This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: Ka8GYJ3nVIrmbtudSvKw9VIg3CrcDGGsN9VO8sjCXfU= Subject key identifier: 45:96:01:9F:54:6D:65:CE:5C:DE:D5:9D:A1:2D:77:05:98:B8:25:63 Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 0255 Signing time: Sun 25 Jan 2026 00:56:59 +0000 Manifest this update: Sun 25 Jan 2026 00:56:58 +0000 Manifest next update: Sun 01 Feb 2026 00:56:58 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: +GZOU819YV/i5F3Enhsqtc9i/mPFM8tYEn/FoZkY9Og=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: BEFWs+IE5SpNAqstNikCJZ5Fhc1or/0jx2vp8+rz0D4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: Jan 25 00:56:58 2026 GMT Not After : Feb 1 00:56:58 2026 GMT Subject: CN=69756a5b-4c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f2:37:8b:72:aa:0f:f8:f0:83:b0:ea:f0:c0: ed:1d:9d:db:ed:a1:02:5a:03:4b:f0:45:fd:b6:1b: 66:66:59:70:35:41:94:0b:eb:29:c3:74:6b:15:8d: e6:61:11:20:39:f2:46:0e:5f:f5:95:84:56:87:4c: f7:03:0a:a8:b7:5e:97:75:83:45:54:3b:d8:2e:71: 44:b6:ba:aa:20:96:38:2a:08:ea:f3:ba:49:07:22: dc:1a:b1:cf:b6:d9:a4:0e:a6:a6:7f:71:2a:7e:74: 90:f6:a4:28:fa:38:96:30:85:14:c8:84:91:ab:90: ac:0d:a4:d5:f3:e1:c6:9d:27:51:ca:65:7a:df:cd: 2d:76:aa:ae:a9:dc:ff:a6:27:5b:1c:fc:2c:2f:b7: 8c:b6:6a:3e:1a:d1:70:21:20:29:38:12:e7:25:d9: d9:58:23:e0:a5:4d:cc:dd:d1:66:62:2c:2e:2a:10: bc:ad:d4:52:c4:ec:d0:02:e9:8e:ee:70:a7:27:94: cd:3b:d3:1e:63:6d:44:4f:95:c3:5c:02:e6:7d:cc: e7:6f:f1:76:c0:9b:e4:c4:9a:18:f1:28:0c:81:c8: 66:7a:56:ec:80:87:33:7d:16:0b:c7:cf:81:97:f1: d2:fc:92:28:08:d9:af:83:ba:17:08:9e:fb:f5:bb: 49:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:96:01:9F:54:6D:65:CE:5C:DE:D5:9D:A1:2D:77:05:98:B8:25:63 X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b5:ff:52:99:41:a5:8d:66:bc:3c:e1:27:51:cc:c6:08:6d: 68:4c:56:e8:c6:69:bc:1e:43:7c:6b:ab:87:9b:7e:7c:e5:1d: 68:98:03:74:e5:65:78:b9:74:ab:42:07:63:9f:89:f7:9d:53: 5c:6f:7c:24:ec:a4:29:0d:17:e6:ab:c6:3a:71:c9:68:d8:ab: c1:6d:a6:5e:85:ed:c5:25:47:20:59:bd:00:eb:e1:5a:a1:93: 93:e4:6d:6e:ce:2e:6c:e0:c5:7d:f0:c6:85:86:bb:22:3a:8c: f1:df:2a:cd:1a:49:24:7a:d4:64:5b:cb:03:f2:0b:5f:62:81: 61:b4:52:33:24:be:64:6c:57:86:70:80:4c:38:26:69:a8:23: ad:d2:9f:79:90:4c:ba:d6:d5:d2:1c:65:b1:60:a2:69:9a:5c: 8f:e7:b5:92:4f:a5:79:ef:23:ae:3a:b2:ff:28:77:68:8e:a7: a0:f3:05:0c:52:2e:2f:61:e8:93:84:02:66:0a:49:ea:3f:26: 49:d7:72:44:df:ad:30:6e:c6:58:72:11:88:b7:e3:9e:bb:57: 6b:38:8c:a0:67:07:7d:df:2a:bc:e3:d6:47:ac:60:b4:70:bc: 7f:75:40:08:6b:95:a9:eb:2e:b9:9d:4d:03:bd:c2:c5:42:5b: 66:ce:ae:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjYwMTI1MDA1NjU4WhcNMjYwMjAxMDA1NjU4WjAYMRYwFAYD VQQDDA02OTc1NmE1Yi00YzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvI3i3KqD/jwg7Dq8MDtHZ3b7aECWgNL8EX9thtmZllwNUGUC+spw3RrFY3m YREgOfJGDl/1lYRWh0z3Awqot16XdYNFVDvYLnFEtrqqIJY4Kgjq87pJByLcGrHP ttmkDqamf3EqfnSQ9qQo+jiWMIUUyISRq5CsDaTV8+HGnSdRymV6380tdqquqdz/ pidbHPwsL7eMtmo+GtFwISApOBLnJdnZWCPgpU3M3dFmYiwuKhC8rdRSxOzQAumO 7nCnJ5TNO9MeY21ET5XDXALmfcznb/F2wJvkxJoY8SgMgchmelbsgIczfRYLx8+B l/HS/JIoCNmvg7oXCJ779btJbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWWAZ9U bWXOXN7VnaEtdwWYuCVjMB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBktf9SmUGljWa8POEnUczGCG1oTFboxmm8HkN8a6uHm3585R1omAN0 5WV4uXSrQgdjn4n3nVNcb3wk7KQpDRfmq8Y6cclo2KvBbaZehe3FJUcgWb0A6+Fa oZOT5G1uzi5s4MV98MaFhrsiOozx3yrNGkkketRkW8sD8gtfYoFhtFIzJL5kbFeG cIBMOCZpqCOt0p95kEy61tXSHGWxYKJpmlyP57WST6V57yOuOrL/KHdojqeg8wUM Ui4vYeiThAJmCknqPyZJ13JE360wbsZYchGIt+Oeu1drOIygZwd93yq849ZHrGC0 cLx/dUAIa5Wp6y65nU0DvcLFQltmzq54 -----END CERTIFICATE-----Generated at Sun Jan 25 18:35:00 2026 by rpki-client