This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: D+ja9Vw9OiZp0YAwn+7Nsd5YOARszE18tStWgY3wuJw= Subject key identifier: 2B:D6:73:CC:6C:10:E3:14:AF:2E:4F:8D:06:42:E4:9C:31:F3:88:1D Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: AB Signing time: Fri 23 Jan 2026 05:17:24 +0000 Manifest this update: Fri 23 Jan 2026 05:17:24 +0000 Manifest next update: Fri 30 Jan 2026 05:17:24 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: m+dLuacjzsm8W6eUAjVYl+Cx+Q2GS+xmgWcUOvy20FA=) 2: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: waSBCEbcYlolsmBXhQe06r7v3tswwJfsDI5vXs6FVRA=) 3: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: BMK5egNvgRPb4zFSiHjhQ8AJphJuXdtk94523bl6Tzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 05:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: Jan 23 05:17:24 2026 GMT Not After : Jan 30 05:17:24 2026 GMT Subject: CN=69730464-ca83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:e8:fe:b5:0f:86:07:d8:08:46:86:fc:d6: f6:57:d2:58:f6:85:5b:a5:34:1d:f9:c9:4b:c9:f4: 44:35:d7:02:28:a1:a4:2b:15:b9:e8:6a:87:6a:2f: 8c:d3:37:bc:0e:37:63:d9:c9:d1:8a:11:0c:50:68: cc:6a:2c:65:68:b8:b8:7a:1d:11:76:d8:36:d9:07: 6f:45:01:3a:dd:fb:76:6c:7d:a1:43:e6:f1:4b:f9: 3e:a0:c1:e1:9a:0e:aa:03:0c:12:09:c3:20:cc:88: 7b:ae:e9:77:74:6c:69:8c:db:0e:ac:b9:ce:84:15: fc:63:c8:fd:5c:1a:c2:b2:01:89:55:19:3d:e3:82: 59:7b:df:be:e8:e0:aa:dc:20:93:0e:a5:bf:fa:b7: 3d:45:ad:da:66:95:b2:a2:65:f2:14:20:14:58:5e: 29:ec:c0:d3:b8:4e:8a:c3:4e:0c:6a:d2:bf:bb:74: 5e:39:9c:f7:d7:5e:66:69:a1:48:1d:6a:5c:7e:77: 8c:7e:13:16:19:c1:46:d1:3c:d2:86:cc:c7:fc:99: 51:c9:ce:e1:9c:b1:08:cf:aa:63:d0:48:75:3d:8b: 31:16:6e:06:13:88:c8:6a:f9:a6:bb:07:18:fe:4e: e1:72:f2:d1:f8:a1:18:5d:47:7c:9d:69:8f:ae:ce: b7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D6:73:CC:6C:10:E3:14:AF:2E:4F:8D:06:42:E4:9C:31:F3:88:1D X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b6:08:27:01:19:4e:b1:78:a7:76:32:f6:3d:66:b2:ae:b4: f1:21:79:70:04:b9:bd:e3:8b:4b:4a:0b:c2:5d:0b:5b:66:c5: d0:f6:34:6f:ce:45:16:1f:62:8d:68:19:a7:93:fc:b1:58:64: 4e:74:5e:06:9d:2e:41:6a:f0:d4:8a:ff:0b:23:d1:7a:fb:92: 79:23:55:79:0b:fb:dc:73:f0:a9:0c:34:73:e4:c3:ae:2f:89: 0c:ae:51:ec:08:ee:74:08:94:8f:3f:c9:08:98:9c:21:25:05: 05:ea:b0:11:d6:0b:d5:1b:58:67:5b:47:a0:0e:0e:a6:02:2e: 4f:a1:df:e8:63:ff:e0:ac:ca:59:0e:16:f1:4d:9c:5c:5f:3d: 37:c5:b7:29:e3:c4:3e:70:e2:e8:bd:8f:15:7a:4f:5c:fa:15: 07:a7:c7:52:0e:0e:9e:13:95:5a:6a:09:fc:15:84:29:43:fa: bd:2c:bc:91:09:e7:f3:f5:9a:38:b1:30:3a:05:b5:cf:16:d7: 3d:96:97:f1:f2:3d:9b:e9:a9:a8:b0:a7:1f:97:7f:89:35:e1: 15:29:13:17:dc:7e:d1:83:2e:23:bc:79:ce:b2:3e:fb:a6:d4: f1:d9:b9:7d:1f:8f:1e:cb:8e:86:f9:2e:1f:17:f6:ee:bd:4b: f4:64:5f:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZCNUQxMTAvBgNVBAUTKDBGRTA2MzI0RjE3ODdDOEYyMTRGQkVBRTY3RDg4NkQy MkY4MTY3MDIwHhcNMjYwMTIzMDUxNzI0WhcNMjYwMTMwMDUxNzI0WjAYMRYwFAYD VQQDDA02OTczMDQ2NC1jYTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscno/rUPhgfYCEaG/Nb2V9JY9oVbpTQd+clLyfRENdcCKKGkKxW56GqHai+M 0ze8Djdj2cnRihEMUGjMaixlaLi4eh0Rdtg22QdvRQE63ft2bH2hQ+bxS/k+oMHh mg6qAwwSCcMgzIh7rul3dGxpjNsOrLnOhBX8Y8j9XBrCsgGJVRk944JZe9++6OCq 3CCTDqW/+rc9Ra3aZpWyomXyFCAUWF4p7MDTuE6Kw04MatK/u3ReOZz3115maaFI HWpcfneMfhMWGcFG0TzShszH/JlRyc7hnLEIz6pj0Eh1PYsxFm4GE4jIavmmuwcY /k7hcvLR+KEYXUd8nWmPrs63XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvWc8xs EOMUry5PjQZC5Jwx84gdMB8GA1UdIwQYMBaAFA/gYyTxeHyPIU++rmfYhtIvgWcC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkI1RC85OEZEMUE0MkYx QzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJOGhUNzZ1WjlpRzBpLUJa d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkI1RC85OEZEMUE0MkYxQzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJ OGhUNzZ1WjlpRzBpLUJad0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvtggnARlOsXindjL2PWayrrTxIXlwBLm944tLSgvCXQtbZsXQ9jRv zkUWH2KNaBmnk/yxWGROdF4GnS5BavDUiv8LI9F6+5J5I1V5C/vcc/CpDDRz5MOu L4kMrlHsCO50CJSPP8kImJwhJQUF6rAR1gvVG1hnW0egDg6mAi5Pod/oY//grMpZ DhbxTZxcXz03xbcp48Q+cOLovY8Vek9c+hUHp8dSDg6eE5Vaagn8FYQpQ/q9LLyR Cefz9Zo4sTA6BbXPFtc9lpfx8j2b6amosKcfl3+JNeEVKRMX3H7Rgy4jvHnOsj77 ptTx2bl9H48ey46G+S4fF/buvUv0ZF/B -----END CERTIFICATE-----Generated at Sun Jan 25 06:20:04 2026 by rpki-client