This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft File: Kprva8EpkUyguRBcknHerznbyGY.mft (raw, json) Hash identifier: 1orHWu69Ki8Yds23jF9FlIYgNLjzca6+htmELdJ4Z1M= Subject key identifier: DC:A2:16:2B:10:4C:51:3B:FD:27:F6:14:6E:A1:1D:21:11:C5:45:B1 Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Certificate serial: 0948 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft Manifest number: 092C Signing time: Sat 24 Jan 2026 19:39:54 +0000 Manifest this update: Sat 24 Jan 2026 19:39:53 +0000 Manifest next update: Sat 31 Jan 2026 19:39:53 +0000 Files and hashes: 1: Kprva8EpkUyguRBcknHerznbyGY.crl (hash: CtmQXYGPXhhhi17nyhfqHP09NWnhOGEggskgyHltHEU=) 2: 6211D40A941F11EEA7C3E86FC4F9AE02.roa (hash: rwFUZotDCsUcE5y4SWo5vzPQMph+ISXIRs0BW/9TgJc=) 3: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (hash: /WRRbCj0rNywmLtoXv249Ng7AC0zIvGMMjOEBzIrMR0=) 4: 62CDEE42941F11EEA7C3E86FC4F9AE02.roa (hash: xYtI619wwIDUtAgGOcO2nVAHPmu/uf2fEsNcyxLWYV8=) 5: 48E4C546941F11EE8517B26FC4F9AE02.roa (hash: u9rGnfekIAlkNgYfnuzbJex52uZyoGapNCA6gJzdd2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2376 (0x948) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Validity Not Before: Jan 24 19:39:53 2026 GMT Not After : Jan 31 19:39:53 2026 GMT Subject: CN=6975200a-c233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ee:d5:41:a7:38:2c:4f:34:c7:41:62:cf:aa: 3d:ed:42:b1:c6:88:1c:c4:5c:d4:80:ed:0e:a3:bd: 72:49:ac:ec:69:67:7d:1b:82:20:65:45:f5:ff:8c: 3e:f1:9c:ad:8e:3e:e9:8f:b9:f2:98:a5:ec:7a:b9: dc:a2:e2:b7:4f:a4:2c:e0:e1:9d:f0:89:a4:ca:40: e5:3e:75:fd:1c:ef:52:b6:b0:b8:67:ab:10:0e:fd: 52:b5:fe:b9:5a:93:5c:0f:02:86:91:f9:60:a6:53: 72:8a:e0:f8:44:a5:78:06:c2:57:30:46:61:e2:d7: 5c:00:20:27:6b:14:84:c6:1c:4d:ef:df:c5:21:26: 05:76:20:d0:3c:70:71:8b:21:36:ec:a6:b4:38:20: f2:01:7f:9f:01:51:bd:0c:4f:f0:71:29:87:ad:07: 7b:c2:c9:e1:1c:67:27:3d:dc:0a:69:20:7e:b6:18: bd:5e:0b:eb:bd:cb:46:a4:c2:34:ce:a4:d7:5c:8d: c1:3d:c2:e6:1d:cb:46:99:09:9a:8e:dd:a2:10:44: b0:69:cb:84:e3:c3:fd:da:43:85:9b:6e:68:ae:9d: 5a:6f:b1:61:3c:3c:93:8b:58:d6:0f:d4:69:3f:ed: 3b:30:96:e2:ba:71:6d:ed:48:43:d9:53:d6:91:98: ec:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A2:16:2B:10:4C:51:3B:FD:27:F6:14:6E:A1:1D:21:11:C5:45:B1 X509v3 Authority Key Identifier: keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0a:77:86:24:15:1a:b7:86:12:6d:b4:df:2a:a5:bb:de:9c: 