This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft File: 9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft (raw, json) Hash identifier: zlAiQPUAexr8kafEUcuOxLZATbQlpjD//QKK13TSrHI= Subject key identifier: C0:FD:BE:AC:39:C9:34:58:6A:8B:6C:7A:0E:7B:AB:53:B2:71:5D:0E Authority key identifier: F5:03:B9:65:59:5C:A9:DA:41:88:E4:D9:FD:72:C0:3F:E1:D6:F6:8C Certificate issuer: /CN=A9136067/serialNumber=F503B965595CA9DA4188E4D9FD72C03FE1D6F68C Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft Manifest number: 17 Signing time: Fri 23 Jan 2026 06:56:43 +0000 Manifest this update: Fri 23 Jan 2026 06:56:42 +0000 Manifest next update: Fri 30 Jan 2026 06:56:42 +0000 Files and hashes: 1: 9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl (hash: cVivtuelypGs47a6xUOfv3dy1bXz4Jfc1Oij/7GlDXY=) 2: 2812D988D68111F09571D1A368D3641D.roa (hash: 8AVBXqzu/k5TWiZVCIiuuT3LvFSHmugATjSSQTnC014=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136067, serialNumber=F503B965595CA9DA4188E4D9FD72C03FE1D6F68C Validity Not Before: Jan 23 06:56:42 2026 GMT Not After : Jan 30 06:56:42 2026 GMT Subject: CN=69731bab-8eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:24:fd:16:70:3b:1f:d4:2c:7d:18:f8:91: 48:c4:65:8c:7d:79:bf:bb:85:8b:f2:52:ca:ff:79: 4a:fe:a6:f7:41:2c:41:bc:27:22:62:be:af:2f:c6: b3:49:f7:ef:7f:08:04:35:c0:db:d7:5b:f8:d7:29: 3c:9c:27:0a:87:a9:72:f0:52:02:66:57:b4:05:64: f1:6e:2f:8e:8e:c2:77:a8:1d:b1:83:44:7e:78:cd: a6:ed:d9:61:6f:56:a3:30:76:21:f9:3d:08:6b:da: 84:cd:5e:4e:8f:57:c8:a6:a1:96:df:a8:62:9d:5d: d1:cb:0b:16:8d:e7:67:94:ac:8f:c3:6b:4f:d0:ad: cf:d9:98:e6:4d:50:b0:c8:5b:dd:01:bc:62:b7:2e: 65:1e:5f:6f:d4:2e:ed:bd:2e:0a:97:02:d0:4a:2b: 3a:e3:9c:c1:84:e5:82:cb:0e:4c:de:8a:f4:e9:6e: 11:7b:03:17:e3:9f:39:51:26:dd:27:0b:12:8a:b3: ba:b0:c4:cd:7c:b0:38:d9:4a:9f:d4:e7:64:90:0f: 88:77:c5:53:7f:38:99:d4:ef:8b:20:b0:13:48:d9: 7d:7f:a0:49:01:0c:68:02:24:38:cd:1a:29:b8:92: 8b:bd:21:c8:47:d6:19:9b:b9:3d:dc:46:f8:89:86: d1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FD:BE:AC:39:C9:34:58:6A:8B:6C:7A:0E:7B:AB:53:B2:71:5D:0E X509v3 Authority Key Identifier: keyid:F5:03:B9:65:59:5C:A9:DA:41:88:E4:D9:FD:72:C0:3F:E1:D6:F6:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ef:eb:ad:2e:13:2a:4e:b8:91:7a:20:a9:0a:69:90:cc:a1:0f: