This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json) Hash identifier: ACw6rc2dxHIywkKV9Z1FIrjLa75/+ubcmgsUxNTRlZ4= Subject key identifier: 6A:F9:A7:1E:98:6A:7C:0D:11:F5:6E:84:C5:CE:7A:23:D9:C9:3D:D5 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 0605 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft Manifest number: 05C5 Signing time: Sat 24 Jan 2026 22:31:32 +0000 Manifest this update: Sat 24 Jan 2026 22:31:31 +0000 Manifest next update: Sat 31 Jan 2026 22:31:31 +0000 Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: g4wdLNGvQgUF8t11TaG8gGd0IapBl+XpvpdAOAiyBZ0=) 2: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: P6wLHpQqCHGL554TbsS5XznXqZdAAm0+usW172StxkE=) 3: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: bHifsknQi0NkHDmqRWXM1fMiczawE4gokOksn/oKdCA=) 4: DE6603CAEBD711F092381BAE6B6F56BC.roa (hash: gxvlMyGwQL7lw0xk2eyh8DpmMAWrA6M1mpFv6N2AMeI=) 5: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: GP/xk9klfhzGUqC9zVSgLsFcoj/SNA7QNKZizL06GJY=) 6: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: 2I5Ge7KBh0e5lEpfrh8ZbOfF9fHkRChHLpkEq2RW7oE=) 7: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: Jx8gJbXn9OtsYSW59bLdCCTB+IjRw64vOzcz4bDoiq4=) 8: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (hash: rPe4vhXZonbANC80nWrcqICh0JnSf/sZ+SChznXkca8=) 9: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: WGM85d42jF0RvgbFfnNoubVrh59/d23ICHptXHKbWpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Jan 24 22:31:31 2026 GMT Not After : Jan 31 22:31:31 2026 GMT Subject: CN=69754844-13e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:67:fa:e0:6a:05:ec:ad:70:39:41:c4:4d:5c: 23:d2:7c:b3:14:d9:8c:b0:48:14:99:c4:49:f7:e6: a4:ab:ba:41:fc:4a:bb:e4:8d:23:f4:d9:78:a8:69: b6:4d:0f:e7:f7:cd:53:a2:1e:1c:f0:5e:2d:d3:77: 83:c7:96:dc:af:aa:d7:8d:7e:a0:e9:52:84:29:7e: d3:e5:5b:55:ad:76:ac:ef:ac:a0:5c:c3:e2:ab:6e: de:30:82:88:a9:1a:d8:cb:4f:f7:67:6c:04:60:1b: 71:a0:48:30:73:c6:d4:a9:48:82:6c:1b:0f:67:72: 8d:10:a2:b0:f0:2d:d3:40:5c:4b:84:89:52:d9:ce: 27:82:5c:08:32:bf:b8:da:ba:e3:9c:8e:e3:81:d0: f9:7c:ac:26:b3:2d:76:2f:ec:f0:c8:ad:fb:e1:fd: a6:cb:1e:df:c3:08:8c:ba:9f:ac:fb:f1:62:58:a3: cc:cc:cf:43:ce:44:43:bc:f0:77:3d:24:c1:a2:a4: 4e:0f:12:d2:26:d0:42:be:83:ce:70:29:3f:0f:13: 78:6f:29:e6:0a:89:0b:21:6d:63:62:f5:0f:fe:c0: 99:ca:fe:de:e9:35:d7:31:c7:2d:a1:14:f6:44:e1: 79:d7:ff:de:e1:f2:5a:23:6b:d7:d6:1f:01:b7:ed: 47:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F9:A7:1E:98:6A:7C:0D:11:F5:6E:84:C5:CE:7A:23:D9:C9:3D:D5 X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5e:4d:f0:f9:6d:df:28:0d:b5:66:2d:73:0f:f4:c2:5e:57: 28:9a:bd:49:f1:dc:33:e3:8e:11:5e:07:0f:11:f7:9c:15:72: 7e:fe:f4:fe:c3:7b:f8:cd:6c:3a:d9:b4:6b:ed:0a:81:63:32: 86:17:1d:3a:2e:ce:87:43:9b:85:3c:97:05:d6:3e:13:58:e6: 42:be:e9:35:9c:7b:6d:db:43:36:e9:fe:82:91:42:28:3b:c7: cf:54:d5:ec:f7:67:16:3c:c0:60:ba:07:33:76:23:45:04:a9: 99:16:86:22:c1:6e:91:c0:64:20:cf:a3:9e:d2:2d:c0:9d:6f: 19:c4:2e:62:dd:65:8c:37:d8:a5:8f:e8:bd:bb:ed:4b:76:04: 4d:1b:7d:5a:5d:29:58:a2:ad:3b:c5:09:0c:13:25:42:01:82: 5d:bc:1a:f3:25:29:a3:37:f1:52:ab:8b:50:1a:db:53:53:34: 4c:ba:30:82:15:b0:ce:f7:2d:07:36:42:fe:18:4c:33:60:54: 66:43:ec:9e:f3:f2:53:42:d9:12:dc:ba:8e:26:3c:ad:28:e7: 9e:b6:db:69:07:4f:0a:a2:37:f0:d3:b7:aa:40:11:42:87:9b: 61:25:72:ff:b2:4a:88:89:9c:c2:e5:d7:52:4f:4f:e0:91:14: 39:b7:41:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjYwMTI0MjIzMTMxWhcNMjYwMTMxMjIzMTMxWjAYMRYwFAYD VQQDDA02OTc1NDg0NC0xM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhWf64GoF7K1wOUHETVwj0nyzFNmMsEgUmcRJ9+akq7pB/Eq75I0j9Nl4qGm2 TQ/n981Toh4c8F4t03eDx5bcr6rXjX6g6VKEKX7T5VtVrXas76ygXMPiq27eMIKI qRrYy0/3Z2wEYBtxoEgwc8bUqUiCbBsPZ3KNEKKw8C3TQFxLhIlS2c4nglwIMr+4 2rrjnI7jgdD5fKwmsy12L+zwyK374f2myx7fwwiMup+s+/FiWKPMzM9DzkRDvPB3 PSTBoqRODxLSJtBCvoPOcCk/DxN4bynmCokLIW1jYvUP/sCZyv7e6TXXMcctoRT2 ROF51//e4fJaI2vX1h8Bt+1H0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGr5px6Y anwNEfVuhMXOeiPZyT3VMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j VC1hZlk2VEtwdHBDU1dLUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbXk3w+W3fKA21Zi1zD/TCXlcomr1J8dwz444RXgcPEfecFXJ+/vT+ w3v4zWw62bRr7QqBYzKGFx06Ls6HQ5uFPJcF1j4TWOZCvuk1nHtt20M26f6CkUIo O8fPVNXs92cWPMBgugczdiNFBKmZFoYiwW6RwGQgz6Oe0i3AnW8ZxC5i3WWMN9il j+i9u+1LdgRNG31aXSlYoq07xQkMEyVCAYJdvBrzJSmjN/FSq4tQGttTUzRMujCC FbDO9y0HNkL+GEwzYFRmQ+ye8/JTQtkS3LqOJjytKOeetttpB08Kojfw07eqQBFC h5thJXL/skqIiZzC5ddST0/gkRQ5t0HI -----END CERTIFICATE-----Generated at Sun Jan 25 12:19:47 2026 by rpki-client