89 J7L/9VpyviezJogRlINlm3c3ske6vwLMvok4p5Ywh52qBMBHBzunkILGpk85m+qT Q8jf6qFOFq3/6eHGYWvp0wkTkGQ7v3U0R88M8y2Gazf4lLFMvJ0jBMLETHYmUVMc mp/s2T2JQ0MQw4OUvWQNtIg8lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8kLQJ+ q41EW7JRJhL3EzCXk2Y0MB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKKXG1Fs/jX/M55yepDATYko5aFyPb3v5Sz5L5ToNxV8fE8LocIefE TgdCMfOxZT90f16eEGYBm8t+Yh+QCFwjJkGhQqFS0In/PxwDwj2ilNhztZ0K9UHH oqXHUodfjE4ddWa8OrgFXx1YauuaQI9unq14I1mny7q13p+PMBmevdcXq2Y4on82 /CK+hIROCMXe2ntvopc8pKOHUF54BbTJRvizkKFR6frEjod2NSr3I7L/e77pG+27 qnFLaFmDGFWjz8SZvvVmmAg0HJmqeO6z68GfRMM+R5GIIKyUZVj1Qcc3mAMUt9fU k/2AZq3bYfQDxXUOyT9jg2DsUWK55Su6 -----END CERTIFICATE-----Generated at Sun Jan 25 04:33:43 2026 by rpki-client