This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json) Hash identifier: pFku4YXKBNfoBW4+3NiaOaYy9OS8faZpt4dMngYJrok= Subject key identifier: B4:DB:F6:CE:7A:81:A2:D0:5A:20:E8:3E:F3:73:BB:B8:5A:73:58:66 Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0E1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft Manifest number: 0DE3 Signing time: Sat 24 Jan 2026 17:34:25 +0000 Manifest this update: Sat 24 Jan 2026 17:34:25 +0000 Manifest next update: Sat 31 Jan 2026 17:34:25 +0000 Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: OTOG/msy0zV4xXoO9LinjhZRUB6gyIYUVxg5vIT7u8A=) 2: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: KMP4fS0KJ0rV6tzyJoqXTC8btS2FqftO8fBCSBS+5IE=) 3: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: TY0we0LCT2NhieXnw4ZC8SmWs1+jQYEFzS94Z1jJrh0=) 4: 8E8D88CC7FF911F09985006DC4F9AE02.roa (hash: ephMktk7dldPDpqOYOq0zlTVGd1aoKcLbgXlsFlKEgM=) 5: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: eIKfHf/XSmCHqSrtE/mqXSvnhQ2z8uL0Vg+6q1rOPNA=) 6: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: e7UzY1XC0eLBl2c9zPdawS11TdFN1eY25CHBco5Agic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3610 (0xe1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Jan 24 17:34:25 2026 GMT Not After : Jan 31 17:34:25 2026 GMT Subject: CN=697502a1-963c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:83:57:ad:17:2b:c8:84:bb:64:6f:75:1e:e4: 90:15:d4:ee:45:62:67:96:48:ed:7e:89:81:46:00: bd:0c:b4:c6:e2:6b:69:48:cf:f5:35:55:05:6b:cb: 10:04:53:fb:db:d6:c2:d9:68:69:c6:72:01:da:7e: d8:cf:59:c0:1c:f7:5d:ff:98:78:3d:d3:05:1e:d8: e6:20:af:ce:85:dd:46:2e:0c:d2:5f:7f:3b:03:f3: 38:48:4d:64:a2:76:2e:62:b6:3e:71:4d:39:9b:bb: 26:89:4b:4f:c3:50:c5:7b:ed:a6:fa:77:b9:fc:b9: 7b:c7:5d:ef:86:b3:12:1c:a8:29:6c:37:15:2f:2d: 20:d9:3c:49:71:83:20:74:be:ad:f3:c4:e9:78:44: 99:91:a4:cb:48:a1:21:14:a4:d3:d4:ca:99:f8:61: 34:20:af:e0:12:96:93:47:7c:e1:d4:02:f7:8b:00: 04:e4:06:bc:5f:ff:48:ac:ad:3c:55:68:de:59:0f: 29:26:2f:f5:59:15:ba:d6:4d:2f:7d:e7:69:78:b0: 2d:45:03:67:31:02:6d:fc:6e:37:59:73:8f:21:45: 9f:d4:6a:e3:24:f5:eb:41:33:55:0d:33:3f:3b:2a: 3f:02:6f:a6:93:2c:05:85:44:ac:16:b4:5b:50:ba: 20:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DB:F6:CE:7A:81:A2:D0:5A:20:E8:3E:F3:73:BB:B8:5A:73:58:66 X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:54:6f:4a:24:4e:96:7e:4f:17:4b:ad:c2:cd:65:cc:9e:ee: 56:30:e2:e6:a6:91:eb:2c:b1:b0:f2:af:8b:0c:dd:7d:3f:c3: 0c:e6:28:27:3b:57:55:06:17:de:90:0d:cf:7a:ee:15:90:cd: 7e:1e:51:1c:a0:9c:72:9a:46:d0:23:00:0f:2e:34:4f:01:bb: e1:66:60:e3:f0:68:94:21:ac:47:b0:e0:2b:9a:c0:3c:f0:02: 5f:f8:4e:80:7d:d6:df:14:97:56:87:35:be:65:f2:6d:c9:f4: 34:1a:8c:4f:ed:a6:e7:cc:7e:bf:fe:8f:cc:c9:1f:0b:70:8b: 7c:6a:12:bb:62:78:c7:99:45:78:16:a4:7f:e2:c9:36:81:2a: 4a:29:41:09:36:4f:64:ac:c6:19:7a:2f:1e:2d:3d:22:d3:d9: 94:3e:c8:fd:4d:97:4d:51:6f:2d:3f:fe:bb:bf:5b:e6:1b:26: fe:2d:76:3b:43:29:7b:86:4f:f0:ab:35:76:ab:f2:01:1f:39: 0c:a5:de:d8:c2:33:02:d7:fc:7c:22:b6:6e:9c:04:d0:98:7f: c2:be:a0:fa:86:1b:d5:ff:da:5e:67:db:d1:fd:2c:7e:40:d3: 06:6f:65:8d:1a:f0:0c:17:21:ca:d4:71:37:ef:9e:40:1a:4a: ee:ed:47:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjYwMTI0MTczNDI1WhcNMjYwMTMxMTczNDI1WjAYMRYwFAYD VQQDDA02OTc1MDJhMS05NjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44NXrRcryIS7ZG91HuSQFdTuRWJnlkjtfomBRgC9DLTG4mtpSM/1NVUFa8sQ BFP729bC2WhpxnIB2n7Yz1nAHPdd/5h4PdMFHtjmIK/Ohd1GLgzSX387A/M4SE1k onYuYrY+cU05m7smiUtPw1DFe+2m+ne5/Ll7x13vhrMSHKgpbDcVLy0g2TxJcYMg dL6t88TpeESZkaTLSKEhFKTT1MqZ+GE0IK/gEpaTR3zh1AL3iwAE5Aa8X/9IrK08 VWjeWQ8pJi/1WRW61k0vfedpeLAtRQNnMQJt/G43WXOPIUWf1GrjJPXrQTNVDTM/ Oyo/Am+mkywFhUSsFrRbULogIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTb9s56 gaLQWiDoPvNzu7hac1hmMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD SEhqSWdwRzczMXhSS2pQMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUVG9KJE6Wfk8XS63CzWXMnu5WMOLmppHrLLGw8q+LDN19P8MM5ign O1dVBhfekA3Peu4VkM1+HlEcoJxymkbQIwAPLjRPAbvhZmDj8GiUIaxHsOArmsA8 8AJf+E6AfdbfFJdWhzW+ZfJtyfQ0GoxP7abnzH6//o/MyR8LcIt8ahK7YnjHmUV4 FqR/4sk2gSpKKUEJNk9krMYZei8eLT0i09mUPsj9TZdNUW8tP/67v1vmGyb+LXY7 Qyl7hk/wqzV2q/IBHzkMpd7YwjMC1/x8IrZunATQmH/CvqD6hhvV/9peZ9vR/Sx+ QNMGb2WNGvAMFyHK1HE3755AGkru7Uf2 -----END CERTIFICATE-----Generated at Sun Jan 25 04:38:21 2026 by rpki-client