This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft File: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft (raw, json) Hash identifier: BNhKyfAcbChkz3bI7IHftK4y+2zweQqRNCC9n59Rb4U= Subject key identifier: C1:8C:ED:DF:27:A1:0E:07:84:86:30:EE:AB:68:B2:61:DD:45:E8:2D Authority key identifier: 23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC Certificate issuer: /CN=A9158682/serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft Manifest number: 19 Signing time: Fri 23 Jan 2026 06:56:14 +0000 Manifest this update: Fri 23 Jan 2026 06:56:13 +0000 Manifest next update: Fri 30 Jan 2026 06:56:13 +0000 Files and hashes: 1: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl (hash: xMSI8+4ISvAoxlhFheA9CTl69ynz+PXaYwBuf7ZGegM=) 2: C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa (hash: UQqZB27tXe9lrZzq0AP0ajBaHWQmUOmhOsTlBf5Xzg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158682, serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC Validity Not Before: Jan 23 06:56:13 2026 GMT Not After : Jan 30 06:56:13 2026 GMT Subject: CN=69731b8e-2675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:07:4b:3b:7c:c5:0e:cb:f9:ed:69:05:cb: 2f:ee:47:d8:22:5e:16:f7:f2:d0:eb:1f:64:30:b0: 31:87:d6:8e:2f:ba:ae:53:f0:e9:c7:3e:88:1c:28: 67:32:26:22:ea:da:73:04:69:4b:b1:28:00:fe:71: ab:cb:20:5c:e8:9a:33:47:29:09:89:a1:fe:c5:7b: c7:60:5a:6c:ec:9c:5f:b1:63:1b:48:ce:ec:d2:e4: a2:f6:fc:ab:e5:70:4b:4f:f8:ba:7c:e2:09:d2:59: 27:7c:d7:d9:91:cd:ff:59:f7:84:8f:fa:c6:48:9b: 48:bf:cc:b5:da:11:b9:fb:6e:dd:54:36:6c:e6:4d: f6:aa:c4:2e:10:ac:8b:30:48:0d:26:9f:c3:aa:c0: 22:69:73:01:4d:6f:de:d2:14:1d:54:b1:e2:2a:aa: 2a:9d:3f:43:52:fd:39:e3:59:15:46:63:f3:f4:89: 9d:fc:b1:66:16:18:b3:b2:2b:55:c1:53:6e:66:11: 7a:d7:21:46:20:73:4b:91:cf:29:7a:9f:f8:7c:0b: 88:8c:f3:8f:6f:10:bf:8c:d7:2e:a7:7e:5c:4f:28: f4:60:ad:5e:82:5e:f0:59:12:42:f2:63:c4:cd:29: 76:c1:c1:7e:f9:e6:ba:2b:35:24:57:9f:27:12:90: 62:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8C:ED:DF:27:A1:0E:07:84:86:30:EE:AB:68:B2:61:DD:45:E8:2D X509v3 Authority Key Identifier: keyid:23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:9a:10:d1:e1:ff:8a:c5:21:4f:45:dd:bc:6c:1f:0c:7b:ad: 5e:34:82:c2:8a:29:ac:6f:61:29:c3:82:05:76:45:d8:99:ca: 5f:bb:8d:e7:de:b3:a3:4f:56:e7:ad:f6:52:59:2e:c8:7d:7a: 4d:7e:ec:4e:41:33:cd:a6:fb:83:53:4c:0d:f9:13:0f:18:02: b3:cf:40:e7:17:84:92:57:6d:d7:b7:27:7f:cc:38:72:27:ef: 64:29:e6:57:df:06:f6:72:16:6a:96:42:61:be:0b:be:76:04: 3a:7b:f4:ba:21:5b:5b:fa:9d:64:a0:2a:65:c8:00:90:30:fa: ff:80:ac:c0:9e:9f:b2:10:2b:ca:40:13:39:80:77:79:67:9b: 66:10:cd:b7:4c:39:38:3e:7f:14:10:19:db:c8:4d:3e:5e:8a: 04:3b:db:c6:57:9f:e7:fc:f8:9e:39:44:4d:07:b8:4a:b7:3a: 3d:3d:20:f5:d0:57:4d:be:3c:72:d7:15:8e:00:af:78:fa:2a: 5c:c9:2e:83:db:3d:ab:96:7d:f0:5f:85:27:9a:33:3b:13:ea: 6d:4f:f5:46:fa:48:08:5a:52:89:0f:ca:46:2c:d2:65:9c:83: 8c:0b:12:01:f5:aa:9e:a2:79:e9:25:66:80:a8:83:18:85:3b: 1d:ec:af:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODY4MjExMC8GA1UEBRMoMjNFMUU0MjU5RkFCQ0Q0OUZENThDQ0Q0NkNGMjAwQ0Qx MjFFMkVBQzAeFw0yNjAxMjMwNjU2MTNaFw0yNjAxMzAwNjU2MTNaMBgxFjAUBgNV BAMMDTY5NzMxYjhlLTI2NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3xAdLO3zFDsv57WkFyy/uR9giXhb38tDrH2QwsDGH1o4vuq5T8OnHPogcKGcy JiLq2nMEaUuxKAD+cavLIFzomjNHKQmJof7Fe8dgWmzsnF+xYxtIzuzS5KL2/Kvl cEtP+Lp84gnSWSd819mRzf9Z94SP+sZIm0i/zLXaEbn7bt1UNmzmTfaqxC4QrIsw SA0mn8OqwCJpcwFNb97SFB1UseIqqiqdP0NS/TnjWRVGY/P0iZ38sWYWGLOyK1XB U25mEXrXIUYgc0uRzyl6n/h8C4iM849vEL+M1y6nflxPKPRgrV6CXvBZEkLyY8TN KXbBwX755rorNSRXnycSkGI3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwYzt3yeh DgeEhjDuq2iyYd1F6C0wHwYDVR0jBBgwFoAUI+HkJZ+rzUn9WMzUbPIAzRIeLqww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NjgyLzA3MjlERDJFRDVC QTExRjBBQjkwREE3Q0M0RjlBRTAyL0ktSGtKWi1yelVuOVdNelViUElBelJJZUxx dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSS1Ia0paLXJ6VW45V016VWJQSUF6UkllTHF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 NjgyLzA3MjlERDJFRDVCQTExRjBBQjkwREE3Q0M0RjlBRTAyL0ktSGtKWi1yelVu OVdNelViUElBelJJZUxxdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFiaENHh/4rFIU9F3bxsHwx7rV40gsKKKaxvYSnDggV2RdiZyl+7jefe s6NPVuet9lJZLsh9ek1+7E5BM82m+4NTTA35Ew8YArPPQOcXhJJXbde3J3/MOHIn 72Qp5lffBvZyFmqWQmG+C752BDp79LohW1v6nWSgKmXIAJAw+v+ArMCen7IQK8pA EzmAd3lnm2YQzbdMOTg+fxQQGdvITT5eigQ728ZXn+f8+J45RE0HuEq3Oj09IPXQ V02+PHLXFY4Ar3j6KlzJLoPbPauWffBfhSeaMzsT6m1P9Ub6SAhaUokPykYs0mWc g4wLEgH1qp6ieeklZoCogxiFOx3sr3A= -----END CERTIFICATE-----Generated at Sun Jan 25 05:52:49 2026 by rpki-client