This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft File: 0_p517hB6Lp5mOoihhupD7llH2Q.mft (raw, json) Hash identifier: 4sDplac2uiYQxOALanDijywxtbGzOPA5umq+RPokgA4= Subject key identifier: EB:10:A8:A0:EC:2E:3F:67:D5:A5:1F:F9:E4:DB:BA:89:BA:76:D2:FF Authority key identifier: D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 Certificate issuer: /CN=A9189346/serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Certificate serial: 1C59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft Manifest number: 1C4D Signing time: Sat 24 Jan 2026 15:59:32 +0000 Manifest this update: Sat 24 Jan 2026 15:59:31 +0000 Manifest next update: Sat 31 Jan 2026 15:59:31 +0000 Files and hashes: 1: 0_p517hB6Lp5mOoihhupD7llH2Q.crl (hash: UdXgmTKUcc3j3D8IMNRctWzyqvNRzYSsgbg1syygy/c=) 2: 082ADE2CF72411E6BA654B38C4F9AE02.roa (hash: IUcoRHe1SU3qiEDcCn613MUCKIsCGyKLZbPsU64+ZDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7257 (0x1c59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189346, serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Validity Not Before: Jan 24 15:59:31 2026 GMT Not After : Jan 31 15:59:31 2026 GMT Subject: CN=6974ec64-6b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dc:b5:6a:ef:f8:62:f0:b0:26:6d:3b:62:1d: ea:30:30:7b:41:37:5c:e1:d0:69:45:22:8a:be:0b: 43:89:c1:15:dc:75:99:e9:22:51:a2:64:1b:f1:0c: 99:d0:d9:25:0d:0a:6b:94:d5:c6:21:21:d2:76:31: b2:d3:36:9e:58:ef:7e:5c:5d:90:bf:a7:de:5a:f6: 69:14:d7:25:49:c7:b5:6d:06:56:ea:4a:1b:05:84: c5:70:b9:21:f8:86:69:c6:89:b9:78:a6:15:8a:d2: 20:41:b0:fa:e2:fd:7f:38:18:62:4c:a2:0c:40:8d: 43:32:ee:4a:ca:fb:af:d5:72:ed:0e:89:e4:e6:19: 3e:e2:6c:b1:db:01:24:2b:f0:6f:89:71:b4:53:d1: 07:eb:e1:78:4d:6f:a1:03:40:73:bc:cd:28:c2:fd: 6f:df:56:66:86:96:c7:c9:ce:48:35:1b:02:4f:f9: 2a:60:8e:f5:51:8d:c3:5d:71:61:20:67:e1:73:68: ce:b7:5f:23:a4:c4:f2:fd:49:36:d4:48:f1:23:b2: 62:c3:ed:eb:3e:c1:fc:67:22:30:ea:5b:4d:5b:bf: 6e:2a:b3:a8:c2:bf:ed:44:b2:84:50:3f:88:b0:31: e0:cc:61:35:98:d2:d4:1a:63:9c:11:ef:35:4b:c7: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:10:A8:A0:EC:2E:3F:67:D5:A5:1F:F9:E4:DB:BA:89:BA:76:D2:FF X509v3 Authority Key Identifier: keyid:D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:4e:63:79:17:94:ce:e1:df:d2:82:b4:b9:40:56:f8:a8:2c: c0:46:a2:15:20:ef:d8:39:b5:fe:03:7f:24:08:ca:97:14:e6: 98:5c:a6:e0:05:5f:e7:24:27:2e:f4:9b:a7:a0:a8:42:60:e2: b2:ab:f8:8b:05:ff:37:df:61:aa:a2:fa:d0:d1:e9:8d:84:d1: 2b:5c:3a:6d:4a:39:b4:59:25:30:62:0e:9e:24:2a:cc:28:55: 5c:46:25:34:f8:6b:c1:4d:0c:88:dc:f8:cc:59:a3:e0:a4:b3: 2b:1d:a1:fb:c0:ed:ba:d2:0f:4d:6c:01:86:7a:ae:98:b0:38: 9f:fb:a3:22:ca:60:fb:de:8c:68:2f:fb:9d:dd:77:be:4f:ac: 17:4a:4c:ac:31:83:24:e3:2d:f0:9e:0c:ec:fb:4d:ce:ab:5a: d9:4f:e9:4a:fa:70:70:04:fb:12:93:dd:cf:cd:d2:03:0d:f7: 19:79:38:eb:6c:9f:18:dd:a9:6f:2e:70:d5:90:aa:1f:f8:77: 73:51:25:e7:35:9b:a9:8c:0d:59:55:f8:7a:58:77:33:59:85: 83:d9:b1:67:20:c9:41:8a:db:62:21:99:f8:86:43:76:d4:83: 53:de:08:89:8e:4f:8e:25:d3:f6:b2:1e:cc:cf:63:3d:02:04: f4:f0:8a:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkzNDYxMTAvBgNVBAUTKEQzRkE3OUQ3Qjg0MUU4QkE3OTk4RUEyMjg2MUJBOTBG Qjk2NTFGNjQwHhcNMjYwMTI0MTU1OTMxWhcNMjYwMTMxMTU1OTMxWjAYMRYwFAYD VQQDDA02OTc0ZWM2NC02YjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9y1au/4YvCwJm07Yh3qMDB7QTdc4dBpRSKKvgtDicEV3HWZ6SJRomQb8QyZ 0NklDQprlNXGISHSdjGy0zaeWO9+XF2Qv6feWvZpFNclSce1bQZW6kobBYTFcLkh +IZpxom5eKYVitIgQbD64v1/OBhiTKIMQI1DMu5Kyvuv1XLtDonk5hk+4myx2wEk K/BviXG0U9EH6+F4TW+hA0BzvM0owv1v31ZmhpbHyc5INRsCT/kqYI71UY3DXXFh IGfhc2jOt18jpMTy/Uk21EjxI7Jiw+3rPsH8ZyIw6ltNW79uKrOowr/tRLKEUD+I sDHgzGE1mNLUGmOcEe81S8ccrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsQqKDs Lj9n1aUf+eTbuom6dtL/MB8GA1UdIwQYMBaAFNP6ede4Qei6eZjqIoYbqQ+5ZR9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTM0Ni84QzY1QjZFNkY3 MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZMcDVtT29paGh1cEQ3bGxI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBfcDUxN2hCNkxwNW1Pb2loaHVwRDdsbEgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTM0Ni84QzY1QjZFNkY3MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZM cDVtT29paGh1cEQ3bGxIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUTmN5F5TO4d/SgrS5QFb4qCzARqIVIO/YObX+A38kCMqXFOaYXKbg BV/nJCcu9JunoKhCYOKyq/iLBf8332GqovrQ0emNhNErXDptSjm0WSUwYg6eJCrM KFVcRiU0+GvBTQyI3PjMWaPgpLMrHaH7wO260g9NbAGGeq6YsDif+6MiymD73oxo L/ud3Xe+T6wXSkysMYMk4y3wngzs+03Oq1rZT+lK+nBwBPsSk93PzdIDDfcZeTjr bJ8Y3alvLnDVkKof+HdzUSXnNZupjA1ZVfh6WHczWYWD2bFnIMlBittiIZn4hkN2 1INT3giJjk+OJdP2sh7Mz2M9AgT08IoB -----END CERTIFICATE-----Generated at Sun Jan 25 12:45:09 2026 by rpki-client