This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft File: WothvFOjJNeitPQVPQd0bsKjNdI.mft (raw, json) Hash identifier: OJLyAxuMILcTBqHvJp8cSi1J4/ipbk8gcxCy9UpyaT4= Subject key identifier: AF:D4:C4:A1:B5:60:15:58:60:D5:87:58:6A:A0:15:81:8D:76:A1:F4 Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 Certificate issuer: /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft Manifest number: 0117 Signing time: Sun 25 Jan 2026 04:04:49 +0000 Manifest this update: Sun 25 Jan 2026 04:04:48 +0000 Manifest next update: Sun 01 Feb 2026 04:04:48 +0000 Files and hashes: 1: WothvFOjJNeitPQVPQd0bsKjNdI.crl (hash: lSWgs6wLajqaXUTfm9GS6fKlXxKWVyuQ1UbeZlvXPzk=) 2: 014A2E90BC5C11EF9108934FC4F9AE02.roa (hash: NKdc00VsoBU3WzQbU4FkleLin/aT7rGH2qhEdrMQw6Y=) 3: AE51756A556B11EFA5FB1569C4F9AE02.roa (hash: gEBFjX+SWG+/146/yxKK69X8BT9Y729yGD/qkGt7gqI=) 4: 02A3523ABC5C11EF9108934FC4F9AE02.roa (hash: YX0R72xh2Wv+PsOymTRXA/5mVC7q1Y9SjWtgUs9whWA=) 5: AEDDE1EE556B11EFA5FB1569C4F9AE02.roa (hash: TBUipL2P8MSxeJdmyHkFFj4NWEi8Gft5hKbk6IWxws0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Validity Not Before: Jan 25 04:04:48 2026 GMT Not After : Feb 1 04:04:48 2026 GMT Subject: CN=69759660-efe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fc:1a:73:cc:c1:96:8f:18:d3:88:5f:40:53: da:9d:6f:7e:fc:b5:b7:d8:39:5d:4e:8f:d8:8f:d7: 4b:52:47:13:0c:db:1e:93:97:0c:3c:19:c5:fd:78: ca:48:fb:3c:27:55:53:9e:2c:4a:ef:b9:92:48:1d: 29:9c:21:29:0a:30:74:65:4a:0a:18:56:a6:22:08: 0b:d7:30:0e:93:49:52:37:9f:db:78:e3:ef:de:42: ae:0e:11:1d:aa:ff:71:e6:74:49:19:dc:8a:fc:d7: 91:b9:05:8e:f5:b3:6a:fd:71:26:19:eb:6c:87:a3: ff:8e:03:37:b3:ec:75:df:36:2a:84:48:5f:ae:e6: a3:7a:b8:ce:f7:62:e9:ea:1f:2c:1e:75:40:d7:ec: 6f:3f:37:97:41:61:e4:b9:fa:8d:d0:e6:22:9a:ba: 40:4e:81:1c:c8:09:76:dd:18:0c:36:c6:27:23:d6: d7:a1:17:8c:15:15:a3:e6:28:d0:ba:ca:0d:a3:6b: 54:a8:d4:2b:2b:10:9d:db:9c:14:fc:3f:15:98:e0: 78:e3:57:d5:2f:4a:dd:74:45:99:ce:a1:84:c4:97: b7:76:ba:12:1d:66:65:db:20:eb:87:1f:26:e3:3e: eb:a2:bf:c3:8c:14:d4:bb:1f:0f:9d:e6:da:43:66: 22:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D4:C4:A1:B5:60:15:58:60:D5:87:58:6A:A0:15:81:8D:76:A1:F4 X509v3 Authority Key Identifier: keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:db:fa:27:de:ed:be:f3:64:59:1f:34:65:16:1a:78:12:de: 