This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json) Hash identifier: ZfSSr5wAc4ZS+jRqIbGbQH1kvOsBoA8aLx+/xZD3hYg= Subject key identifier: A6:32:22:44:56:FC:1D:2D:F9:A0:22:00:41:03:EB:C8:50:5F:27:DB Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft Manifest number: 84 Signing time: Sun 25 Jan 2026 05:45:29 +0000 Manifest this update: Sun 25 Jan 2026 05:45:28 +0000 Manifest next update: Sun 01 Feb 2026 05:45:28 +0000 Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: gHInBPYEY+GHfNBV6AXqAi+xiu2mJLw4QkG7yiS4cpw=) 2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: 5ze9WVBdkB3caAS6RW6n0SGf/tYNePtmefl2XUHO5EU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Validity Not Before: Jan 25 05:45:28 2026 GMT Not After : Feb 1 05:45:28 2026 GMT Subject: CN=6975adf8-bf72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:93:00:71:4e:c5:22:d8:f4:ce:64:99:c6:1b: 3c:d4:b8:e9:24:0e:bd:43:f1:73:8f:2d:16:f2:86: 51:df:7a:4b:5f:73:1b:b1:18:4d:aa:83:f2:6f:78: c6:76:47:3e:c2:23:a5:0c:fd:0e:01:43:f7:72:c0: 8a:2c:64:6d:0e:31:e5:88:68:2d:02:70:04:b5:bc: 4a:62:b5:fe:02:0c:43:62:81:13:1e:66:24:bb:7b: f1:73:d9:80:84:df:80:d4:32:a7:74:61:e6:9f:81: 5f:2c:80:ac:fc:66:3e:b4:de:d9:78:83:80:ed:60: 08:dd:60:a0:1e:e9:1c:64:84:11:27:49:55:21:09: 86:73:6a:5e:56:7d:64:44:f5:20:ce:d6:d9:80:e0: 10:9c:3c:3b:fe:28:e1:40:81:d5:8e:3f:66:ee:23: b0:13:b1:19:3a:04:18:cc:25:7e:ab:e9:99:8f:bb: a8:a9:86:47:ac:d5:af:50:70:9b:a2:bf:a9:28:21: 4e:3a:2a:b6:91:9f:74:e4:76:80:f3:6c:59:97:42: aa:b5:6a:b7:43:ab:98:e0:41:fa:ea:11:f6:19:81: 6f:02:a7:e7:6d:55:f5:f4:15:00:3e:01:bc:80:65: 0f:9b:50:e6:1f:6d:63:60:39:04:9a:6a:db:d3:9b: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:32:22:44:56:FC:1D:2D:F9:A0:22:00:41:03:EB:C8:50:5F:27:DB X509v3 Authority Key Identifier: keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:12:3e:f3:34:ab:93:9b:4f:67:6b:be:74:9a:b8:b0:85:19: f9:5f:9b:a3:db:f8:d7:87:b6:d9:a3:2a:d5:f2:f2:3d:73:f3: 20:6d:19:7e:f4:75:57:e2:9d:e5:ba:03:06:63:5e:92:0d:9c: ff:51:7b:e7:47:4a:fa:f1:c9:76:21:89:40:e0:be:e5:d0:53: d6:4c:b5:c8:e4:9e:b9:e2:2b:e2:f8:0d:2b:2d:20:b6:93:91: cd:5f:51:3f:0b:9c:3e:ea:bc:4b:49:6a:31:70:99:72:9e:c0: 73:27:69:50:3e:82:5f:68:90:c4:7d:b0:1e:cb:0d:b6:43:61: 7e:3a:51:dc:29:24:86:94:a3:91:39:c4:de:a0:66:51:6d:49: fe:4a:6c:0a:4a:ab:ab:40:f4:ae:3c:f6:c6:c1:63:30:d2:ba: 5f:d1:9a:15:27:b0:fc:e1:17:dd:dc:61:e1:82:2f:a2:40:f8: 93:c8:09:0a:b8:0b:28:89:0e:2a:84:83:e9:3c:26:2b:ec:55: 7b:0d:e6:6d:96:9f:ef:1d:a0:11:2c:05:43:af:55:f6:3f:fe: 6c:65:3d:f1:c0:be:10:1d:9a:d5:cd:d6:16:c9:62:30:2b:8f: d6:29:4c:ad:a6:93:a4:6a:4a:0c:0a:e4:39:22:49:a9:9e:4a: c3:85:07:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwNDkxMTAvBgNVBAUTKEQ5RDFCMDU1RkVGQzg5RjU4MDNBN0ZBOEUyQjkwMjYx OUYzMzhEOEUwHhcNMjYwMTI1MDU0NTI4WhcNMjYwMjAxMDU0NTI4WjAYMRYwFAYD VQQDDA02OTc1YWRmOC1iZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZMAcU7FItj0zmSZxhs81LjpJA69Q/Fzjy0W8oZR33pLX3MbsRhNqoPyb3jG dkc+wiOlDP0OAUP3csCKLGRtDjHliGgtAnAEtbxKYrX+AgxDYoETHmYku3vxc9mA hN+A1DKndGHmn4FfLICs/GY+tN7ZeIOA7WAI3WCgHukcZIQRJ0lVIQmGc2peVn1k RPUgztbZgOAQnDw7/ijhQIHVjj9m7iOwE7EZOgQYzCV+q+mZj7uoqYZHrNWvUHCb or+pKCFOOiq2kZ905HaA82xZl0KqtWq3Q6uY4EH66hH2GYFvAqfnbVX19BUAPgG8 gGUPm1DmH21jYDkEmmrb05tKiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYyIkRW /B0t+aAiAEED68hQXyfbMB8GA1UdIwQYMBaAFNnRsFX+/In1gDp/qOK5AmGfM42O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzA0OS9CMDlDQkQ2NjJD NjYxMUYwOURBNTZCMEJDNEY5QUUwMi8yZEd3VmY3OGlmV0FPbi1vNHJrQ1laOHpq WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkR3dWZjc4aWZXQU9uLW80cmtDWVo4empZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzA0OS9CMDlDQkQ2NjJDNjYxMUYwOURBNTZCMEJDNEY5QUUwMi8yZEd3VmY3OGlm V0FPbi1vNHJrQ1laOHpqWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLEj7zNKuTm09na750mriwhRn5X5uj2/jXh7bZoyrV8vI9c/MgbRl+ 9HVX4p3lugMGY16SDZz/UXvnR0r68cl2IYlA4L7l0FPWTLXI5J654ivi+A0rLSC2 k5HNX1E/C5w+6rxLSWoxcJlynsBzJ2lQPoJfaJDEfbAeyw22Q2F+OlHcKSSGlKOR OcTeoGZRbUn+SmwKSqurQPSuPPbGwWMw0rpf0ZoVJ7D84Rfd3GHhgi+iQPiTyAkK uAsoiQ4qhIPpPCYr7FV7DeZtlp/vHaARLAVDr1X2P/5sZT3xwL4QHZrVzdYWyWIw K4/WKUytppOkakoMCuQ5IkmpnkrDhQfX -----END CERTIFICATE-----Generated at Sun Jan 25 08:03:54 2026 by rpki-client