This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft File: 8R9XbWsM2yqpLc-dTncyc2DVV2c.mft (raw, json) Hash identifier: TGFceUQyBk99HP/V18v71+dwceu7uWNhbYkHb79fm/Y= Subject key identifier: 60:F0:D8:A7:6C:92:5D:F5:21:C5:D4:E7:DF:B8:3C:EF:5A:4F:40:FE Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 Certificate issuer: /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft Manifest number: 0123 Signing time: Sun 25 Jan 2026 03:57:53 +0000 Manifest this update: Sun 25 Jan 2026 03:57:53 +0000 Manifest next update: Sun 01 Feb 2026 03:57:53 +0000 Files and hashes: 1: 8R9XbWsM2yqpLc-dTncyc2DVV2c.crl (hash: dZ3yT2RmPStEhIWLIJpwMn+8CXiqwimcpJCzXWpPLGA=) 2: 52D8EF7A426911EF97319666C4F9AE02.roa (hash: rNoN9qQu8LQ3m6mpRD2sIdAYAMWn+KDz+Z0MyLwHYpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EF4D, serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Validity Not Before: Jan 25 03:57:53 2026 GMT Not After : Feb 1 03:57:53 2026 GMT Subject: CN=697594c1-ad36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:99:17:21:73:55:72:cb:57:90:4f:bd:57:78: f5:cc:06:a4:82:e5:36:b4:9c:d7:e9:b2:56:b8:fe: d4:fb:5a:86:c8:cc:da:6f:7d:d0:7c:46:2a:86:85: e8:d0:ec:e0:67:99:4a:ce:66:24:93:45:8e:56:5a: 3b:9b:ed:cf:8c:b2:94:0b:e8:92:10:57:68:9a:02: 0e:e2:14:bf:81:af:15:e0:34:a2:4d:f1:22:98:2f: 94:92:09:2a:2c:58:2b:bd:74:6a:7a:b5:0f:74:85: 8b:43:3d:42:ed:f0:52:da:1f:9e:7d:c1:2b:98:a3: 84:98:2b:0e:30:f6:e2:f9:40:72:c5:5d:09:55:45: 8f:27:6f:3b:86:50:a5:1d:63:eb:41:61:4c:2f:be: fb:42:00:ac:25:f0:dd:21:46:b4:09:39:76:ae:29: 0a:48:d3:71:f2:22:a9:8e:9b:e6:c0:44:de:91:94: cf:c1:ed:08:38:de:0f:14:05:61:c6:7f:88:98:88: 1e:28:8b:54:0c:1f:d1:47:c1:8e:5d:ec:3a:19:17: 7f:35:55:04:27:cf:ef:f2:85:39:5d:14:62:5e:67: 0a:29:57:d0:56:8e:ac:49:3a:86:0d:29:8d:c6:63: 56:fb:02:d5:3f:23:29:df:d7:8c:cf:5f:89:6c:e5: 2e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F0:D8:A7:6C:92:5D:F5:21:C5:D4:E7:DF:B8:3C:EF:5A:4F:40:FE X509v3 Authority Key Identifier: keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:8a:3b:24:37:03:de:18:25:36:c3:14:93:a3:a2:b4:88:cc: 6f:21:4d:7f:fd:af:2c:bf:c5:9d:58:d1:7b:cc:71:0f:b2:35: 84:c4:57:2a:ff:51:1b:cb:30:a4:5f:cc:e1:05:57:2d:38:b3: 10:8d:26:3a:8a:a0:4e:b9:3d:93:ee:5f:11:93:83:f0:92:65: b1:cc:c5:43:59:38:9f:0a:3b:1c:f8:17:6e:d5:d4:2a:33:53: 6c:52:da:25:f3:25:db:86:45:06:a8:df:c3:ca:ba:6d:a0:99: df:73:51:bb:12:87:40:e9:72:1d:12:d7:96:fc:47:d1:97:eb: 7c:3b:88:f4:36:5a:cc:8c:3c:d8:10:24:c9:20:8d:ac:63:7d: 3f:80:84:a0:5a:6c:de:d5:e9:81:5a:53:07:f5:42:88:ce:8e: 05:64:3e:a5:b2:00:30:c8:68:e4:67:99:fd:66:b9:24:9d:04: d2:56:dc:90:62:d6:8d:18:48:eb:ae:45:57:72:34:7a:57:9e: a7:d8:de:ac:f5:53:af:f5:e6:37:7e:e2:0c:66:48:03:69:fa: 90:c6:f5:a2:47:52:91:c1:47:d4:57:bf:8a:e0:37:54:82:37: a2:38:e5:61:5d:c5:09:c5:7d:d1:4c:10:b7:a9:29:75:ef:42: e5:bc:c1:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVGNEQxMTAvBgNVBAUTKEYxMUY1NzZENkIwQ0RCMkFBOTJEQ0Y5RDRFNzczMjcz NjBENTU3NjcwHhcNMjYwMTI1MDM1NzUzWhcNMjYwMjAxMDM1NzUzWjAYMRYwFAYD VQQDDA02OTc1OTRjMS1hZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZkXIXNVcstXkE+9V3j1zAakguU2tJzX6bJWuP7U+1qGyMzab33QfEYqhoXo 0OzgZ5lKzmYkk0WOVlo7m+3PjLKUC+iSEFdomgIO4hS/ga8V4DSiTfEimC+Ukgkq LFgrvXRqerUPdIWLQz1C7fBS2h+efcErmKOEmCsOMPbi+UByxV0JVUWPJ287hlCl HWPrQWFML777QgCsJfDdIUa0CTl2rikKSNNx8iKpjpvmwETekZTPwe0ION4PFAVh xn+ImIgeKItUDB/RR8GOXew6GRd/NVUEJ8/v8oU5XRRiXmcKKVfQVo6sSTqGDSmN xmNW+wLVPyMp39eMz1+JbOUuMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDw2Kds kl31IcXU59+4PO9aT0D+MB8GA1UdIwQYMBaAFPEfV21rDNsqqS3PnU53MnNg1Vdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUY0RC9GRjY3OEM3MjNG RDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5cXBMYy1kVG5jeWMyRFZW MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOVhiV3NNMnlxcExjLWRUbmN5YzJEVlYyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUY0RC9GRjY3OEM3MjNGRDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5 cXBMYy1kVG5jeWMyRFZWMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmijskNwPeGCU2wxSTo6K0iMxvIU1//a8sv8WdWNF7zHEPsjWExFcq /1EbyzCkX8zhBVctOLMQjSY6iqBOuT2T7l8Rk4PwkmWxzMVDWTifCjsc+Bdu1dQq M1NsUtol8yXbhkUGqN/DyrptoJnfc1G7EodA6XIdEteW/EfRl+t8O4j0NlrMjDzY ECTJII2sY30/gISgWmze1emBWlMH9UKIzo4FZD6lsgAwyGjkZ5n9ZrkknQTSVtyQ YtaNGEjrrkVXcjR6V56n2N6s9VOv9eY3fuIMZkgDafqQxvWiR1KRwUfUV7+K4DdU gjeiOOVhXcUJxX3RTBC3qSl170LlvMEQ -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:22 2026 by rpki-client