51:7a:67:f1:53:d5:47:c9:f6:aa:93:cd:f7:fb:d9:3b:83:55: c6:36:cf:1f:c4:a7:8c:1d:f7:eb:08:5a:96:92:44:c6:04:7d: 92:7b:1f:3d:ab:6c:35:4f:6a:7b:57:18:16:16:81:05:96:91: 19:8e:97:dd:96:1f:8e:05:2d:a0:12:df:dc:59:b0:78:3c:92: 6e:b8:d3:f6:bc:25:7e:22:a7:d7:d9:87:59:55:a9:c7:c6:1a: 1a:28:a9:9a:6e:f1:ef:08:9d:45:2a:49:6c:11:be:a3:48:ad: 7a:8c:23:9e:6d:6e:53:33:89:a3:6e:0e:60:6d:b9:52:bd:69: 98:2d:d2:dd:1a:3b:58:c3:2a:13:47:81:2e:b8:75:82:37:4b: 49:19:2c:be:fa:60:f0:8d:16:83:45:bd:8b:fc:78:ad:56:da: ae:cb:49:61:63:55:02:e1:dd:82:f1:1a:f3:92:0c:ba:fa:9c: 1a:36:42:b5:f6:95:22:2c:0f:46:94:88:63:0d:21:7f:e2:9c: 28:c0:be:1b:58:7a:41:f5:d9:8c:52:c1:72:09:e9:1b:c5:c4: 6e:9f:52:42:74:25:4a:6f:38:11:7e:7d:17:b1:a6:3b:e3:35: 73:83:95:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEMTIxMTAvBgNVBAUTKDVBOEI2MUJDNTNBMzI0RDdBMkI0RjQxNTNEMDc3NDZF QzJBMzM1RDIwHhcNMjYwMTI1MDQwNDQ4WhcNMjYwMjAxMDQwNDQ4WjAYMRYwFAYD VQQDDA02OTc1OTY2MC1lZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPwac8zBlo8Y04hfQFPanW9+/LW32DldTo/Yj9dLUkcTDNsek5cMPBnF/XjK SPs8J1VTnixK77mSSB0pnCEpCjB0ZUoKGFamIggL1zAOk0lSN5/beOPv3kKuDhEd qv9x5nRJGdyK/NeRuQWO9bNq/XEmGetsh6P/jgM3s+x13zYqhEhfruajerjO92Lp 6h8sHnVA1+xvPzeXQWHkufqN0OYimrpAToEcyAl23RgMNsYnI9bXoReMFRWj5ijQ usoNo2tUqNQrKxCd25wU/D8VmOB441fVL0rddEWZzqGExJe3droSHWZl2yDrhx8m 4z7ror/DjBTUux8PnebaQ2YiGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/UxKG1 YBVYYNWHWGqgFYGNdqH0MB8GA1UdIwQYMBaAFFqLYbxToyTXorT0FT0HdG7CozXS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0QxMi9BQjg5MzRGMjUy QzQxMUVGOERERkQ1M0ZDNEY5QUUwMi9Xb3RodkZPakpOZWl0UFFWUFFkMGJzS2pO ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dvdGh2Rk9qSk5laXRQUVZQUWQwYnNLak5kSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0QxMi9BQjg5MzRGMjUyQzQxMUVGOERERkQ1M0ZDNEY5QUUwMi9Xb3RodkZPakpO ZWl0UFFWUFFkMGJzS2pOZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz2/on3u2+82RZHzRlFhp4Et5RemfxU9VHyfaqk833+9k7g1XGNs8f xKeMHffrCFqWkkTGBH2Sex89q2w1T2p7VxgWFoEFlpEZjpfdlh+OBS2gEt/cWbB4 PJJuuNP2vCV+IqfX2YdZVanHxhoaKKmabvHvCJ1FKklsEb6jSK16jCOebW5TM4mj bg5gbblSvWmYLdLdGjtYwyoTR4EuuHWCN0tJGSy++mDwjRaDRb2L/HitVtquy0lh Y1UC4d2C8Rrzkgy6+pwaNkK19pUiLA9GlIhjDSF/4pwowL4bWHpB9dmMUsFyCekb xcRun1JCdCVKbzgRfn0XsaY74zVzg5W2 -----END CERTIFICATE-----Generated at Sun Jan 25 09:22:00 2026 by rpki-client