cf:4d:24:08:07:5d:0d:0d:96:af:13:7c:82:ec:0b:63:73:12: c4:67:79:1e:43:4a:a7:00:6a:2b:d1:c5:1e:5b:ad:a3:e9:3d: e6:b1:df:f7:09:7c:0d:d0:0f:87:51:ce:6e:8f:1d:b5:b3:4c: 36:26:95:54:ce:25:7e:88:1c:43:27:41:0f:18:0f:8c:15:77: fa:54:36:11:8c:33:0e:4f:2f:da:3f:49:7f:fe:7b:68:1b:ec: 4d:9c:2e:86:89:73:15:6d:7f:59:57:4e:8a:16:d3:54:22:e7: 44:99:35:da:b9:87:1b:82:6b:b4:db:fe:e2:46:f0:93:af:c8: 7f:28:54:a4:a2:0b:2e:33:d0:b1:e6:d2:af:3b:a3:d5:72:eb: e3:12:c1:83:45:ef:6f:f8:23:d4:42:21:59:7e:73:38:89:80: 7d:1c:97:1b:ea:28:81:fa:0b:bb:97:2a:3f:c2:68:30:1e:87: c6:1b:52:80:0a:8b:34:1a:a4:15:ef:b5:fa:3e:e0:24:15:06: 9a:36:64:6f:07:a5:02:f4:3f:06:c6:b6:ee:25:6b:5d:1a:68: 53:e8:5b:22:56:f8:c7:32:f2:77:e9:97:96:28:d1:fe:20:fb: c7:cc:11:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjA2NzExMC8GA1UEBRMoRjUwM0I5NjU1OTVDQTlEQTQxODhFNEQ5RkQ3MkMwM0ZF MUQ2RjY4QzAeFw0yNjAxMjMwNjU2NDJaFw0yNjAxMzAwNjU2NDJaMBgxFjAUBgNV BAMMDTY5NzMxYmFiLThlYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8GCT9FnA7H9QsfRj4kUjEZYx9eb+7hYvyUsr/eUr+pvdBLEG8JyJivq8vxrNJ 9+9/CAQ1wNvXW/jXKTycJwqHqXLwUgJmV7QFZPFuL46OwneoHbGDRH54zabt2WFv VqMwdiH5PQhr2oTNXk6PV8imoZbfqGKdXdHLCxaN52eUrI/Da0/Qrc/ZmOZNULDI W90BvGK3LmUeX2/ULu29LgqXAtBKKzrjnMGE5YLLDkzeivTpbhF7AxfjnzlRJt0n CxKKs7qwxM18sDjZSp/U52SQD4h3xVN/OJnU74sgsBNI2X1/oEkBDGgCJDjNGim4 kou9IchH1hmbuT3cRviJhtGJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwP2+rDnJ NFhqi2x6DnurU7JxXQ4wHwYDVR0jBBgwFoAU9QO5ZVlcqdpBiOTZ/XLAP+HW9oww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MDY3LzM4N0VENzhDRDY4 MDExRjBCMUI0QzdBMDY3RDM2NDFELzlRTzVaVmxjcWRwQmlPVFpfWExBUC1IVzlv dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOVFPNVpWbGNxZHBCaU9UWl9YTEFQLUhXOW93LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MDY3LzM4N0VENzhDRDY4MDExRjBCMUI0QzdBMDY3RDM2NDFELzlRTzVaVmxjcWRw QmlPVFpfWExBUC1IVzlvdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAO/rrS4TKk64kXogqQppkMyhD89NJAgHXQ0Nlq8TfILsC2NzEsRneR5D SqcAaivRxR5braPpPeax3/cJfA3QD4dRzm6PHbWzTDYmlVTOJX6IHEMnQQ8YD4wV d/pUNhGMMw5PL9o/SX/+e2gb7E2cLoaJcxVtf1lXTooW01Qi50SZNdq5hxuCa7Tb /uJG8JOvyH8oVKSiCy4z0LHm0q87o9Vy6+MSwYNF72/4I9RCIVl+cziJgH0clxvq KIH6C7uXKj/CaDAeh8YbUoAKizQapBXvtfo+4CQVBpo2ZG8HpQL0PwbGtu4la10a aFPoWyJW+Mcy8nfpl5Yo0f4g+8fMERk= -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:35 2026 by rpki-client