This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft File: B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json) Hash identifier: fs128NSDr8Vvq9xIko/cin0ODs/L3YzxDpCX5+I/1yQ= Subject key identifier: A4:4B:24:BB:F1:68:EA:44:D0:43:30:B7:54:87:11:EB:EE:13:8B:CA Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F Certificate issuer: /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft Manifest number: E1 Signing time: Fri 23 Jan 2026 04:39:33 +0000 Manifest this update: Fri 23 Jan 2026 04:39:32 +0000 Manifest next update: Fri 30 Jan 2026 04:39:32 +0000 Files and hashes: 1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: fmPKK3/m7T4IIvccCSpc0kDGM7/cTTQb+fg5FsYbnU0=) 2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: e0Z0flawV8wk4AePxMY7zYIyVYhmWtUmY7VY2r89/j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 04:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Validity Not Before: Jan 23 04:39:32 2026 GMT Not After : Jan 30 04:39:32 2026 GMT Subject: CN=6972fb85-2665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:82:8e:ff:66:e0:01:d6:03:d2:4b:84:b2: 00:21:00:80:87:83:6c:e3:bf:ec:72:d1:45:23:9f: ee:ec:8d:1d:55:8c:cb:81:40:67:a0:5b:26:bd:4c: 77:21:1c:32:9e:76:c9:5e:03:bb:8b:28:04:87:76: d4:2f:00:d5:43:f4:be:94:4a:16:ae:3c:cb:d4:c9: 35:d3:97:ea:9c:64:0f:32:dc:2e:44:52:f1:c4:ee: 4b:28:4a:f9:32:56:51:d4:be:af:28:f0:e7:f5:11: 3e:24:84:9b:76:d5:c9:6c:7e:c9:cd:25:b1:9f:cb: c1:df:90:20:5a:7c:66:4b:6e:4a:97:d1:ab:09:ef: b3:95:80:33:d5:c0:0f:77:3d:a2:f3:27:53:74:fb: 54:f3:fd:2a:40:c2:9f:32:00:ec:5b:91:33:5b:65: 0a:1a:be:ab:ed:29:96:92:df:bd:64:22:4f:c0:f7: 7d:28:82:c4:ef:ab:11:f8:56:d0:d3:b1:cd:a6:ca: d8:6e:ee:46:83:b6:72:0e:31:51:10:13:6b:a7:47: c1:2f:69:33:d8:b3:cf:4f:6d:67:d0:d4:26:7f:5a: e4:cd:1b:d5:78:81:2c:cf:e6:2a:ff:26:19:47:67: b5:f4:2c:29:a3:45:6f:61:c4:ec:f3:08:ad:25:ac: 5c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4B:24:BB:F1:68:EA:44:D0:43:30:B7:54:87:11:EB:EE:13:8B:CA X509v3 Authority Key Identifier: keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:40:db:13:07:39:41:04:7f:3f:94:89:2a:92:c4:58:62:c0: c3:a7:22:90:95:ba:e3:31:db:4d:74:3a:d2:a8:73:9f:90:c9: 69:f2:db:7d:32:7e:21:ee:2e:cc:05:ac:f9:c8:c7:39:1d:26: 60:fc:17:30:5f:12:9d:78:82:dd:3d:9a:19:73:87:27:05:1a: d0:8f:8a:58:53:8c:e7:bc:8a:df:be:ca:c5:ea:b6:6f:79:5d: 62:ad:bb:27:89:84:95:5a:76:a9:c4:9e:b3:54:72:15:50:b8: db:8c:25:da:16:9f:db:0d:5d:83:0d:c2:5a:84:10:a2:d5:be: da:f9:66:cf:f5:87:00:46:10:9e:c4:87:ae:d2:a5:f0:d1:2f: 40:4e:31:7e:6d:06:2b:f7:3b:5a:87:12:76:80:cb:f1:c1:85: 6b:d7:76:c6:9d:79:1c:71:6f:1b:d2:4d:84:11:27:7c:6e:5f: 0b:13:52:ea:c1:88:7b:c6:fd:87:ad:60:d8:90:ce:aa:cb:f4: 88:e3:3c:5a:f9:05:f0:59:91:a4:d1:b3:b0:5b:db:5c:fd:f3: 95:ec:0d:aa:19:f9:27:5e:c7:7b:dc:7f:0e:38:63:c6:43:f0: 8e:9a:3d:63:ef:5c:2a:83:89:00:79:e8:be:32:8c:44:3e:3f: d1:0b:c4:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NzBEM0UxMTAvBgNVBAUTKDA3RjMxQjQ3NDcxM0IzQTE1MkM2QTVGOEY0OERFRDIw OTdEQzI0MUYwHhcNMjYwMTIzMDQzOTMyWhcNMjYwMTMwMDQzOTMyWjAYMRYwFAYD VQQDDA02OTcyZmI4NS0yNjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmdGCjv9m4AHWA9JLhLIAIQCAh4Ns47/sctFFI5/u7I0dVYzLgUBnoFsmvUx3 IRwynnbJXgO7iygEh3bULwDVQ/S+lEoWrjzL1Mk105fqnGQPMtwuRFLxxO5LKEr5 MlZR1L6vKPDn9RE+JISbdtXJbH7JzSWxn8vB35AgWnxmS25Kl9GrCe+zlYAz1cAP dz2i8ydTdPtU8/0qQMKfMgDsW5EzW2UKGr6r7SmWkt+9ZCJPwPd9KILE76sR+FbQ 07HNpsrYbu5Gg7ZyDjFREBNrp0fBL2kz2LPPT21n0NQmf1rkzRvVeIEsz+Yq/yYZ R2e19Cwpo0VvYcTs8witJaxcFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRLJLvx aOpE0EMwt1SHEevuE4vKMB8GA1UdIwQYMBaAFAfzG0dHE7OhUsal+PSN7SCX3CQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEQzRS9CREVFOUUyNDlG RDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2RlN4cVg0OUkzdElKZmNK QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JfTWJSMGNUczZGU3hxWDQ5STN0SUpmY0pCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEQzRS9CREVFOUUyNDlGRDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2 RlN4cVg0OUkzdElKZmNKQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVQNsTBzlBBH8/lIkqksRYYsDDpyKQlbrjMdtNdDrSqHOfkMlp8tt9 Mn4h7i7MBaz5yMc5HSZg/BcwXxKdeILdPZoZc4cnBRrQj4pYU4znvIrfvsrF6rZv eV1irbsniYSVWnapxJ6zVHIVULjbjCXaFp/bDV2DDcJahBCi1b7a+WbP9YcARhCe xIeu0qXw0S9ATjF+bQYr9ztahxJ2gMvxwYVr13bGnXkccW8b0k2EESd8bl8LE1Lq wYh7xv2HrWDYkM6qy/SI4zxa+QXwWZGk0bOwW9tc/fOV7A2qGfknXsd73H8OOGPG Q/COmj1j71wqg4kAeei+MoxEPj/RC8SU -----END CERTIFICATE-----Generated at Sun Jan 25 04:28:09 2026 by rpki-client