This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft File: cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft (raw, json) Hash identifier: 02QJefp2inGMCU4K2wq64KCifIiJCWXlNscW4th0IT4= Subject key identifier: D2:6C:4D:BA:23:D6:48:EA:FD:23:A7:8A:4A:25:3E:F8:33:D6:78:0E Authority key identifier: 72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 Certificate issuer: /CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Certificate serial: 02EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft Manifest number: 02E0 Signing time: Sun 25 Jan 2026 00:33:05 +0000 Manifest this update: Sun 25 Jan 2026 00:33:04 +0000 Manifest next update: Sun 01 Feb 2026 00:33:04 +0000 Files and hashes: 1: cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl (hash: 2J8MMXO3EHNaIaoTJtdoeGzg8l14eK76DvkEcZ/9KJw=) 2: DD976958C2A611EFBB1B9264C4F9AE02.roa (hash: hbJJRaC5M5LUQTbnkq8W618J1VcGyMM13Drb0UsxWGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 746 (0x2ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169411, serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Validity Not Before: Jan 25 00:33:04 2026 GMT Not After : Feb 1 00:33:04 2026 GMT Subject: CN=697564c1-bcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:57:92:a5:f0:7e:f4:e1:7d:5e:58:e7:99:39: 89:7a:6e:21:a3:8b:e3:ab:01:12:d7:02:b4:d3:76: 41:1e:e6:f8:0c:1e:39:cb:12:47:10:88:72:88:8e: 08:4a:36:73:0c:60:54:4c:b6:06:6e:12:cb:c7:cd: 7a:14:44:6f:e5:57:91:69:76:20:98:9b:78:f4:c9: 67:78:64:2c:0e:86:04:98:90:65:ae:5d:a2:de:df: 79:a5:a9:57:49:03:16:dc:c8:6c:41:a3:53:dc:e2: b1:1b:c7:97:88:d3:85:2f:4b:38:80:7e:80:20:c1: 64:76:9a:c7:77:df:39:2a:c9:df:80:ae:23:d7:3a: 5f:88:c5:f8:21:73:0d:3d:4c:1e:33:d3:6e:62:9f: 81:7d:e7:39:97:8e:c7:01:a6:7a:fb:3c:f5:74:83: 9c:34:8b:95:0a:a2:aa:75:a4:71:2c:f3:80:b0:d1: a3:50:d9:a6:d5:ca:4f:73:3a:d6:3c:62:cf:c1:87: 26:f0:b8:8b:ea:aa:c8:b9:f7:f4:6a:fa:41:ea:16: 45:63:8d:19:f6:62:42:94:90:9c:fd:82:e9:ec:62: 30:5f:cc:b9:e6:33:45:a2:74:06:52:37:97:89:32: 53:c3:18:49:b4:41:96:a0:3a:17:b6:90:20:fd:8b: 30:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6C:4D:BA:23:D6:48:EA:FD:23:A7:8A:4A:25:3E:F8:33:D6:78:0E X509v3 Authority Key Identifier: keyid:72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:1a:42:c9:f8:24:7d:51:15:9d:1d:8c:ff:cc:e4:60:9a:a2: 02:9b:ac:76:27:41:85:ee:e7:fd:a7:6e:68:ec:58:80:f6:cf: e7:43:12:09:10:88:08:8a:44:f1:c4:7d:ee:e7:11:e9:a8:6a: e0:ad:9a:c2:b6:27:40:e3:b6:8f:e0:31:38:cc:43:79:62:bc: 7a:5c:f1:63:65:3a:5c:a8:91:fd:4c:af:92:53:c9:f1:d7:f0: 79:d3:d9:ed:81:8f:14:90:d7:c5:83:9f:5d:83:7e:55:e7:37: 56:7f:41:2c:d1:11:c5:94:24:4a:a3:1a:a0:bf:3c:39:cb:69: 33:58:26:33:48:a1:fe:2e:59:14:54:bd:90:d7:e9:e0:21:28: 37:13:58:1a:fb:6b:50:53:19:f0:db:f0:55:14:6d:8f:a9:c7: 64:ee:69:26:cb:9f:0a:eb:eb:c2:cf:3f:88:d4:de:fd:91:56: 3f:d7:3c:31:d2:42:42:6f:d4:74:8f:2b:c3:ac:a0:16:50:d2: 93:a6:3b:4f:49:8a:e0:c6:30:a4:3b:ab:c3:26:ad:ef:8f:cb: 8a:87:74:5d:16:dc:04:22:25:08:de:c0:91:63:c5:ed:1c:64: c6:3b:6d:ab:4e:43:fd:6b:84:0a:b7:8e:8a:5d:6d:b0:10:30: 89:91:9b:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk0MTExMTAvBgNVBAUTKDcyMDM4QTg4QTYxRDI1QzRGNDA2NTAyNUZDMjZCOENF M0I4QTdBMDIwHhcNMjYwMTI1MDAzMzA0WhcNMjYwMjAxMDAzMzA0WjAYMRYwFAYD VQQDDA02OTc1NjRjMS1iY2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFeSpfB+9OF9XljnmTmJem4ho4vjqwES1wK003ZBHub4DB45yxJHEIhyiI4I SjZzDGBUTLYGbhLLx816FERv5VeRaXYgmJt49MlneGQsDoYEmJBlrl2i3t95palX SQMW3MhsQaNT3OKxG8eXiNOFL0s4gH6AIMFkdprHd985KsnfgK4j1zpfiMX4IXMN PUweM9NuYp+Bfec5l47HAaZ6+zz1dIOcNIuVCqKqdaRxLPOAsNGjUNmm1cpPczrW PGLPwYcm8LiL6qrIuff0avpB6hZFY40Z9mJClJCc/YLp7GIwX8y55jNFonQGUjeX iTJTwxhJtEGWoDoXtpAg/YswlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJsTboj 1kjq/SOnikolPvgz1ngOMB8GA1UdIwQYMBaAFHIDioimHSXE9AZQJfwmuM47inoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTQxMS85MTg1M0EwNjE4 QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpjVDBCbEFsX0NhNHpqdUtl Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NnT0tpS1lkSmNUMEJsQWxfQ2E0emp1S2VnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTQxMS85MTg1M0EwNjE4QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpj VDBCbEFsX0NhNHpqdUtlZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlGkLJ+CR9URWdHYz/zORgmqICm6x2J0GF7uf9p25o7FiA9s/nQxIJ EIgIikTxxH3u5xHpqGrgrZrCtidA47aP4DE4zEN5Yrx6XPFjZTpcqJH9TK+SU8nx 1/B509ntgY8UkNfFg59dg35V5zdWf0Es0RHFlCRKoxqgvzw5y2kzWCYzSKH+LlkU VL2Q1+ngISg3E1ga+2tQUxnw2/BVFG2Pqcdk7mkmy58K6+vCzz+I1N79kVY/1zwx 0kJCb9R0jyvDrKAWUNKTpjtPSYrgxjCkO6vDJq3vj8uKh3RdFtwEIiUI3sCRY8Xt HGTGO22rTkP9a4QKt46KXW2wEDCJkZtD -----END CERTIFICATE-----Generated at Sun Jan 25 09:22:34 2026 by rpki-client