This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft File: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft (raw, json) Hash identifier: NnPEJyM93jM4N+ZOwVgwtcMvHfAIX8QY9QlADzZzG6M= Subject key identifier: 1F:11:EC:DF:F3:F2:14:9A:DE:8D:A3:C5:FB:E0:43:30:16:C2:00:42 Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 07B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft Manifest number: 0693 Signing time: Sat 24 Jan 2026 22:21:08 +0000 Manifest this update: Sat 24 Jan 2026 22:21:08 +0000 Manifest next update: Sat 31 Jan 2026 22:21:08 +0000 Files and hashes: 1: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl (hash: DyXtXxFPq0Qp6AoBBAMx2uWk2gZfhcTUODX2pEdizCY=) 2: 17F4DF6E563A11F092DD586EC4F9AE02.roa (hash: nLnWAwdemI13C2q8S/qa+9BJ2323t0M3P0SOVSaJVNw=) 3: 1EB3FE5C924F11EFB20C515DC4F9AE02.roa (hash: MGKfZkUlP4hm8yifkXlXdpMG3M4ujfcWqT10DluRHA4=) 4: 06FAE294924F11EF80B1115DC4F9AE02.roa (hash: mH+1wX3U3E+PwU1lGyk1jq9ZSIZ/eqIJUcTr6f/b6Xg=) 5: 919E2B20E52811ED863E8C34C4F9AE02.roa (hash: F8ptmQqvn/MVqmxAQighlZAvP1w4DOrBw6vmbwzoHtc=) 6: 0D1DD7AAF47B11F086F5439C6E6F56BC.roa (hash: OYd75ja+K/tLv+si7OVpENe2ivFORtftrab4xzKBxsA=) 7: 18DDC828563A11F092DD586EC4F9AE02.roa (hash: bU0MJSXGsqVMy5OCElDKtpTzBkDVUhUuNS+lSfzDOig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1970 (0x7b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Jan 24 22:21:08 2026 GMT Not After : Jan 31 22:21:08 2026 GMT Subject: CN=697545d4-27ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:d0:85:7d:5c:a1:5a:e6:c1:db:59:f6:ff: 4d:0d:95:2c:8d:1b:f9:9d:69:13:e7:88:5b:81:0d: 5d:77:78:04:80:32:88:2f:6e:8b:97:12:55:89:1a: 9c:cd:c3:78:bc:09:76:ec:b1:4c:0a:6f:5b:c5:55: 89:05:4a:74:55:ca:23:39:6e:7e:c3:31:b6:65:0f: 60:c4:85:ce:ff:4c:9e:de:db:ae:9a:34:82:c8:a4: 68:f5:51:42:28:a6:44:02:e8:0b:bb:7e:73:26:bc: 3f:2b:79:54:23:47:ac:8f:67:8f:3f:ab:be:12:10: fd:60:d5:83:17:0d:05:4d:74:d0:22:61:f7:f2:b4: d4:9a:b2:1c:6c:69:9f:c1:9b:bd:ab:d9:57:99:1e: 2d:ac:1c:6e:94:1b:3a:7b:5a:ad:6d:f5:b5:93:60: 28:8c:ed:f2:3f:b6:49:34:ac:7e:f7:76:d2:db:30: bd:fe:58:ef:e1:81:33:a0:9f:c7:e1:68:32:5a:2e: 2c:ef:bf:c9:11:61:c2:d9:03:92:27:ae:66:41:c6: 76:83:ba:8f:11:ac:1c:63:72:e0:05:68:73:5d:21: 32:79:10:d6:f9:29:65:5a:55:b4:b5:97:9d:18:e7: 76:e1:df:3a:1b:87:76:75:c5:e4:0d:8f:31:3e:e0: 14:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:11:EC:DF:F3:F2:14:9A:DE:8D:A3:C5:FB:E0:43:30:16:C2:00:42 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:8f:6c:61:d8:77:5b:d9:8a:ea:30:58:f8:b4:fb:54:67:d2: 51:e1:f1:12:50:f7:2c:ab:d7:04:dc:70:79:e7:da:6f:93:b6: ad:1d:41:93:94:6e:c1:49:ae:db:5f:27:83:29:a0:24:85:a6: d7:db:68:b6:af:7b:0f:d0:f9:f1:74:a2:12:59:f8:d4:36:e5: ef:d9:9c:4f:33:40:7d:40:ca:4e:cf:6f:17:e9:25:8d:5d:6b: 72:85:d4:c0:0d:36:2c:41:e4:93:dd:7f:4c:7d:79:a8:73:e2: b1:5e:a0:dd:b5:99:35:f1:8c:fc:b7:a1:52:11:6c:2e:8d:c2: 83:67:6c:73:d3:6c:27:bb:e5:e0:f9:e5:73:0b:47:7a:8b:5e: f9:24:86:11:fa:3d:e6:3a:45:e3:47:a4:0a:01:9f:ad:6c:2e: 51:74:da:60:7e:32:a5:da:32:25:18:11:c8:43:70:df:24:c2: 94:b6:e0:7f:ae:16:98:d8:49:be:a5:4a:dd:8f:67:ad:f9:a3: 8d:7d:8f:9a:56:83:1f:6d:e8:c8:cc:bc:82:11:a3:d6:8f:64: e2:54:ba:a5:a4:24:9e:c1:b9:a0:67:91:7e:50:09:3a:e1:9a: 0d:36:a9:1d:be:e2:f8:1b:59:d9:3d:da:5c:34:b0:ce:5a:d1: e5:0c:22:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjYwMTI0MjIyMTA4WhcNMjYwMTMxMjIyMTA4WjAYMRYwFAYD VQQDDA02OTc1NDVkNC0yN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfnQhX1coVrmwdtZ9v9NDZUsjRv5nWkT54hbgQ1dd3gEgDKIL26LlxJViRqc zcN4vAl27LFMCm9bxVWJBUp0VcojOW5+wzG2ZQ9gxIXO/0ye3tuumjSCyKRo9VFC KKZEAugLu35zJrw/K3lUI0esj2ePP6u+EhD9YNWDFw0FTXTQImH38rTUmrIcbGmf wZu9q9lXmR4trBxulBs6e1qtbfW1k2AojO3yP7ZJNKx+93bS2zC9/ljv4YEzoJ/H 4WgyWi4s77/JEWHC2QOSJ65mQcZ2g7qPEawcY3LgBWhzXSEyeRDW+SllWlW0tZed GOd24d86G4d2dcXkDY8xPuAUvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8R7N/z 8hSa3o2jxfvgQzAWwgBCMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi8yQ0IxRUVCQUY2NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RB Y0dvWVdET0RYMlhxUEhFQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVj2xh2Hdb2YrqMFj4tPtUZ9JR4fESUPcsq9cE3HB559pvk7atHUGT lG7BSa7bXyeDKaAkhabX22i2r3sP0PnxdKISWfjUNuXv2ZxPM0B9QMpOz28X6SWN XWtyhdTADTYsQeST3X9MfXmoc+KxXqDdtZk18Yz8t6FSEWwujcKDZ2xz02wnu+Xg +eVzC0d6i175JIYR+j3mOkXjR6QKAZ+tbC5RdNpgfjKl2jIlGBHIQ3DfJMKUtuB/ rhaY2Em+pUrdj2et+aONfY+aVoMfbejIzLyCEaPWj2TiVLqlpCSewbmgZ5F+UAk6 4ZoNNqkdvuL4G1nZPdpcNLDOWtHlDCLV -----END CERTIFICATE-----Generated at Sun Jan 25 10:44:55 2026 by rpki-client