This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft File: qo4b42JCQNwzAgR_tBp9TkeAjvg.mft (raw, json) Hash identifier: vpuUFSfz7id6SC19gWX+YiolthyxDdwqkJwI92xrKZQ= Subject key identifier: E8:03:67:A6:7E:39:DB:67:8A:05:F0:41:C2:CE:69:B5:6C:5A:3D:B3 Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 0A01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft Manifest number: 09CC Signing time: Sat 24 Jan 2026 19:29:31 +0000 Manifest this update: Sat 24 Jan 2026 19:29:30 +0000 Manifest next update: Sat 31 Jan 2026 19:29:30 +0000 Files and hashes: 1: qo4b42JCQNwzAgR_tBp9TkeAjvg.crl (hash: zzOkNPfCTSVduJWJB7PjSS58FHtGqdnzS3nmjQ4Sdzw=) 2: C2A410D4ADA011F08E990C1DC4F9AE02.roa (hash: nVgw0WH227rtkmYtH0OHv+U/jPWrOk8pxANV8eFKPGY=) 3: 35E2088CDEDC11F09573FB8A516F56BC.roa (hash: zZU7F7ol6ld1ZhTHop8AaPrXn6MuIkjXXsPXgI1Vux0=) 4: 2E18EB105D0C11EE873B1C2AC4F9AE02.roa (hash: y+1LcMZWVq0sxCzTaWENpdmxk9z32hroZYUL1UHWPKM=) 5: 0FD0ED72DEDF11F085D204E3526F56BC.roa (hash: 8DkUzdP/I30cuE6y9U/AqATYTEceQa8WQHx8JCg9d7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2561 (0xa01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: Jan 24 19:29:30 2026 GMT Not After : Jan 31 19:29:30 2026 GMT Subject: CN=69751d9b-5eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5b:f1:aa:e9:11:bf:78:f9:1c:85:69:d4:f8: aa:0b:47:df:95:d2:8d:01:1a:f3:8e:9a:ea:f4:de: 33:e2:ab:b8:23:6f:2c:ae:44:73:f7:3b:57:46:2b: 64:a8:1d:06:77:9c:c2:e8:fb:60:f1:7e:dc:21:c7: cc:60:17:fd:47:0c:c9:ba:e2:5b:48:bc:37:53:22: 42:89:b5:93:c9:93:ed:c6:0e:ec:5f:fe:fb:96:44: 1b:f8:06:45:50:86:be:58:12:05:b2:85:dd:ca:c9: a4:1f:09:12:db:cd:f0:8d:bf:2b:98:be:1f:81:fd: 9d:54:ff:24:09:ed:70:87:35:36:e1:ac:b9:51:fc: 28:60:b4:92:77:dc:a0:58:49:a0:1a:af:09:7a:d5: 69:6a:28:57:e3:47:c8:8d:0a:b1:db:2c:76:be:f4: bb:33:ee:7f:26:4d:ca:c7:bc:10:d9:5b:db:29:8e: 4d:3d:dd:3f:5a:93:2e:e7:a2:dd:43:96:d9:6d:fa: 20:56:46:80:26:d5:50:b2:8b:a2:fa:c7:fa:00:0e: 54:f9:ca:0e:76:bd:b9:e3:25:45:0d:ef:68:e5:33: 59:32:8b:f9:a7:c1:f6:6a:26:cc:05:94:50:89:06: 19:6e:f8:e4:a7:60:d7:0b:9b:41:da:03:8f:ae:b6: 45:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:03:67:A6:7E:39:DB:67:8A:05:F0:41:C2:CE:69:B5:6C:5A:3D:B3 X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:d6:8a:a4:38:83:5c:b8:0d:43:08:d3:8f:dc:bd:bb:93:ac: 4a:25:03:a4:47:39:bc:f4:45:60:b6:aa:75:db:71:f4:8b:82: b2:f9:e5:9d:ac:1d:05:2d:b0:77:52:41:ac:1b:e0:5e:56:75: 5e:f0:4b:4b:ab:b3:c6:58:97:fb:2e:18:0c:fc:df:39:ac:6c: 8b:20:75:2b:81:a4:7e:64:9c:19:60:72:d4:9b:16:ae:08:8b: 52:99:cf:aa:8a:f9:54:a6:52:ef:30:56:c3:05:1b:fa:ad:ea: f6:50:21:e6:23:21:54:c4:1b:d9:b3:21:5f:d6:ea:c4:86:97: 20:84:e9:1c:7d:ad:a6:64:8a:85:5a:96:74:34:20:de:27:0b: 5f:39:32:8c:0c:96:78:16:39:4b:65:09:07:aa:aa:be:cf:6c: 06:63:ec:c8:54:12:b8:5c:38:85:f1:e9:e6:e7:1e:17:a3:7f: 48:ca:77:01:0a:49:ef:42:6c:13:ec:0f:3b:4e:93:d4:9e:fa: 3b:72:d4:dc:1c:0d:f1:7e:91:2f:61:62:86:56:f8:fc:49:af: 90:0c:92:9c:ac:99:9e:1e:44:50:1a:c2:06:65:28:81:b4:e3: 22:ab:4b:3b:ab:ac:87:ad:e8:e8:ef:06:e4:6d:b5:d0:b4:98: 2b:98:35:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjYwMTI0MTkyOTMwWhcNMjYwMTMxMTkyOTMwWjAYMRYwFAYD VQQDDA02OTc1MWQ5Yi01ZWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFvxqukRv3j5HIVp1PiqC0ffldKNARrzjprq9N4z4qu4I28srkRz9ztXRitk qB0Gd5zC6Ptg8X7cIcfMYBf9RwzJuuJbSLw3UyJCibWTyZPtxg7sX/77lkQb+AZF UIa+WBIFsoXdysmkHwkS283wjb8rmL4fgf2dVP8kCe1whzU24ay5UfwoYLSSd9yg WEmgGq8JetVpaihX40fIjQqx2yx2vvS7M+5/Jk3Kx7wQ2VvbKY5NPd0/WpMu56Ld Q5bZbfogVkaAJtVQsoui+sf6AA5U+coOdr254yVFDe9o5TNZMov5p8H2aibMBZRQ iQYZbvjkp2DXC5tB2gOPrrZFzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgDZ6Z+ OdtnigXwQcLOabVsWj2zMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTUwOS83OUVBNTkxRUE3QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FO d3pBZ1JfdEJwOVRrZUFqdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk1oqkOINcuA1DCNOP3L27k6xKJQOkRzm89EVgtqp123H0i4Ky+eWd rB0FLbB3UkGsG+BeVnVe8EtLq7PGWJf7LhgM/N85rGyLIHUrgaR+ZJwZYHLUmxau CItSmc+qivlUplLvMFbDBRv6rer2UCHmIyFUxBvZsyFf1urEhpcghOkcfa2mZIqF WpZ0NCDeJwtfOTKMDJZ4FjlLZQkHqqq+z2wGY+zIVBK4XDiF8enm5x4Xo39IyncB CknvQmwT7A87TpPUnvo7ctTcHA3xfpEvYWKGVvj8Sa+QDJKcrJmeHkRQGsIGZSiB tOMiq0s7q6yHrejo7wbkbbXQtJgrmDVJ -----END CERTIFICATE-----Generated at Sun Jan 25 06:23:50 2026 by rpki-client