This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft File: MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json) Hash identifier: IeCrpNlJa91bIL4IzfvEkemJzeT85E8fb+fiswzLtA0= Subject key identifier: 83:ED:22:CA:39:D0:9B:96:05:BA:02:FD:E9:B4:02:EB:05:F7:BF:25 Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 0A46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft Manifest number: 0A3F Signing time: Sat 24 Jan 2026 19:09:48 +0000 Manifest this update: Sat 24 Jan 2026 19:09:48 +0000 Manifest next update: Sat 31 Jan 2026 19:09:48 +0000 Files and hashes: 1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: KMYk0EJn/lO2l+zRSjRBQ4kvOLuQGNf6Ht+s1ZiwolM=) 2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: ClQj70D4QsMeSPs5XhoDWoqTMjGb5jdaAiwIUHB/7eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2630 (0xa46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A, serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Validity Not Before: Jan 24 19:09:48 2026 GMT Not After : Jan 31 19:09:48 2026 GMT Subject: CN=697518fc-9270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cd:87:d9:f2:7e:f5:0a:a8:e4:ee:19:c1:45: 6b:ae:1a:d2:45:13:f4:1b:d8:84:74:35:e3:3d:16: e4:28:0a:f4:63:b4:cc:fd:b6:53:d4:a0:4b:5c:03: a8:9d:c9:56:fd:45:86:8a:ce:bd:10:03:04:ca:ed: 92:ff:fb:0c:32:66:0d:73:bc:c3:4c:c7:ee:33:33: 66:85:20:88:ac:10:1c:ad:4d:80:78:eb:0c:45:39: c9:cd:22:60:b3:f3:51:c3:f7:e1:49:36:39:38:5f: 45:ca:ff:52:78:1c:31:ca:23:0a:9f:38:b2:e1:49: cb:78:22:3f:e1:f6:58:aa:73:27:13:6c:90:7b:50: 41:fd:22:68:02:47:19:2a:ec:4e:6d:ac:b8:c6:b4: 8d:e6:6f:32:e5:36:43:29:34:28:fb:71:69:1a:cb: ac:c4:97:83:70:36:e2:56:a6:55:fd:fd:22:36:47: e4:8b:cc:96:e4:3f:b1:20:74:e8:05:1a:44:1a:21: 9d:b0:78:e5:82:d0:bb:a6:fb:99:10:0c:50:78:39: 8e:fc:60:a9:42:56:31:95:e3:05:f5:d6:b0:e4:ee: 26:04:1a:ec:b9:27:8f:82:7b:5c:7a:43:88:5a:a5: b9:2b:02:61:98:f8:98:a8:90:0a:c3:ff:16:f3:a5: 9f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:ED:22:CA:39:D0:9B:96:05:BA:02:FD:E9:B4:02:EB:05:F7:BF:25 X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:b6:af:de:02:c8:73:53:89:43:ff:70:ff:51:a6:8d:f9:0a: 76:76:2f:6f:bc:fc:92:d4:fc:fd:df:ed:2d:e7:c4:15:d4:f8: 8b:28:ec:cb:d4:ce:5d:d5:42:a7:c8:62:93:69:dc:61:a6:b2: 46:7d:38:d0:25:11:76:01:52:7e:13:c4:2e:01:21:ad:b1:1b: 92:c5:59:c3:92:01:22:f5:c6:e0:40:24:21:56:c0:2d:50:3a: 08:19:9b:18:04:7e:27:86:fb:b3:db:4f:c4:a3:95:21:37:37: 13:dd:c5:d6:1e:96:32:c3:ba:09:91:03:f1:eb:ae:4d:b8:4a: de:e3:08:c5:b0:20:3b:4c:48:4a:b1:31:3b:c8:35:45:bf:1d: d8:2a:fb:79:9c:c7:b3:2b:e3:e8:00:26:58:19:13:87:83:c5: 1b:d0:ae:1b:1a:52:48:46:04:fa:97:ee:a9:11:e0:61:fe:5c: af:7c:9d:b0:97:bd:e2:7b:78:98:af:d5:f4:9b:0f:65:57:b0: 81:bb:2b:89:cc:68:9d:4a:64:fb:b6:68:c7:8c:4b:25:96:be: d0:21:b4:bc:aa:90:d8:ed:3f:91:5a:77:74:7d:f8:e4:c2:a2: 04:63:f4:10:1b:a8:3a:56:a6:e2:7d:e2:70:af:37:c0:ac:7b: f4:73:53:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjYwMTI0MTkwOTQ4WhcNMjYwMTMxMTkwOTQ4WjAYMRYwFAYD VQQDDA02OTc1MThmYy05MjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAos2H2fJ+9Qqo5O4ZwUVrrhrSRRP0G9iEdDXjPRbkKAr0Y7TM/bZT1KBLXAOo nclW/UWGis69EAMEyu2S//sMMmYNc7zDTMfuMzNmhSCIrBAcrU2AeOsMRTnJzSJg s/NRw/fhSTY5OF9Fyv9SeBwxyiMKnziy4UnLeCI/4fZYqnMnE2yQe1BB/SJoAkcZ KuxObay4xrSN5m8y5TZDKTQo+3FpGsusxJeDcDbiVqZV/f0iNkfki8yW5D+xIHTo BRpEGiGdsHjlgtC7pvuZEAxQeDmO/GCpQlYxleMF9daw5O4mBBrsuSePgntcekOI WqW5KwJhmPiYqJAKw/8W86Wf0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPtIso5 0JuWBboC/em0AusF978lMB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI SFlNU0g3a0NYN1R5QWtBeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4tq/eAshzU4lD/3D/UaaN+Qp2di9vvPyS1Pz93+0t58QV1PiLKOzL 1M5d1UKnyGKTadxhprJGfTjQJRF2AVJ+E8QuASGtsRuSxVnDkgEi9cbgQCQhVsAt UDoIGZsYBH4nhvuz20/Eo5UhNzcT3cXWHpYyw7oJkQPx665NuEre4wjFsCA7TEhK sTE7yDVFvx3YKvt5nMezK+PoACZYGROHg8Ub0K4bGlJIRgT6l+6pEeBh/lyvfJ2w l73ie3iYr9X0mw9lV7CBuyuJzGidSmT7tmjHjEsllr7QIbS8qpDY7T+RWnd0ffjk wqIEY/QQG6g6VqbifeJwrzfArHv0c1N4 -----END CERTIFICATE-----Generated at Sun Jan 25 10:46:02 2026 by rpki-client