This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft File: 5D3SMzFr8OKboG0g3sJdtMwRbgg.mft (raw, json) Hash identifier: yaYriXKd2Szcha9CDiqs74n1t3Xdkup2J74NRXxiJ7w= Subject key identifier: EA:60:59:46:7D:27:3E:82:16:F1:59:E4:38:08:42:DC:D7:4C:48:04 Authority key identifier: E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 Certificate issuer: /CN=A9120AC1/serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Certificate serial: 0537 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft Manifest number: 052B Signing time: Sat 24 Jan 2026 22:46:08 +0000 Manifest this update: Sat 24 Jan 2026 22:46:08 +0000 Manifest next update: Sat 31 Jan 2026 22:46:08 +0000 Files and hashes: 1: 5D3SMzFr8OKboG0g3sJdtMwRbgg.crl (hash: 18yyzsI6P5kyoDvV/IeKA1W5Dut3znuPtWiQEAl4dPI=) 2: 3A2A80AE3C8311ECA86D031EC4F9AE02.roa (hash: aUDrwRtGsUzrY00Rmj3XgznPDP2fmFZxHTp5GIqGdmE=) 3: 579B33AE886F11F0A02D4009C4F9AE02.roa (hash: YP1QtoS6tJ0tfsbd9mqDdJjDX65W26gYVq3o6iBYRuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1335 (0x537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Validity Not Before: Jan 24 22:46:08 2026 GMT Not After : Jan 31 22:46:08 2026 GMT Subject: CN=69754bb0-e66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:0f:65:d6:ec:29:74:19:87:39:8f:ab:90: ba:36:e8:d6:4c:01:4c:c3:33:70:ad:a0:5b:88:96: ed:0f:bd:40:a6:c5:7c:97:ef:66:98:03:b2:1d:48: 09:4c:c8:39:37:b6:4c:64:46:5f:c8:d4:ea:40:a8: 9f:79:ac:3f:73:a3:1b:2c:cc:88:df:32:57:0a:20: fa:a2:c6:d8:4d:d8:01:19:89:67:61:c6:b3:b5:ab: 72:f9:a3:d9:a8:ec:a2:3e:3c:4b:09:68:b8:a0:60: 5e:b5:5c:a1:0b:96:47:a1:8e:9c:cf:72:2e:a6:a5: 01:2a:d7:96:af:06:35:f8:65:28:fe:2c:f2:3f:36: 66:d3:9c:3c:a8:17:e3:7c:38:94:d6:03:98:09:e0: 86:b0:72:f5:c2:0a:57:b4:48:60:28:18:4e:6f:2d: d1:2e:c7:b0:ce:8a:d3:07:da:33:bb:6e:84:e1:8d: ef:56:8f:6e:ed:d0:11:3f:30:16:74:a6:c4:ad:9b: f9:ab:01:08:c8:69:e1:f9:6f:d9:2a:f2:05:5e:80: 95:bf:f7:1b:55:ff:96:6b:25:ed:7b:6c:0f:35:6b: 6d:5b:34:79:e1:2a:1c:d6:21:e3:15:86:96:8d:05: e6:2e:f6:0b:68:a9:cc:7d:1b:fb:5c:c3:a6:5b:59: b9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:60:59:46:7D:27:3E:82:16:F1:59:E4:38:08:42:DC:D7:4C:48:04 X509v3 Authority Key Identifier: keyid:E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:5d:5e:28:fd:68:bc:ff:31:01:94:69:5b:25:96:39:04:fb: ca:a0:2e:96:df:75:7d:a5:68:a6:cb:a3:d0:e6:8d:7d:b2:cb: 9e:17:66:46:c5:44:53:83:c4:0d:44:82:ce:21:20:1f:80:b8: 85:e2:61:ca:21:4d:43:56:22:d4:12:a8:b3:66:6a:9e:96:d1: be:c9:41:d1:16:45:be:87:77:6f:7b:9f:93:f8:e1:ad:a9:87: b2:e8:20:26:d7:c0:36:fe:fc:9f:a9:a4:7a:b3:51:ef:fa:85: 8e:90:ae:c6:9b:47:6a:1f:b4:ee:20:b4:84:75:ee:56:73:e2: 95:1f:51:c8:bc:6e:11:6c:a1:b0:6d:7e:1c:e2:c7:79:ab:a9: e5:d5:a6:53:93:46:52:8b:61:fe:53:4e:20:b7:51:fa:d3:b6: 1b:2b:ae:45:51:08:d2:f8:cb:e4:a3:dd:c3:53:a4:90:d6:a3: d2:e8:09:cf:5e:7b:03:f7:05:0a:d2:3e:e8:d7:f0:a8:89:9d: 10:89:d5:ea:81:fc:22:46:11:a2:58:61:11:59:b6:e3:91:ed: 4c:b8:0b:0b:7b:83:1e:f8:3b:91:d1:13:03:83:5c:3e:84:34: 16:b1:80:99:5b:d1:86:96:e5:28:73:57:82:c6:0c:55:84:dd: 63:1c:a1:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKEU0M0REMjMzMzE2QkYwRTI5QkEwNkQyMERFQzI1REI0 Q0MxMTZFMDgwHhcNMjYwMTI0MjI0NjA4WhcNMjYwMTMxMjI0NjA4WjAYMRYwFAYD VQQDDA02OTc1NGJiMC1lNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdAPZdbsKXQZhzmPq5C6NujWTAFMwzNwraBbiJbtD71ApsV8l+9mmAOyHUgJ TMg5N7ZMZEZfyNTqQKifeaw/c6MbLMyI3zJXCiD6osbYTdgBGYlnYcaztaty+aPZ qOyiPjxLCWi4oGBetVyhC5ZHoY6cz3IupqUBKteWrwY1+GUo/izyPzZm05w8qBfj fDiU1gOYCeCGsHL1wgpXtEhgKBhOby3RLsewzorTB9ozu26E4Y3vVo9u7dARPzAW dKbErZv5qwEIyGnh+W/ZKvIFXoCVv/cbVf+WayXte2wPNWttWzR54Soc1iHjFYaW jQXmLvYLaKnMfRv7XMOmW1m5kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpgWUZ9 Jz6CFvFZ5DgIQtzXTEgEMB8GA1UdIwQYMBaAFOQ90jMxa/Dim6BtIN7CXbTMEW4I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zRTlBNEFFMDMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhPS2JvRzBnM3NKZHRNd1Ji Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVEM1NNekZyOE9LYm9HMGczc0pkdE13UmJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS8zRTlBNEFFMDMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhP S2JvRzBnM3NKZHRNd1JiZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEXV4o/Wi8/zEBlGlbJZY5BPvKoC6W33V9pWimy6PQ5o19ssueF2ZG xURTg8QNRILOISAfgLiF4mHKIU1DViLUEqizZmqeltG+yUHRFkW+h3dve5+T+OGt qYey6CAm18A2/vyfqaR6s1Hv+oWOkK7Gm0dqH7TuILSEde5Wc+KVH1HIvG4RbKGw bX4c4sd5q6nl1aZTk0ZSi2H+U04gt1H607YbK65FUQjS+Mvko93DU6SQ1qPS6AnP XnsD9wUK0j7o1/CoiZ0QidXqgfwiRhGiWGERWbbjke1MuAsLe4Me+DuR0RMDg1w+ hDQWsYCZW9GGluUoc1eCxgxVhN1jHKF8 -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:01 2026 by rpki-client