This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json) Hash identifier: 4Jq+XSVRfj74DcSE6JOI9lP9+SoKJ4OrZRkYF69ikng= Subject key identifier: D6:BF:0C:2D:D0:09:C3:6D:B4:E1:59:30:D8:EE:8F:3E:44:3B:3B:99 Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Certificate serial: 492C9F39279FA77E39AA6165838B8B8C8A8DDFED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft Manifest number: 0259 Signing time: Sat 24 Jan 2026 15:56:59 +0000 Manifest this update: Sat 24 Jan 2026 15:51:59 +0000 Manifest next update: Sun 25 Jan 2026 16:02:59 +0000 Files and hashes: 1: 3130332e3232332e3138342e302f32332d3234203d3e20313335303237.roa (hash: g8Tw9Ss3ogaL2/E788moJ1DCuoJI7+nYIfSvQGup0po=) 2: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: gAz4dA6M68JgotoxYxCdZypdNG0rFidhzYmNmwQNPUw=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:2c:9f:39:27:9f:a7:7e:39:aa:61:65:83:8b:8b:8c:8a:8d:df:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Validity Not Before: Jan 24 15:51:59 2026 GMT Not After : Jan 25 16:02:59 2026 GMT Subject: CN=D6BF0C2DD009C36DB4E15930D8EE8F3E443B3B99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a5:4d:6b:1b:fe:fd:02:ad:6a:95:c4:c8:cb: 35:c4:90:0e:2d:45:bd:0d:4b:9a:73:6b:43:92:0c: c1:df:7e:06:fe:f9:d0:43:60:5d:65:7c:3d:27:5b: bf:91:91:08:f9:ea:58:0d:14:07:06:38:a4:6f:5d: 88:96:53:5e:24:9c:c3:75:b0:d2:1a:d9:81:1b:1e: b5:34:17:4b:20:5e:40:9c:18:b1:4c:b0:8f:b9:29: 53:bc:46:3f:0b:3a:74:a6:76:5c:f8:d1:dc:ed:38: 26:5b:04:84:e8:73:a4:e8:86:16:a0:2d:a8:0f:51: 6a:04:e1:22:e8:01:cf:ce:ac:94:b8:86:59:2d:ca: 6a:47:98:ab:b3:b1:d7:0d:6d:d6:89:c2:fe:2a:f5: d1:66:97:d8:47:ad:ce:95:8f:e5:e8:cd:09:60:40: ac:cb:37:4d:be:b3:23:67:3e:8a:95:69:6c:2e:f5: ef:fe:59:b6:ad:f2:c0:54:4e:10:ba:ec:64:19:5b: 04:52:b2:2e:6c:5a:4e:65:92:c3:d0:d9:80:c4:a4: c2:5a:77:9e:28:3d:45:8b:57:8f:fa:06:bb:b5:db: 3b:21:e4:b9:f6:97:d4:40:1f:ac:df:41:e6:4b:86: c2:f0:a7:c9:ae:7a:c6:df:11:42:3d:70:9b:d5:fd: f6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BF:0C:2D:D0:09:C3:6D:B4:E1:59:30:D8:EE:8F:3E:44:3B:3B:99 X509v3 Authority Key Identifier: keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f1:b7:f1:79:89:01:de:bd:78:a5:b2:08:9a:f3:9e:dd:c2: 15:0b:8f:ff:8d:c7:24:22:25:e1:f9:b3:a2:0b:5a:a0:43:3e: 64:5e:98:e8:3d:c9:e3:9f:f2:3b:70:2b:3f:c4:3f:ca:63:00: 41:2a:6f:a7:d1:5c:f7:9e:8c:6b:e9:e3:a0:40:55:49:ad:a4: 2f:65:7d:80:6d:d9:ed:e9:f6:31:f3:39:4e:0b:df:1d:d8:c8: 4f:51:ae:9b:72:58:06:9e:d0:67:5e:00:58:f7:80:80:40:af: 54:92:d2:c1:ac:2a:07:eb:47:4f:92:75:58:ce:90:75:93:2d: 84:aa:0d:61:5c:bd:a8:94:f8:ba:43:06:47:09:d3:41:f1:2f: 17:36:41:a4:c5:4f:ba:58:a7:fc:18:fb:c4:4e:88:64:80:96: 1a:89:62:7f:92:44:ec:c3:23:c2:04:44:5b:9a:60:2e:47:41: 55:54:fc:b2:d8:46:62:42:3c:fe:2a:7a:b9:a6:fc:d8:69:8c: 00:b5:fe:ad:64:e3:d1:b2:61:05:5d:f1:da:f9:02:2d:3d:1e: 59:1d:b4:d8:bd:d6:69:17:37:bf:a2:50:f3:d6:43:ce:24:04: 48:f7:77:93:36:d9:0e:7a:40:66:d7:5c:fa:23:d6:63:ee:e8: ae:3f:5b:cc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSSyfOSefp345qmFlg4uLjIqN3+0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDhCRjcwMDAwMTEwLwYDVQQFEygzMzlGRkE5MzM1 N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwMB4XDTI2MDEyNDE1NTE1OVoX DTI2MDEyNTE2MDI1OVowMzExMC8GA1UEAxMoRDZCRjBDMkREMDA5QzM2REI0RTE1 OTMwRDhFRThGM0U0NDNCM0I5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKClTWsb/v0CrWqVxMjLNcSQDi1FvQ1LmnNrQ5IMwd9+Bv750ENgXWV8PSdb v5GRCPnqWA0UBwY4pG9diJZTXiScw3Ww0hrZgRsetTQXSyBeQJwYsUywj7kpU7xG Pws6dKZ2XPjR3O04JlsEhOhzpOiGFqAtqA9RagThIugBz86slLiGWS3KakeYq7Ox 1w1t1onC/ir10WaX2EetzpWP5ejNCWBArMs3Tb6zI2c+ipVpbC717/5Ztq3ywFRO ELrsZBlbBFKyLmxaTmWSw9DZgMSkwlp3nig9RYtXj/oGu7XbOyHkufaX1EAfrN9B 5kuGwvCnya56xt8RQj1wm9X99p0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBTWvwwt 0AnDbbThWTDY7o8+RDs7mTAfBgNVHSMEGDAWgBQzn/qTNX+vJhQoKfq/Ilrq5Bc3 8DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJGNzAwMDAvMC8zMzlGRkE5 MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NNV82a3pWX3J5 WVVLQ242dnlKYTZ1UVhOX0EuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJG NzAwMDAvMC8zMzlGRkE5MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0Yw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAdvG38XmJAd69eKWyCJrznt3CFQuP/43HJCIl4fmzogtaoEM+ ZF6Y6D3J45/yO3ArP8Q/ymMAQSpvp9Fc956Ma+njoEBVSa2kL2V9gG3Z7en2MfM5 TgvfHdjIT1Gum3JYBp7QZ14AWPeAgECvVJLSwawqB+tHT5J1WM6QdZMthKoNYVy9 qJT4ukMGRwnTQfEvFzZBpMVPulin/Bj7xE6IZICWGolif5JE7MMjwgREW5pgLkdB VVT8sthGYkI8/ip6uab82GmMALX+rWTj0bJhBV3x2vkCLT0eWR202L3WaRc3v6JQ 89ZDziQESPd3kzbZDnpAZtdc+iPWY+7orj9bzA== -----END CERTIFICATE-----Generated at Sun Jan 25 03:01:04 2026 by rpki-client