This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: 9bAyyWgoNnUip46iOTh2wqpVdbJvIMk6Hijeq6Jo8QY= Subject key identifier: 57:26:6A:84:DB:E8:ED:80:7B:91:7F:00:9F:53:8A:02:94:57:2D:C1 Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: 60 Signing time: Fri 23 Jan 2026 06:11:06 +0000 Manifest this update: Fri 23 Jan 2026 06:11:06 +0000 Manifest next update: Fri 30 Jan 2026 06:11:06 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: srqarUpinpuo71qlBhLH25m7BSPJoCmn4M1R3ObPiWk=) 2: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: nDBN8ofBQzSuZlFacB02+d4KlQaWiR4DsWaWORqlM1w=) 3: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: KEMH/vKSPcAkV3P1pUdnSj1om5WSjvDW91I/czL5aFo=) 4: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: Jiabvy3OMisNM5GgqkjfS6kn/xGNTzgJB34Y1DjTY/g=) 5: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: J6NfxVye//wKbH6luOaipzXoE8gflP1Zb4ROZKBwOvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Jan 23 06:11:06 2026 GMT Not After : Jan 30 06:11:06 2026 GMT Subject: CN=697310fa-2fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:34:43:ab:dd:e1:8f:6a:a0:b8:36:78:1e: 8a:14:37:0a:24:2e:e9:7d:f9:b5:25:c4:cf:4d:a4: 0d:0b:24:b1:39:7b:b0:45:b8:d9:05:7f:c6:c5:7a: 88:c5:b5:fa:d3:79:dc:7e:f8:a0:5c:78:d4:92:47: bd:01:6f:14:f5:e3:ff:63:58:9a:09:61:96:d1:1b: 6a:4f:8c:50:7b:67:cb:86:b7:b8:e1:90:a2:c2:8a: 28:43:49:8f:0a:c6:3f:70:a2:86:c1:f3:02:71:c5: 50:52:a3:a8:0f:2e:57:6a:21:e7:37:0a:d5:07:1f: 1c:27:54:34:76:c1:eb:58:73:61:ff:40:07:b9:33: a5:08:02:f8:fb:fe:8f:7a:5e:2a:8e:ea:28:ca:0d: f2:2a:65:2f:be:17:9f:f6:15:7c:d9:4c:0c:27:2b: 57:5c:32:9f:f2:ce:4c:6c:ea:ad:07:04:de:d7:4d: e8:c0:08:0f:dc:99:f4:1c:10:0d:7b:74:7b:55:52: 03:6d:28:c5:c8:fa:74:29:02:d2:a0:f6:7c:c8:63: df:f0:76:9d:6b:0b:70:e7:90:6a:51:51:d7:c3:ae: 78:2e:d2:69:a2:4f:ff:5c:73:24:a4:aa:69:2a:3b: a0:ab:4d:22:d2:bc:5a:73:6a:0d:3e:50:89:0f:5c: 25:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:26:6A:84:DB:E8:ED:80:7B:91:7F:00:9F:53:8A:02:94:57:2D:C1 X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:3c:03:55:af:a3:0f:07:55:48:cd:13:3e:bf:09:a0:c8:7f: 04:4e:7d:80:fc:bb:ac:8b:eb:35:4f:0f:bd:8c:0f:1c:7c:7c: 5f:2c:d4:1f:cf:ea:f3:ad:71:72:32:ee:bd:17:12:94:c6:a6: 58:ab:2e:31:74:be:ae:20:17:b2:86:72:67:83:0f:17:fc:2a: 83:f1:87:5a:b7:77:5c:72:c4:e0:c2:63:45:67:f7:62:1e:39: 2d:d3:99:95:fe:03:c3:4e:75:c1:d5:cd:21:b4:31:d8:6c:1b: a6:e6:13:c5:5d:68:d3:15:a7:e8:0c:0a:07:5c:a9:ee:cf:4d: 43:8d:77:1a:5f:af:41:7a:b6:ce:aa:43:5d:a0:1c:3e:dd:b9: 3d:5c:bf:fd:93:68:59:1c:80:8a:a8:f9:09:68:91:19:2a:97: 0b:90:c3:cc:10:f5:1b:fc:dc:1f:c0:e5:a2:43:56:3b:00:60: 41:66:00:64:76:c6:4a:29:d6:a4:bf:57:ad:59:08:75:c5:89: 87:08:dc:0a:db:78:1e:06:f6:24:da:29:c4:5e:a3:64:37:3a: 9a:eb:6e:0b:18:b9:58:bf:f2:10:3d:66:83:f6:be:fa:c4:1c: d1:a7:4b:8b:33:8f:50:b3:b6:38:8a:fd:e7:b5:18:15:a2:5c: cc:12:98:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkE2OTExMC8GA1UEBRMoM0FBNUQ3NEE0OUZFREUwODE3NjZDREFDM0JGN0RERDAz NkJCRjkwMTAeFw0yNjAxMjMwNjExMDZaFw0yNjAxMzAwNjExMDZaMBgxFjAUBgNV BAMMDTY5NzMxMGZhLTJmYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyAzRDq93hj2qguDZ4HooUNwokLul9+bUlxM9NpA0LJLE5e7BFuNkFf8bFeojF tfrTedx++KBceNSSR70BbxT14/9jWJoJYZbRG2pPjFB7Z8uGt7jhkKLCiihDSY8K xj9woobB8wJxxVBSo6gPLldqIec3CtUHHxwnVDR2wetYc2H/QAe5M6UIAvj7/o96 XiqO6ijKDfIqZS++F5/2FXzZTAwnK1dcMp/yzkxs6q0HBN7XTejACA/cmfQcEA17 dHtVUgNtKMXI+nQpAtKg9nzIY9/wdp1rC3DnkGpRUdfDrngu0mmiT/9ccySkqmkq O6CrTSLSvFpzag0+UIkPXCU5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVyZqhNvo 7YB7kX8An1OKApRXLcEwHwYDVR0jBBgwFoAUOqXXSkn+3ggXZs2sO/fd0Da7+QEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2QTY5L0NCMUNGRTg0NkM0 QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3FYWFNrbi0zZ2dYWnMyc09fZmQwRGE3LVFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 QTY5L0NCMUNGRTg0NkM0QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dn WFpzMnNPX2ZkMERhNy1RRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJk8A1Wvow8HVUjNEz6/CaDIfwROfYD8u6yL6zVPD72MDxx8fF8s1B/P 6vOtcXIy7r0XEpTGplirLjF0vq4gF7KGcmeDDxf8KoPxh1q3d1xyxODCY0Vn92Ie OS3TmZX+A8NOdcHVzSG0MdhsG6bmE8VdaNMVp+gMCgdcqe7PTUONdxpfr0F6ts6q Q12gHD7duT1cv/2TaFkcgIqo+QlokRkqlwuQw8wQ9Rv83B/A5aJDVjsAYEFmAGR2 xkop1qS/V61ZCHXFiYcI3ArbeB4G9iTaKcReo2Q3OprrbgsYuVi/8hA9ZoP2vvrE HNGnS4szj1CztjiK/ee1GBWiXMwSmIE= -----END CERTIFICATE-----Generated at Sun Jan 25 06:17:49 2026 by rpki-client