This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft File: khdBhFmoypIuDWajy6pAZyDLSJA.mft (raw, json) Hash identifier: QDgMgen1hMpdJTMhIDKIV3Lcf1Vb4i+A0jPFDDM6xcw= Subject key identifier: D6:CF:04:53:04:5C:95:99:26:10:82:4D:81:A6:00:F2:F7:7B:33:9D Authority key identifier: 92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90 Certificate issuer: /CN=A9137B39/serialNumber=9217418459A8CA922E0D66A3CBAA406720CB4890 Certificate serial: 041E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft Manifest number: 0414 Signing time: Sat 24 Jan 2026 23:39:08 +0000 Manifest this update: Sat 24 Jan 2026 23:39:07 +0000 Manifest next update: Sat 31 Jan 2026 23:39:07 +0000 Files and hashes: 1: khdBhFmoypIuDWajy6pAZyDLSJA.crl (hash: esX7UC2l58flmgTbPoxxIIPbcj0F2pidQrR5+F8fpj8=) 2: EA8F3FAE6F8611F0BA25F244C4F9AE02.roa (hash: 1Pf8TzmStlNv8sOjb51A77gXMYXTgCciVVvajyk1hsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.crl rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1054 (0x41e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137B39, serialNumber=9217418459A8CA922E0D66A3CBAA406720CB4890 Validity Not Before: Jan 24 23:39:07 2026 GMT Not After : Jan 31 23:39:07 2026 GMT Subject: CN=6975581c-c952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:38:a4:34:a3:ae:e2:a6:9b:83:cb:0a:da: 53:e7:12:0f:0d:e7:d5:05:06:d7:88:42:4b:ab:d0: 09:21:1e:93:d2:a9:3c:8b:6a:3c:a0:05:67:52:09: 87:a5:b0:66:6d:ab:9f:a6:f3:01:f3:9a:04:a2:e1: 90:9a:3b:4c:41:1d:a6:37:30:95:aa:7a:cc:19:c4: ef:b3:42:95:f8:a6:ee:13:e4:f7:0e:66:9c:7b:0d: f9:a8:be:89:d6:72:77:15:8e:25:4f:37:58:03:73: ef:86:a1:5d:30:d1:a5:b9:99:3c:2e:6e:b0:bb:f2: 2e:06:88:40:70:85:0b:59:38:ef:31:af:78:52:f3: 1b:54:cc:4b:cd:b7:8a:14:3c:7a:ce:b5:a2:25:c9: 51:43:5c:37:65:75:f2:f6:a1:1e:f1:56:f3:58:b3: 3c:a1:08:8b:61:c3:43:ba:01:0b:c5:c7:a6:19:27: 52:d5:e0:db:8f:a6:0a:31:66:99:c8:16:c2:da:44: 09:14:36:ce:4a:c5:64:da:3f:62:c0:be:bb:50:9d: b7:2b:ad:3a:83:05:49:ec:f4:e4:f2:1e:ee:33:f1: da:d3:91:08:73:2e:63:9b:3d:fc:67:81:8b:c5:19: fb:fd:9e:f0:c3:df:fc:fa:b7:bb:95:2d:e1:a0:eb: 30:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CF:04:53:04:5C:95:99:26:10:82:4D:81:A6:00:F2:F7:7B:33:9D X509v3 Authority Key Identifier: keyid:92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:42:ab:14:9e:35:b4:7b:ed:5d:e1:1e:39:f7:1b:db:2f:07: 