This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: 6UPae+x/WGwL4Z5pWVsSCR46L/EWC+e0e9MR2eH/7Js= Subject key identifier: 19:76:5B:99:24:49:58:52:E5:C1:54:E5:DA:3C:B7:51:6D:19:F3:FF Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 14B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 148F Signing time: Sat 24 Jan 2026 16:37:25 +0000 Manifest this update: Sat 24 Jan 2026 16:37:24 +0000 Manifest next update: Sat 31 Jan 2026 16:37:24 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: pn7dy3gzUdeLW9x8lRQvQkPQTahR1XYwbjYY11/3dGU=) 2: 983A5536450611F093EC3A65C4F9AE02.roa (hash: jXDJFKBYyl2AMr2aBeeaX3dJKta1vZTtNnECUVWIxl8=) 3: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: Z27ILnU+TOqVLLhIyXtiXXV0PlnGYmkYaaio5+3e2ug=) 4: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: iaZ3s82xkjY2XfRTWiPnjnqnF2ySFKKm+AeAW0yRT+E=) 5: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: 8uWfW9Bx2UJleM0TwlNLkikjSTgRwN2eIHzYdV+mzGQ=) 6: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: mH5FkT85wXX1fDkYIcXzDeEU3PHEwchgtocWPplcMrs=) 7: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: 3SvNLk7hW+Uo3wG2xJFv1wsrHQt1APNp92391QdFtgI=) 8: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: U8BSX2DX6JtfXzvuoqYA9Tm3bqF1pxPrmS12/E0gdmw=) 9: A83ECFAE791B11F0B7D48969C4F9AE02.roa (hash: FOnoWXzG/xzvG2wY9SEKlskrDJv5q/5MAP/jyysv8e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5296 (0x14b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Jan 24 16:37:24 2026 GMT Not After : Jan 31 16:37:24 2026 GMT Subject: CN=6974f545-83a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:36:3f:6b:10:b8:73:68:49:c7:df:84:2a: b0:ca:13:8d:68:ae:5f:4e:14:a7:94:2c:83:44:23: bd:29:60:d5:23:da:31:c8:01:9e:71:9e:9c:f1:62: 12:89:42:e4:f7:80:79:ff:f1:4b:a9:b4:58:b0:84: 54:e8:00:53:59:a0:1a:c7:9c:58:4d:82:fd:8e:f2: 29:e2:c0:34:73:8a:90:38:ad:ad:e1:38:fa:04:47: 0e:72:26:ab:a1:ac:b7:4b:19:12:10:fc:60:b2:24: 4d:ae:28:92:36:1a:49:f2:e9:a0:10:78:e8:cc:48: ae:3d:98:85:4b:d0:93:c4:54:66:b1:cb:15:28:21: f6:d9:07:97:e3:a5:bb:6e:c3:fd:b0:dd:a4:57:43: 19:d0:1a:b3:89:a7:a0:67:41:1b:7a:e8:30:38:b3: d3:63:94:e3:11:3e:62:6e:2b:f5:6c:cd:bc:ba:c5: f4:cd:76:91:c6:83:9b:bd:d1:f2:7a:8b:48:09:77: 02:87:9d:ab:50:3a:0c:a3:22:d4:2c:43:f9:34:2c: e4:96:c2:60:ab:bd:70:af:59:b3:d9:60:2c:64:b6: 13:6f:a8:94:80:f9:7c:d4:f9:fe:e2:d3:e5:04:91: c9:20:47:4b:42:6f:76:f8:f3:6f:e0:73:53:3f:40: 3b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:76:5B:99:24:49:58:52:E5:C1:54:E5:DA:3C:B7:51:6D:19:F3:FF X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:83:58:97:23:8e:de:12:b0:9c:fe:27:15:58:07:20:3b:da: 06:3b:3a:82:a7:7e:06:20:84:83:a8:1b:11:34:d7:4c:b3:24: 38:ce:c7:b2:b2:72:d7:26:30:aa:b9:73:02:7a:a4:eb:4b:76: e4:0d:8b:e7:1e:51:2a:85:ac:5d:82:9e:c0:97:a9:ae:47:a8: dc:51:7a:47:38:6b:70:63:a0:25:44:41:55:0c:57:0b:fb:7a: 81:06:53:3f:bb:f3:38:28:70:87:be:c7:37:b6:fe:5f:88:48: 52:bc:17:73:15:5a:10:fd:9c:e4:1d:f2:64:24:17:72:c7:86: 36:70:e6:14:b6:2e:ca:70:e0:2d:0e:e0:1a:52:92:23:94:be: ee:3d:e5:cc:e8:28:69:c6:ea:c1:01:01:82:e3:2f:cb:f0:19: 80:74:ee:07:b1:3c:66:5f:59:93:41:b8:42:b6:aa:03:12:99: f5:86:e9:a8:bf:9e:bc:23:a6:b1:fa:34:4b:00:2a:fd:96:3e: 80:38:fb:40:c9:7d:f7:9b:88:53:a8:07:2f:71:b4:4e:a5:c8: ea:54:43:80:56:36:b5:94:10:a8:69:b1:e9:0c:b4:31:9f:c2: 0e:b1:02:a1:c7:bb:ee:4f:7d:d0:ef:1e:10:ae:3d:2b:ab:08: a6:08:46:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjYwMTI0MTYzNzI0WhcNMjYwMTMxMTYzNzI0WjAYMRYwFAYD VQQDDA02OTc0ZjU0NS04M2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9E2P2sQuHNoScffhCqwyhONaK5fThSnlCyDRCO9KWDVI9oxyAGecZ6c8WIS iULk94B5//FLqbRYsIRU6ABTWaAax5xYTYL9jvIp4sA0c4qQOK2t4Tj6BEcOciar oay3SxkSEPxgsiRNriiSNhpJ8umgEHjozEiuPZiFS9CTxFRmscsVKCH22QeX46W7 bsP9sN2kV0MZ0BqziaegZ0EbeugwOLPTY5TjET5ibiv1bM28usX0zXaRxoObvdHy eotICXcCh52rUDoMoyLULEP5NCzklsJgq71wr1mz2WAsZLYTb6iUgPl81Pn+4tPl BJHJIEdLQm92+PNv4HNTP0A79wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBl2W5kk SVhS5cFU5do8t1FtGfP/MB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7g1iXI47eErCc/icVWAcgO9oGOzqCp34GIISDqBsRNNdMsyQ4zsey snLXJjCquXMCeqTrS3bkDYvnHlEqhaxdgp7Al6muR6jcUXpHOGtwY6AlREFVDFcL +3qBBlM/u/M4KHCHvsc3tv5fiEhSvBdzFVoQ/ZzkHfJkJBdyx4Y2cOYUti7KcOAt DuAaUpIjlL7uPeXM6ChpxurBAQGC4y/L8BmAdO4HsTxmX1mTQbhCtqoDEpn1humo v568I6ax+jRLACr9lj6AOPtAyX33m4hTqAcvcbROpcjqVEOAVja1lBCoabHpDLQx n8IOsQKhx7vuT33Q7x4Qrj0rqwimCEZ+ -----END CERTIFICATE-----Generated at Sun Jan 25 09:31:08 2026 by rpki-client