This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft File: 9ZvGR-kMztyU6oWmLrjrGL0DUms.mft (raw, json) Hash identifier: lS5ul83fUa+k9LlpkG0FlXDWmvdLcpRceIJK6NbAfzQ= Subject key identifier: 89:25:7C:8A:C1:0D:DB:9E:45:D5:D2:76:7C:7C:4F:5B:6A:EC:34:0A Authority key identifier: F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B Certificate issuer: /CN=A917CFD2/serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Certificate serial: 0884 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft Manifest number: 0875 Signing time: Sat 24 Jan 2026 20:02:44 +0000 Manifest this update: Sat 24 Jan 2026 20:02:43 +0000 Manifest next update: Sat 31 Jan 2026 20:02:43 +0000 Files and hashes: 1: 9ZvGR-kMztyU6oWmLrjrGL0DUms.crl (hash: CwG4UQ4uFdkYuhcQupqWO0cEICKwG9OnZlfX7FVCqbk=) 2: EED16B2CEC4211EABC227339C4F9AE02.roa (hash: s2s36tPsVayQvyzrmiPTLM0ItU8BPdhPyK3m7KjQ7po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2180 (0x884) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CFD2, serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Validity Not Before: Jan 24 20:02:43 2026 GMT Not After : Jan 31 20:02:43 2026 GMT Subject: CN=69752563-2b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:87:42:74:1f:00:09:4d:d6:55:b4:ee:63:20: 1f:d6:33:d4:7a:9e:07:aa:bf:1f:5f:eb:ac:5f:61: 41:dc:4c:f0:83:35:7d:3e:49:fb:7e:c4:30:37:37: 59:89:10:28:85:a8:24:cf:e7:2b:7c:51:2e:41:b1: b5:52:e9:da:79:e9:50:92:62:6c:f5:25:98:51:f2: a1:af:cc:25:f2:49:c0:1f:c5:e5:02:f7:9f:0b:e8: 34:a9:e7:ce:19:3b:aa:82:59:48:3f:ee:64:46:6e: b6:f5:e6:ad:dd:00:6f:e6:20:39:47:de:e5:be:8e: 46:ca:e9:f2:28:8c:ea:22:52:72:d6:1b:22:8f:2c: 2b:17:db:45:d8:bb:bb:ea:5a:66:c4:93:ef:74:30: 84:de:c0:72:8d:55:82:9d:dd:2e:40:29:77:46:c7: 91:11:7d:9b:68:26:8c:4c:79:01:a0:58:a7:bd:62: e2:77:3c:af:0c:d4:94:de:06:04:75:e2:67:dc:2c: ee:b6:5e:39:d5:cb:70:ee:d5:6b:84:9d:05:af:f0: 8d:66:bd:6a:47:4e:4d:bc:96:17:aa:1e:93:6c:b4: c3:46:a2:99:d2:46:c2:91:42:e3:de:eb:e4:68:0c: 3b:c2:92:97:83:55:95:f2:85:ef:8d:3b:77:72:db: ea:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:25:7C:8A:C1:0D:DB:9E:45:D5:D2:76:7C:7C:4F:5B:6A:EC:34:0A X509v3 Authority Key Identifier: keyid:F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:33:e9:ec:7e:0a:83:e8:ad:ac:73:64:5a:55:a7:f8:5a:d8: 79:3f:1f:01:35:96:89:50:9e:dc:7b:76:3e:55:d2:12:23:88: 61:d2:e5:f6:4b:8b:fb:6e:bf:66:b0:a3:a7:1e:61:cb:a6:95: 6c:b0:08:d7:21:65:f5:c5:0b:31:40:e4:f0:92:fc:8a:86:b9: 82:57:c2:b4:4b:4a:98:1e:43:7d:3a:7f:ee:05:f1:4a:2c:6c: 99:b5:3d:a6:96:cc:4b:75:19:53:79:79:ed:f2:05:62:9d:6f: b3:f2:37:0a:8f:c2:d3:80:ab:9f:a2:8b:89:b0:8c:4d:cf:98: 88:fb:db:fd:10:15:ad:f5:5e:6b:c2:94:a6:a2:f2:dd:33:44: 71:88:52:9e:67:e5:8b:dd:ac:f1:20:b0:64:f5:8c:52:bf:48: 5a:7d:f1:aa:80:46:c7:42:47:dc:18:89:1d:df:03:da:ef:97: 07:f7:eb:90:6a:83:71:7d:1e:20:91:b7:65:72:10:ef:da:90: b6:0c:12:a5:cd:3c:70:45:d2:44:67:09:06:12:af:a8:14:c3: 10:b2:26:8e:55:93:0b:48:cf:70:46:a9:b3:81:63:80:52:8e: 68:a8:d8:6b:f4:3c:de:c4:d3:9f:0d:3e:3c:1f:f5:18:c4:81: 4e:7c:47:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NGRDIxMTAvBgNVBAUTKEY1OUJDNjQ3RTkwQ0NFREM5NEVBODVBNjJFQjhFQjE4 QkQwMzUyNkIwHhcNMjYwMTI0MjAwMjQzWhcNMjYwMTMxMjAwMjQzWjAYMRYwFAYD VQQDDA02OTc1MjU2My0yYjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4dCdB8ACU3WVbTuYyAf1jPUep4Hqr8fX+usX2FB3EzwgzV9Pkn7fsQwNzdZ iRAohagkz+crfFEuQbG1UunaeelQkmJs9SWYUfKhr8wl8knAH8XlAvefC+g0qefO GTuqgllIP+5kRm629eat3QBv5iA5R97lvo5GyunyKIzqIlJy1hsijywrF9tF2Lu7 6lpmxJPvdDCE3sByjVWCnd0uQCl3RseREX2baCaMTHkBoFinvWLidzyvDNSU3gYE deJn3Czutl451ctw7tVrhJ0Fr/CNZr1qR05NvJYXqh6TbLTDRqKZ0kbCkULj3uvk aAw7wpKXg1WV8oXvjTt3ctvq0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIklfIrB DdueRdXSdnx8T1tq7DQKMB8GA1UdIwQYMBaAFPWbxkfpDM7clOqFpi646xi9A1Jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0ZEMi8xRDJBODk0MkU2 RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0eVU2b1dtTHJqckdMMERV bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzladkdSLWtNenR5VTZvV21McmpyR0wwRFVtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0ZEMi8xRDJBODk0MkU2RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0 eVU2b1dtTHJqckdMMERVbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaM+nsfgqD6K2sc2RaVaf4Wth5Px8BNZaJUJ7ce3Y+VdISI4hh0uX2 S4v7br9msKOnHmHLppVssAjXIWX1xQsxQOTwkvyKhrmCV8K0S0qYHkN9On/uBfFK LGyZtT2mlsxLdRlTeXnt8gVinW+z8jcKj8LTgKufoouJsIxNz5iI+9v9EBWt9V5r wpSmovLdM0RxiFKeZ+WL3azxILBk9YxSv0haffGqgEbHQkfcGIkd3wPa75cH9+uQ aoNxfR4gkbdlchDv2pC2DBKlzTxwRdJEZwkGEq+oFMMQsiaOVZMLSM9wRqmzgWOA Uo5oqNhr9DzexNOfDT48H/UYxIFOfEer -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:19 2026 by rpki-client