87:76:56:24:2e:37:3f:9b:49:e5:16:c9:b2:3c:0e:df:17:2f: db:01:90:3f:bf:2f:4e:83:77:af:6a:66:e0:0a:34:3a:0c:0e: b2:ad:f5:ca:0c:8a:bf:14:3f:cb:40:d7:f3:26:5d:1e:f4:5b: b2:52:56:83:9e:d4:ac:05:df:db:f2:4e:36:6a:41:19:17:4e: 2a:c3:8b:52:73:15:ba:fe:ef:93:6f:33:97:49:44:c2:7e:0e: 2f:c5:9d:c9:23:25:42:4e:0c:4b:23:fa:bf:ed:3a:4e:be:84: f5:8a:e1:b0:a4:19:c5:53:f6:49:50:4b:aa:63:ff:ea:45:8e: 5c:2a:43:ce:c9:e8:88:8c:f2:7c:f0:86:61:4f:33:c4:8c:bb: ed:c0:83:bc:10:fe:ff:8b:f8:3d:85:9c:af:ef:4a:2f:34:2e: ba:73:66:39:e7:24:d3:cc:00:05:ca:75:fb:ab:6e:40:7f:68: df:d8:06:69:55:5e:0a:04:7d:16:c7:65:8d:2c:52:e1:75:65: f0:cc:3b:f5:21:6b:1a:4e:85:ec:c3:b8:69:d3:1e:ac:19:a1: 52:52:8a:92:76:6e:83:95:7b:65:23:45:e2:a7:a6:13:9d:59: 72:c2:e0:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDNEMxMTAvBgNVBAUTKDJBOUFFRjZCQzEyOTkxNENBMEI5MTA1QzkyNzFERUFG MzlEQkM4NjYwHhcNMjYwMTI0MTkzOTUzWhcNMjYwMTMxMTkzOTUzWjAYMRYwFAYD VQQDDA02OTc1MjAwYS1jMjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApe7VQac4LE80x0Fiz6o97UKxxogcxFzUgO0Oo71ySazsaWd9G4IgZUX1/4w+ 8Zytjj7pj7nymKXserncouK3T6Qs4OGd8ImkykDlPnX9HO9StrC4Z6sQDv1Stf65 WpNcDwKGkflgplNyiuD4RKV4BsJXMEZh4tdcACAnaxSExhxN79/FISYFdiDQPHBx iyE27Ka0OCDyAX+fAVG9DE/wcSmHrQd7wsnhHGcnPdwKaSB+thi9XgvrvctGpMI0 zqTXXI3BPcLmHctGmQmajt2iEESwacuE48P92kOFm25orp1ab7FhPDyTi1jWD9Rp P+07MJbiunFt7UhD2VPWkZjsPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyiFisQ TFE7/Sf2FG6hHSERxUWxMB8GA1UdIwQYMBaAFCqa72vBKZFMoLkQXJJx3q8528hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0M0Qy9DQ0IyMDM1NEI5 RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtVeWd1UkJja25IZXJ6bmJ5 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twcnZhOEVwa1V5Z3VSQmNrbkhlcnpuYnlHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0M0Qy9DQ0IyMDM1NEI5RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtV eWd1UkJja25IZXJ6bmJ5R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMCneGJBUat4YSbbTfKqW73pyHdlYkLjc/m0nlFsmyPA7fFy/bAZA/ vy9Og3evambgCjQ6DA6yrfXKDIq/FD/LQNfzJl0e9FuyUlaDntSsBd/b8k42akEZ F04qw4tScxW6/u+TbzOXSUTCfg4vxZ3JIyVCTgxLI/q/7TpOvoT1iuGwpBnFU/ZJ UEuqY//qRY5cKkPOyeiIjPJ88IZhTzPEjLvtwIO8EP7/i/g9hZyv70ovNC66c2Y5 5yTTzAAFynX7q25Af2jf2AZpVV4KBH0Wx2WNLFLhdWXwzDv1IWsaToXsw7hp0x6s GaFSUoqSdm6DlXtlI0Xip6YTnVlywuA3 -----END CERTIFICATE-----Generated at Sun Jan 25 08:19:35 2026 by rpki-client