This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft File: JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft (raw, json) Hash identifier: cNuYR6J4m4SlnriDYHMpVdNGOArlqy4RVhgKCpa+xjs= Subject key identifier: F2:4E:9C:96:A4:CB:DB:69:4C:09:57:B9:8F:3E:DC:15:D1:EB:84:27 Authority key identifier: 24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E Certificate issuer: /CN=A9139FBB/serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft Manifest number: 12 Signing time: Sun 25 Jan 2026 07:03:07 +0000 Manifest this update: Sun 25 Jan 2026 07:03:06 +0000 Manifest next update: Sun 01 Feb 2026 07:03:06 +0000 Files and hashes: 1: JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl (hash: 9NoG4Gb0MCnzBWWeTPYQTdoRiOIjJQA+ENU7sx/RG/8=) 2: B8C57E86E40511F09F69296D616F56BC.roa (hash: cObjfouAz2/TsES3hmR6MNhl426gs6di7MnI+fpvu6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139FBB, serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Validity Not Before: Jan 25 07:03:06 2026 GMT Not After : Feb 1 07:03:06 2026 GMT Subject: CN=6975c02b-0a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f9:d3:c3:5b:78:3f:11:e1:55:2f:07:20:b8: 38:8c:38:3e:18:49:42:86:2f:7a:cc:48:32:3d:cf: 45:7e:cf:0b:d0:58:7c:32:9a:45:45:8d:a6:19:8e: 01:35:ad:58:fd:87:df:f0:12:12:67:c3:8f:91:91: 97:39:a4:34:f1:31:98:ce:36:47:be:80:69:f3:63: ae:80:5f:6d:59:63:ce:1a:46:60:db:3b:86:fd:07: cd:9e:8b:69:12:81:28:55:00:2b:91:01:25:a1:bf: 0a:15:70:59:c2:2b:09:b0:d4:cd:2d:b2:af:f7:03: 34:67:06:e2:bb:2f:d5:38:7d:eb:74:48:35:74:cd: ae:83:c3:b1:c2:02:8a:ae:40:d5:b2:f4:3a:c4:b1: e2:4c:50:38:e3:fe:a2:bb:d2:8b:f3:0b:8b:fa:06: 4d:79:35:02:02:02:23:b2:98:e5:fe:22:ea:9f:0d: 31:8e:65:74:89:c5:0e:95:e3:7a:0d:e6:f8:d0:22: 04:25:83:dd:54:a9:99:68:6e:b6:61:73:64:93:2c: 72:2a:b7:4c:c9:15:77:ad:0d:3c:00:80:63:77:3b: 18:78:c4:5f:3d:d1:dd:76:bb:f8:b0:d9:4e:94:02: 5b:ea:04:7e:b3:69:79:b1:99:13:cf:39:c0:95:40: 23:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4E:9C:96:A4:CB:DB:69:4C:09:57:B9:8F:3E:DC:15:D1:EB:84:27 X509v3 Authority Key Identifier: keyid:24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:eb:77:15:7a:4d:f0:e8:e8:a6:4c:30:94:1f:a5:07:9e:f1: 48:24:87:8e:83:6b:f7:21:d4:bd:90:bb:14:17:18:1e:8d:be: 4d:bd:3b:97:2b:f8:dd:5a:54:df:da:f1:9a:e1:3d:b1:63:98: 26:80:87:6f:96:52:d2:fb:6a:f5:f8:d4:96:1f:93:d4:cd:25: 4e:17:0b:10:0d:7f:11:65:62:d7:19:5f:e6:da:6a:bc:c6:96: d1:81:ed:7c:e8:64:33:3a:8b:ce:b0:06:8e:e7:1d:6e:bf:69: 63:74:fb:8c:b5:c7:43:87:7f:1c:7f:22:3e:f3:97:7f:63:8c: 1c:dd:60:f2:ae:d6:38:b0:74:66:06:f1:52:ed:9a:67:ee:12: a2:bb:d4:11:57:57:eb:9f:bc:2c:99:ce:eb:c2:df:fe:66:66: 54:5e:b7:19:87:7e:1f:b0:e2:61:d4:6e:c3:a6:2a:f5:d1:f2: c5:1a:d9:7e:0f:7f:b3:bf:c6:c9:85:4b:e2:ab:80:1a:c2:1d: 8d:29:5b:04:7b:ea:a3:38:40:4c:70:a9:4f:b2:0c:84:2b:3f: a9:49:7e:31:e1:55:87:1a:58:02:7f:4c:0c:b0:75:fa:bb:d0: 6e:42:53:70:7a:a9:27:56:81:dc:e5:90:26:f2:64:83:e6:bd: 54:32:09:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEz OUZCQjExMC8GA1UEBRMoMjRFNDVBNDY3MDg2NUVEMUM1MTFERDIyMkQ1MTg1QkZB NjcyMDg1RTAeFw0yNjAxMjUwNzAzMDZaFw0yNjAyMDEwNzAzMDZaMBgxFjAUBgNV BAMMDTY5NzVjMDJiLTBhMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH+dPDW3g/EeFVLwcguDiMOD4YSUKGL3rMSDI9z0V+zwvQWHwymkVFjaYZjgE1 rVj9h9/wEhJnw4+RkZc5pDTxMZjONke+gGnzY66AX21ZY84aRmDbO4b9B82ei2kS gShVACuRASWhvwoVcFnCKwmw1M0tsq/3AzRnBuK7L9U4fet0SDV0za6Dw7HCAoqu QNWy9DrEseJMUDjj/qK70ovzC4v6Bk15NQICAiOymOX+IuqfDTGOZXSJxQ6V43oN 5vjQIgQlg91UqZlobrZhc2STLHIqt0zJFXetDTwAgGN3Oxh4xF890d12u/iw2U6U AlvqBH6zaXmxmRPPOcCVQCNfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8k6clqTL 22lMCVe5jz7cFdHrhCcwHwYDVR0jBBgwFoAUJORaRnCGXtHFEd0iLVGFv6ZyCF4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5RkJCL0JBOUE5RTY4RTQw NDExRjBBNjYxOUM2MDYxNkY1NkJDL0pPUmFSbkNHWHRIRkVkMGlMVkdGdjZaeUNG NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSk9SYVJuQ0dYdEhGRWQwaUxWR0Z2Nlp5Q0Y0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 RkJCL0JBOUE5RTY4RTQwNDExRjBBNjYxOUM2MDYxNkY1NkJDL0pPUmFSbkNHWHRI RkVkMGlMVkdGdjZaeUNGNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACrrdxV6TfDo6KZMMJQfpQee8Ugkh46Da/ch1L2QuxQXGB6Nvk29O5cr +N1aVN/a8ZrhPbFjmCaAh2+WUtL7avX41JYfk9TNJU4XCxANfxFlYtcZX+baarzG ltGB7XzoZDM6i86wBo7nHW6/aWN0+4y1x0OHfxx/Ij7zl39jjBzdYPKu1jiwdGYG 8VLtmmfuEqK71BFXV+ufvCyZzuvC3/5mZlRetxmHfh+w4mHUbsOmKvXR8sUa2X4P f7O/xsmFS+KrgBrCHY0pWwR76qM4QExwqU+yDIQrP6lJfjHhVYcaWAJ/TAywdfq7 0G5CU3B6qSdWgdzlkCbyZIPmvVQyCXs= -----END CERTIFICATE-----Generated at Sun Jan 25 10:10:38 2026 by rpki-client