This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json) Hash identifier: iSWOzOZc+dExtdFK+L2dPwiUfkwTiXqbcuFf9c4mo14= Subject key identifier: 3C:96:66:A9:D3:05:FD:83:6E:BB:7F:75:5E:57:9C:A1:22:BB:B9:D6 Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft Manifest number: 0109 Signing time: Thu 01 Jan 2026 04:33:40 +0000 Manifest this update: Thu 01 Jan 2026 04:33:39 +0000 Manifest next update: Thu 08 Jan 2026 04:33:39 +0000 Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: Q91V++kjfTxTkkMKWaULa+kBJE4IrZ1EB1u2jL9xD1o=) 2: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: uNvFYFvkjJZjp/LZ4h4+VeJimlHrCmp4OMSUdPIoHFI=) 3: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: DO2YJbZIejvhdRtGsWt15hXuGZ1AtCApUsm5r0ZPTOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 04:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Validity Not Before: Jan 1 04:33:39 2026 GMT Not After : Jan 8 04:33:39 2026 GMT Subject: CN=6955f924-e296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cb:7b:b8:a6:a4:59:d8:e4:64:75:f4:23:1a: 1c:23:c6:eb:bb:bd:97:e8:64:d6:cb:d3:af:c6:bd: 64:a8:8e:d8:9d:05:64:f7:1e:ec:c5:cb:ad:7b:3a: 5f:5f:f5:91:e8:3f:55:c9:c9:06:5b:82:ba:72:48: 57:a4:21:46:3b:a3:9c:89:1e:3e:ce:95:d5:f2:a9: 37:c1:df:70:3d:25:ca:98:8e:96:c6:d8:c5:fe:3e: 83:31:3e:62:c1:7e:cb:ca:bd:01:fd:87:7d:82:12: 67:4e:4e:be:8b:f2:42:73:fa:89:8e:56:5e:cb:80: 55:5d:ef:da:88:e1:6e:39:5d:8f:ed:18:ea:31:2a: fd:84:47:9a:35:f0:16:d3:79:da:40:d9:4a:3c:31: 2a:78:18:76:71:1b:f6:56:94:63:1f:ea:a4:c4:5d: 14:4a:28:70:15:27:d7:87:0d:60:7b:f3:a1:56:a7: ed:9e:b3:11:34:15:f5:8b:ea:76:88:98:d7:07:a9: bc:13:c9:f4:0d:aa:4e:4e:d4:fb:67:7f:c4:99:0c: 39:93:58:5c:d8:7e:7d:0d:38:ff:5a:c2:60:9b:47: e7:d7:74:d8:e4:ce:fa:e9:ad:98:41:d8:5d:26:20: 53:ea:3b:c3:84:7c:80:aa:52:fa:dc:6c:31:06:da: 53:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:96:66:A9:D3:05:FD:83:6E:BB:7F:75:5E:57:9C:A1:22:BB:B9:D6 X509v3 Authority Key Identifier: keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:68:41:c9:1f:71:4f:ab:fb:8c:76:d5:c0:7b:3c:a5:4d:66: 36:06:a7:ca:e0:18:92:87:47:90:3f:51:bd:46:bb:2e:23:ff: 15:38:df:81:3f:4e:41:5c:89:9c:06:1c:10:e5:3e:fc:ad:06: 77:95:ff:42:62:59:aa:3a:8b:e6:b8:2f:2b:a9:cb:6e:20:ab: 20:64:31:4b:6e:40:18:17:f0:a7:9a:3a:3e:e7:a3:e1:c8:02: d2:18:4a:00:be:11:4a:db:69:b3:df:28:b0:18:f4:ac:9a:48: 01:5b:e8:a5:71:d1:ee:86:e1:5a:9a:5f:83:dd:64:52:28:01: cf:ab:0c:5e:0b:d4:57:90:c0:07:e4:0d:83:5e:42:de:fc:b2: a5:34:4e:9e:ba:61:61:53:23:2f:ba:ab:60:43:cd:a1:13:6e: 54:cc:1a:a2:67:8d:ad:f1:e4:cd:1b:bb:93:29:e1:27:09:8b: a1:dd:0c:7c:6c:e9:13:23:a3:97:66:43:74:17:a7:a6:7c:30: df:ad:57:fb:84:ee:89:87:0f:8a:26:52:43:cc:66:d4:1e:dd: d2:ea:15:80:b0:4f:40:da:77:ba:ce:22:7b:34:5c:e8:c4:ae: 09:b2:f3:77:1c:8a:18:40:e6:64:46:06:b8:57:22:a9:24:ea: f9:b5:af:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFRUQxMTAvBgNVBAUTKDcyMTMxQkYwMjkwNEE4NDkxRkI5M0M0MUQ0NURGQkU5 NDJBQUQ2NzEwHhcNMjYwMTAxMDQzMzM5WhcNMjYwMTA4MDQzMzM5WjAYMRYwFAYD VQQDDA02OTU1ZjkyNC1lMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ct7uKakWdjkZHX0IxocI8bru72X6GTWy9Ovxr1kqI7YnQVk9x7sxcutezpf X/WR6D9VyckGW4K6ckhXpCFGO6OciR4+zpXV8qk3wd9wPSXKmI6WxtjF/j6DMT5i wX7Lyr0B/Yd9ghJnTk6+i/JCc/qJjlZey4BVXe/aiOFuOV2P7RjqMSr9hEeaNfAW 03naQNlKPDEqeBh2cRv2VpRjH+qkxF0USihwFSfXhw1ge/OhVqftnrMRNBX1i+p2 iJjXB6m8E8n0DapOTtT7Z3/EmQw5k1hc2H59DTj/WsJgm0fn13TY5M766a2YQdhd JiBT6jvDhHyAqlL63GwxBtpT9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyWZqnT Bf2Dbrt/dV5XnKEiu7nWMB8GA1UdIwQYMBaAFHITG/ApBKhJH7k8QdRd++lCqtZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEVFRC8yODNFNEU1MjU1 M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFFa2Z1VHhCMUYzNzZVS3Ex bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoTWI4Q2tFcUVrZnVUeEIxRjM3NlVLcTFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEVFRC8yODNFNEU1MjU1M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFF a2Z1VHhCMUYzNzZVS3ExbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfaEHJH3FPq/uMdtXAezylTWY2BqfK4BiSh0eQP1G9RrsuI/8VON+B P05BXImcBhwQ5T78rQZ3lf9CYlmqOovmuC8rqctuIKsgZDFLbkAYF/Cnmjo+56Ph yALSGEoAvhFK22mz3yiwGPSsmkgBW+ilcdHuhuFaml+D3WRSKAHPqwxeC9RXkMAH 5A2DXkLe/LKlNE6eumFhUyMvuqtgQ82hE25UzBqiZ42t8eTNG7uTKeEnCYuh3Qx8 bOkTI6OXZkN0F6emfDDfrVf7hO6Jhw+KJlJDzGbUHt3S6hWAsE9A2ne6ziJ7NFzo xK4JsvN3HIoYQOZkRga4VyKpJOr5ta+x -----END CERTIFICATE-----Generated at Thu Jan 1 18:03:20 2026 by rpki-client