This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft File: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json) Hash identifier: hbYKABsHefyMkTTkmPqcapcWOT9fheXVVybNEACONNA= Subject key identifier: 4D:B4:A7:75:A9:AC:2F:A8:FC:08:66:2E:DF:A5:42:16:D6:13:AF:F1 Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Certificate serial: 04BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft Manifest number: 04AC Signing time: Sat 24 Jan 2026 23:11:17 +0000 Manifest this update: Sat 24 Jan 2026 23:11:16 +0000 Manifest next update: Sat 31 Jan 2026 23:11:16 +0000 Files and hashes: 1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: fWtmC18NmLLJZdJHuVZfZbC6AnY5i8txTbSW51ROiws=) 2: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: VaOofZOdoeXB+ROUfhfuam0fJhFDWk1WoiIImzNsQ8w=) 3: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: shUyL0T+nIZClfZrL/H8TAF10vSCmqRMW+JFhYiGjJU=) 4: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: PInFHi+DRZ/0Ub/EKAgjN1FIJnedDnHONJpIq7oTfD8=) 5: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: vkj3SfiZ1waq+IfpcqocmD4VCDj2+bbKheOVyJpVYTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Validity Not Before: Jan 24 23:11:16 2026 GMT Not After : Jan 31 23:11:16 2026 GMT Subject: CN=69755195-6d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:d7:c2:45:1c:2a:e5:0c:59:4f:23:c2:1c: 76:eb:3c:cd:ad:1a:54:ea:58:cd:66:6b:14:8c:af: 58:4e:00:b8:50:09:f3:80:79:68:aa:8e:c4:75:20: e8:46:81:d9:e4:f2:9d:f0:c9:ee:03:f1:8b:e7:e9: e5:c5:6d:5a:e5:84:f7:a5:f1:fb:d9:f8:b6:c3:42: dd:b9:c9:ad:da:97:9e:2d:4c:1a:ee:57:21:e5:b4: 6b:b1:ef:6d:37:49:cd:e2:7d:af:76:e5:ce:f1:4b: 52:f6:08:95:ca:e1:35:80:b0:42:7b:9a:33:f5:77: 7b:08:d0:82:82:75:ed:8c:c0:fc:55:03:12:3a:57: 94:9c:ba:23:79:6d:6f:8e:e4:1d:4d:a5:5e:d4:d1: 4f:5c:7f:e2:16:6e:af:8d:d6:62:3e:98:37:07:4c: 1e:45:16:61:9c:55:60:46:dd:dd:9c:ce:6a:55:96: 2d:56:aa:d2:97:45:3e:c3:cc:e3:34:7d:b8:8b:fb: a2:b0:e5:50:b2:5c:88:f0:2d:df:4f:cf:33:e8:0d: 9a:f8:18:2f:b1:4b:ff:36:19:5a:61:c7:52:1e:f6: a1:2d:a3:ce:a3:fa:f0:69:e6:20:11:80:d8:31:e8: 87:8e:26:2a:ab:01:f4:98:9f:82:d3:03:2e:8a:0f: a7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B4:A7:75:A9:AC:2F:A8:FC:08:66:2E:DF:A5:42:16:D6:13:AF:F1 X509v3 Authority Key Identifier: keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:08:2e:9c:1e:cc:b5:01:3f:b6:c1:53:79:a6:cc:9a:e5:aa: da:e4:d7:c6:03:ac:b2:4f:fb:4d:e1:44:9f:6a:b3:56:93:a6: 42:1e:19:a6:1a:54:60:6a:d9:a6:68:e3:9f:97:8b:fe:23:ad: 6b:d2:54:73:dd:fb:1d:a6:af:cc:60:d9:c1:8d:08:eb:67:d3: 7d:c8:bb:8c:b9:dc:07:e9:70:e6:c2:d3:f7:1d:67:20:cd:dd: 18:e4:4a:11:34:f1:fe:03:d1:20:b8:3d:e0:15:4b:81:48:a1: bc:51:01:bf:13:1c:3f:c3:e0:4f:95:29:f0:bf:6e:86:2a:5d: fc:2a:8f:72:37:0f:45:58:5c:d7:f7:49:50:e0:f3:9d:36:6f: 1a:30:23:4d:28:33:dc:a0:40:80:6b:63:0e:cc:02:13:33:ac: 50:50:69:52:11:e7:d0:29:9c:56:c1:a1:36:b9:d0:50:81:73: dd:74:d4:2f:09:54:f6:87:3d:cd:1d:96:63:04:3d:6a:3d:09: 30:8c:7b:b3:a9:4f:45:2c:e5:f7:35:15:f7:73:15:15:24:13: 0b:d1:4d:de:40:74:1c:e4:f2:db:30:dc:af:ea:d5:32:e6:38: c7:a5:88:2e:ea:30:d4:45:bc:c4:e6:2b:59:c5:dd:25:a3:ee: 9c:9c:f3:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCRDQxMTAvBgNVBAUTKEYxM0JDQTgwNEY4RjE5ODE3NkY5OUU3QkM5QUVBOThD QUZDMEI4QjEwHhcNMjYwMTI0MjMxMTE2WhcNMjYwMTMxMjMxMTE2WjAYMRYwFAYD VQQDDA02OTc1NTE5NS02ZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtzXwkUcKuUMWU8jwhx26zzNrRpU6ljNZmsUjK9YTgC4UAnzgHloqo7EdSDo RoHZ5PKd8MnuA/GL5+nlxW1a5YT3pfH72fi2w0Lducmt2peeLUwa7lch5bRrse9t N0nN4n2vduXO8UtS9giVyuE1gLBCe5oz9Xd7CNCCgnXtjMD8VQMSOleUnLojeW1v juQdTaVe1NFPXH/iFm6vjdZiPpg3B0weRRZhnFVgRt3dnM5qVZYtVqrSl0U+w8zj NH24i/uisOVQslyI8C3fT88z6A2a+BgvsUv/NhlaYcdSHvahLaPOo/rwaeYgEYDY MeiHjiYqqwH0mJ+C0wMuig+n0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE20p3Wp rC+o/AhmLt+lQhbWE6/xMB8GA1UdIwQYMBaAFPE7yoBPjxmBdvmee8muqYyvwLix MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJENC80ODY1QkQ0ODYx MTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZRjItWjU3eWE2cGpLX0F1 TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhUdktnRS1QR1lGMi1aNTd5YTZwaktfQXVMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEJENC80ODY1QkQ0ODYxMTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZ RjItWjU3eWE2cGpLX0F1TEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsCC6cHsy1AT+2wVN5psya5ara5NfGA6yyT/tN4USfarNWk6ZCHhmm GlRgatmmaOOfl4v+I61r0lRz3fsdpq/MYNnBjQjrZ9N9yLuMudwH6XDmwtP3HWcg zd0Y5EoRNPH+A9EguD3gFUuBSKG8UQG/Exw/w+BPlSnwv26GKl38Ko9yNw9FWFzX 90lQ4POdNm8aMCNNKDPcoECAa2MOzAITM6xQUGlSEefQKZxWwaE2udBQgXPddNQv CVT2hz3NHZZjBD1qPQkwjHuzqU9FLOX3NRX3cxUVJBML0U3eQHQc5PLbMNyv6tUy 5jjHpYgu6jDURbzE5itZxd0lo+6cnPMy -----END CERTIFICATE-----Generated at Sun Jan 25 06:14:40 2026 by rpki-client