This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: bgI1wlJUayQOkc9dKh85gYXZEKoIddmS4yvuopjr/dQ= Subject key identifier: 9A:C3:4E:7D:E8:62:44:E1:9C:00:2F:4D:BC:E4:D6:5A:29:E9:E4:FA Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0A84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 1A21 Signing time: Sat 24 Jan 2026 17:13:01 +0000 Manifest this update: Sat 24 Jan 2026 17:13:01 +0000 Manifest next update: Sat 31 Jan 2026 17:13:01 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: KxLaDIYT9stKOUo9/RMqItELedAMDHgexPhdNNg8ki8=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: 70XzSF8oyRite1e4TZo01nYrO/EOsQsfxziiDkULW8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2692 (0xa84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Jan 24 17:13:01 2026 GMT Not After : Jan 31 17:13:01 2026 GMT Subject: CN=6974fd9d-b26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:84:2f:7f:7f:f0:19:df:f4:80:32:77:1a: 75:06:6b:21:25:f7:2d:0c:e0:4f:0c:f7:e1:58:73: 2a:a6:75:ea:0a:c8:f0:3c:69:76:73:4c:ad:65:40: 13:ad:69:26:af:1f:fc:ee:5a:b1:73:e6:5f:aa:9a: 5b:c7:00:07:bd:65:fc:56:64:47:71:68:03:7c:50: bc:b0:23:b5:81:51:22:07:c5:e6:46:c2:5a:0e:23: a4:e0:7b:b4:b5:40:a4:7b:03:dc:0d:99:44:f0:16: 99:46:85:eb:2e:d9:95:5e:f8:4f:44:1e:b2:73:2a: 9b:ef:dc:3b:f6:c5:d3:1b:23:97:32:fa:05:9e:e9: 34:7d:a0:36:87:6a:bc:a1:9b:38:50:68:5c:b4:1c: 3f:e6:6a:a7:5a:08:3a:d3:49:99:fb:8f:36:1c:b1: 18:c2:15:30:1f:ef:63:21:14:f3:ad:7d:61:25:86: e6:83:c5:92:65:f7:b2:ea:df:92:f5:14:67:52:44: 36:44:76:6c:35:a1:d1:09:2c:95:50:e6:d7:bb:f4: b3:a4:bf:c7:2d:c4:a3:6a:7b:eb:48:31:a9:80:a5: 31:09:e7:56:16:8f:91:e8:08:d1:66:0e:c4:f2:b4: c1:95:76:40:a7:3a:93:83:35:91:05:e1:08:41:42: 5e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C3:4E:7D:E8:62:44:E1:9C:00:2F:4D:BC:E4:D6:5A:29:E9:E4:FA X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:07:75:4f:a6:3d:2f:51:a4:74:c2:85:88:69:2f:13:81:59: 8f:38:2f:5b:72:4e:e3:01:d2:46:b4:81:26:59:2a:d1:37:ce: 22:0f:30:f1:63:95:92:b7:ea:cf:a6:2a:42:d4:cd:80:2a:5a: bb:35:6c:39:02:6e:c9:b5:85:79:ec:a6:d5:11:f0:7a:f5:1b: bf:80:65:df:30:35:bb:3a:4c:da:99:88:ed:b5:86:27:62:7b: 85:a9:37:37:a6:e2:55:52:37:22:f0:a5:3f:95:7a:92:db:d7: f6:41:e0:62:bb:9f:62:4e:b9:9f:94:c4:c0:cf:b7:d2:c0:e5: c4:85:44:01:af:ef:a0:72:43:50:21:5e:04:17:4d:af:f5:a1: 5a:b3:a0:71:7c:b0:51:f6:95:c6:a9:e4:01:f6:e8:26:c7:0d: fe:62:64:d1:d1:8c:ba:4b:50:a1:7b:b6:37:6e:f7:7c:af:33: f3:be:af:49:5e:dc:34:4b:0b:d3:43:16:80:04:43:24:0e:e1: aa:78:60:90:15:d8:fa:10:fb:50:2c:01:59:af:19:4e:c8:43: 20:19:ba:76:90:f4:d2:a5:6d:27:46:c4:44:cd:0a:80:c1:9e: ad:cf:e5:1e:ab:5c:cd:73:fd:f2:f8:c2:85:cb:a0:f2:5e:c8: 53:0e:a5:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjYwMTI0MTcxMzAxWhcNMjYwMTMxMTcxMzAxWjAYMRYwFAYD VQQDDA02OTc0ZmQ5ZC1iMjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7iEL39/8Bnf9IAydxp1BmshJfctDOBPDPfhWHMqpnXqCsjwPGl2c0ytZUAT rWkmrx/87lqxc+ZfqppbxwAHvWX8VmRHcWgDfFC8sCO1gVEiB8XmRsJaDiOk4Hu0 tUCkewPcDZlE8BaZRoXrLtmVXvhPRB6ycyqb79w79sXTGyOXMvoFnuk0faA2h2q8 oZs4UGhctBw/5mqnWgg600mZ+482HLEYwhUwH+9jIRTzrX1hJYbmg8WSZfey6t+S 9RRnUkQ2RHZsNaHRCSyVUObXu/SzpL/HLcSjanvrSDGpgKUxCedWFo+R6AjRZg7E 8rTBlXZApzqTgzWRBeEIQUJedwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrDTn3o YkThnAAvTbzk1lop6eT6MB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfB3VPpj0vUaR0woWIaS8TgVmPOC9bck7jAdJGtIEmWSrRN84iDzDx Y5WSt+rPpipC1M2AKlq7NWw5Am7JtYV57KbVEfB69Ru/gGXfMDW7OkzamYjttYYn YnuFqTc3puJVUjci8KU/lXqS29f2QeBiu59iTrmflMTAz7fSwOXEhUQBr++gckNQ IV4EF02v9aFas6BxfLBR9pXGqeQB9ugmxw3+YmTR0Yy6S1Che7Y3bvd8rzPzvq9J Xtw0SwvTQxaABEMkDuGqeGCQFdj6EPtQLAFZrxlOyEMgGbp2kPTSpW0nRsREzQqA wZ6tz+Ueq1zNc/3y+MKFy6DyXshTDqUC -----END CERTIFICATE-----Generated at Sun Jan 25 23:39:30 2026 by rpki-client