This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft File: BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft (raw, json) Hash identifier: q7M1rkeJZfBMriBOowu1wa0daxGvIzlfqvhymoPlE6k= Subject key identifier: 21:F2:3C:37:45:89:85:A8:21:E8:97:98:F6:C6:E8:76:37:2F:B9:E2 Authority key identifier: 05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 Certificate issuer: /CN=A9199B85/serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft Manifest number: 016F Signing time: Sun 25 Jan 2026 00:15:05 +0000 Manifest this update: Sun 25 Jan 2026 00:15:04 +0000 Manifest next update: Sun 01 Feb 2026 00:15:04 +0000 Files and hashes: 1: BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl (hash: K/nSGMFCHinbmRbFBWoDvDhUhKQ6dfid9zRWs/WApgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Validity Not Before: Jan 25 00:15:04 2026 GMT Not After : Feb 1 00:15:04 2026 GMT Subject: CN=69756089-fb08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:d3:58:20:57:9f:ab:2b:28:3c:14:53:0b: 08:28:e7:a1:ff:e7:e3:8b:08:c8:f5:ff:9b:10:9c: 19:af:3e:98:08:ed:2e:cc:13:cc:a7:82:9b:a1:6f: e7:d9:1f:a0:5c:9a:9d:65:1d:98:73:2c:54:51:83: b8:94:5d:b9:2e:82:89:ec:b4:3d:0c:ef:bf:cc:fd: e1:bf:41:9f:b6:c9:86:1b:c6:bf:7a:07:eb:ff:58: b5:91:67:9b:db:c7:5f:35:de:4f:3d:16:9d:7e:d3: 42:03:d7:62:a3:4d:bf:c1:02:42:d1:e5:22:b4:53: 6e:82:6b:b6:c3:08:30:96:a8:90:6d:36:d3:e8:62: 3a:45:ff:ae:3d:37:97:8a:2f:22:e9:08:84:d0:bb: bf:af:2d:ba:c0:85:bf:f0:3c:46:af:c5:11:49:dc: 98:8c:99:53:44:88:31:6d:26:fd:77:c0:fb:57:8d: d9:e7:6c:14:89:9c:1a:60:0e:82:40:8a:6e:6d:ee: b6:cf:de:8c:38:bc:cb:c0:1f:78:59:2e:09:7a:ba: 53:d6:9c:91:87:66:4c:a9:c9:5f:4c:d7:10:c1:6f: 30:1f:c6:32:cc:8d:de:4e:aa:a7:e6:3c:b0:df:34: e6:6f:47:19:da:a6:7f:85:5c:9b:d7:dc:1b:db:51: f3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F2:3C:37:45:89:85:A8:21:E8:97:98:F6:C6:E8:76:37:2F:B9:E2 X509v3 Authority Key Identifier: keyid:05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:20:96:3c:4c:d8:f0:bc:fe:df:9a:94:42:28:ed:48:9a:9b: 76:62:ef:5a:47:77:50:52:8c:21:f0:c4:ef:09:a9:d0:ea:83: 35:8e:44:b9:36:fe:b1:72:d3:d0:b2:c7:14:b0:24:c8:42:41: 40:83:76:84:02:ed:94:0f:1c:ac:13:03:b0:61:af:fd:45:04: 89:3d:0a:ef:ec:d1:5c:83:41:f7:3d:db:16:67:21:e4:91:cd: fb:7d:fa:9e:5d:98:e9:29:0b:d7:58:63:8e:32:cf:f8:e7:e5: 71:a9:3a:6e:f8:e3:a4:15:bb:9d:94:45:c3:11:09:2e:58:47: 9b:81:1e:b4:6d:c3:bf:a8:d4:fb:9e:87:6b:61:97:69:dd:4c: 97:fc:e1:8a:35:70:15:80:5a:67:25:b6:11:ff:25:e4:55:b4: 76:c5:78:07:2b:59:0c:d7:75:be:27:70:ed:fb:05:13:61:9d: b9:f3:e9:7d:50:36:6a:d3:e5:05:54:33:09:21:02:5e:3b:e2: f4:8e:9e:bb:e0:96:d6:54:ba:a6:1b:8b:91:03:8b:62:f2:ce: 0e:fe:01:db:40:f6:55:8f:74:f5:bc:b1:0d:81:cf:26:12:58: 71:0b:10:e3:24:e4:04:bc:30:0b:4c:8f:cb:47:1d:f5:59:13: 3f:2e:1b:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDA1QTMzNkY2NDZDNjgzMzc4OUI2QUU3QzkyMDcyQjdG OTREOURDMjkwHhcNMjYwMTI1MDAxNTA0WhcNMjYwMjAxMDAxNTA0WjAYMRYwFAYD VQQDDA02OTc1NjA4OS1mYjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6fTWCBXn6srKDwUUwsIKOeh/+fjiwjI9f+bEJwZrz6YCO0uzBPMp4KboW/n 2R+gXJqdZR2YcyxUUYO4lF25LoKJ7LQ9DO+/zP3hv0GftsmGG8a/egfr/1i1kWeb 28dfNd5PPRadftNCA9dio02/wQJC0eUitFNugmu2wwgwlqiQbTbT6GI6Rf+uPTeX ii8i6QiE0Lu/ry26wIW/8DxGr8URSdyYjJlTRIgxbSb9d8D7V43Z52wUiZwaYA6C QIpube62z96MOLzLwB94WS4JerpT1pyRh2ZMqclfTNcQwW8wH8YyzI3eTqqn5jyw 3zTmb0cZ2qZ/hVyb19wb21HzVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHyPDdF iYWoIeiXmPbG6HY3L7niMB8GA1UdIwQYMBaAFAWjNvZGxoM3ibaufJIHK3+U2dwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS83RDg2QTIzOEM2 MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6ZUp0cTU4a2djcmY1VFoz Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JhTTI5a2JHZ3plSnRxNThrZ2NyZjVUWjNDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS83RDg2QTIzOEM2MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6 ZUp0cTU4a2djcmY1VFozQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhIJY8TNjwvP7fmpRCKO1Impt2Yu9aR3dQUowh8MTvCanQ6oM1jkS5 Nv6xctPQsscUsCTIQkFAg3aEAu2UDxysEwOwYa/9RQSJPQrv7NFcg0H3PdsWZyHk kc37ffqeXZjpKQvXWGOOMs/45+VxqTpu+OOkFbudlEXDEQkuWEebgR60bcO/qNT7 nodrYZdp3UyX/OGKNXAVgFpnJbYR/yXkVbR2xXgHK1kM13W+J3Dt+wUTYZ258+l9 UDZq0+UFVDMJIQJeO+L0jp674JbWVLqmG4uRA4ti8s4O/gHbQPZVj3T1vLENgc8m ElhxCxDjJOQEvDALTI/LRx31WRM/LhtC -----END CERTIFICATE-----Generated at Sun Jan 25 19:08:31 2026 by rpki-client