This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft File: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json) Hash identifier: r0R5f2mWxcIn7t4zC/26uktJWZG/k1DwMBDLo8LfbrQ= Subject key identifier: 0F:44:ED:5E:65:45:C9:97:71:CA:CD:E1:9D:97:1D:4F:28:37:C8:DC Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 Certificate issuer: /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft Manifest number: 0143 Signing time: Sun 25 Jan 2026 03:38:43 +0000 Manifest this update: Sun 25 Jan 2026 03:38:42 +0000 Manifest next update: Sun 01 Feb 2026 03:38:42 +0000 Files and hashes: 1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: 0wTyZQ3YLiR37UZyZlP/d0+jur63lYCZkTHo+OEjjAE=) 2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: CwXxvQd82DMK841MpqVGbyP5fEoZfjolyFEgUa5vlRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Validity Not Before: Jan 25 03:38:42 2026 GMT Not After : Feb 1 03:38:42 2026 GMT Subject: CN=69759043-fe7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:b1:86:8e:a0:3f:3b:57:c2:5f:34:1f:3a: d8:ed:31:ad:30:6f:8d:b5:6d:0e:8e:ca:03:fb:15: ed:5a:c5:29:48:86:f1:1f:64:aa:c6:13:ec:41:d2: 0f:04:f4:d7:8f:89:78:f8:66:48:25:91:82:ea:d7: aa:65:2f:03:22:55:47:f9:e4:18:68:32:8b:0a:f8: 4e:ab:d9:af:79:9a:d7:37:32:84:4a:8f:92:fb:7e: 4a:97:d5:be:94:bd:f2:cf:31:d5:b8:86:98:a5:3b: 5e:e9:c5:a8:00:0f:4e:67:4c:2d:41:1c:db:bb:ee: 84:6e:c8:ab:0d:5d:e7:a1:bb:17:95:7e:34:be:84: ac:66:85:fc:b0:a8:87:4a:9d:7d:08:86:ad:54:60: 42:ee:65:73:d5:27:ed:d3:8f:af:59:b3:ad:37:0e: d5:db:d5:b6:a1:7d:3c:98:41:db:68:cb:96:a0:8d: ce:aa:6e:39:af:33:ce:f3:10:f5:fe:3d:89:1e:d4: 55:cb:1f:89:9f:d9:fb:4d:44:ea:f6:0b:bd:52:b7: 93:be:af:6e:8d:46:af:9f:03:04:73:13:74:1e:b8: 63:4e:73:9f:44:f0:89:5f:f8:8f:12:65:e7:e9:ff: f8:82:62:35:ee:f6:2a:16:6c:de:2b:67:bf:d1:dd: 1a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:44:ED:5E:65:45:C9:97:71:CA:CD:E1:9D:97:1D:4F:28:37:C8:DC X509v3 Authority Key Identifier: keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:0e:0a:dc:22:ae:7b:7f:7d:17:3c:47:a4:19:de:df:1b:df: ac:a3:61:1c:e4:c1:33:6d:33:f8:43:f2:96:48:ed:2b:58:0c: 97:55:80:44:09:5a:ef:88:75:8e:c5:9a:bc:66:42:fd:10:77: 22:ad:67:47:ea:8d:38:4a:84:8f:9c:6b:43:24:af:c2:57:98: b6:6f:c0:68:b0:ea:06:12:73:07:61:96:e9:8a:54:ff:8f:c2: b3:0c:f7:d6:b5:9e:ab:0c:59:90:ff:1c:0d:8e:b9:0b:17:2c: dd:40:27:67:9f:aa:eb:47:87:b1:d5:f4:2a:de:83:2d:a5:0a: c7:cf:00:52:40:d6:69:14:9d:1c:52:82:b1:7f:e2:be:b1:93: bd:26:d7:c0:90:d7:60:f4:7d:94:c8:26:68:95:48:41:0c:09: dc:1c:a5:5e:99:ab:f2:ee:2f:6a:8d:33:61:0f:48:9c:66:bc: d4:b5:e5:d6:ed:cc:0a:48:ab:09:31:03:7d:ad:23:6c:c6:28: 2e:fd:4e:e8:4d:fe:38:3d:99:0e:08:95:42:fc:09:8b:18:21: ae:2c:69:ff:63:fc:f6:24:f2:fe:03:52:b9:df:b5:79:f8:3f: 0d:60:d4:16:a7:fc:55:59:22:f2:66:9c:87:70:3a:0a:21:54: 0e:18:ad:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRCMEExMTAvBgNVBAUTKEVFNEIwNTYxODQzN0YxOTQ4RDkyOTlGOEE0RjkyOUMx ODdEOTdGMzMwHhcNMjYwMTI1MDMzODQyWhcNMjYwMjAxMDMzODQyWjAYMRYwFAYD VQQDDA02OTc1OTA0My1mZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUaxho6gPztXwl80HzrY7TGtMG+NtW0OjsoD+xXtWsUpSIbxH2SqxhPsQdIP BPTXj4l4+GZIJZGC6teqZS8DIlVH+eQYaDKLCvhOq9mveZrXNzKESo+S+35Kl9W+ lL3yzzHVuIaYpTte6cWoAA9OZ0wtQRzbu+6EbsirDV3nobsXlX40voSsZoX8sKiH Sp19CIatVGBC7mVz1Sft04+vWbOtNw7V29W2oX08mEHbaMuWoI3Oqm45rzPO8xD1 /j2JHtRVyx+Jn9n7TUTq9gu9UreTvq9ujUavnwMEcxN0HrhjTnOfRPCJX/iPEmXn 6f/4gmI17vYqFmzeK2e/0d0aVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9E7V5l RcmXccrN4Z2XHU8oN8jcMB8GA1UdIwQYMBaAFO5LBWGEN/GUjZKZ+KT5KcGH2X8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEIwQS80Q0YwRjcwODEy OTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzhaU05rcG40cFBrcHdZZlpm ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEIwQS80Q0YwRjcwODEyOTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzha U05rcG40cFBrcHdZZlpmek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2DgrcIq57f30XPEekGd7fG9+so2Ec5MEzbTP4Q/KWSO0rWAyXVYBE CVrviHWOxZq8ZkL9EHcirWdH6o04SoSPnGtDJK/CV5i2b8BosOoGEnMHYZbpilT/ j8KzDPfWtZ6rDFmQ/xwNjrkLFyzdQCdnn6rrR4ex1fQq3oMtpQrHzwBSQNZpFJ0c UoKxf+K+sZO9JtfAkNdg9H2UyCZolUhBDAncHKVemavy7i9qjTNhD0icZrzUteXW 7cwKSKsJMQN9rSNsxigu/U7oTf44PZkOCJVC/AmLGCGuLGn/Y/z2JPL+A1K537V5 +D8NYNQWp/xVWSLyZpyHcDoKIVQOGK0a -----END CERTIFICATE-----Generated at Sun Jan 25 12:24:53 2026 by rpki-client