This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft File: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json) Hash identifier: jX3y2CVw49LeW3D0SL6VjHeEUXVtQ4q2+c28S9yJxiQ= Subject key identifier: 85:AA:1F:CF:C5:4E:48:5B:66:AD:F8:F0:19:E7:85:8F:72:3B:01:BF Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 Certificate issuer: /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft Manifest number: 01BD Signing time: Sun 25 Jan 2026 02:25:24 +0000 Manifest this update: Sun 25 Jan 2026 02:25:24 +0000 Manifest next update: Sun 01 Feb 2026 02:25:24 +0000 Files and hashes: 1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: GnOYqxivd7UGGMxNacSA9wMhHPI6pjSff/92G6WPugA=) 2: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: R7rPLcu7KBIwwKHWQWTFZ/O5x8NWRmyKksg1gxkuSH8=) 3: 4B2AA57A817E11F09C78E12EC4F9AE02.roa (hash: REOJoaqVdrJhNGonqBJNmT+BZxMjjyhTcxLRbt3wFv8=) 4: 337F4584817E11F08861A82EC4F9AE02.roa (hash: KuMW19KH73/hFw8JKl9ArAOUwXbSFArQygkA6LoPJk4=) 5: C45AC058825811F09D83BD57C4F9AE02.roa (hash: awWR/tTohg7Dk0K+TdJ2AhHUsvle/tzHsjESu5B0y7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Validity Not Before: Jan 25 02:25:24 2026 GMT Not After : Feb 1 02:25:24 2026 GMT Subject: CN=69757f14-e85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2f:8c:55:47:81:8c:ed:92:7d:77:32:7b:e6: 15:8c:fd:7b:3c:d5:cc:7d:e2:84:f7:0e:1c:f8:ee: f0:74:25:c2:3a:b9:8d:81:cb:c7:f7:11:90:28:83: c1:09:74:d4:62:fd:d1:9b:a9:f7:6b:99:a0:c2:de: 7f:10:27:6b:8a:03:46:c3:31:4a:53:2f:2a:ff:88: 15:6c:aa:6e:63:09:f0:07:55:e9:5f:13:4b:81:22: a0:26:07:88:dc:16:ed:d4:41:13:4d:7a:c3:d3:df: d3:b2:b5:29:96:17:7e:29:33:7c:a7:00:8e:3c:86: d1:3f:ba:77:df:bb:b1:75:d1:b0:1a:f3:a1:18:ac: c2:82:d4:db:eb:4d:d4:ad:68:c7:95:43:f3:7d:76: 1e:d7:0e:37:06:01:33:9d:93:1c:66:2f:a8:9b:36: a1:fa:5d:87:b9:d7:24:fe:a7:37:33:f4:6c:67:e6: 4b:79:d9:08:85:60:a1:46:41:4c:20:bf:40:5b:5f: ec:95:e7:22:4e:cc:b3:83:38:76:d8:5f:bb:0d:55: f1:f8:e8:ad:20:67:ca:5d:47:c3:cb:73:35:41:2d: ea:3d:37:c8:06:87:e6:54:26:02:51:be:b6:db:ff: f0:4d:b7:ac:c4:b3:4a:21:1d:4e:e0:58:57:a5:e6: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AA:1F:CF:C5:4E:48:5B:66:AD:F8:F0:19:E7:85:8F:72:3B:01:BF X509v3 Authority Key Identifier: keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:1a:7c:9e:72:89:69:53:ca:ef:ad:85:75:2c:bd:c6:f1:ed: 8b:9f:3b:1a:e5:7c:7a:8c:85:1d:9c:7e:88:f0:d3:d3:53:cf: e8:dd:ed:45:47:c8:bf:fb:cd:4a:66:3a:59:a1:a1:be:8e:d1: d1:7f:6c:60:21:a1:9a:bc:61:0c:b7:18:ee:a5:ff:00:e2:73: 3c:30:ed:f6:d7:fa:e6:95:64:64:23:ea:09:76:bf:26:65:3e: 1f:0d:13:11:9d:1f:40:56:c4:b6:fd:9c:3e:d0:46:51:b0:ae: c1:b8:48:80:c7:92:25:20:31:46:53:c1:3f:82:e6:a3:ef:fe: ae:44:19:0d:26:a6:4b:62:0c:93:8b:b5:09:80:ac:02:5a:8c: 5d:c6:a3:92:cb:05:ed:c2:4d:15:85:23:4e:38:2d:ef:52:e3: 1d:ec:e4:9a:b7:09:76:7d:8a:12:18:3e:a2:b7:e0:c1:6c:f3: 73:b9:37:c1:9e:70:a6:8d:94:ad:a8:24:32:e1:44:1c:1d:22: ed:12:d8:bb:f6:8d:93:12:2a:e0:fa:a1:0d:3b:2f:4c:40:b1: e3:7b:80:81:69:12:37:36:5e:8d:ff:da:4a:0f:72:b6:64:b6: 3a:66:98:77:d4:39:d5:81:6c:59:55:f1:2a:34:90:5c:d7:d9: 4a:81:9e:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA3NTMxMTAvBgNVBAUTKERBRDc4Q0FDMzZEMTQzRjE3NEFCRTExMkQ0OTVFRDVB MDZFQ0E3NDAwHhcNMjYwMTI1MDIyNTI0WhcNMjYwMjAxMDIyNTI0WjAYMRYwFAYD VQQDDA02OTc1N2YxNC1lODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtS+MVUeBjO2SfXcye+YVjP17PNXMfeKE9w4c+O7wdCXCOrmNgcvH9xGQKIPB CXTUYv3Rm6n3a5mgwt5/ECdrigNGwzFKUy8q/4gVbKpuYwnwB1XpXxNLgSKgJgeI 3Bbt1EETTXrD09/TsrUplhd+KTN8pwCOPIbRP7p337uxddGwGvOhGKzCgtTb603U rWjHlUPzfXYe1w43BgEznZMcZi+omzah+l2Hudck/qc3M/RsZ+ZLedkIhWChRkFM IL9AW1/sleciTsyzgzh22F+7DVXx+OitIGfKXUfDy3M1QS3qPTfIBofmVCYCUb62 2//wTbesxLNKIR1O4FhXpeZQkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWqH8/F TkhbZq348BnnhY9yOwG/MB8GA1UdIwQYMBaAFNrXjKw20UPxdKvhEtSV7VoG7KdA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDc1My84RUYyNEExMjVC NkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFfRjBxLUVTMUpYdFdnYnNw MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0ZU1yRGJSUV9GMHEtRVMxSlh0V2dic3AwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDc1My84RUYyNEExMjVCNkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFf RjBxLUVTMUpYdFdnYnNwMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0GnyecolpU8rvrYV1LL3G8e2Lnzsa5Xx6jIUdnH6I8NPTU8/o3e1F R8i/+81KZjpZoaG+jtHRf2xgIaGavGEMtxjupf8A4nM8MO321/rmlWRkI+oJdr8m ZT4fDRMRnR9AVsS2/Zw+0EZRsK7BuEiAx5IlIDFGU8E/guaj7/6uRBkNJqZLYgyT i7UJgKwCWoxdxqOSywXtwk0VhSNOOC3vUuMd7OSatwl2fYoSGD6it+DBbPNzuTfB nnCmjZStqCQy4UQcHSLtEti79o2TEirg+qENOy9MQLHje4CBaRI3Nl6N/9pKD3K2 ZLY6Zph31DnVgWxZVfEqNJBc19lKgZ5X -----END CERTIFICATE-----Generated at Sun Jan 25 10:50:40 2026 by rpki-client