This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft File: 0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft (raw, json) Hash identifier: lFVWhPa7Pj6odasoNb//P8vYSQwkBMrQT0e4IuHizt0= Subject key identifier: 54:F4:22:B6:45:B8:87:DA:67:94:97:94:66:54:AD:95:4F:4B:77:57 Authority key identifier: D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93 Certificate issuer: /CN=A9132667/serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft Manifest number: 2A Signing time: Fri 23 Jan 2026 06:40:50 +0000 Manifest this update: Fri 23 Jan 2026 06:40:49 +0000 Manifest next update: Fri 30 Jan 2026 06:40:49 +0000 Files and hashes: 1: 0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl (hash: 6RuPX68iq37gFOZmalZgfLZ35pTO8Qb8qPGrswnsFG8=) 2: 4FFB27E2BDBE11F0999C417DC4F9AE02.roa (hash: QTRHzthcKTfHq7lMpoI6Y/zfK2lWpwoDu2JMPtFs/1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132667, serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93 Validity Not Before: Jan 23 06:40:49 2026 GMT Not After : Jan 30 06:40:49 2026 GMT Subject: CN=697317f1-ff23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:df:a9:81:f5:70:6f:93:f3:78:a2:f6:57: e4:d4:46:c2:87:ae:f1:ae:a8:1c:77:e6:79:52:f9: 8d:13:b0:3c:84:17:7b:d8:6b:89:54:1e:71:8d:e9: 34:2a:4c:8d:45:47:54:3d:59:44:ab:bd:e2:ae:fb: 84:c6:9a:1d:8f:bb:30:f8:bd:5c:50:01:13:32:93: 80:cd:8a:7c:94:bd:53:04:61:d2:11:d3:80:9d:df: b6:16:e9:4c:8e:b8:9e:6c:19:92:13:72:23:52:96: 5d:a0:9e:65:11:9c:d7:25:1d:32:32:94:2e:3c:33: 06:f5:96:49:8f:bd:13:27:07:0a:84:70:63:86:a2: 9d:8a:08:35:d4:a7:93:d5:cf:01:06:07:36:4c:b6: c7:35:b5:da:c9:5b:42:3f:2a:77:e3:d5:7a:39:de: ba:0b:e6:b1:7c:9f:f6:76:0b:fb:d8:6d:bc:ec:da: e2:41:e4:9a:fd:5c:fe:9e:e3:7e:6c:37:52:8b:00: 86:dc:17:1c:07:85:9b:ae:95:35:11:0e:66:b7:32: 2c:30:8b:e0:c2:c2:a9:2e:0f:de:e0:46:3a:61:fa: 86:33:a3:6b:8f:82:14:a7:a9:77:7d:be:c1:62:60: 25:46:2a:8b:d3:33:69:d8:ee:d7:86:a7:fd:c4:ff: 59:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F4:22:B6:45:B8:87:DA:67:94:97:94:66:54:AD:95:4F:4B:77:57 X509v3 Authority Key Identifier: keyid:D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:63:90:27:1c:82:d8:a0:2a:2d:b2:f4:fa:cb:4a:75:1a:7e: 7a:46:40:f5:62:4a:1e:6e:30:ec:49:c5:f6:bd:93:7d:0b:fd: 94:62:c0:af:94:b1:36:98:a3:0e:a3:0a:ac:21:fe:b5:4f:0c: f8:38:c8:43:88:a7:7a:3e:fa:05:26:1b:eb:c1:18:32:f7:8f: 75:4b:9b:67:9c:71:68:c5:88:18:07:d9:a0:98:86:03:38:15: ca:7c:30:c5:cc:cf:ce:3c:30:62:80:24:ff:c9:91:6b:bb:80: 14:7f:f9:ab:2f:e9:68:25:30:12:3a:4f:7f:0d:84:14:30:bd: 1d:f1:56:75:38:b3:e2:39:a3:f3:2e:be:1b:54:6f:be:0f:6a: 48:2d:7a:a5:de:86:7d:0d:40:4b:81:d6:77:e3:d3:6d:c2:cd: 7f:c5:ad:e4:7e:ab:1e:0f:e0:e4:62:5a:d2:da:bf:f3:71:5e: 4f:66:13:09:a4:3c:7e:f0:a1:be:00:8a:e3:86:ce:36:cf:19: 30:88:fd:5a:c4:51:09:e6:fb:56:c7:55:b5:20:f6:44:f7:cb: 01:8a:a6:0c:08:90:86:c3:8f:fa:11:70:14:1b:b7:ae:5c:37: 9d:51:e4:7a:94:79:8b:b2:b7:7f:06:dc:94:0f:f2:0d:9b:ea: 7b:26:f1:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MjY2NzExMC8GA1UEBRMoRDBGNjM4QzVCOThBRThBRkNENkNFRTA1MDM4MjQxOTc0 MDlDM0U5MzAeFw0yNjAxMjMwNjQwNDlaFw0yNjAxMzAwNjQwNDlaMBgxFjAUBgNV BAMMDTY5NzMxN2YxLWZmMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6U9+pgfVwb5PzeKL2V+TURsKHrvGuqBx35nlS+Y0TsDyEF3vYa4lUHnGN6TQq TI1FR1Q9WUSrveKu+4TGmh2PuzD4vVxQARMyk4DNinyUvVMEYdIR04Cd37YW6UyO uJ5sGZITciNSll2gnmURnNclHTIylC48Mwb1lkmPvRMnBwqEcGOGop2KCDXUp5PV zwEGBzZMtsc1tdrJW0I/Knfj1Xo53roL5rF8n/Z2C/vYbbzs2uJB5Jr9XP6e435s N1KLAIbcFxwHhZuulTURDma3Miwwi+DCwqkuD97gRjph+oYzo2uPghSnqXd9vsFi YCVGKovTM2nY7teGp/3E/1lnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVPQitkW4 h9pnlJeUZlStlU9Ld1cwHwYDVR0jBBgwFoAU0PY4xbmK6K/NbO4FA4JBl0CcPpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNjY3LzkxNTkyQjRBQkI5 QzExRjBBNUEzRDgxNUM0RjlBRTAyLzBQWTR4Ym1LNktfTmJPNEZBNEpCbDBDY1Bw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFBZNHhibUs2S19OYk80RkE0SkJsMENjUHBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy NjY3LzkxNTkyQjRBQkI5QzExRjBBNUEzRDgxNUM0RjlBRTAyLzBQWTR4Ym1LNktf TmJPNEZBNEpCbDBDY1BwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG5jkCccgtigKi2y9PrLSnUafnpGQPViSh5uMOxJxfa9k30L/ZRiwK+U sTaYow6jCqwh/rVPDPg4yEOIp3o++gUmG+vBGDL3j3VLm2eccWjFiBgH2aCYhgM4 Fcp8MMXMz848MGKAJP/JkWu7gBR/+asv6WglMBI6T38NhBQwvR3xVnU4s+I5o/Mu vhtUb74PakgteqXehn0NQEuB1nfj023CzX/FreR+qx4P4ORiWtLav/NxXk9mEwmk PH7wob4AiuOGzjbPGTCI/VrEUQnm+1bHVbUg9kT3ywGKpgwIkIbDj/oRcBQbt65c N51R5HqUeYuyt38G3JQP8g2b6nsm8T4= -----END CERTIFICATE-----Generated at Sun Jan 25 02:54:59 2026 by rpki-client