This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json) Hash identifier: ZxH6pnpbf7A8sw83ah9WxiPTmIZTCzwxkX/YAO40DeQ= Subject key identifier: 22:08:7A:1E:A4:90:62:36:4E:79:0E:EA:B6:3D:B0:AD:69:8B:3E:B2 Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2BAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft Manifest number: 2B5D Signing time: Sat 24 Jan 2026 15:24:38 +0000 Manifest this update: Sat 24 Jan 2026 15:24:37 +0000 Manifest next update: Sat 31 Jan 2026 15:24:37 +0000 Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: lnl8/nPY3dnZ5MC8AOps0OoyoVcJyOiY6dn9zT8v1gU=) 2: BB799DA8844011F09054B049C4F9AE02.roa (hash: W+leA70SicgPxg1HjMlJr7Zrh6NlHpRsyqndp8PDjQA=) 3: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: i7ok5KOsj6nhLRt3px2zv2fWTxSsfow5HHXSl/NaJkA=) 4: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: g7V5MfQocCOi5DNnPKV2LsDx3/nhzxmFo0S20ShJreI=) 5: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: JLW0Prm9Fl8iTEviHWr3LwTg8esGoIHQVhl3vbDV8g4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11178 (0x2baa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: Jan 24 15:24:37 2026 GMT Not After : Jan 31 15:24:37 2026 GMT Subject: CN=6974e435-c6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:9a:1c:1f:e8:74:c9:7d:19:69:38:41:15: ed:21:d8:af:1a:e1:a6:49:4e:9b:71:81:a3:c2:59: b4:19:3e:b8:df:5a:1c:1a:ce:40:08:57:3d:36:20: ee:75:9f:eb:67:ce:d3:e6:e1:92:bf:bd:33:14:f0: 34:41:cd:04:26:77:76:6e:30:2f:21:1b:a5:1d:3e: a4:24:7f:af:30:34:c8:bf:57:2a:21:78:22:22:f0: 6e:fc:43:0b:f4:8a:bd:10:f8:19:30:ad:03:1b:82: 57:2a:ee:a2:dd:14:0d:c1:61:7e:c9:d5:51:81:41: 4d:47:ba:66:07:9d:35:75:6d:b1:08:0a:fd:5d:b8: ca:35:7f:e7:38:7f:9d:e3:03:98:82:69:d5:42:8e: 06:22:db:4f:ef:70:57:73:e7:23:52:84:a2:84:cd: 84:50:87:fe:4a:a8:6c:e4:df:bb:9f:1b:ff:07:c6: 30:b0:83:3f:8b:7f:64:c0:19:81:99:19:d3:f6:e2: 34:62:eb:d6:72:57:76:be:11:28:bb:07:3e:34:1a: fd:0b:ce:f7:a9:a5:de:39:bb:76:ed:53:61:9b:b7: a1:ee:44:65:cf:21:1e:45:53:62:6a:4a:b5:ed:67: 79:3c:ad:6c:99:0f:c3:7c:3c:fc:eb:ad:92:cd:2c: d7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:08:7A:1E:A4:90:62:36:4E:79:0E:EA:B6:3D:B0:AD:69:8B:3E:B2 X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:44:2a:80:3d:46:aa:1c:8a:ed:0d:99:31:28:2e:b6:b5:44: fd:2d:a9:ab:7a:22:b8:e1:7f:3e:34:55:63:b6:99:71:4b:ff: f7:06:23:94:3b:ee:6c:6b:73:65:04:df:2a:61:d2:69:0f:3c: ff:e0:2c:95:19:c6:84:5b:87:d4:d0:ed:97:ff:03:aa:9a:ea: 74:b1:39:e5:02:5e:6f:9c:52:80:a6:2a:56:f6:1c:00:a3:78: 1b:00:b6:40:49:56:9b:5b:68:f8:0a:53:ac:35:52:2f:ea:e5: c4:cb:de:64:5b:b6:7b:a6:3d:a2:b5:be:e0:0e:6d:ab:ad:8e: 7d:32:0f:cf:a3:de:8d:95:c5:55:c2:0f:83:e5:42:e5:69:2d: a9:47:5e:62:c1:e9:6a:ef:7e:22:c4:5d:7a:0b:dd:20:cb:98: 4f:6b:21:be:e0:92:6c:57:cd:9a:a8:c5:47:73:ce:dc:45:b6: 87:03:5a:4b:74:cd:2c:db:21:00:b8:1d:dd:45:e7:76:b4:ee: 9d:27:13:61:fa:79:9e:13:40:a5:8b:97:4e:ff:bf:88:0f:8d: bc:20:da:1d:ad:07:31:96:de:ae:40:6c:37:82:7f:33:87:75: d6:f1:d0:35:2b:6f:bd:1e:61:bb:e5:df:b4:ed:c1:d9:14:c1: 06:fa:e2:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjYwMTI0MTUyNDM3WhcNMjYwMTMxMTUyNDM3WjAYMRYwFAYD VQQDDA02OTc0ZTQzNS1jNmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmmaHB/odMl9GWk4QRXtIdivGuGmSU6bcYGjwlm0GT6431ocGs5ACFc9NiDu dZ/rZ87T5uGSv70zFPA0Qc0EJnd2bjAvIRulHT6kJH+vMDTIv1cqIXgiIvBu/EML 9Iq9EPgZMK0DG4JXKu6i3RQNwWF+ydVRgUFNR7pmB501dW2xCAr9XbjKNX/nOH+d 4wOYgmnVQo4GIttP73BXc+cjUoSihM2EUIf+Sqhs5N+7nxv/B8YwsIM/i39kwBmB mRnT9uI0YuvWcld2vhEouwc+NBr9C873qaXeObt27VNhm7eh7kRlzyEeRVNiakq1 7Wd5PK1smQ/DfDz8662SzSzX9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIIeh6k kGI2TnkO6rY9sK1piz6yMB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkVDNS8yREVDQUU1NjBFNTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNK bDFYeENLdEROUGR5eS1vT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkRCqAPUaqHIrtDZkxKC62tUT9LamreiK44X8+NFVjtplxS//3BiOU O+5sa3NlBN8qYdJpDzz/4CyVGcaEW4fU0O2X/wOqmup0sTnlAl5vnFKApipW9hwA o3gbALZASVabW2j4ClOsNVIv6uXEy95kW7Z7pj2itb7gDm2rrY59Mg/Po96NlcVV wg+D5ULlaS2pR15iwelq734ixF16C90gy5hPayG+4JJsV82aqMVHc87cRbaHA1pL dM0s2yEAuB3dRed2tO6dJxNh+nmeE0Cli5dO/7+ID428INodrQcxlt6uQGw3gn8z h3XW8dA1K2+9HmG75d+07cHZFMEG+uL8 -----END CERTIFICATE-----Generated at Sun Jan 25 03:01:31 2026 by rpki-client