This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json) Hash identifier: ZyRm7AKKACQqziyufeK0CYo07NnOM8y0WjBz4/ncnu0= Subject key identifier: 94:E0:69:0A:9B:7E:0B:A3:6D:4C:59:73:73:9D:8E:6F:5F:EB:FE:2D Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Certificate serial: 10C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft Manifest number: 10AE Signing time: Sat 24 Jan 2026 17:03:21 +0000 Manifest this update: Sat 24 Jan 2026 17:03:20 +0000 Manifest next update: Sat 31 Jan 2026 17:03:20 +0000 Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: N41kGZgm5g64w3lFurGJIRP/x6OSgec1q/g+gTQLOks=) 2: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: n6tSSqkwRgmQdmtW0qPK7myv2yYZQso++P1D8QIVPvs=) 3: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: RQ9qhLaDGLXZG82auuWSpjUE055Bze4DBt1aGvXRSH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4291 (0x10c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Validity Not Before: Jan 24 17:03:20 2026 GMT Not After : Jan 31 17:03:20 2026 GMT Subject: CN=6974fb58-85cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:96:fe:10:45:d1:e3:20:9a:c2:44:2f:93:1c: b2:79:92:a3:12:49:c0:6c:ae:20:9e:19:ec:dc:8e: 96:c8:af:2a:7e:f9:b8:35:7b:6d:5e:b1:9c:33:7e: ec:3a:82:f8:63:98:78:32:a7:56:e0:1d:ed:a0:03: 04:5c:6b:0a:a9:11:da:2b:70:50:0c:0e:48:d2:46: 6b:22:88:ed:3b:1b:96:36:ad:6c:34:4f:ff:c4:a2: a4:0a:5e:0c:4c:d3:bb:32:17:4a:45:74:2b:0e:e9: fb:6a:ef:61:28:d7:32:2e:11:b2:26:91:5c:b6:b7: b7:30:4c:03:c7:c7:71:91:fd:6a:90:5a:e3:19:b4: 85:a4:4c:4d:ce:ff:78:dd:db:35:11:28:77:9c:f9: 87:3a:99:14:df:23:11:ee:de:cd:42:f4:b6:86:5a: ee:c0:53:dc:c3:92:1f:4c:9a:bc:cd:0e:ce:ae:bd: cb:7f:f9:fb:f4:a1:83:07:81:5b:84:49:fc:84:c5: 27:37:ea:f7:77:89:53:70:5c:60:63:83:3f:1b:e1: 61:3b:1d:24:96:6f:b1:fb:b8:d7:9f:5f:6e:80:e9: a6:e1:14:01:ee:d8:35:58:47:84:56:41:2e:c2:d4: 1d:f7:14:11:49:dc:a4:83:85:60:e7:31:e1:c5:50: 2f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E0:69:0A:9B:7E:0B:A3:6D:4C:59:73:73:9D:8E:6F:5F:EB:FE:2D X509v3 Authority Key Identifier: keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f7:c9:9f:92:18:62:cd:7c:06:6d:40:d3:d3:7d:a8:7a:84: 64:bc:63:b0:32:b1:3b:35:3b:79:66:ed:30:30:14:05:6f:ae: d2:be:60:e0:6a:5b:8d:8a:d4:04:8d:fd:bd:a9:59:e3:5f:4d: 38:8f:77:fc:c6:03:d2:3e:bc:13:a0:4a:a0:42:53:43:97:24: 80:f6:d7:4b:71:bb:c4:56:cc:13:c8:ae:fe:6d:24:04:e9:55: 2c:60:5b:94:9d:69:22:95:78:bc:a2:4c:52:0a:a1:df:00:0f: 11:91:71:71:76:b4:7c:bb:17:aa:d9:e4:2f:3e:e3:16:d4:d7: 3b:ed:55:cd:60:9b:42:d5:55:d9:a7:6b:12:09:f2:15:3b:ca: 19:d4:24:c3:3b:61:97:b3:15:1a:92:c9:8e:ac:96:83:c6:50: ce:8c:15:07:e0:3a:1f:23:9b:a8:36:2f:5e:55:39:38:f3:b9: c5:9a:0f:4c:9d:ef:1b:45:e1:15:d3:a0:69:32:3a:33:86:76: 4b:9e:db:d9:12:e5:7f:57:b2:04:fd:62:6f:d0:99:cd:db:89: 08:ae:02:9c:d7:50:f8:22:ae:ca:bf:aa:85:3e:91:c7:63:16: 10:4b:b3:8b:38:c7:ac:e9:51:15:e2:7a:ec:8f:5d:e6:da:3f: b8:0f:9b:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD QTNCQzgxOUIwHhcNMjYwMTI0MTcwMzIwWhcNMjYwMTMxMTcwMzIwWjAYMRYwFAYD VQQDDA02OTc0ZmI1OC04NWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Zb+EEXR4yCawkQvkxyyeZKjEknAbK4gnhns3I6WyK8qfvm4NXttXrGcM37s OoL4Y5h4MqdW4B3toAMEXGsKqRHaK3BQDA5I0kZrIojtOxuWNq1sNE//xKKkCl4M TNO7MhdKRXQrDun7au9hKNcyLhGyJpFctre3MEwDx8dxkf1qkFrjGbSFpExNzv94 3ds1ESh3nPmHOpkU3yMR7t7NQvS2hlruwFPcw5IfTJq8zQ7Orr3Lf/n79KGDB4Fb hEn8hMUnN+r3d4lTcFxgY4M/G+FhOx0klm+x+7jXn19ugOmm4RQB7tg1WEeEVkEu wtQd9xQRSdykg4Vg5zHhxVAvmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTgaQqb fgujbUxZc3Odjm9f6/4tMB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct cnBSVEhiRGlZRVhLTzhnWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh98mfkhhizXwGbUDT032oeoRkvGOwMrE7NTt5Zu0wMBQFb67SvmDg aluNitQEjf29qVnjX004j3f8xgPSPrwToEqgQlNDlySA9tdLcbvEVswTyK7+bSQE 6VUsYFuUnWkilXi8okxSCqHfAA8RkXFxdrR8uxeq2eQvPuMW1Nc77VXNYJtC1VXZ p2sSCfIVO8oZ1CTDO2GXsxUaksmOrJaDxlDOjBUH4DofI5uoNi9eVTk487nFmg9M ne8bReEV06BpMjozhnZLntvZEuV/V7IE/WJv0JnN24kIrgKc11D4Iq7Kv6qFPpHH YxYQS7OLOMes6VEV4nrsj13m2j+4D5tO -----END CERTIFICATE-----Generated at Sun Jan 25 07:51:39 2026 by rpki-client