This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft File: Ilh8wstvNRBjeD-xz9pm5E4uysE.mft (raw, json) Hash identifier: Wol0QF2rpRtr+rLRjBASMvTBnIUZVoesNgXwixkspg4= Subject key identifier: 04:B2:60:54:69:94:C2:08:E9:B2:E7:78:68:08:B6:03:53:9D:1C:9B Authority key identifier: 22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1 Certificate issuer: /CN=A9119B9D/serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft Manifest number: 82 Signing time: Thu 01 Jan 2026 06:10:39 +0000 Manifest this update: Thu 01 Jan 2026 06:10:39 +0000 Manifest next update: Thu 08 Jan 2026 06:10:39 +0000 Files and hashes: 1: Ilh8wstvNRBjeD-xz9pm5E4uysE.crl (hash: AozA0YeFA88NqDocCDHj02K/2Mj7k5UE7WYpuv5yKsY=) 2: 874D690486F911F0AEE9D81BC4F9AE02.roa (hash: d/YokLZlSeyNxo7/k+XKoCvVYm4Hgi7kRhirRzPKQaU=) 3: BDA4863C1E6111F09E161078C4F9AE02.roa (hash: 3wClZfyrRuvHiw5+gXU2O2uGIydycpdkHEs8+vS/Fqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 06:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119B9D, serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1 Validity Not Before: Jan 1 06:10:39 2026 GMT Not After : Jan 8 06:10:39 2026 GMT Subject: CN=69560fdf-1ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ab:0b:bf:e0:d1:0f:2d:3b:03:d3:7f:4b:9b: 32:4e:5e:6e:c5:0a:34:11:e9:1f:93:03:77:1b:21: ea:c6:aa:85:ed:97:7a:0a:21:2f:b3:ac:74:9a:7a: 8b:53:ea:35:61:de:5b:9e:94:9d:e0:8b:98:0b:9d: 5d:38:88:eb:17:20:88:84:7b:b7:bb:8a:10:8e:62: 04:11:0d:81:3d:73:68:c0:a3:39:7b:8c:ee:ab:6f: db:2b:0c:4a:e6:4d:77:48:79:28:c4:2d:e1:f8:50: f4:30:93:5b:24:5d:f3:36:d4:e7:35:ad:66:28:af: 21:b5:de:ee:62:a8:8a:5c:c4:46:47:b7:ed:ba:df: 72:2f:20:b1:ed:cf:82:fc:b9:7f:62:6e:fc:80:aa: e8:16:43:7a:ed:29:1b:6f:48:7b:e0:03:82:24:05: 1e:97:0f:ee:01:67:28:59:1c:7c:9f:49:ad:c5:75: 00:09:90:42:16:35:11:c2:a8:cc:63:2a:89:0b:99: 42:e7:df:b6:24:c7:ff:d0:d1:bd:a5:5e:98:44:fa: 17:6b:80:56:53:4e:09:37:5e:c3:48:5c:37:ee:5f: 41:49:b7:af:e6:31:05:cb:d9:3e:43:ed:96:ca:71: b4:9d:6f:cd:d9:50:29:28:67:ec:24:64:b8:9b:57: 19:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B2:60:54:69:94:C2:08:E9:B2:E7:78:68:08:B6:03:53:9D:1C:9B X509v3 Authority Key Identifier: keyid:22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:e5:6f:66:61:43:61:18:a9:06:10:f4:f1:67:6c:86:19:11: d0:04:39:b9:81:23:80:fd:3f:6a:89:c1:d8:f4:ad:43:74:0d: 03:74:3c:68:3f:69:0d:02:88:2a:98:3e:19:a3:3a:3a:16:8f: ba:d9:15:e4:62:09:7d:24:c9:32:e5:f4:c7:03:a5:e6:0f:ba: dd:16:f5:70:e9:e9:ce:45:fa:6b:7e:0a:bd:8d:0a:d3:e7:85: ca:3c:b8:17:b0:e4:ea:d1:fe:c0:ee:35:ee:b9:b6:1a:91:da: 06:a0:eb:9a:de:39:cb:ba:b9:67:4c:49:ab:66:af:be:e5:46: 7b:1f:e0:f2:8b:0e:f0:4b:a2:cc:4d:8e:fc:61:d3:13:c7:4f: 3f:9d:c0:d2:26:e2:84:e7:cb:ec:48:90:9c:69:91:e0:2b:a5: f5:ef:ec:87:9e:eb:aa:72:0c:44:1e:d0:4b:cc:ed:1f:3a:c0: ec:0d:74:f5:e5:41:d7:c8:8d:25:de:de:0c:96:d2:6f:cd:46: f4:75:5f:31:de:15:18:97:46:a2:b0:ce:f2:e7:57:b6:3f:1b: ef:db:b6:b9:0d:99:0c:f9:7f:93:0d:78:a0:bd:fc:68:c9:6d: 57:b0:37:4e:6e:bd:83:e1:cf:9c:91:73:21:2d:0d:4b:94:0f: 2d:7a:89:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlCOUQxMTAvBgNVBAUTKDIyNTg3Q0MyQ0I2RjM1MTA2Mzc4M0ZCMUNGREE2NkU0 NEUyRUNBQzEwHhcNMjYwMTAxMDYxMDM5WhcNMjYwMTA4MDYxMDM5WjAYMRYwFAYD VQQDDA02OTU2MGZkZi0xZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjasLv+DRDy07A9N/S5syTl5uxQo0EekfkwN3GyHqxqqF7Zd6CiEvs6x0mnqL U+o1Yd5bnpSd4IuYC51dOIjrFyCIhHu3u4oQjmIEEQ2BPXNowKM5e4zuq2/bKwxK 5k13SHkoxC3h+FD0MJNbJF3zNtTnNa1mKK8htd7uYqiKXMRGR7ftut9yLyCx7c+C /Ll/Ym78gKroFkN67Skbb0h74AOCJAUelw/uAWcoWRx8n0mtxXUACZBCFjURwqjM YyqJC5lC59+2JMf/0NG9pV6YRPoXa4BWU04JN17DSFw37l9BSbev5jEFy9k+Q+2W ynG0nW/N2VApKGfsJGS4m1cZWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASyYFRp lMII6bLneGgItgNTnRybMB8GA1UdIwQYMBaAFCJYfMLLbzUQY3g/sc/aZuROLsrB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUI5RC8yNDAyRkIwODFF NjExMUYwQUREM0QxNzNDNEY5QUUwMi9JbGg4d3N0dk5SQmplRC14ejlwbTVFNHV5 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lsaDh3c3R2TlJCamVELXh6OXBtNUU0dXlzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUI5RC8yNDAyRkIwODFFNjExMUYwQUREM0QxNzNDNEY5QUUwMi9JbGg4d3N0dk5S QmplRC14ejlwbTVFNHV5c0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz5W9mYUNhGKkGEPTxZ2yGGRHQBDm5gSOA/T9qicHY9K1DdA0DdDxo P2kNAogqmD4Zozo6Fo+62RXkYgl9JMky5fTHA6XmD7rdFvVw6enORfprfgq9jQrT 54XKPLgXsOTq0f7A7jXuubYakdoGoOua3jnLurlnTEmrZq++5UZ7H+Dyiw7wS6LM TY78YdMTx08/ncDSJuKE58vsSJCcaZHgK6X17+yHnuuqcgxEHtBLzO0fOsDsDXT1 5UHXyI0l3t4MltJvzUb0dV8x3hUYl0aisM7y51e2Pxvv27a5DZkM+X+TDXigvfxo yW1XsDdObr2D4c+ckXMhLQ1LlA8teokt -----END CERTIFICATE-----Generated at Fri Jan 2 11:32:32 2026 by rpki-client