This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft File: hdbxhJPYoIzHKxsJHUr1T48KKLM.mft (raw, json) Hash identifier: olJfK8WvjF2IETbmReG4aga7Ksl8RAL4qs82T2+EA00= Subject key identifier: 3D:53:2D:48:15:BE:1A:02:AE:BF:0D:26:11:56:CA:19:0C:4A:77:50 Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 Certificate issuer: /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Certificate serial: 06DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft Manifest number: 06D0 Signing time: Sat 24 Jan 2026 21:29:54 +0000 Manifest this update: Sat 24 Jan 2026 21:29:54 +0000 Manifest next update: Sat 31 Jan 2026 21:29:54 +0000 Files and hashes: 1: hdbxhJPYoIzHKxsJHUr1T48KKLM.crl (hash: 2IWPd8M2yDCteS0rSMj/EPfEO2iD7z2NzeNAn8N1qc4=) 2: F66F50628A9C11EB9B2E044BC4F9AE02.roa (hash: hWP/crnjmiKRkQxu0624FvYvc5uF2iF9vYd33TXrr/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125225, serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Validity Not Before: Jan 24 21:29:54 2026 GMT Not After : Jan 31 21:29:54 2026 GMT Subject: CN=697539d2-a6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:42:0e:c2:f8:89:f5:72:6e:15:34:ad:dc:50: 37:38:4d:6f:15:47:ea:27:99:ae:4f:7d:dd:0a:42: 66:07:83:ed:40:9e:af:a9:b5:3a:c7:fc:02:e5:16: 61:30:3e:97:fa:e4:ed:ad:3a:ad:11:d3:dc:b4:f3: 9b:ec:26:2c:07:96:7c:13:9c:8e:b1:c4:0a:21:03: 66:50:58:f4:38:29:07:4b:06:60:dc:72:b8:92:d8: 1e:d5:0a:7e:30:57:8c:bc:8f:4c:cb:7f:71:18:6e: ea:63:5e:bf:90:54:42:24:e7:a0:a9:62:55:91:c1: 52:27:0b:1d:ba:b9:05:d4:6e:58:87:02:a5:cb:4f: 0c:d8:4e:fd:eb:6b:ef:73:d8:78:0e:3f:b8:f6:18: b4:c8:72:27:c2:a6:31:d0:53:3f:08:1d:6a:a4:07: 0c:db:f6:fb:b3:e8:8f:75:65:c4:33:29:72:c0:f5: af:67:b4:17:03:94:b8:92:cd:62:55:75:73:97:88: fc:9b:c0:3a:c7:6d:97:8e:f9:6d:ba:29:51:fe:f9: 43:6c:0b:5b:7e:1c:58:1c:27:22:ca:56:b4:78:de: d4:1e:17:ea:59:36:17:f1:78:27:9b:d4:ff:85:38: 48:f6:2a:b6:05:1a:4f:b9:67:b9:9e:56:21:c4:bd: f8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:53:2D:48:15:BE:1A:02:AE:BF:0D:26:11:56:CA:19:0C:4A:77:50 X509v3 Authority Key Identifier: keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:2a:70:8e:10:00:50:6b:1f:50:c4:ee:8c:b8:ad:71:34:23: d6:7d:1c:85:ce:18:29:24:06:49:fb:92:c4:e4:ef:22:db:e5: cf:88:bc:52:19:de:d2:fb:0d:31:10:8b:c7:fb:ff:53:54:43: 0b:aa:bd:4b:16:63:22:89:45:09:2f:32:d3:a5:51:6c:68:b9: 8c:02:2c:4a:68:be:2a:fa:f4:52:a9:34:3b:e7:04:17:d7:07: 58:68:e0:62:ac:a7:2c:a1:60:49:00:27:46:ec:b6:dc:d2:fa: 66:ab:9e:82:fb:37:e7:7d:96:e3:fc:f6:1b:99:ae:fa:04:43: 74:21:39:e5:dc:8b:80:8d:56:88:17:7b:94:95:4a:3b:b4:85: 2c:f1:5e:bf:41:66:60:f4:8f:9b:72:47:e1:70:c4:05:78:c6: ed:5d:b6:f4:35:fd:4f:4c:fe:9b:a5:89:97:05:00:aa:3d:50: 39:68:d8:c7:eb:07:cf:f8:a7:a2:9a:90:0d:2a:e3:0a:b1:0b: 23:94:7a:01:7f:5d:29:4f:58:de:5c:6f:ac:f5:1a:3b:ee:41: d1:12:b9:ec:26:81:d5:0e:ed:6f:f9:84:d8:2e:ff:f8:27:bd: a2:4f:02:c0:96:c3:e0:d2:5a:57:36:37:2b:73:5a:4f:2a:44: d6:0a:89:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyMjUxMTAvBgNVBAUTKDg1RDZGMTg0OTNEOEEwOENDNzJCMUIwOTFENEFGNTRG OEYwQTI4QjMwHhcNMjYwMTI0MjEyOTU0WhcNMjYwMTMxMjEyOTU0WjAYMRYwFAYD VQQDDA02OTc1MzlkMi1hNmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUIOwviJ9XJuFTSt3FA3OE1vFUfqJ5muT33dCkJmB4PtQJ6vqbU6x/wC5RZh MD6X+uTtrTqtEdPctPOb7CYsB5Z8E5yOscQKIQNmUFj0OCkHSwZg3HK4ktge1Qp+ MFeMvI9My39xGG7qY16/kFRCJOegqWJVkcFSJwsdurkF1G5YhwKly08M2E7962vv c9h4Dj+49hi0yHInwqYx0FM/CB1qpAcM2/b7s+iPdWXEMylywPWvZ7QXA5S4ks1i VXVzl4j8m8A6x22XjvltuilR/vlDbAtbfhxYHCciyla0eN7UHhfqWTYX8Xgnm9T/ hThI9iq2BRpPuWe5nlYhxL347QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1TLUgV vhoCrr8NJhFWyhkMSndQMB8GA1UdIwQYMBaAFIXW8YST2KCMxysbCR1K9U+PCiiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTIyNS9DQTY5MDQ0MjhB OUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9JekhLeHNKSFVyMVQ0OEtL TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hkYnhoSlBZb0l6SEt4c0pIVXIxVDQ4S0tMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTIyNS9DQTY5MDQ0MjhBOUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9J ekhLeHNKSFVyMVQ0OEtLTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUKnCOEABQax9QxO6MuK1xNCPWfRyFzhgpJAZJ+5LE5O8i2+XPiLxS Gd7S+w0xEIvH+/9TVEMLqr1LFmMiiUUJLzLTpVFsaLmMAixKaL4q+vRSqTQ75wQX 1wdYaOBirKcsoWBJACdG7Lbc0vpmq56C+zfnfZbj/PYbma76BEN0ITnl3IuAjVaI F3uUlUo7tIUs8V6/QWZg9I+bckfhcMQFeMbtXbb0Nf1PTP6bpYmXBQCqPVA5aNjH 6wfP+KeimpANKuMKsQsjlHoBf10pT1jeXG+s9Ro77kHRErnsJoHVDu1v+YTYLv/4 J72iTwLAlsPg0lpXNjcrc1pPKkTWConG -----END CERTIFICATE-----Generated at Sun Jan 25 02:58:14 2026 by rpki-client