This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft File: pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json) Hash identifier: J/BkZfRtYAauEjsQ+zC7PMlYU2QZpomPdjP7QbOOITM= Subject key identifier: A4:D6:FC:DC:E1:76:A0:DC:93:9E:04:40:3E:AB:71:AB:E6:FF:E3:57 Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 Certificate issuer: /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Certificate serial: 05B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft Manifest number: 05B2 Signing time: Sat 10 Jan 2026 22:20:55 +0000 Manifest this update: Sat 10 Jan 2026 22:20:55 +0000 Manifest next update: Sat 17 Jan 2026 22:20:55 +0000 Files and hashes: 1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: OMTDfVXxdM6BpKsnhZwoSlzInTIXrQksJxA872DOiVg=) 2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: R8hfJ5cUDeHXSHt31Yaxeq/Vdh/2fKfS7Ifq3y/hy0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 22:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1463 (0x5b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Validity Not Before: Jan 10 22:20:55 2026 GMT Not After : Jan 17 22:20:55 2026 GMT Subject: CN=6962d0c7-6170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e6:e9:3e:40:8f:cf:a4:96:c6:7b:75:78:9f: f8:6d:c1:d1:d0:6d:15:b6:40:d6:a6:f3:41:d3:0d: 28:e2:51:7b:97:1e:d7:53:b7:64:f4:ae:52:03:ca: e5:e0:53:75:62:ab:8a:59:b1:36:b3:7c:44:51:41: 6d:5f:f4:66:6d:27:ce:d1:a7:6a:09:77:8b:79:0f: 7c:9f:a4:86:5c:08:fb:2c:4b:dc:c9:6e:f7:c5:9c: a6:22:f5:2b:84:5a:85:a3:c7:eb:65:b6:61:68:27: 7e:8b:1b:8b:df:64:92:d2:ff:eb:1e:47:fc:81:8f: f7:50:7f:85:fe:eb:21:ea:dd:5f:0d:bb:b1:b8:2b: 60:da:ab:4b:13:24:b0:62:bb:b1:3d:1c:67:a3:fa: 0a:e6:f2:0e:f7:bb:90:46:05:af:05:2f:12:72:bb: da:ec:d4:50:7f:d1:ca:88:db:c7:ac:bc:30:f9:c6: 7d:3e:35:a9:a0:6e:df:f6:b2:76:ba:06:8e:25:26: 11:a4:64:5e:cf:67:ea:a6:f2:fd:57:36:df:48:f4: 45:6c:c9:53:aa:55:56:17:0c:f4:7a:fa:02:00:2e: 80:c6:3e:e9:74:a4:80:26:9d:fb:23:56:d9:62:ff: 79:19:5d:15:d0:88:a5:92:bb:c9:dc:0c:bc:8e:2e: 39:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D6:FC:DC:E1:76:A0:DC:93:9E:04:40:3E:AB:71:AB:E6:FF:E3:57 X509v3 Authority Key Identifier: keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:89:af:33:d6:95:ca:47:b4:48:4c:55:c6:79:41:c6:ca:8c: 87:e5:a6:77:8f:15:4f:6b:0c:f3:01:9e:a3:71:a7:7d:dc:ca: ce:1c:be:f1:ff:ff:b2:f2:1c:be:83:61:21:9c:56:f3:39:76: bb:b1:d8:39:0d:61:18:5c:1c:97:4c:41:0e:91:98:81:0f:80: 81:44:df:6f:56:36:ae:24:f3:1f:8d:6a:4f:45:17:f5:37:2b: 35:94:c1:e7:40:32:3d:a5:54:6c:cd:11:1a:1d:0d:a8:03:cd: e0:99:7d:a5:fb:fa:c6:cc:6b:88:b9:11:db:b4:8e:6f:9f:af: 43:7f:44:fe:52:11:27:26:93:c9:7c:04:20:e2:44:b6:30:8b: 49:28:59:1e:86:c6:5f:cb:3b:a4:17:50:00:6b:ca:49:4f:29: 6e:94:73:62:09:6f:eb:d0:75:85:5d:85:af:2d:6b:70:d2:7c: 21:e7:50:7d:fc:0e:74:fa:8e:91:ed:f9:fa:b6:5a:ef:a2:74: fd:d8:6c:77:1c:27:13:05:c2:d3:2e:73:76:2b:5c:28:82:7b: d9:aa:49:23:bc:37:fa:a5:88:72:1f:c8:d1:90:80:ff:1c:5c: 92:16:1d:ff:d5:fc:99:ac:b8:44:80:03:b4:4b:be:77:1f:1f: 79:f8:2d:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZENDAxMTAvBgNVBAUTKEE3MTAzRkQzM0Y2QzhBNjQ0OEZDNjM5NDBBQTk3RDkz RjgxRjgxMDUwHhcNMjYwMTEwMjIyMDU1WhcNMjYwMTE3MjIyMDU1WjAYMRYwFAYD VQQDDA02OTYyZDBjNy02MTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwebpPkCPz6SWxnt1eJ/4bcHR0G0VtkDWpvNB0w0o4lF7lx7XU7dk9K5SA8rl 4FN1YquKWbE2s3xEUUFtX/RmbSfO0adqCXeLeQ98n6SGXAj7LEvcyW73xZymIvUr hFqFo8frZbZhaCd+ixuL32SS0v/rHkf8gY/3UH+F/ush6t1fDbuxuCtg2qtLEySw YruxPRxno/oK5vIO97uQRgWvBS8Scrva7NRQf9HKiNvHrLww+cZ9PjWpoG7f9rJ2 ugaOJSYRpGRez2fqpvL9VzbfSPRFbMlTqlVWFwz0evoCAC6Axj7pdKSAJp37I1bZ Yv95GV0V0IilkrvJ3Ay8ji45owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTW/Nzh dqDck54EQD6rcavm/+NXMB8GA1UdIwQYMBaAFKcQP9M/bIpkSPxjlAqpfZP4H4EF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkQ0MC8zQzYzMzNDNkYz RjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2ltUklfR09VQ3FsOWtfZ2Zn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B4QV8wejlzaW1SSV9HT1VDcWw5a19nZmdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkQ0MC8zQzYzMzNDNkYzRjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2lt UklfR09VQ3FsOWtfZ2ZnUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSia8z1pXKR7RITFXGeUHGyoyH5aZ3jxVPawzzAZ6jcad93MrOHL7x //+y8hy+g2EhnFbzOXa7sdg5DWEYXByXTEEOkZiBD4CBRN9vVjauJPMfjWpPRRf1 Nys1lMHnQDI9pVRszREaHQ2oA83gmX2l+/rGzGuIuRHbtI5vn69Df0T+UhEnJpPJ fAQg4kS2MItJKFkehsZfyzukF1AAa8pJTylulHNiCW/r0HWFXYWvLWtw0nwh51B9 /A50+o6R7fn6tlrvonT92Gx3HCcTBcLTLnN2K1wognvZqkkjvDf6pYhyH8jRkID/ HFySFh3/1fyZrLhEgAO0S753Hx95+C2H -----END CERTIFICATE-----Generated at Mon Jan 12 04:45:28 2026 by rpki-client