This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: HIFv7fe18p9OuGumD+0zNvsQvKDIOS0HQoW9BYS5aDg= Subject key identifier: 4E:E4:FF:83:CD:65:34:9B:7D:26:9D:B2:25:69:B4:C9:93:A4:AA:72 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 05ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 05B1 Signing time: Sat 24 Jan 2026 22:33:34 +0000 Manifest this update: Sat 24 Jan 2026 22:33:33 +0000 Manifest next update: Sat 31 Jan 2026 22:33:33 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: jY6xT6NLPpA5sUMNkypv/QK4PRm9U4zXo3/CEW6qOUM=) 2: F6DBFB92B3F311F0929DA35BC4F9AE02.roa (hash: +ZeOSIYk6Ly5nBeaHh56dm3TTkPs3P+Yl4siQcbERQk=) 3: 06E8BCB4B3F411F0874AC55BC4F9AE02.roa (hash: X7h+WmVxE7GHZl6Xmec4Vc2w1X+CORKl5y2YgctgHb0=) 4: 48811D22EBB411F0A3585372626F56BC.roa (hash: gn8vnKaXW6ZC2B6o+QxRxKZcAtoDn7RGJ7G1J2ZxsAQ=) 5: B589332C498611EF90B46962C4F9AE02.roa (hash: 7w9wF8XsqdQtTLhDlS6/cW8MDP0hFJjk/GVvhd+vl1Y=) 6: 9DF3BC14E48011F0AC3D40BC426F56BC.roa (hash: F7JVi3Ysd0rnz27lVTZpYOD/ZVFzooszw+p994EZ3OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1517 (0x5ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Jan 24 22:33:33 2026 GMT Not After : Jan 31 22:33:33 2026 GMT Subject: CN=697548be-31e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:ea:34:fc:b6:2f:c5:fa:e3:8a:36:0c:63: 7e:01:38:84:2a:5a:6e:c3:a3:99:c8:a8:50:50:8b: ee:69:17:eb:19:4a:f9:3d:18:12:43:5b:51:72:a3: 53:6d:f4:fc:8d:86:15:63:b0:71:af:54:13:0e:03: d2:ac:eb:ca:e0:10:fe:40:94:26:e6:a6:f6:3d:f3: 7a:ac:c7:1a:3b:59:2d:98:82:b1:07:1a:c5:f7:c3: bc:28:36:b4:af:2d:2b:7b:52:87:1b:42:7a:75:74: ea:be:f5:22:ea:eb:73:11:2b:01:56:76:cc:fa:40: de:1e:cb:6c:7b:80:ac:94:43:30:3f:13:b6:a3:42: b3:7c:86:1c:2a:9b:d4:51:92:72:4c:c6:70:4b:ee: 0b:bf:82:6a:a1:58:16:94:e4:cf:57:18:8e:6d:6a: 93:6a:24:0c:9f:dc:47:68:ab:da:bc:4b:47:9e:a0: 28:1f:b1:b1:32:9b:f0:a3:29:d8:a2:5b:9c:17:02: ae:13:b4:9e:e8:9d:56:54:a2:9a:99:e2:86:68:59: 2a:04:4e:a7:b1:d2:d9:d0:2d:9b:96:b8:4c:f1:59: bd:87:53:14:7c:c7:5b:4b:fe:f2:db:45:d6:d6:c7: 57:c4:fc:8a:0b:56:b7:a9:d3:ce:e8:95:65:2b:b8: c0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E4:FF:83:CD:65:34:9B:7D:26:9D:B2:25:69:B4:C9:93:A4:AA:72 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c1:6b:0b:10:29:e5:83:22:44:81:3b:98:cb:0a:06:72:5a: a8:8d:0b:90:b9:8f:db:fa:bd:af:c3:90:c3:ab:4b:9c:b9:03: cb:63:25:ef:a4:9a:21:95:6a:aa:23:bb:ac:43:2e:01:49:9c: d2:42:8f:ea:74:73:07:95:10:28:61:8c:4b:e6:8d:84:03:53: 5b:f6:01:2e:29:04:57:87:ea:25:2e:62:c1:0e:d2:f7:42:8c: 8f:b3:8e:ab:30:3e:a6:8e:13:eb:14:3a:dd:cd:a1:9b:0b:77: 56:ed:d6:c0:b0:30:18:9c:bb:b5:b4:24:3b:cd:35:c5:d9:c7: 16:c7:d0:c4:74:41:eb:ee:4e:5c:f0:f8:22:ee:1a:00:73:01: ec:47:1f:ee:b3:9d:a3:22:37:e6:c3:49:b2:0d:bf:ee:1f:28: 9d:76:2e:ce:b7:70:c6:ab:c7:cd:9e:8b:b6:13:9a:3c:48:02: 7e:0f:87:c6:3f:a2:03:4d:04:47:e2:96:f2:ab:50:87:c2:e9: 4a:dc:32:5a:dd:6c:78:22:23:4b:f5:f6:37:d2:98:03:55:90: 1f:ef:cf:87:dc:f4:52:8c:34:c9:bd:79:68:33:8f:66:a9:68: 6b:65:0d:7e:49:6b:8c:34:18:2c:75:87:f6:9c:37:34:1b:9b: 35:06:4a:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjYwMTI0MjIzMzMzWhcNMjYwMTMxMjIzMzMzWjAYMRYwFAYD VQQDDA02OTc1NDhiZS0zMWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvTqNPy2L8X644o2DGN+ATiEKlpuw6OZyKhQUIvuaRfrGUr5PRgSQ1tRcqNT bfT8jYYVY7Bxr1QTDgPSrOvK4BD+QJQm5qb2PfN6rMcaO1ktmIKxBxrF98O8KDa0 ry0re1KHG0J6dXTqvvUi6utzESsBVnbM+kDeHstse4CslEMwPxO2o0KzfIYcKpvU UZJyTMZwS+4Lv4JqoVgWlOTPVxiObWqTaiQMn9xHaKvavEtHnqAoH7GxMpvwoynY olucFwKuE7Se6J1WVKKameKGaFkqBE6nsdLZ0C2blrhM8Vm9h1MUfMdbS/7y20XW 1sdXxPyKC1a3qdPO6JVlK7jAswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7k/4PN ZTSbfSadsiVptMmTpKpyMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYwWsLECnlgyJEgTuYywoGclqojQuQuY/b+r2vw5DDq0ucuQPLYyXv pJohlWqqI7usQy4BSZzSQo/qdHMHlRAoYYxL5o2EA1Nb9gEuKQRXh+olLmLBDtL3 QoyPs46rMD6mjhPrFDrdzaGbC3dW7dbAsDAYnLu1tCQ7zTXF2ccWx9DEdEHr7k5c 8Pgi7hoAcwHsRx/us52jIjfmw0myDb/uHyiddi7Ot3DGq8fNnou2E5o8SAJ+D4fG P6IDTQRH4pbyq1CHwulK3DJa3Wx4IiNL9fY30pgDVZAf78+H3PRSjDTJvXloM49m qWhrZQ1+SWuMNBgsdYf2nDc0G5s1Bkob -----END CERTIFICATE-----Generated at Mon Jan 26 02:34:14 2026 by rpki-client