This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft File: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft (raw, json) Hash identifier: xp6rr4BNE6ERy/dkYMUV15Mr/d9tqojyQ/hRGf3P25A= Subject key identifier: 54:C7:7E:A5:5F:57:BC:46:F1:6E:EF:78:E2:58:29:AF:96:7E:A3:1A Authority key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 Certificate issuer: /CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Certificate serial: 041B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft Manifest number: 040F Signing time: Sat 24 Jan 2026 23:35:59 +0000 Manifest this update: Sat 24 Jan 2026 23:35:59 +0000 Manifest next update: Sat 31 Jan 2026 23:35:59 +0000 Files and hashes: 1: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl (hash: 0IgeOhQUCfi9FMsNeshVHGjgILz4KKqJYpSow4iUWAk=) 2: 688C6AC29D9D11EC958A216AC4F9AE02.roa (hash: rQCKwpVXSCN9Y75hhPwPDo9+AXfNNoLzfRi82A6bdSI=) 3: 854ACCD2DFEA11ECB7DF0A2EC4F9AE02.roa (hash: C6Z/IfRVQV8LxL1Oc2uDTt0509ENzUWPGHXpk7TwKNY=) 4: 695DB5289D9D11EC958A216AC4F9AE02.roa (hash: c9fr6KD/Ih6e5aCRy3Bruof+Va6iYKpCGv8u+/ETzK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156DB4, serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Validity Not Before: Jan 24 23:35:59 2026 GMT Not After : Jan 31 23:35:59 2026 GMT Subject: CN=6975575f-2989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:4b:c4:09:be:61:70:79:c8:b8:dc:79:4a: 9c:91:17:44:00:95:17:73:d3:de:87:e0:d8:fc:29: 6a:1c:df:84:5e:c4:93:f7:b7:fd:fe:78:af:87:7f: 77:8f:33:88:4d:b3:9c:13:bf:20:42:68:67:a8:84: 65:bc:e0:49:1d:92:70:be:a6:af:08:d1:b8:f8:b9: 7b:90:58:42:69:0b:cb:18:f8:ab:de:cb:9c:dc:78: c0:60:68:c8:a6:38:ee:57:43:a0:f1:ff:1d:94:df: 03:af:7f:28:ac:b4:3a:37:22:5c:57:03:ab:a7:20: b2:f0:3c:6d:42:42:66:b9:dd:8c:ab:51:3a:51:cb: e3:a3:91:6e:91:00:ca:8e:14:35:de:36:72:6b:42: 81:bb:88:9d:98:2f:c7:fb:5b:b4:6f:24:68:19:65: a1:32:f9:54:25:aa:c6:57:c8:59:44:1b:00:10:42: d4:da:84:72:e7:aa:d2:c8:fa:aa:6b:ed:66:6b:f8: 6b:71:82:ec:28:26:73:91:33:d5:f4:59:fe:fb:20: 44:5c:f6:67:58:52:62:65:33:c3:d5:8b:de:72:df: a9:78:11:9a:01:6e:20:11:25:fe:15:06:f9:7b:32: 33:6d:13:c1:3f:dd:34:a5:55:ec:c1:a0:5a:b0:ee: da:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C7:7E:A5:5F:57:BC:46:F1:6E:EF:78:E2:58:29:AF:96:7E:A3:1A X509v3 Authority Key Identifier: keyid:F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:95:ea:a9:5c:b5:f2:9b:4b:a2:0c:67:c6:df:ea:02:a9:f4: f6:25:22:0e:ed:7f:e6:1a:22:8c:d8:fe:bb:29:32:64:3a:70: 3b:bd:87:e2:dd:3c:df:87:19:10:a9:ac:2a:7f:ac:ac:5c:e6: 9f:a6:cb:48:02:60:20:27:a9:ec:47:82:01:a6:f9:5c:5a:d0: 08:c3:cf:a9:4d:a6:62:21:7f:17:aa:5f:42:5a:5d:dd:3e:7d: c4:5d:42:9e:d7:8d:4e:21:df:67:8d:ff:fa:e0:4f:57:bc:65: 33:8f:ac:aa:43:d8:1c:fc:1d:37:9f:a5:29:35:ca:37:03:ac: bf:97:b9:d4:38:0c:6a:7d:67:66:14:34:c7:00:56:75:7d:3d: 66:73:9f:b8:c6:e6:50:d4:2b:33:ce:36:c8:40:58:60:6a:aa: 15:64:31:b9:6c:88:8d:14:12:3b:b9:e8:2b:43:07:de:a5:14: 34:ad:da:bb:2f:6b:fb:8b:b4:8f:95:2a:29:b2:ad:1a:72:31: 60:f5:c7:29:b4:c2:2a:18:0e:a2:09:9b:77:62:35:ad:d6:93: db:c3:9c:98:4c:f9:f4:6d:9a:e2:a8:3d:68:44:33:f7:a2:8c: b6:2f:fb:a1:0c:3e:31:9c:11:54:82:30:ce:67:0a:9e:2a:ab: 0a:d2:bb:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZEQjQxMTAvBgNVBAUTKEYyRDEyNkYxNDIwODZBMjZFM0M1ODRBNzBBQjNFNTI3 QjMwMzgxODIwHhcNMjYwMTI0MjMzNTU5WhcNMjYwMTMxMjMzNTU5WjAYMRYwFAYD VQQDDA02OTc1NTc1Zi0yOTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxNLxAm+YXB5yLjceUqckRdEAJUXc9Peh+DY/ClqHN+EXsST97f9/nivh393 jzOITbOcE78gQmhnqIRlvOBJHZJwvqavCNG4+Ll7kFhCaQvLGPir3suc3HjAYGjI pjjuV0Og8f8dlN8Dr38orLQ6NyJcVwOrpyCy8DxtQkJmud2Mq1E6Ucvjo5FukQDK jhQ13jZya0KBu4idmC/H+1u0byRoGWWhMvlUJarGV8hZRBsAEELU2oRy56rSyPqq a+1ma/hrcYLsKCZzkTPV9Fn++yBEXPZnWFJiZTPD1Yvect+peBGaAW4gESX+FQb5 ezIzbRPBP900pVXswaBasO7aYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTHfqVf V7xG8W7veOJYKa+WfqMaMB8GA1UdIwQYMBaAFPLRJvFCCGom48WEpwqz5SezA4GC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkRCNC9FODREQjk4QTlE OUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFpYmp4WVNuQ3JQbEo3TURn WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh0RW04VUlJYWlianhZU25DclBsSjdNRGdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkRCNC9FODREQjk4QTlEOUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFp Ymp4WVNuQ3JQbEo3TURnWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZleqpXLXym0uiDGfG3+oCqfT2JSIO7X/mGiKM2P67KTJkOnA7vYfi 3TzfhxkQqawqf6ysXOafpstIAmAgJ6nsR4IBpvlcWtAIw8+pTaZiIX8Xql9CWl3d Pn3EXUKe141OId9njf/64E9XvGUzj6yqQ9gc/B03n6UpNco3A6y/l7nUOAxqfWdm FDTHAFZ1fT1mc5+4xuZQ1CszzjbIQFhgaqoVZDG5bIiNFBI7uegrQwfepRQ0rdq7 L2v7i7SPlSopsq0acjFg9ccptMIqGA6iCZt3YjWt1pPbw5yYTPn0bZriqD1oRDP3 ooy2L/uhDD4xnBFUgjDOZwqeKqsK0rv9 -----END CERTIFICATE-----Generated at Sun Jan 25 15:34:21 2026 by rpki-client