This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft File: rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json) Hash identifier: iyzxSQ7w7e0CIiEY6dit4UeW+I9B1mIbNnm3boJziYE= Subject key identifier: 85:CD:51:B1:5C:03:37:02:B5:B3:51:45:77:A9:D9:26:4A:FC:5C:03 Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Certificate serial: 2522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft Manifest number: 2505 Signing time: Sat 24 Jan 2026 15:36:42 +0000 Manifest this update: Sat 24 Jan 2026 15:36:41 +0000 Manifest next update: Sat 31 Jan 2026 15:36:41 +0000 Files and hashes: 1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: RXAip5Z9EN7bhJVtZ1uGngXok1QdQqKlLI2FRNruXck=) 2: 174B2A3441B611F0A03F6C24C4F9AE02.roa (hash: x6GPjwO5sO5Bvm7pWp4Iun3mTm45HGe7z8yRruy5J90=) 3: 842CE8807AE311EF91F51E42C4F9AE02.roa (hash: yW1gxtnqZQt1zea/7tYkbc/ydhmgNTTD61RsdDWGpBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9506 (0x2522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Validity Not Before: Jan 24 15:36:41 2026 GMT Not After : Jan 31 15:36:41 2026 GMT Subject: CN=6974e70a-c912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ac:e3:99:df:fb:3d:71:4a:03:c9:c5:3a:8d: a7:0e:7e:85:f5:1e:3e:64:49:c9:5d:49:ad:23:43: 05:ed:43:96:23:ae:48:48:00:29:64:84:42:71:51: 54:9a:e4:a0:7f:f9:84:d3:5d:4a:cd:b7:69:fb:0a: 42:f5:58:d7:72:5b:a6:eb:bb:82:fd:66:b0:67:eb: 1b:b2:7f:3c:ce:6f:f7:e9:7d:38:7b:59:63:f6:4a: bd:47:f9:8b:57:0b:84:56:43:b7:08:67:3a:43:2c: 25:93:93:e3:4e:2e:ef:61:d6:6f:01:76:b8:8f:70: 71:19:9e:b4:4a:59:b1:9d:99:7b:12:c2:59:58:0f: 82:6b:0b:d7:bc:d6:fc:61:b0:2a:39:e0:db:5d:26: 51:f2:f2:e9:47:96:1b:5f:fe:ac:38:b6:c5:be:14: 2d:52:c0:09:c2:55:68:0b:a2:5f:e2:f6:74:a3:52: df:b1:e5:93:e0:09:71:ab:b7:82:b9:ea:53:f0:f6: c6:d7:55:1b:94:09:1d:f5:23:9f:fc:47:2d:83:c2: 33:59:96:2d:83:80:21:59:88:5c:9d:e9:55:79:21: 48:60:6a:a6:7f:f5:1b:79:a8:69:8a:44:48:fa:28: b7:20:9d:5e:6c:cb:fb:be:63:92:22:03:44:e4:be: a5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CD:51:B1:5C:03:37:02:B5:B3:51:45:77:A9:D9:26:4A:FC:5C:03 X509v3 Authority Key Identifier: keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:5e:a0:33:41:29:87:a1:2c:99:4f:5a:c1:d0:9a:ff:d5:c2: 77:5f:b7:b3:3e:88:6f:a7:95:19:e5:d3:37:20:01:30:96:27: b6:b2:78:5c:23:ce:c5:83:70:f1:84:54:d0:49:99:73:d7:1c: 16:41:51:42:26:37:54:ff:f5:e6:bf:42:13:c5:37:64:de:07: 67:d4:3a:39:0e:62:7f:c3:0b:fc:f2:e7:1a:e3:18:22:3d:70: 70:6d:06:e9:e4:37:e3:98:da:c6:e8:d5:70:16:be:fd:b8:c8: 8a:34:e9:72:56:3d:c7:e8:d7:89:d7:84:51:d6:84:6e:26:80: b7:b4:31:bf:b9:77:1d:b7:53:9f:39:f7:4c:21:e2:1b:22:9a: af:74:4a:f9:e1:ab:15:b7:d3:8a:13:b9:82:bb:76:8a:b0:78: e2:e7:ed:3f:df:6a:44:77:3c:8f:3c:56:2b:98:69:ab:08:44: 71:fd:f6:0d:7e:27:ba:22:8c:3c:43:60:24:1b:37:16:85:0f: 98:44:21:a6:74:ad:67:15:52:6e:66:09:26:a7:55:bb:4c:80: 36:e5:f2:a6:14:aa:7f:a7:3c:5b:f2:99:47:4b:47:12:da:1a: 5c:cb:87:2f:24:5b:5b:a5:59:31:6b:5c:0a:90:82:98:90:f8: 7c:66:b1:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND OEYyRDkxQjUwHhcNMjYwMTI0MTUzNjQxWhcNMjYwMTMxMTUzNjQxWjAYMRYwFAYD VQQDDA02OTc0ZTcwYS1jOTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6zjmd/7PXFKA8nFOo2nDn6F9R4+ZEnJXUmtI0MF7UOWI65ISAApZIRCcVFU muSgf/mE011Kzbdp+wpC9VjXclum67uC/WawZ+sbsn88zm/36X04e1lj9kq9R/mL VwuEVkO3CGc6Qywlk5PjTi7vYdZvAXa4j3BxGZ60SlmxnZl7EsJZWA+CawvXvNb8 YbAqOeDbXSZR8vLpR5YbX/6sOLbFvhQtUsAJwlVoC6Jf4vZ0o1LfseWT4Alxq7eC uepT8PbG11UblAkd9SOf/Ectg8IzWZYtg4AhWYhcnelVeSFIYGqmf/UbeahpikRI +ii3IJ1ebMv7vmOSIgNE5L6lswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXNUbFc AzcCtbNRRXep2SZK/FwDMB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3 MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUNEMy84MTIyODZEMjQ3MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1 Ym5qV0V2TjAyNnpJOHRrYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3XqAzQSmHoSyZT1rB0Jr/1cJ3X7ezPohvp5UZ5dM3IAEwlie2snhc I87Fg3DxhFTQSZlz1xwWQVFCJjdU//Xmv0ITxTdk3gdn1Do5DmJ/wwv88uca4xgi PXBwbQbp5DfjmNrG6NVwFr79uMiKNOlyVj3H6NeJ14RR1oRuJoC3tDG/uXcdt1Of OfdMIeIbIpqvdEr54asVt9OKE7mCu3aKsHji5+0/32pEdzyPPFYrmGmrCERx/fYN fie6Iow8Q2AkGzcWhQ+YRCGmdK1nFVJuZgkmp1W7TIA25fKmFKp/pzxb8plHS0cS 2hpcy4cvJFtbpVkxa1wKkIKYkPh8ZrEK -----END CERTIFICATE-----Generated at Sun Jan 25 09:31:04 2026 by rpki-client