This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: JI9HdyqzPt/A0+1nSHBg27IndWzWdFKFbCoDuZrc9go= Subject key identifier: 10:5A:47:F2:0D:5B:DA:70:38:E0:56:51:6E:77:53:6B:49:BE:BF:40 Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 298B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 28A1 Signing time: Sat 24 Jan 2026 15:29:53 +0000 Manifest this update: Sat 24 Jan 2026 15:29:53 +0000 Manifest next update: Sat 31 Jan 2026 15:29:53 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: RkIqlJUVJOqcitlm+dGZMZZKhuZyI2IIYrJ3cfJRLtY=) 2: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: b2Yq5jV0ZpUmJZqaRWPtD89nJkoGKuS1X5rO9Hm2iOA=) 3: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: oWJMpDIMTFAfw38plnHhHvz3GPHifE5GFKfNlopflac=) 4: 45163F62D61E11EEB0DF364BC4F9AE02.roa (hash: azzjmLkaapO1bUGsSJymLagZJLCI9oTdTEZN6s+TQLM=) 5: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: 3rfvelTpkGIVSx6swNlRbMEKIqAJwLp3a6nGC9gVNp0=) 6: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: HsIba3Vn2KDyjN1fLbCY3eco8tWxf11MfX9b79gT5bQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10635 (0x298b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Jan 24 15:29:53 2026 GMT Not After : Jan 31 15:29:53 2026 GMT Subject: CN=6974e571-ddbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b3:b7:8f:0a:5d:2f:0e:30:ae:62:d2:95:9d: 35:65:f5:6b:2d:b9:2e:55:42:a3:15:09:08:c6:c7: bf:c7:3a:4e:d5:b7:41:b9:8d:66:fd:d6:d5:d8:91: 9d:5f:37:81:dc:57:da:65:39:a4:20:f5:a7:66:77: 6f:53:39:93:80:bb:d2:d3:98:27:11:73:87:58:a9: d1:8c:fe:2a:13:09:9d:ce:9c:31:8f:59:bc:f2:cd: 0f:f6:3a:90:cc:6b:28:d5:df:78:a9:cd:66:ef:f0: 0e:16:06:16:fb:18:a5:e4:28:ab:32:f9:8f:f3:09: d8:69:ad:7f:e1:6c:a7:86:a5:8e:0d:c7:37:bc:d3: f5:36:13:e4:d9:15:69:4f:c5:a3:a9:5e:22:20:63: d1:4f:c2:42:59:b0:83:21:77:a3:2a:83:a2:93:11: ba:83:b6:15:8e:75:26:ec:f1:f0:4b:d8:5c:b0:6d: a0:d8:51:d7:bc:75:28:47:69:dc:d0:b5:48:11:c1: fa:e6:18:d5:52:0b:b8:de:33:56:12:25:85:26:75: de:6c:2d:23:82:35:d6:f8:9a:71:c4:ab:08:e9:e3: fd:fe:32:df:74:bc:66:69:c8:2f:36:bd:47:c7:b5: b3:3e:c0:d4:b7:4d:81:3f:db:b9:bc:21:1c:5e:46: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5A:47:F2:0D:5B:DA:70:38:E0:56:51:6E:77:53:6B:49:BE:BF:40 X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:3b:92:57:1c:e0:6e:0e:6d:43:f1:b6:68:5b:34:6c:59:c2: b0:69:db:44:d5:eb:ab:0e:56:b4:bd:23:54:df:ee:7a:ab:30: 02:2c:53:98:bc:e0:2d:be:26:80:4f:4b:83:0c:b3:72:04:43: d4:b4:6f:9f:63:3c:c8:c9:a4:db:ca:20:bf:77:90:57:e4:99: 22:78:66:60:4c:86:75:7d:52:eb:48:7b:85:90:8f:c3:41:20: b5:bb:bc:6c:c1:3d:5e:9c:84:50:b2:a0:71:ba:74:de:3e:49: 18:9d:0d:1b:79:1a:55:c2:87:cb:af:2f:29:92:41:0f:bf:74: cb:9a:73:67:e7:ed:d9:e5:db:e0:40:70:17:d6:ed:d4:c7:63: d1:dd:9a:34:c1:e9:1f:1c:f4:4a:6d:39:cf:fc:a5:57:d1:b2: 28:c9:44:d7:1b:9f:47:19:94:88:c3:1e:5f:88:03:9f:70:26: b6:b7:5f:86:24:6b:8a:76:ed:32:2e:f5:77:02:9b:4e:9b:1a: 6e:a2:8e:9d:78:b9:d3:24:ab:2e:45:58:8b:c1:09:d9:38:93: 44:fe:61:14:71:e4:be:84:3c:f5:8d:c2:02:f8:ee:90:c7:6d: ce:22:cf:d1:8b:fb:4a:2f:88:6a:53:49:cb:8a:63:23:f0:f1: fa:6b:36:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjYwMTI0MTUyOTUzWhcNMjYwMTMxMTUyOTUzWjAYMRYwFAYD VQQDDA02OTc0ZTU3MS1kZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurO3jwpdLw4wrmLSlZ01ZfVrLbkuVUKjFQkIxse/xzpO1bdBuY1m/dbV2JGd XzeB3FfaZTmkIPWnZndvUzmTgLvS05gnEXOHWKnRjP4qEwmdzpwxj1m88s0P9jqQ zGso1d94qc1m7/AOFgYW+xil5CirMvmP8wnYaa1/4WynhqWODcc3vNP1NhPk2RVp T8WjqV4iIGPRT8JCWbCDIXejKoOikxG6g7YVjnUm7PHwS9hcsG2g2FHXvHUoR2nc 0LVIEcH65hjVUgu43jNWEiWFJnXebC0jgjXW+JpxxKsI6eP9/jLfdLxmacgvNr1H x7WzPsDUt02BP9u5vCEcXkbxZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBaR/IN W9pwOOBWUW53U2tJvr9AMB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoO5JXHOBuDm1D8bZoWzRsWcKwadtE1eurDla0vSNU3+56qzACLFOY vOAtviaAT0uDDLNyBEPUtG+fYzzIyaTbyiC/d5BX5JkieGZgTIZ1fVLrSHuFkI/D QSC1u7xswT1enIRQsqBxunTePkkYnQ0beRpVwofLry8pkkEPv3TLmnNn5+3Z5dvg QHAX1u3Ux2PR3Zo0wekfHPRKbTnP/KVX0bIoyUTXG59HGZSIwx5fiAOfcCa2t1+G JGuKdu0yLvV3AptOmxpuoo6deLnTJKsuRViLwQnZOJNE/mEUceS+hDz1jcIC+O6Q x23OIs/Ri/tKL4hqU0nLimMj8PH6azaJ -----END CERTIFICATE-----Generated at Sun Jan 25 06:10:24 2026 by rpki-client