This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft File: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json) Hash identifier: CuNcybUhwV77a0kjfZ/SWNmTUxznOc/kb44Nf1Id22Q= Subject key identifier: 18:2D:20:02:E8:DA:65:0E:0A:E2:62:9B:A9:52:91:DD:15:A7:C5:FA Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 Certificate issuer: /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Certificate serial: 1184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft Manifest number: 117A Signing time: Sat 10 Jan 2026 16:56:48 +0000 Manifest this update: Sat 10 Jan 2026 16:56:48 +0000 Manifest next update: Sat 17 Jan 2026 16:56:48 +0000 Files and hashes: 1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: 4w7ql3mKD1P1Z3XSSmwDfRlnqVbnyaX0smvvklA7X7I=) 2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: EsICdDI/f2T7+aUXSRJuKGq/JA27xtHkCXqw8t/ob1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 16:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4484 (0x1184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Validity Not Before: Jan 10 16:56:48 2026 GMT Not After : Jan 17 16:56:48 2026 GMT Subject: CN=696284d0-6884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4d:4a:e8:f6:49:b7:2c:be:75:59:42:63:a4: 1a:38:40:16:d9:85:d6:d0:ef:fc:50:06:b2:d6:ed: 6e:ee:6a:23:ee:b4:f9:8b:af:ed:bd:2c:e0:0e:85: 36:0c:38:ab:c0:31:2b:97:5d:f9:96:13:06:59:59: 90:7d:8b:02:b7:d9:48:f9:d3:5f:8c:80:bb:16:1e: d1:42:8b:77:10:26:22:f8:bf:e9:03:79:65:dd:de: f3:ec:a7:41:e6:b4:f3:af:d7:75:5b:f9:99:b8:87: 47:8a:d7:48:dc:d6:50:19:77:9f:5b:c2:db:08:34: 69:47:e7:68:9a:91:b5:fb:f5:d7:d2:f8:37:19:f5: de:42:a8:05:b1:7a:a6:7e:9d:47:e1:9e:36:2f:fe: b9:5b:24:33:3f:88:56:83:a5:e0:62:43:ce:9d:30: b0:e4:69:ee:e5:b5:86:36:41:88:23:91:45:72:2b: 59:1d:92:3a:8b:9d:1d:56:3c:64:65:b8:98:cd:38: 7f:df:2d:98:68:d6:a0:02:d7:19:b2:4c:b0:f2:77: f5:c9:35:30:e2:b0:1b:f3:99:0a:0d:b6:f0:71:46: fa:b1:9b:4a:83:d1:18:2a:ff:e2:2c:1d:bd:36:70: 71:d1:95:0e:b0:13:fa:65:07:f9:64:ee:36:e5:0f: 5a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2D:20:02:E8:DA:65:0E:0A:E2:62:9B:A9:52:91:DD:15:A7:C5:FA X509v3 Authority Key Identifier: keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d5:91:72:0b:a7:10:a5:f8:de:c4:75:6f:5e:c8:4a:02:48: bf:f4:71:15:f2:1f:c9:fe:fc:0a:4e:66:9a:07:52:5c:d3:94: 81:0a:a0:6c:89:77:eb:ff:09:ee:88:56:46:53:a9:05:1a:e1: 52:61:96:8b:03:c3:03:ce:25:01:a6:6f:96:b5:b5:51:84:6f: 53:91:d9:b3:ab:65:c5:7b:04:0f:a7:d1:83:46:29:e1:13:77: 8d:36:28:1a:ae:7d:bd:94:8d:27:f3:11:64:a8:3d:c9:0c:74: 66:a2:64:85:b4:91:fd:94:62:e3:8b:f4:23:fa:31:55:11:48: c7:b4:a9:d6:32:de:f8:6d:cd:5a:f6:e7:e2:ff:81:8b:18:bb: 11:28:bf:0c:c9:5d:41:1c:f9:a2:2d:a3:8e:83:c9:81:c9:90: be:33:69:d4:39:77:81:19:81:a6:f4:b6:a7:d5:c7:96:fc:70: 30:5e:1c:dc:d0:a7:cf:e1:4a:14:d5:6f:10:ec:43:a4:12:c3: 73:7c:cc:ef:4c:59:09:0c:88:94:ba:8f:29:4d:6f:7c:83:33: 8d:65:81:2a:78:8d:a2:75:d3:98:1c:97:56:c0:4c:f5:4f:e1: 19:2b:01:61:3c:08:cb:08:7c:c6:a6:70:ca:6e:43:eb:14:48: e5:28:a8:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzNTYxMTAvBgNVBAUTKDcyQ0QxRDU2MDkwNDQ1ODMwOEU5MUEzQUNDOUEzRDcw QjY3RDg0OTIwHhcNMjYwMTEwMTY1NjQ4WhcNMjYwMTE3MTY1NjQ4WjAYMRYwFAYD VQQDDA02OTYyODRkMC02ODg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw01K6PZJtyy+dVlCY6QaOEAW2YXW0O/8UAay1u1u7moj7rT5i6/tvSzgDoU2 DDirwDErl135lhMGWVmQfYsCt9lI+dNfjIC7Fh7RQot3ECYi+L/pA3ll3d7z7KdB 5rTzr9d1W/mZuIdHitdI3NZQGXefW8LbCDRpR+dompG1+/XX0vg3GfXeQqgFsXqm fp1H4Z42L/65WyQzP4hWg6XgYkPOnTCw5Gnu5bWGNkGII5FFcitZHZI6i50dVjxk ZbiYzTh/3y2YaNagAtcZskyw8nf1yTUw4rAb85kKDbbwcUb6sZtKg9EYKv/iLB29 NnBx0ZUOsBP6ZQf5ZO425Q9aZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgtIALo 2mUOCuJim6lSkd0Vp8X6MB8GA1UdIwQYMBaAFHLNHVYJBEWDCOkaOsyaPXC2fYSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjM1Ni8zM0E1M0Q3NjE1 ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZTUk2Um82ekpvOWNMWjlo SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzMGRWZ2tFUllNSTZSbzZ6Sm85Y0xaOWhKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjM1Ni8zM0E1M0Q3NjE1ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZ TUk2Um82ekpvOWNMWjloSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW1ZFyC6cQpfjexHVvXshKAki/9HEV8h/J/vwKTmaaB1Jc05SBCqBs iXfr/wnuiFZGU6kFGuFSYZaLA8MDziUBpm+WtbVRhG9Tkdmzq2XFewQPp9GDRinh E3eNNigarn29lI0n8xFkqD3JDHRmomSFtJH9lGLji/Qj+jFVEUjHtKnWMt74bc1a 9ufi/4GLGLsRKL8MyV1BHPmiLaOOg8mByZC+M2nUOXeBGYGm9Lan1ceW/HAwXhzc 0KfP4UoU1W8Q7EOkEsNzfMzvTFkJDIiUuo8pTW98gzONZYEqeI2iddOYHJdWwEz1 T+EZKwFhPAjLCHzGpnDKbkPrFEjlKKjv -----END CERTIFICATE-----Generated at Mon Jan 12 04:08:40 2026 by rpki-client