This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json) Hash identifier: W6lUzx9vfCI2AQi3ev1LzwztMHku9PPPGLghQM/t1tA= Subject key identifier: 5B:06:F0:F9:20:EF:C0:39:71:40:B1:08:0B:9C:78:94:29:32:FD:4B Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft Manifest number: 04C0 Signing time: Sat 24 Jan 2026 23:07:52 +0000 Manifest this update: Sat 24 Jan 2026 23:07:52 +0000 Manifest next update: Sat 31 Jan 2026 23:07:52 +0000 Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: aiDeHTWyWj5FjqLsjjYueEO5drynD0+DUnpeDEQ+8Qk=) 2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: y1lAMNBHmo8LOCH2UbQd6lp4y3+4hOTNpmp++HIjEDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Validity Not Before: Jan 24 23:07:52 2026 GMT Not After : Jan 31 23:07:52 2026 GMT Subject: CN=697550c8-c8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a5:01:6a:62:49:84:b3:7d:40:ea:0d:19:22: 60:45:df:46:29:6d:6c:d2:74:b4:93:7d:3e:85:65: 48:5c:16:dc:da:4e:cb:d2:6c:7a:a1:df:8e:45:8e: 1c:35:65:f3:60:5a:4f:7f:bb:89:3a:d0:3d:ed:71: 9b:e1:b4:41:a8:fc:33:96:15:e9:9e:ff:31:9b:57: c9:b5:9a:20:8a:38:92:cd:f7:de:e6:44:5e:d0:d1: 06:af:64:e0:fb:1e:e8:3f:6b:2f:29:f9:5a:27:c7: 6d:ca:7a:3e:1c:e2:e6:a4:d6:be:0d:44:32:45:40: 6c:fa:6e:09:f9:53:a0:33:dd:3f:49:c2:50:72:bd: 58:63:d0:6b:5a:b3:63:20:19:7a:0d:8b:46:82:8a: 4b:98:59:3b:db:7b:9d:3c:df:ce:39:e1:12:6f:3c: 35:ec:99:41:72:33:a3:b5:c5:02:f9:42:66:76:a4: a6:7f:7f:f7:b9:8c:63:87:15:63:3b:c9:68:c0:d6: 2c:8f:ec:5d:3e:f8:5e:1e:f3:fd:4c:45:ea:0f:a5: 9a:0a:d7:55:8d:e1:ff:10:b0:15:19:3e:c6:56:c7: 9d:16:8f:e0:42:6f:10:2e:17:e1:99:a0:3c:26:4f: 69:c9:2b:8d:89:b7:c5:a7:52:4d:0d:21:49:19:1a: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:06:F0:F9:20:EF:C0:39:71:40:B1:08:0B:9C:78:94:29:32:FD:4B X509v3 Authority Key Identifier: keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:f8:fc:3a:64:be:a7:2d:0c:4e:b9:72:5f:4a:7c:13:b0:83: 74:73:1a:01:31:94:fc:48:86:5a:5f:bb:2c:0d:f6:71:7a:a8: 2f:31:df:b8:e1:ac:76:31:90:0b:58:a5:d8:e5:1f:25:ab:d3: f8:a7:8d:3d:49:8f:36:49:e4:e8:a1:7b:d0:f8:c9:16:f8:57: fb:dc:33:ed:14:c6:da:f1:39:5e:48:5f:30:da:c3:d6:34:eb: 71:fe:45:c1:40:0d:1a:d8:ff:f4:d6:9f:91:09:0d:46:53:1f: 94:a0:17:48:06:cf:5a:4a:75:34:64:2f:d7:2a:05:9b:93:a6: 6d:f3:44:d0:45:1b:4d:64:f2:e1:10:56:ad:c7:94:77:fd:91: 66:24:66:03:a4:1a:95:c6:3f:97:b6:61:e3:85:a7:8a:74:7c: 85:18:0d:fc:63:8b:c2:ae:2a:30:3f:ea:55:b4:ca:dd:8e:1c: 6c:ae:b6:8c:0b:9d:1d:74:17:b4:1b:47:fa:74:66:4c:de:14: a2:0f:45:db:71:b2:48:79:cf:4a:44:58:d0:d7:fe:ca:f1:78: 5f:42:86:1c:0a:1c:d9:00:6d:98:11:ac:fd:21:d8:ad:10:40: 39:6d:ec:e7:a1:37:1c:4a:67:1b:57:2d:16:0f:ac:08:0c:b3: 14:36:14:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2 QTMzRTVDQUYwHhcNMjYwMTI0MjMwNzUyWhcNMjYwMTMxMjMwNzUyWjAYMRYwFAYD VQQDDA02OTc1NTBjOC1jOGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaUBamJJhLN9QOoNGSJgRd9GKW1s0nS0k30+hWVIXBbc2k7L0mx6od+ORY4c NWXzYFpPf7uJOtA97XGb4bRBqPwzlhXpnv8xm1fJtZogijiSzffe5kRe0NEGr2Tg +x7oP2svKflaJ8dtyno+HOLmpNa+DUQyRUBs+m4J+VOgM90/ScJQcr1YY9BrWrNj IBl6DYtGgopLmFk723udPN/OOeESbzw17JlBcjOjtcUC+UJmdqSmf3/3uYxjhxVj O8lowNYsj+xdPvheHvP9TEXqD6WaCtdVjeH/ELAVGT7GVsedFo/gQm8QLhfhmaA8 Jk9pySuNibfFp1JNDSFJGRq91wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsG8Pkg 78A5cUCxCAuceJQpMv1LMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk5Mi81QjNEMDgwMjVDMEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZr SFhjUHd0LWtBOUZxTS1YSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH+Pw6ZL6nLQxOuXJfSnwTsIN0cxoBMZT8SIZaX7ssDfZxeqgvMd+4 4ax2MZALWKXY5R8lq9P4p409SY82SeTooXvQ+MkW+Ff73DPtFMba8TleSF8w2sPW NOtx/kXBQA0a2P/01p+RCQ1GUx+UoBdIBs9aSnU0ZC/XKgWbk6Zt80TQRRtNZPLh EFatx5R3/ZFmJGYDpBqVxj+XtmHjhaeKdHyFGA38Y4vCriowP+pVtMrdjhxsrraM C50ddBe0G0f6dGZM3hSiD0XbcbJIec9KRFjQ1/7K8XhfQoYcChzZAG2YEaz9Idit EEA5beznoTccSmcbVy0WD6wIDLMUNhQO -----END CERTIFICATE-----Generated at Sun Jan 25 09:23:10 2026 by rpki-client