This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: qXqAALB1Ps0Dmbhs6pa3INf7UNU+DKHG9RBk4r230/4= Subject key identifier: BA:0C:6C:AB:9A:80:E9:C5:19:99:4D:3B:55:B8:5E:C5:08:80:69:19 Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 0506 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 04F3 Signing time: Sat 24 Jan 2026 22:58:20 +0000 Manifest this update: Sat 24 Jan 2026 22:58:20 +0000 Manifest next update: Sat 31 Jan 2026 22:58:20 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: nituWX2BMSgRsslY7XHwAqaKTZXYwOIoeI+4e86Lk70=) 2: C7C191A0D7D911F0BE4EFACC9BD3641D.roa (hash: 40a30MQYhSi/4kDcgxKAHqwPUDpt/D12CkG2Eyby4K0=) 3: A89EEAE6B98111F0B5A4F31FC4F9AE02.roa (hash: q6OwG8Ta12XGUTNNsJMpzMzGxPGbtxAnBFH7/JXrdgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1286 (0x506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: Jan 24 22:58:20 2026 GMT Not After : Jan 31 22:58:20 2026 GMT Subject: CN=69754e8c-44f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:e2:b0:6d:ad:22:b9:77:26:a9:6b:e9:c9: b1:95:be:05:f0:a5:f1:d5:45:95:8f:48:c6:57:d9: 65:3b:1b:3c:fa:a1:99:cb:bd:d6:7a:41:0b:e2:80: 2f:3e:1d:6c:12:cc:0e:ff:9d:ec:6f:8b:7e:a5:8a: 02:f7:39:85:3c:1e:20:69:8b:44:d2:77:d2:9c:c5: 1e:22:ac:5a:0e:00:5d:93:40:e4:91:23:db:a2:da: db:7e:af:42:c8:c2:48:17:f8:ea:bf:ba:c1:2c:b7: 8d:03:69:c3:79:01:7e:b6:80:89:52:05:99:94:69: 16:a3:43:da:9b:1e:03:6b:89:70:a2:72:dc:5a:73: 89:e2:6c:3d:cf:b7:70:e5:a1:d7:61:fb:14:5f:34: 89:9a:50:8d:3e:9b:38:1d:ce:26:35:5e:8b:53:b8: 52:83:75:eb:d6:f2:cf:78:8f:df:0f:c3:24:f6:69: 30:47:db:5b:fe:8c:8a:c6:ae:74:98:12:ba:54:c2: 5d:7e:08:8e:63:57:49:da:76:e0:5a:8a:30:ec:27: 61:b6:1b:d7:e4:28:e3:2a:2c:9f:08:03:88:2c:29: f0:34:b9:c4:5b:ab:93:17:c5:c3:ac:b4:9c:06:c3: e5:1f:3d:52:ce:b4:d2:ac:af:92:72:c4:94:1a:71: cb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0C:6C:AB:9A:80:E9:C5:19:99:4D:3B:55:B8:5E:C5:08:80:69:19 X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:67:57:07:49:8d:f8:24:29:ae:38:83:75:0c:13:94:c3:25: ae:85:73:0f:69:85:da:9c:41:2c:ba:70:26:5c:f5:db:d4:1f: 4c:df:b4:ac:89:56:a0:42:92:4e:b4:40:74:21:48:88:fd:2f: 9c:11:51:f0:5f:ae:59:fb:00:c0:ba:cb:75:0d:1b:ee:e7:ae: 11:5c:3b:d3:4d:b9:32:f5:70:f5:21:bc:22:49:3e:a8:0e:60: 45:53:f9:bf:46:6d:72:3d:e3:a0:37:7a:dd:ee:1f:f1:53:d1: b9:2f:89:28:85:32:1d:55:fa:ef:b0:e2:47:9a:e0:26:fc:5c: 90:aa:de:8a:97:f5:bc:38:a4:68:3c:11:83:ed:d2:a1:2f:49: cd:5e:10:e8:3b:91:3c:62:96:b0:5a:03:cf:40:5a:22:56:bf: 70:bf:ae:c2:76:6f:49:99:c7:37:c6:f4:36:b3:65:97:8b:42: 38:dc:f6:80:83:bd:1f:f1:68:62:bf:e7:3b:87:b3:20:3e:7e: 98:22:04:3e:85:2f:73:36:dd:cf:b4:f5:54:6d:5d:1c:50:40: 2f:c3:55:58:81:1c:27:9b:24:8e:2f:0a:55:c8:b5:38:58:54: 4a:3c:e2:62:8d:6c:0b:d7:c3:b7:5f:35:40:93:e4:8a:ba:99: 25:26:09:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjYwMTI0MjI1ODIwWhcNMjYwMTMxMjI1ODIwWjAYMRYwFAYD VQQDDA02OTc1NGU4Yy00NGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYrisG2tIrl3Jqlr6cmxlb4F8KXx1UWVj0jGV9llOxs8+qGZy73WekEL4oAv Ph1sEswO/53sb4t+pYoC9zmFPB4gaYtE0nfSnMUeIqxaDgBdk0DkkSPbotrbfq9C yMJIF/jqv7rBLLeNA2nDeQF+toCJUgWZlGkWo0Pamx4Da4lwonLcWnOJ4mw9z7dw 5aHXYfsUXzSJmlCNPps4Hc4mNV6LU7hSg3Xr1vLPeI/fD8Mk9mkwR9tb/oyKxq50 mBK6VMJdfgiOY1dJ2nbgWoow7CdhthvX5CjjKiyfCAOILCnwNLnEW6uTF8XDrLSc BsPlHz1SzrTSrK+ScsSUGnHLiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoMbKua gOnFGZlNO1W4XsUIgGkZMB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLZ1cHSY34JCmuOIN1DBOUwyWuhXMPaYXanEEsunAmXPXb1B9M37Ss iVagQpJOtEB0IUiI/S+cEVHwX65Z+wDAust1DRvu564RXDvTTbky9XD1IbwiST6o DmBFU/m/Rm1yPeOgN3rd7h/xU9G5L4kohTIdVfrvsOJHmuAm/FyQqt6Kl/W8OKRo PBGD7dKhL0nNXhDoO5E8YpawWgPPQFoiVr9wv67Cdm9Jmcc3xvQ2s2WXi0I43PaA g70f8Whiv+c7h7MgPn6YIgQ+hS9zNt3PtPVUbV0cUEAvw1VYgRwnmySOLwpVyLU4 WFRKPOJijWwL18O3XzVAk+SKupklJglj -----END CERTIFICATE-----Generated at Sun Jan 25 06:11:04 2026 by rpki-client