This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: tepz5I680Osybr8SG7zhaC8lHtPnXwORElk4EDM84OQ= Subject key identifier: 30:A2:0D:67:BA:9C:42:8A:F8:B9:1B:95:4C:31:55:65:7D:06:90:D5 Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 0A15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 09F9 Signing time: Sat 24 Jan 2026 19:21:36 +0000 Manifest this update: Sat 24 Jan 2026 19:21:35 +0000 Manifest next update: Sat 31 Jan 2026 19:21:35 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: +aSqNtk0q0DGliVIgQ3+DxpkOmXyd7peish4qCYm5fY=) 2: 41622F82F82E11F0BC7D9928396F56BC.roa (hash: X88zm3asPfv4qeUoWPBNozIkJ7sSZW/2rdqWg7wPPtE=) 3: 92B2469A90D411F09BC0A564C4F9AE02.roa (hash: TURUoK0EqdJvH1Sny3sw0728lsP1RbLjnRY1UT/NZtA=) 4: 013B99DA986011F08FA4AB86C4F9AE02.roa (hash: HLqIoqQkySmNyWMIIry9IC33bxoaZanVi9jRVr97ewk=) 5: 1405AC90F0E911F0BB71DECD406F56BC.roa (hash: M+PCd41tpDirGlLnrMePnJnIIPgPA0EZUgSQIhumC38=) 6: 406D4EFEF82E11F0BC7D9928396F56BC.roa (hash: mzmeVG68cQxfXJ1uQwAAdYYB8/rqWbK/gyU4nLqLIgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2581 (0xa15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: Jan 24 19:21:35 2026 GMT Not After : Jan 31 19:21:35 2026 GMT Subject: CN=69751bc0-3358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:dc:40:23:df:98:1d:fd:85:06:60:17:1a: 00:ba:8e:a7:b6:c7:a5:2e:18:17:dc:d9:4d:5e:ea: 2f:3d:9d:7a:f0:cc:a8:e8:d3:b2:58:31:1c:ed:c7: f0:00:c9:99:ef:59:67:d6:0f:8a:a8:47:b7:a6:e4: bc:59:fc:8d:c0:53:51:53:a7:ae:aa:eb:6b:21:08: 69:b3:5e:1e:b0:33:95:f1:dd:68:bd:df:cd:bd:f1: 1b:46:b8:34:1f:fc:22:92:de:48:93:c3:1f:ce:9a: d4:55:1f:2e:95:eb:91:85:f0:cd:57:60:0f:56:f7: bf:28:cb:3d:66:02:5e:86:37:7e:b5:97:c3:94:83: 06:19:3e:4e:62:6c:a6:d0:7a:58:0a:e6:d7:79:04: 71:bb:3c:9d:4c:04:16:0a:57:6c:09:9d:c1:08:45: 9b:4f:d3:d9:a3:05:ab:87:a9:a7:0e:53:95:c3:fe: d6:95:ac:fe:e3:97:87:c2:ea:74:c1:11:30:62:a9: 9c:af:a3:f3:64:64:90:b6:9c:9b:94:ff:4b:55:24: f0:b3:32:58:ba:91:cf:1b:41:7b:6a:15:47:f8:41: 68:a9:d5:b7:9c:02:05:42:67:51:17:26:a3:de:72: 4b:5a:2d:c0:4a:6d:dc:b0:73:c9:18:04:66:e8:e2: 41:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A2:0D:67:BA:9C:42:8A:F8:B9:1B:95:4C:31:55:65:7D:06:90:D5 X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:f1:08:a2:4f:c4:95:51:52:53:64:26:82:63:24:c5:0e:a5: 1d:dd:a8:30:10:ba:b2:86:c5:d0:3d:a5:3d:8f:af:96:e9:ed: 78:43:3a:64:e1:e2:f2:12:ec:f9:00:d8:ff:cf:3b:2e:2f:a2: 4e:e0:74:3c:92:79:f0:57:0a:ce:74:b7:57:e5:88:d1:15:38: df:99:12:03:50:45:b3:d5:bf:e5:55:1d:21:62:c1:cd:3e:97: c0:7e:da:ff:ff:b9:79:ec:d2:44:9d:85:f7:e0:0a:10:83:e7: e5:60:49:15:09:6b:14:65:88:fa:3f:3e:e0:b8:ad:38:8c:28: b4:8f:89:6c:13:98:0b:f6:b0:c7:bd:48:2c:ea:9d:ac:e6:26: ed:88:c6:07:97:99:90:ff:7b:7b:7e:a0:0a:5b:36:65:21:e2: 73:19:4d:45:cd:cc:bf:d4:45:df:f8:16:3a:92:0f:9b:28:c7: b4:4a:7b:ab:e1:a5:c1:1d:b3:4d:a0:d1:d8:6d:c3:ff:51:e3: 12:94:48:f2:93:d7:5a:44:a3:9b:20:e7:51:2f:d6:c5:fc:8e: 20:1e:c8:b3:a2:9c:1f:df:52:bd:3c:ef:10:b2:1c:df:7d:17: 2d:0b:2b:35:92:c8:2f:2d:89:00:ab:ac:31:36:47:d0:54:0d: 00:8e:4f:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjYwMTI0MTkyMTM1WhcNMjYwMTMxMTkyMTM1WjAYMRYwFAYD VQQDDA02OTc1MWJjMC0zMzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAur3cQCPfmB39hQZgFxoAuo6ntselLhgX3NlNXuovPZ168Myo6NOyWDEc7cfw AMmZ71ln1g+KqEe3puS8WfyNwFNRU6euqutrIQhps14esDOV8d1ovd/NvfEbRrg0 H/wikt5Ik8MfzprUVR8uleuRhfDNV2APVve/KMs9ZgJehjd+tZfDlIMGGT5OYmym 0HpYCubXeQRxuzydTAQWCldsCZ3BCEWbT9PZowWrh6mnDlOVw/7Wlaz+45eHwup0 wREwYqmcr6PzZGSQtpyblP9LVSTwszJYupHPG0F7ahVH+EFoqdW3nAIFQmdRFyaj 3nJLWi3ASm3csHPJGARm6OJBzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCiDWe6 nEKK+LkblUwxVWV9BpDVMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI8QiiT8SVUVJTZCaCYyTFDqUd3agwELqyhsXQPaU9j6+W6e14Qzpk 4eLyEuz5ANj/zzsuL6JO4HQ8knnwVwrOdLdX5YjRFTjfmRIDUEWz1b/lVR0hYsHN PpfAftr//7l57NJEnYX34AoQg+flYEkVCWsUZYj6Pz7guK04jCi0j4lsE5gL9rDH vUgs6p2s5ibtiMYHl5mQ/3t7fqAKWzZlIeJzGU1Fzcy/1EXf+BY6kg+bKMe0Snur 4aXBHbNNoNHYbcP/UeMSlEjyk9daRKObIOdRL9bF/I4gHsizopwf31K9PO8Qshzf fRctCys1ksgvLYkAq6wxNkfQVA0Ajk/T -----END CERTIFICATE-----Generated at Sun Jan 25 02:50:47 2026 by rpki-client