This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft File: aeHOy4gdpslouq4HMjfCZglaRc0.mft (raw, json) Hash identifier: pjUkTm1YQSILmWBoElA8ceLv5maoId+6OtmKystZWuo= Subject key identifier: 4E:29:24:EF:E1:6D:C1:56:3D:0E:F3:8F:53:75:20:AB:59:86:49:BD Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD Certificate issuer: /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Certificate serial: 041B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft Manifest number: 0412 Signing time: Sat 24 Jan 2026 23:35:25 +0000 Manifest this update: Sat 24 Jan 2026 23:35:24 +0000 Manifest next update: Sat 31 Jan 2026 23:35:24 +0000 Files and hashes: 1: aeHOy4gdpslouq4HMjfCZglaRc0.crl (hash: T9Yb3WwiwxciEnlkDmsK+35D8cgRuDga/ZuvOGIMLBQ=) 2: DD2DD3489F9111ECB958FF25C4F9AE02.roa (hash: ge5i/gUk2rLl8NFshkx3QLIeml4hinyetB2nMALgvq0=) 3: 9F2E362C9B6E11ECA489542DC4F9AE02.roa (hash: ASwdm1L9Wn+Rz2UEXw3LVXx6V8cb6bPFge6o2YPGGR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CB5, serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Validity Not Before: Jan 24 23:35:24 2026 GMT Not After : Jan 31 23:35:24 2026 GMT Subject: CN=6975573d-7d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:71:5c:f8:d4:6a:9d:d0:df:c1:7e:d3:d9: 81:10:44:0e:bf:8c:83:5f:55:24:d4:4c:35:cc:86: 74:ea:d8:8d:f0:cd:78:42:9d:da:5f:32:c2:1c:24: 42:51:66:1a:34:1f:5e:03:7f:b8:4e:5e:73:bb:d3: a4:b9:df:7c:4f:62:df:53:80:8a:bf:45:6c:74:45: 6f:a3:58:5f:a7:ea:8b:dc:6c:17:10:69:9f:3a:82: 36:65:0b:2a:59:f1:a2:14:1e:5d:a9:21:fb:ed:b1: 39:c7:77:7d:42:22:7b:1b:f9:88:4b:aa:df:59:d2: d8:05:77:b6:4c:8f:86:c3:dd:42:d0:c9:61:f8:21: 29:9f:20:59:f1:1a:8a:f8:47:48:97:25:b5:97:89: d8:f8:fe:e4:c7:21:1f:cd:7b:8d:28:58:b1:b9:b3: 30:d3:2a:8a:1e:53:00:42:de:ef:f1:c4:ad:bf:dc: 99:85:36:89:e6:37:89:c5:25:31:23:59:73:52:34: e6:30:c5:e6:66:a8:93:48:37:c0:db:4e:4b:ee:f2: e5:6e:ed:93:0b:43:c2:07:1b:70:11:c8:f7:38:e8: bf:e0:40:0f:bb:f0:76:54:4c:c1:6d:4a:c4:4d:82: ee:7a:60:26:b6:be:b0:ea:0a:5e:71:42:65:14:4b: 1d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:29:24:EF:E1:6D:C1:56:3D:0E:F3:8F:53:75:20:AB:59:86:49:BD X509v3 Authority Key Identifier: keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ee:5f:d6:9c:cb:d3:c5:a3:28:be:a3:85:2f:76:a2:d7:fc: cd:b5:1d:32:f2:d1:af:67:14:f5:d2:8a:54:ca:26:79:53:10: a4:10:1a:4c:5b:fa:b9:2f:05:4b:42:5a:88:61:dd:7e:7d:b8: ab:55:b9:5a:7d:5d:85:99:a2:4a:14:59:34:ab:2f:0a:da:39: 35:a3:c0:6f:32:14:0a:95:b2:2b:59:36:82:a6:f6:f2:c2:2b: 02:e1:c1:7f:72:1b:44:70:32:fd:68:f3:9f:19:7b:6d:81:db: 11:ef:30:f7:f3:f5:69:13:a4:88:9a:98:2f:bc:cd:93:31:47: 05:bb:56:cc:21:2d:b5:88:65:d4:03:46:73:93:e3:31:3d:16: ae:85:a6:36:51:af:10:5b:80:a4:d1:a8:1d:23:a0:ce:f7:50: 4c:e9:a8:57:36:14:1d:d5:24:30:f1:13:e3:da:23:c4:cf:70: f5:57:a7:d4:b1:e2:4b:83:93:e0:35:1e:8f:98:1b:0f:b1:65: 10:1f:70:02:8e:98:e5:07:af:1e:91:c7:33:21:4a:5a:de:5a: 07:6e:12:2a:7e:9a:22:85:12:c1:9a:68:4a:8e:0f:1a:a0:ae: e7:a8:ee:67:d8:df:65:24:96:96:03:ff:84:f9:7b:91:21:d5: 0b:a8:3a:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDQjUxMTAvBgNVBAUTKDY5RTFDRUNCODgxREE2Qzk2OEJBQUUwNzMyMzdDMjY2 MDk1QTQ1Q0QwHhcNMjYwMTI0MjMzNTI0WhcNMjYwMTMxMjMzNTI0WjAYMRYwFAYD VQQDDA02OTc1NTczZC03ZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAze9xXPjUap3Q38F+09mBEEQOv4yDX1Uk1Ew1zIZ06tiN8M14Qp3aXzLCHCRC UWYaNB9eA3+4Tl5zu9Okud98T2LfU4CKv0VsdEVvo1hfp+qL3GwXEGmfOoI2ZQsq WfGiFB5dqSH77bE5x3d9QiJ7G/mIS6rfWdLYBXe2TI+Gw91C0Mlh+CEpnyBZ8RqK +EdIlyW1l4nY+P7kxyEfzXuNKFixubMw0yqKHlMAQt7v8cStv9yZhTaJ5jeJxSUx I1lzUjTmMMXmZqiTSDfA205L7vLlbu2TC0PCBxtwEcj3OOi/4EAPu/B2VEzBbUrE TYLuemAmtr6w6gpecUJlFEsdYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4pJO/h bcFWPQ7zj1N1IKtZhkm9MB8GA1UdIwQYMBaAFGnhzsuIHabJaLquBzI3wmYJWkXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNCNS8zOUQ3NjcyMDlC NkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBzbG91cTRITWpmQ1pnbGFS YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlSE95NGdkcHNsb3VxNEhNamZDWmdsYVJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNCNS8zOUQ3NjcyMDlCNkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBz bG91cTRITWpmQ1pnbGFSYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh7l/WnMvTxaMovqOFL3ai1/zNtR0y8tGvZxT10opUyiZ5UxCkEBpM W/q5LwVLQlqIYd1+fbirVblafV2FmaJKFFk0qy8K2jk1o8BvMhQKlbIrWTaCpvby wisC4cF/chtEcDL9aPOfGXttgdsR7zD38/VpE6SImpgvvM2TMUcFu1bMIS21iGXU A0Zzk+MxPRauhaY2Ua8QW4Ck0agdI6DO91BM6ahXNhQd1SQw8RPj2iPEz3D1V6fU seJLg5PgNR6PmBsPsWUQH3ACjpjlB68ekcczIUpa3loHbhIqfpoihRLBmmhKjg8a oK7nqO5n2N9lJJaWA/+E+XuRIdULqDo0 -----END CERTIFICATE-----Generated at Sun Jan 25 14:00:36 2026 by rpki-client