1f:42:a0:ea:93:87:21:a2:24:d5:15:4b:65:11:38:9f:f6:ec: 85:37:e9:55:70:80:f6:5e:9d:c3:73:29:2e:c1:45:f6:a9:df: dc:ab:b3:44:3b:ae:8b:41:a9:d1:a1:1c:44:47:a1:81:5c:fd: 77:fc:6e:bf:6e:1b:2e:1a:37:9e:06:88:b2:f3:1a:7a:0d:55: 00:6b:b0:bc:30:98:df:58:f4:8c:9a:ab:61:50:b5:94:fe:1c: 81:3a:87:69:62:54:94:2b:ce:0e:15:79:9f:fe:78:95:3e:b2: 28:9e:86:08:1d:b7:99:50:5e:98:a4:1a:f4:e7:26:5d:85:bb: 3b:bc:50:fb:14:91:76:02:09:db:34:48:5c:3e:96:1c:fa:8e: a1:d2:80:56:6c:0d:e3:a5:9e:aa:be:15:da:b9:3b:1a:96:c7: 2a:a8:16:bf:59:8d:62:71:ce:50:06:51:0f:6d:16:49:b9:ff: ea:b5:d4:16:93:de:83:4b:ed:07:c6:14:d6:cc:a8:56:83:f0: 14:6c:15:b6:0d:bb:1d:cb:9a:2e:e7:34:83:e3:ea:00:40:aa: 20:4d:9a:02:8f:59:0f:ca:61:e9:77:bb:60:25:70:cb:a8:1a: ac:57:9c:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdCMzkxMTAvBgNVBAUTKDkyMTc0MTg0NTlBOENBOTIyRTBENjZBM0NCQUE0MDY3 MjBDQjQ4OTAwHhcNMjYwMTI0MjMzOTA3WhcNMjYwMTMxMjMzOTA3WjAYMRYwFAYD VQQDDA02OTc1NTgxYy1jOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDw4pDSjruKmm4PLCtpT5xIPDefVBQbXiEJLq9AJIR6T0qk8i2o8oAVnUgmH pbBmbaufpvMB85oEouGQmjtMQR2mNzCVqnrMGcTvs0KV+KbuE+T3Dmacew35qL6J 1nJ3FY4lTzdYA3PvhqFdMNGluZk8Lm6wu/IuBohAcIULWTjvMa94UvMbVMxLzbeK FDx6zrWiJclRQ1w3ZXXy9qEe8VbzWLM8oQiLYcNDugELxcemGSdS1eDbj6YKMWaZ yBbC2kQJFDbOSsVk2j9iwL67UJ23K606gwVJ7PTk8h7uM/Ha05EIcy5jmz38Z4GL xRn7/Z7ww9/8+re7lS3hoOswZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbPBFME XJWZJhCCTYGmAPL3ezOdMB8GA1UdIwQYMBaAFJIXQYRZqMqSLg1mo8uqQGcgy0iQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0IzOS9BNzU5OUQ3QUEw MzUxMUVDODIyNTVEM0FDNEY5QUUwMi9raGRCaEZtb3lwSXVEV2FqeTZwQVp5RExT SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toZEJoRm1veXBJdURXYWp5NnBBWnlETFNKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0IzOS9BNzU5OUQ3QUEwMzUxMUVDODIyNTVEM0FDNEY5QUUwMi9raGRCaEZtb3lw SXVEV2FqeTZwQVp5RExTSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArQqsUnjW0e+1d4R459xvbLwcfQqDqk4choiTVFUtlETif9uyFN+lV cID2Xp3DcykuwUX2qd/cq7NEO66LQanRoRxER6GBXP13/G6/bhsuGjeeBoiy8xp6 DVUAa7C8MJjfWPSMmqthULWU/hyBOodpYlSUK84OFXmf/niVPrIonoYIHbeZUF6Y pBr05yZdhbs7vFD7FJF2AgnbNEhcPpYc+o6h0oBWbA3jpZ6qvhXauTsalscqqBa/ WY1icc5QBlEPbRZJuf/qtdQWk96DS+0HxhTWzKhWg/AUbBW2Dbsdy5ou5zSD4+oA QKogTZoCj1kPymHpd7tgJXDLqBqsV5xx -----END CERTIFICATE-----Generated at Sun Jan 25 02:51:33 2026 by rpki-client