This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: 6MYe+u5xU79s0yHChWUbqaKhcOn5bMkKiokatXCG5b4= Subject key identifier: 4B:B8:D5:44:B6:3B:EC:FC:04:52:2D:26:67:55:1C:64:FA:6F:F8:61 Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 4CFA883E4582BAC457576D7D7F5BED2D6DDDBC65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: 0212 Signing time: Sun 25 Jan 2026 05:36:59 +0000 Manifest this update: Sun 25 Jan 2026 05:31:59 +0000 Manifest next update: Mon 26 Jan 2026 06:04:59 +0000 Files and hashes: 1: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=) 2: 3130332e32352e3132342e302f32342d3234203d3e20313534303437.roa (hash: Vssq/QZ62h+n1ehYmeNIPp3ZdHP8q1YlxIRMrb3EDzM=) 3: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=) 4: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: PtHCo8RjKsZSHbGWnoGS8bBIeJcjiigDVhdT3qmiADE=) 5: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=) 6: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fa:88:3e:45:82:ba:c4:57:57:6d:7d:7f:5b:ed:2d:6d:dd:bc:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Jan 25 05:31:59 2026 GMT Not After : Jan 26 06:04:59 2026 GMT Subject: CN=4BB8D544B63BECFC04522D2667551C64FA6FF861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:33:cf:cb:75:05:48:77:1e:ed:4a:9f:d3:37: b9:75:16:b2:57:1d:42:59:6e:c0:37:46:ce:02:73: c9:f4:da:95:82:d0:91:8f:b4:42:c1:09:e7:23:87: 3b:01:46:d3:70:20:29:18:63:68:dc:ac:8f:5e:2e: a2:67:66:02:f3:cf:d6:db:48:1d:66:e8:65:b3:c3: 69:c0:d5:c9:ee:09:0d:0e:6f:ef:f9:8e:f8:43:33: 1d:dd:37:c2:13:fd:d3:9d:10:a2:16:36:68:d7:ba: 4a:e4:31:6c:da:a0:b5:78:10:5a:1f:b1:c0:d7:2f: 6f:fc:fd:7a:56:95:2b:64:41:c9:b4:47:53:d4:16: 2d:83:65:e4:e6:ec:68:76:7f:ef:87:b7:09:a8:f2: 73:83:9d:dc:54:30:0b:c0:63:85:dd:de:4f:c2:00: 4c:6c:78:21:87:8c:dd:c2:b4:4f:17:cb:82:6e:47: ec:2b:cf:ad:23:56:7d:2f:7f:e1:e7:49:88:47:42: ea:c5:31:40:55:53:bd:d1:05:f1:b0:f6:c5:53:e1: 6e:f8:8c:75:8d:a5:40:87:ea:37:69:96:cf:99:44: a8:b7:82:ef:9a:8e:62:16:f2:5e:59:a8:29:9b:15: ed:6f:d8:86:18:70:96:b8:76:a0:83:f3:6b:05:fb: d6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B8:D5:44:B6:3B:EC:FC:04:52:2D:26:67:55:1C:64:FA:6F:F8:61 X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5e:21:0a:8e:07:fe:cd:6b:f4:ef:2e:9a:70:17:5a:8e:a1: 02:c9:95:e2:9d:95:6a:07:a7:7b:63:92:5b:15:28:ec:7f:79: c1:ac:0b:f2:9e:76:4d:76:ab:51:b1:6c:79:a0:26:17:64:f3: 74:8f:ea:81:96:32:01:7f:44:b0:11:93:8d:ab:6e:4b:75:5f: 72:28:ae:92:cd:7d:71:4f:b3:16:0f:9f:11:90:d5:61:95:78: 2a:86:33:cd:76:0b:94:26:10:48:ff:47:97:db:af:92:65:fe: a9:bd:52:b5:e5:a3:f7:ef:4d:80:8b:d6:bb:db:ed:c5:8f:5c: cc:41:bf:50:97:30:a7:cc:19:52:ed:c3:3b:4e:95:cf:5c:a8: 72:28:fa:23:33:18:65:82:78:cf:ac:ee:82:c0:d3:7d:62:96: 9d:a8:ca:f1:0a:9f:40:31:dc:67:e7:26:1a:17:ab:e1:9b:df: da:b4:ed:94:88:95:95:92:ff:46:95:fd:0b:20:cc:a6:65:dd: 9d:83:3b:0a:77:17:a7:58:83:52:b0:0d:9e:36:63:a4:5b:1f: 3f:74:3f:11:c6:bb:22:42:c0:f4:7c:3b:90:02:2c:09:d8:5f: b0:1c:f0:c4:27:92:ce:f4:74:ae:d5:dc:80:e2:60:c3:d2:40: 12:28:5f:e2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTPqIPkWCusRXV219f1vtLW3dvGUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI2MDEyNTA1MzE1OVoX DTI2MDEyNjA2MDQ1OVowMzExMC8GA1UEAxMoNEJCOEQ1NDRCNjNCRUNGQzA0NTIy RDI2Njc1NTFDNjRGQTZGRjg2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKYzz8t1BUh3Hu1Kn9M3uXUWslcdQlluwDdGzgJzyfTalYLQkY+0QsEJ5yOH OwFG03AgKRhjaNysj14uomdmAvPP1ttIHWboZbPDacDVye4JDQ5v7/mO+EMzHd03 whP9050QohY2aNe6SuQxbNqgtXgQWh+xwNcvb/z9elaVK2RBybRHU9QWLYNl5Obs aHZ/74e3Cajyc4Od3FQwC8Bjhd3eT8IATGx4IYeM3cK0TxfLgm5H7CvPrSNWfS9/ 4edJiEdC6sUxQFVTvdEF8bD2xVPhbviMdY2lQIfqN2mWz5lEqLeC75qOYhbyXlmo KZsV7W/Yhhhwlrh2oIPzawX71k0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBRLuNVE tjvs/ARSLSZnVRxk+m/4YTAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAnV4hCo4H/s1r9O8umnAXWo6hAsmV4p2Vagene2OSWxUo7H95 wawL8p52TXarUbFseaAmF2TzdI/qgZYyAX9EsBGTjatuS3Vfciiuks19cU+zFg+f EZDVYZV4KoYzzXYLlCYQSP9Hl9uvkmX+qb1SteWj9+9NgIvWu9vtxY9czEG/UJcw p8wZUu3DO06Vz1yocij6IzMYZYJ4z6zugsDTfWKWnajK8QqfQDHcZ+cmGher4Zvf 2rTtlIiVlZL/RpX9CyDMpmXdnYM7CncXp1iDUrANnjZjpFsfP3Q/Eca7IkLA9Hw7 kAIsCdhfsBzwxCeSzvR0rtXcgOJgw9JAEihf4g== -----END CERTIFICATE-----Generated at Sun Jan 25 12:09:37 2026 by rpki-client