This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: 20mlSFdb2GbxVbCoWYlrVdAlR9MoBi47BLOmnwZpWk0= Subject key identifier: 76:A9:C8:30:3C:63:46:CC:1F:BF:9E:7A:B7:97:E4:40:65:7F:8E:61 Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 0190 Signing time: Sun 25 Jan 2026 02:49:25 +0000 Manifest this update: Sun 25 Jan 2026 02:49:24 +0000 Manifest next update: Sun 01 Feb 2026 02:49:24 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: Tg48fwjxGtR+ksdglZIUDHIhfd+GfX3vEQdaODMljxA=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: KPnhqjLLs6yDc2UwZmMfmiNxRsrivufpZvf1sQ6QcZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: Jan 25 02:49:24 2026 GMT Not After : Feb 1 02:49:24 2026 GMT Subject: CN=697584b5-478a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:12:29:88:ff:0f:00:cc:5b:56:d7:bf:64: 80:84:d5:86:06:6e:59:ba:f4:89:ea:78:e0:c4:cd: f9:99:1a:fd:1e:2f:43:57:b1:3d:aa:4c:f3:a8:f8: 09:26:66:b0:ec:d8:fc:1c:9e:1d:4c:eb:0a:d7:13: ad:fe:19:93:12:a4:70:47:cd:07:6d:17:b0:dd:cc: 80:36:bd:1e:17:36:21:82:bc:8a:aa:e9:aa:17:0e: 65:6f:d3:99:66:f0:df:3a:9d:fc:40:3d:7d:3f:33: ed:1a:24:9a:f4:8c:7c:51:93:30:0b:1d:3b:ad:3f: 35:dd:52:be:a9:3a:54:ad:98:58:ea:95:cd:d6:a2: f7:c8:40:7a:98:86:d6:f1:e0:b6:47:e5:f7:71:58: dd:b6:4f:f9:7b:1d:e7:88:f2:eb:d5:90:61:d8:23: 02:90:06:bb:bc:6e:93:a0:7d:7a:b3:fd:5d:9d:ce: 96:cc:18:fc:d5:45:b5:f4:c7:ae:c4:ba:f6:e3:55: 7c:a9:e2:ce:f6:89:82:1c:45:63:dc:02:03:35:b7: 1e:9d:fa:32:9e:30:98:6a:b6:4e:a1:20:22:2b:2a: 31:43:b1:42:97:9f:ff:b7:58:3c:3b:25:f8:af:b8: be:31:c3:ab:11:a5:7c:e6:79:fb:d4:b4:50:b9:28: 97:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A9:C8:30:3C:63:46:CC:1F:BF:9E:7A:B7:97:E4:40:65:7F:8E:61 X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:65:17:65:41:11:a5:10:2b:e7:19:6a:14:91:7e:94:29:32: 4b:fe:67:b3:1a:73:13:d5:b5:01:97:9a:44:de:42:e7:57:bd: 42:4b:d8:7d:3e:be:6d:40:2a:b5:47:fd:72:02:cf:23:b5:06: 52:da:e7:a4:0c:81:35:dd:19:c4:60:6d:f3:63:2a:a7:11:20: 49:91:1d:58:e9:18:ee:8f:46:b5:49:e8:48:d3:e4:83:2f:b3: be:76:b6:74:6d:21:40:3b:e9:4e:a1:d7:b0:e6:ce:1a:c6:6c: 12:72:52:8a:6b:0d:35:96:65:42:da:1a:01:62:9b:32:a1:70: f3:8b:fd:55:14:6c:92:27:60:ac:28:fa:83:74:55:ee:b6:c5: 14:e0:6b:92:ac:0d:5c:7b:6d:e1:90:4f:84:52:18:54:11:5f: 91:f7:ba:0a:64:56:c1:68:42:f7:cb:48:17:0e:4c:5d:67:b1: 71:37:9e:88:e4:77:8c:08:68:a4:d9:1f:c7:0b:4e:89:27:02: 4c:99:3f:1e:37:2e:62:d4:66:4b:bb:a9:b0:35:86:65:22:e6: 52:66:4e:12:1f:91:20:ab:5a:8a:64:72:c7:3d:11:8a:db:fa: b6:cd:97:22:86:ba:c8:97:2a:bb:91:48:84:e5:5b:b5:91:ac: 9c:a1:1b:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjYwMTI1MDI0OTI0WhcNMjYwMjAxMDI0OTI0WjAYMRYwFAYD VQQDDA02OTc1ODRiNS00NzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+sSKYj/DwDMW1bXv2SAhNWGBm5ZuvSJ6njgxM35mRr9Hi9DV7E9qkzzqPgJ Jmaw7Nj8HJ4dTOsK1xOt/hmTEqRwR80HbRew3cyANr0eFzYhgryKqumqFw5lb9OZ ZvDfOp38QD19PzPtGiSa9Ix8UZMwCx07rT813VK+qTpUrZhY6pXN1qL3yEB6mIbW 8eC2R+X3cVjdtk/5ex3niPLr1ZBh2CMCkAa7vG6ToH16s/1dnc6WzBj81UW19Meu xLr241V8qeLO9omCHEVj3AIDNbcenfoynjCYarZOoSAiKyoxQ7FCl5//t1g8OyX4 r7i+McOrEaV85nn71LRQuSiX5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHapyDA8 Y0bMH7+eereX5EBlf45hMB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYZRdlQRGlECvnGWoUkX6UKTJL/mezGnMT1bUBl5pE3kLnV71CS9h9 Pr5tQCq1R/1yAs8jtQZS2uekDIE13RnEYG3zYyqnESBJkR1Y6Rjuj0a1SehI0+SD L7O+drZ0bSFAO+lOodew5s4axmwSclKKaw01lmVC2hoBYpsyoXDzi/1VFGySJ2Cs KPqDdFXutsUU4GuSrA1ce23hkE+EUhhUEV+R97oKZFbBaEL3y0gXDkxdZ7FxN56I 5HeMCGik2R/HC06JJwJMmT8eNy5i1GZLu6mwNYZlIuZSZk4SH5Egq1qKZHLHPRGK 2/q2zZcihrrIlyq7kUiE5Vu1kaycoRs7 -----END CERTIFICATE-----Generated at Sun Jan 25 14:17:59 2026 by rpki-client