This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft File: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft (raw, json) Hash identifier: Pe/S1QFSzEJ/E0YRMQI5SmyX2ftW+JMn+18jE1IuI0s= Subject key identifier: 5D:94:5C:7B:58:FE:9E:D6:F3:4D:11:08:E9:34:BF:72:50:C3:AC:14 Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E Certificate issuer: /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E Certificate serial: 0E09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft Manifest number: 0DF2 Signing time: Sat 24 Jan 2026 17:30:57 +0000 Manifest this update: Sat 24 Jan 2026 17:30:56 +0000 Manifest next update: Sat 31 Jan 2026 17:30:56 +0000 Files and hashes: 1: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl (hash: uCJKohe6AVMnVvAnGImEpK3FsKNL1+k2aR/CVgLCq8w=) 2: 471FC532E6FC11EE84213C0FC4F9AE02.roa (hash: HGatQ3NBKjAKkQPomWLYHF4m0jKMBV6J5PFitZtRd34=) 3: 6D83AA1CBF5711EEAB9A037FC4F9AE02.roa (hash: L8kpi1SVm7ckPOHWxdzSsXqtMgpg83APjUnCBcHdbJE=) 4: 22639692E6FC11EEB3BCD10EC4F9AE02.roa (hash: MezHZiP7Ru8seZ060InpEpEJV9FnDzBoEJ7GFAcZfh4=) 5: 79666614E79311EC81D3720BC4F9AE02.roa (hash: +SK15TzGKYn5ZYvjCDCxNInAkPIS5ISaiZ+uwJr/wDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3593 (0xe09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E Validity Not Before: Jan 24 17:30:56 2026 GMT Not After : Jan 31 17:30:56 2026 GMT Subject: CN=697501d1-aa13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a9:7e:fa:c6:ad:47:e0:e5:aa:80:51:cd:7d: 0a:ce:b4:f8:12:a9:c0:03:96:8d:68:4e:72:cf:8d: 22:11:ba:4f:2f:0d:0c:87:5c:c4:69:c6:d2:dc:63: af:63:54:f2:e6:ba:97:d4:0f:e1:24:c2:e7:0a:8c: 0b:ee:dc:2a:f1:3b:10:1a:16:80:05:77:23:ad:19: d6:b7:5a:1b:18:55:f0:5c:22:6d:56:0c:bc:20:bc: 03:f3:7c:46:58:13:18:3d:e5:e1:a6:48:51:64:6e: ae:b5:a0:46:b1:a4:c6:6f:99:38:0e:87:0c:aa:08: 2f:60:bd:05:d3:7a:db:7e:00:0c:d3:26:87:2d:7c: 6c:c6:96:9e:f9:56:43:c2:a8:b5:b9:f4:35:13:5b: 0f:d5:41:2c:e5:e1:31:11:37:67:98:2a:40:9a:2b: e5:95:d0:fb:ac:2d:44:e5:b3:bc:7d:35:27:82:58: b6:e0:06:87:ae:e4:2d:8d:5b:8e:6b:51:45:35:fc: 90:bf:b6:0d:c0:13:ee:5a:23:e6:d6:49:aa:85:7c: 9f:de:38:b5:4c:99:d1:aa:f3:df:e3:77:38:43:ee: 3b:f5:0d:80:ae:c6:a3:83:9c:26:0c:f1:a8:64:68: 46:d7:71:58:d8:a7:d4:73:f4:51:80:23:45:96:c8: d5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:94:5C:7B:58:FE:9E:D6:F3:4D:11:08:E9:34:BF:72:50:C3:AC:14 X509v3 Authority Key Identifier: keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:9d:9c:e3:5c:1f:33:82:96:f8:f3:ee:c6:34:2d:51:d8:7a: f1:e2:f0:f8:14:0e:87:5b:aa:ab:ed:aa:f7:cb:57:ca:a4:f5: 0a:b8:4f:e3:8e:eb:7a:31:28:95:dc:b7:25:08:5f:33:4f:1b: 59:8b:72:aa:bc:ab:83:5c:3a:21:52:c9:59:cd:f4:8f:78:0d: 62:ab:69:95:14:33:c1:91:9b:bd:15:d7:5b:e9:04:9d:d3:a6: 2d:42:ba:3f:27:e9:67:b8:db:3f:45:f6:c5:e8:39:f9:35:09: d5:0c:65:0e:6e:30:5d:82:6f:6a:63:06:d6:6a:27:bb:0f:77: 53:57:3a:23:87:a9:03:97:e9:41:e6:20:2f:ad:44:f9:58:19: 33:a3:a2:6d:5e:e5:33:6a:15:9d:65:03:2a:fc:ca:bf:96:aa: bb:e6:66:fe:d6:ee:70:9a:52:00:43:38:bf:c4:83:88:bf:39: b4:1f:8d:46:69:11:5e:91:01:67:e4:b9:f5:05:43:d5:65:cb: 53:77:84:f3:6a:0e:1c:ef:b9:7d:89:c3:6a:65:65:f2:77:e6: a6:b1:2e:f8:01:1f:de:16:64:4c:45:ae:d8:0b:a1:0b:43:65: 1a:8f:86:ac:55:6e:dc:45:0f:5f:08:51:11:63:dd:5a:dc:ba: f1:c0:dc:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyQUMxMTAvBgNVBAUTKEY0N0QwRkJCNkU4QjY0RUNEOTkxMTY4RDhGNzMwRjc4 OTFFNEY0NEUwHhcNMjYwMTI0MTczMDU2WhcNMjYwMTMxMTczMDU2WjAYMRYwFAYD VQQDDA02OTc1MDFkMS1hYTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6al++satR+DlqoBRzX0KzrT4EqnAA5aNaE5yz40iEbpPLw0Mh1zEacbS3GOv Y1Ty5rqX1A/hJMLnCowL7twq8TsQGhaABXcjrRnWt1obGFXwXCJtVgy8ILwD83xG WBMYPeXhpkhRZG6utaBGsaTGb5k4DocMqggvYL0F03rbfgAM0yaHLXxsxpae+VZD wqi1ufQ1E1sP1UEs5eExETdnmCpAmivlldD7rC1E5bO8fTUngli24AaHruQtjVuO a1FFNfyQv7YNwBPuWiPm1kmqhXyf3ji1TJnRqvPf43c4Q+479Q2Arsajg5wmDPGo ZGhG13FY2KfUc/RRgCNFlsjVGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2UXHtY /p7W800RCOk0v3JQw6wUMB8GA1UdIwQYMBaAFPR9D7tui2Ts2ZEWjY9zD3iR5PRO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTJBQy82NDE3MTMxNkNB MzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpPelprUmFOajNNUGVKSGs5 RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlIMFB1MjZMWk96WmtSYU5qM01QZUpIazlFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTJBQy82NDE3MTMxNkNBMzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpP elprUmFOajNNUGVKSGs5RTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBznZzjXB8zgpb48+7GNC1R2Hrx4vD4FA6HW6qr7ar3y1fKpPUKuE/j jut6MSiV3LclCF8zTxtZi3KqvKuDXDohUslZzfSPeA1iq2mVFDPBkZu9Fddb6QSd 06YtQro/J+lnuNs/RfbF6Dn5NQnVDGUObjBdgm9qYwbWaie7D3dTVzojh6kDl+lB 5iAvrUT5WBkzo6JtXuUzahWdZQMq/Mq/lqq75mb+1u5wmlIAQzi/xIOIvzm0H41G aRFekQFn5Ln1BUPVZctTd4Tzag4c77l9icNqZWXyd+amsS74AR/eFmRMRa7YC6EL Q2Uaj4asVW7cRQ9fCFERY91a3LrxwNxZ -----END CERTIFICATE-----Generated at Sun Jan 25 04:35:20 2026 by rpki-client