This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft File: h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft (raw, json) Hash identifier: 2cQnnkGDP5RMhwiU1GdTONSz2XpcWXxUejdnb7dRCc8= Subject key identifier: D8:E0:18:B1:46:8D:AD:BC:49:C6:58:9A:C6:2C:51:53:4E:BD:10:6B Authority key identifier: 87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE Certificate issuer: /CN=A9174CB0/serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE Certificate serial: 0869 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft Manifest number: 0861 Signing time: Sat 24 Jan 2026 20:04:26 +0000 Manifest this update: Sat 24 Jan 2026 20:04:26 +0000 Manifest next update: Sat 31 Jan 2026 20:04:26 +0000 Files and hashes: 1: h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl (hash: 8+nwnk4MhTmPoNZieurA1mikN8wonl9Rhc5ia4ZsOV8=) 2: E21E5A44EB5611EA85A6FA39C4F9AE02.roa (hash: Y/gZjrjkV3J+e38Z5G6K1ZkeL7UeturETxRHwwUgwB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2153 (0x869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174CB0, serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE Validity Not Before: Jan 24 20:04:26 2026 GMT Not After : Jan 31 20:04:26 2026 GMT Subject: CN=697525ca-6cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fc:50:d4:a8:5a:a2:dc:4d:71:04:7d:2e:a9: d3:07:d5:0a:e9:35:d1:0c:fa:1d:78:73:00:04:30: 30:7e:b5:f2:45:32:f0:36:fb:c6:f0:88:43:df:80: 44:60:41:f2:a7:c5:9b:97:be:f1:74:e7:86:58:ab: 57:8e:bd:9d:b6:a0:9c:88:52:11:b0:8d:5b:87:e4: 41:0a:41:da:10:35:b6:f6:6b:be:36:ac:66:f3:30: 2c:79:35:3d:32:59:cb:b8:17:b5:3e:b1:a6:5a:2f: ad:7e:ba:7e:8a:10:34:9c:43:57:c4:60:a5:2a:6b: 67:8f:ec:ee:39:4a:ba:f5:47:19:84:6b:67:dc:93: 3f:4d:e0:94:7b:c2:6f:55:88:46:b8:e8:62:40:43: 38:e8:76:73:51:37:ca:8d:2b:74:6d:b1:62:e6:57: d8:44:cc:5f:4a:1d:6b:e6:1a:6f:0e:c3:ce:02:b8: 8b:26:02:bc:7f:79:bd:46:3b:95:6c:98:5b:d4:cf: df:70:ba:1f:f9:af:13:bc:35:3d:a8:96:42:0d:07: 93:01:5b:af:bc:d2:dc:23:5d:61:25:04:03:97:7c: 4c:42:11:8d:0c:d7:51:e3:f1:04:e9:e2:d4:56:09: 3a:64:2e:b1:5f:c5:e0:a4:9f:76:56:6f:11:55:88: a0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E0:18:B1:46:8D:AD:BC:49:C6:58:9A:C6:2C:51:53:4E:BD:10:6B X509v3 Authority Key Identifier: keyid:87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:64:c7:86:88:dc:cc:91:e6:ea:19:18:f8:9a:41:8c:ff:f6: 2e:56:81:5e:35:27:75:e3:db:c0:5a:f6:21:4e:c2:e4:f5:0c: 85:dd:a4:27:73:20:7a:82:29:e6:e5:4c:8e:b3:28:c0:88:f7: 42:33:9b:ba:41:87:bf:34:f7:14:bb:ea:d3:0d:8d:a4:63:68: 20:cd:6e:a6:33:32:2e:0b:ef:d0:70:32:66:02:77:b8:e2:f5: 1c:01:77:01:6d:4f:6c:37:e4:af:9b:bd:73:68:30:19:fe:9c: 88:05:bd:6a:58:b9:17:99:49:94:67:e8:bb:bf:5e:5a:3b:b7: f3:bd:0c:90:a7:67:7a:76:83:92:06:ad:67:ce:26:b2:00:cd: c8:94:79:73:a8:66:b8:cc:bb:f5:95:fa:ed:02:3b:68:1a:a1: 1d:f5:d3:cf:c8:a3:77:ca:de:78:8e:31:42:aa:76:11:f4:b7: 2d:4f:40:40:3f:9f:3e:6b:e2:53:cf:57:2c:95:35:df:73:25: f4:c3:09:4b:2e:26:ce:98:06:d5:c0:02:54:5e:be:6b:2d:a6: a3:64:44:3d:a7:01:26:70:91:0e:79:0c:c0:17:92:e5:9e:7b: c1:e7:4a:ec:ca:b7:1d:da:3c:aa:23:6b:2f:c7:74:c4:98:66: cd:a8:3e:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDQjAxMTAvBgNVBAUTKDg3QkY1N0ZCQkNFMDY0NUUyOTFENDk0NkU1QzcyMjc2 MjQzNzFBQ0UwHhcNMjYwMTI0MjAwNDI2WhcNMjYwMTMxMjAwNDI2WjAYMRYwFAYD VQQDDA02OTc1MjVjYS02Y2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8vxQ1KhaotxNcQR9LqnTB9UK6TXRDPodeHMABDAwfrXyRTLwNvvG8IhD34BE YEHyp8Wbl77xdOeGWKtXjr2dtqCciFIRsI1bh+RBCkHaEDW29mu+Nqxm8zAseTU9 MlnLuBe1PrGmWi+tfrp+ihA0nENXxGClKmtnj+zuOUq69UcZhGtn3JM/TeCUe8Jv VYhGuOhiQEM46HZzUTfKjSt0bbFi5lfYRMxfSh1r5hpvDsPOAriLJgK8f3m9RjuV bJhb1M/fcLof+a8TvDU9qJZCDQeTAVuvvNLcI11hJQQDl3xMQhGNDNdR4/EE6eLU Vgk6ZC6xX8XgpJ92Vm8RVYigZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjgGLFG ja28ScZYmsYsUVNOvRBrMB8GA1UdIwQYMBaAFIe/V/u84GReKR1JRuXHInYkNxrO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NENCMC9DQ0FDMTQ1NEVC NTUxMUVBQkRFMjRFMzZDNEY5QUUwMi9oNzlYLTd6Z1pGNHBIVWxHNWNjaWRpUTNH czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3OVgtN3pnWkY0cEhVbEc1Y2NpZGlRM0dzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NENCMC9DQ0FDMTQ1NEVCNTUxMUVBQkRFMjRFMzZDNEY5QUUwMi9oNzlYLTd6Z1pG NHBIVWxHNWNjaWRpUTNHczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuZMeGiNzMkebqGRj4mkGM//YuVoFeNSd149vAWvYhTsLk9QyF3aQn cyB6ginm5UyOsyjAiPdCM5u6QYe/NPcUu+rTDY2kY2ggzW6mMzIuC+/QcDJmAne4 4vUcAXcBbU9sN+Svm71zaDAZ/pyIBb1qWLkXmUmUZ+i7v15aO7fzvQyQp2d6doOS Bq1nziayAM3IlHlzqGa4zLv1lfrtAjtoGqEd9dPPyKN3yt54jjFCqnYR9LctT0BA P58+a+JTz1cslTXfcyX0wwlLLibOmAbVwAJUXr5rLaajZEQ9pwEmcJEOeQzAF5Ll nnvB50rsyrcd2jyqI2svx3TEmGbNqD54 -----END CERTIFICATE-----Generated at Sun Jan 25 18:29:24 2026 by rpki-client