This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json) Hash identifier: y4xSZu08lRN0FnMrUv5CIZPIgOyxkx40eMbtq7GYG1c= Subject key identifier: 9E:6A:AF:F9:FA:F3:EC:D0:AE:6E:3E:29:7C:AD:26:95:D3:1B:0E:A1 Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Certificate serial: 0D3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft Manifest number: 0D1E Signing time: Sat 24 Jan 2026 17:40:59 +0000 Manifest this update: Sat 24 Jan 2026 17:40:59 +0000 Manifest next update: Sat 31 Jan 2026 17:40:59 +0000 Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: bgNRIbOO0h2N4RIrnIHzgxsYCBq3mCjkd8WJ0fgN65g=) 2: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: +UszTokGWITuaKodHVqtXowS/kPpAyLOoDwxxniGhh8=) 3: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: HUKn8TCAiBNnvKqCcCok66Nsu0wRIivvDnUfIyEmyBw=) 4: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: PI+4io6zs54SvjfIWW1YmDzNzGjU5q2yfd6LaVWJgGw=) 5: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: va4jKyvaWBHSOXW9lhNLFk3dXPhiBg3Z1DqKqXpZves=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3386 (0xd3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Validity Not Before: Jan 24 17:40:59 2026 GMT Not After : Jan 31 17:40:59 2026 GMT Subject: CN=6975042b-ed51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:88:e9:e9:54:f1:12:1b:6d:e1:71:08:ef:dc: 13:81:29:0f:1a:ff:a3:80:2b:69:92:c4:d6:ce:7e: 49:aa:8c:b1:47:27:ee:af:6c:67:b5:ed:00:81:34: 86:80:0e:ab:4f:c5:a2:c5:23:09:2f:34:d8:ab:15: 19:63:eb:de:1c:ad:64:3e:e3:bd:27:d5:00:c2:05: 2e:8c:da:97:86:57:6f:c7:7a:40:1e:bf:db:60:58: 1c:75:4e:14:b5:dd:c6:7a:8b:fc:fa:bf:c9:6b:9f: 77:36:cc:eb:3e:61:d6:8c:15:ba:f5:50:86:b1:f0: 65:b3:d3:48:7c:53:a8:93:a8:9d:2d:91:0f:c2:e2: 3a:fb:31:84:32:c0:3c:a6:bd:3d:a1:28:8b:3b:c2: 07:d8:b3:92:c8:18:78:66:35:fa:b5:a8:bf:0b:c1: 96:45:6e:98:c0:ad:0a:a2:3b:cc:91:b8:e7:ec:a0: 8e:91:b2:b0:42:17:e8:ce:18:16:1d:50:0b:a8:65: 97:69:b1:2e:d5:23:1b:61:08:76:f8:3a:2a:de:2c: 74:7c:93:ae:97:92:de:24:29:2b:82:58:eb:a6:88: ec:68:2f:b6:8e:35:bf:10:9f:26:fe:db:cc:4b:5e: 02:16:19:ec:f9:eb:ef:1e:49:5a:90:08:67:37:04: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6A:AF:F9:FA:F3:EC:D0:AE:6E:3E:29:7C:AD:26:95:D3:1B:0E:A1 X509v3 Authority Key Identifier: keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:cd:3d:cd:21:a6:64:86:ea:1a:e6:76:97:fd:88:35:81:7b: de:95:de:3b:d9:d5:10:66:8d:eb:fc:c4:aa:84:57:ed:9a:37: a4:ca:7e:1e:10:d8:90:e7:76:f6:91:82:f8:8d:b4:9a:77:0f: 52:77:d0:36:56:72:06:8e:00:d9:7d:9d:03:73:b2:56:23:0d: 59:33:cb:b2:06:2d:5f:92:9f:a6:d3:11:9c:3b:29:ce:0e:28: 2f:dc:55:e8:b5:f6:e1:72:61:de:af:5d:d8:2a:7c:92:ec:bd: e5:bf:c9:3e:04:a4:e0:0d:8e:63:53:5c:e6:bf:7e:57:4c:f0: c3:a4:9f:d1:c0:1c:53:9a:78:c0:5c:90:6a:27:80:27:59:40: 29:fa:c0:1f:df:a9:cd:43:17:44:79:cd:65:21:04:a6:74:49: 4b:74:6c:eb:0b:c0:e7:a2:b1:58:5f:6c:13:6a:71:23:34:12: c4:00:e6:8a:ad:fa:5f:03:17:99:c1:01:ca:ac:1c:be:7c:d1: a0:ef:dc:52:9d:48:cd:8c:ce:42:65:ed:10:73:3f:ee:d3:40: 2b:49:44:4b:99:ed:25:79:fd:ec:c3:d9:71:03:d8:86:d2:10: c7:a5:d1:d7:50:32:2d:c1:86:35:a8:9c:f3:ce:97:3d:c0:00: 0b:10:6e:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENzUxMTAvBgNVBAUTKEY0MzQ1QzMxNEQ2RUJFREVCNDVGRTA3NTVGOEZGRUFD RjM2M0NCOEEwHhcNMjYwMTI0MTc0MDU5WhcNMjYwMTMxMTc0MDU5WjAYMRYwFAYD VQQDDA02OTc1MDQyYi1lZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhojp6VTxEhtt4XEI79wTgSkPGv+jgCtpksTWzn5JqoyxRyfur2xnte0AgTSG gA6rT8WixSMJLzTYqxUZY+veHK1kPuO9J9UAwgUujNqXhldvx3pAHr/bYFgcdU4U td3Geov8+r/Ja593NszrPmHWjBW69VCGsfBls9NIfFOok6idLZEPwuI6+zGEMsA8 pr09oSiLO8IH2LOSyBh4ZjX6tai/C8GWRW6YwK0KojvMkbjn7KCOkbKwQhfozhgW HVALqGWXabEu1SMbYQh2+Doq3ix0fJOul5LeJCkrgljrpojsaC+2jjW/EJ8m/tvM S14CFhns+evvHklakAhnNwRmYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5qr/n6 8+zQrm4+KXytJpXTGw6hMB8GA1UdIwQYMBaAFPQ0XDFNbr7etF/gdV+P/qzzY8uK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ3NS83NDM0OTQwRUYy NUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0NjBYLUIxWDRfLXJQTmp5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlEUmNNVTF1dnQ2MFgtQjFYNF8tclBOank0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ3NS83NDM0OTQwRUYyNUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0 NjBYLUIxWDRfLXJQTmp5NG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByzT3NIaZkhuoa5naX/Yg1gXveld472dUQZo3r/MSqhFftmjekyn4e ENiQ53b2kYL4jbSadw9Sd9A2VnIGjgDZfZ0Dc7JWIw1ZM8uyBi1fkp+m0xGcOynO Digv3FXotfbhcmHer13YKnyS7L3lv8k+BKTgDY5jU1zmv35XTPDDpJ/RwBxTmnjA XJBqJ4AnWUAp+sAf36nNQxdEec1lIQSmdElLdGzrC8DnorFYX2wTanEjNBLEAOaK rfpfAxeZwQHKrBy+fNGg79xSnUjNjM5CZe0Qcz/u00ArSURLme0lef3sw9lxA9iG 0hDHpdHXUDItwYY1qJzzzpc9wAALEG6p -----END CERTIFICATE-----Generated at Sun Jan 25 08:26:23 2026 by rpki-client