This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: 0ZlWggX8RsG6Tc8+apmHmU3kSzojssLmBnU0cmBZHec= Subject key identifier: 7A:8A:0C:E8:8B:5F:D2:7F:6A:6F:5B:78:84:39:66:C8:87:19:10:BD Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 0250 Signing time: Sun 25 Jan 2026 01:01:50 +0000 Manifest this update: Sun 25 Jan 2026 01:01:50 +0000 Manifest next update: Sun 01 Feb 2026 01:01:50 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: jMXoYdCU8y29MeAucPdIL8Ef3obkQQcaAaeimI3uB6o=) 2: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: Wfvfr2TcXK8GaYBk6TcgT40LA+vft8v/fIkCfEZiAtI=) 3: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: Qm/uP0v0KOpxXquMmcS+mddexxWvKWu3VeqMUjZFEHw=) 4: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: oLmM9IiHDteQZvnIijCD+XLj74Lvz+EsxXE5OHIoWDg=) 5: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: bF9VY2BgbzFHTYog2mqnErYgbMHKat53WtoeKiEWwU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: Jan 25 01:01:50 2026 GMT Not After : Feb 1 01:01:50 2026 GMT Subject: CN=69756b7e-c9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:77:1c:80:08:b2:20:f4:99:d6:90:cc:73:fa: 26:7f:1b:f8:df:8a:83:f9:5d:90:e1:61:28:e1:62: 1a:c3:0d:2a:75:05:a3:50:6a:a4:5a:30:a8:9a:91: 25:23:5b:73:07:9d:74:d9:c6:22:b5:1b:d5:4a:98: 46:0d:2a:6d:80:8f:89:06:c9:14:62:2e:03:83:ec: ac:7a:a0:36:ba:51:7e:e5:e8:8b:29:ec:9d:a3:5f: 65:27:f3:de:76:cb:ae:ac:ee:75:de:43:b1:01:46: 3e:9d:0a:a6:f9:0b:b7:fb:a4:0d:34:3b:cd:7a:57: 45:bb:78:ec:f8:8f:a4:bd:f6:60:5e:f6:74:79:81: 5e:bc:b1:d4:f7:82:4a:b3:b1:94:09:5b:07:19:d0: 18:1a:6c:6c:a9:f6:db:4a:b4:23:bf:d5:f8:86:0e: 2f:84:ea:8d:60:26:16:e8:c6:cb:e8:8c:9d:d6:90: 36:4c:d0:04:a7:48:77:7a:13:fe:37:13:0b:ed:72: 98:ac:bd:d6:be:d5:f2:50:09:41:71:29:eb:db:8e: a7:38:66:34:ca:d3:3d:ad:dc:7f:a9:87:16:03:4a: c9:9b:b1:00:59:8b:37:c6:95:fc:bf:6c:ea:f4:3f: 79:b3:42:a1:bb:04:c8:9c:53:11:57:51:f3:3b:41: ec:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8A:0C:E8:8B:5F:D2:7F:6A:6F:5B:78:84:39:66:C8:87:19:10:BD X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:38:38:29:c6:cf:55:dd:bf:29:bc:5a:d0:48:69:ab:05:dc: 71:27:71:66:1a:02:b8:11:de:ca:9c:08:fd:64:9e:5e:8e:6e: 1a:33:91:db:9c:24:25:2a:f5:93:91:8c:da:e0:79:f2:52:15: 4b:e3:f1:1f:2e:ec:9f:14:d5:30:4e:34:d1:bf:e9:42:a3:aa: dc:9f:d9:61:cf:28:9d:17:f7:32:e1:e5:1d:6d:48:96:07:18: a4:93:ec:36:40:c6:2d:74:8d:6b:4f:89:ac:08:ec:5d:a3:6f: 8d:03:02:bb:dc:7e:e7:01:ef:f9:6f:52:5f:73:86:0d:94:ec: 7b:05:b0:75:e5:67:64:82:a1:72:e6:12:11:e8:7f:d7:0d:11: 75:d1:7a:dd:b8:3d:41:a6:a0:4d:e0:9a:62:77:fe:c6:48:36: 30:c0:a2:66:07:b8:e3:46:c0:57:64:79:b0:32:61:f4:ef:74: ee:6e:40:36:c5:cb:f2:fa:43:b1:d7:b0:92:05:e7:86:3c:1d: 03:7c:8d:1e:c0:1b:8c:9d:25:f7:9e:7e:ce:ae:3e:c3:59:cf: a7:a4:e3:cd:54:46:98:df:5e:13:89:cf:8b:4f:b3:7b:19:4c: 82:5a:66:7a:19:26:2d:6d:3c:d0:a9:c6:98:57:67:03:47:40: d7:3a:0e:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjYwMTI1MDEwMTUwWhcNMjYwMjAxMDEwMTUwWjAYMRYwFAYD VQQDDA02OTc1NmI3ZS1jOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nccgAiyIPSZ1pDMc/omfxv434qD+V2Q4WEo4WIaww0qdQWjUGqkWjCompEl I1tzB5102cYitRvVSphGDSptgI+JBskUYi4Dg+yseqA2ulF+5eiLKeydo19lJ/Pe dsuurO513kOxAUY+nQqm+Qu3+6QNNDvNeldFu3js+I+kvfZgXvZ0eYFevLHU94JK s7GUCVsHGdAYGmxsqfbbSrQjv9X4hg4vhOqNYCYW6MbL6Iyd1pA2TNAEp0h3ehP+ NxML7XKYrL3WvtXyUAlBcSnr246nOGY0ytM9rdx/qYcWA0rJm7EAWYs3xpX8v2zq 9D95s0KhuwTInFMRV1HzO0HsMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqKDOiL X9J/am9beIQ5ZsiHGRC9MB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKODgpxs9V3b8pvFrQSGmrBdxxJ3FmGgK4Ed7KnAj9ZJ5ejm4aM5Hb nCQlKvWTkYza4HnyUhVL4/EfLuyfFNUwTjTRv+lCo6rcn9lhzyidF/cy4eUdbUiW Bxikk+w2QMYtdI1rT4msCOxdo2+NAwK73H7nAe/5b1Jfc4YNlOx7BbB15WdkgqFy 5hIR6H/XDRF10XrduD1BpqBN4Jpid/7GSDYwwKJmB7jjRsBXZHmwMmH073TubkA2 xcvy+kOx17CSBeeGPB0DfI0ewBuMnSX3nn7Orj7DWc+npOPNVEaY314Tic+LT7N7 GUyCWmZ6GSYtbTzQqcaYV2cDR0DXOg5J -----END CERTIFICATE-----Generated at Sun Jan 25 09:22:29 2026 by rpki-client