This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft File: UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft (raw, json) Hash identifier: GrgnFmdckhp0gleXLVFxzH7k4ujhSebJyUk6xGgKpo0= Subject key identifier: 7F:5B:8C:AB:1E:F2:8C:C4:0B:02:62:5E:DA:4D:DB:53:79:40:43:DF Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2 Certificate issuer: /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft Manifest number: 0123 Signing time: Sun 11 Jan 2026 03:56:10 +0000 Manifest this update: Sun 11 Jan 2026 03:56:10 +0000 Manifest next update: Sun 18 Jan 2026 03:56:10 +0000 Files and hashes: 1: UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl (hash: ox8srkxc7R27Tsr4RU7Z4l09r/Zl2nZ2Yapovl41OZE=) 2: 8B584EC2337D11EF9D71B72DC4F9AE02.roa (hash: yZ1LidZrlFrNTxapIhIsCTEZZK7lTYC0s/4RKHkPEsg=) 3: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (hash: OJdZE6RjgM3Hz2T07Mg2BJv0nC0BL01Q/08oABlyEMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 03:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2 Validity Not Before: Jan 11 03:56:10 2026 GMT Not After : Jan 18 03:56:10 2026 GMT Subject: CN=69631f5a-7521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:33:fc:5b:03:a4:19:36:c3:45:6f:83:0b: f4:f0:c7:fa:ec:ac:6d:3a:b2:25:33:fd:ed:6b:7b: 71:c8:31:3b:0c:ac:79:a0:76:4e:5e:44:39:73:cc: dd:c9:23:f3:03:63:71:d9:e7:0f:64:2c:75:30:03: b9:a2:6c:b9:76:25:c2:a0:1b:24:22:fb:c5:f0:23: 96:52:4c:83:bb:aa:03:9d:c8:a1:58:98:ed:b1:00: 26:2b:de:29:3c:e4:ce:59:48:c1:ad:c8:6a:79:c5: 85:a4:7c:c3:92:2f:19:fc:3e:ba:c0:cd:09:a8:bd: 00:fc:8e:03:c7:89:db:fe:a4:d0:fa:e5:a7:0a:02: a0:2d:28:08:7e:38:cc:81:e9:74:84:9c:c7:ed:87: 36:a7:af:14:c6:40:a0:65:08:54:09:a9:0e:da:46: df:d2:f8:56:2b:06:34:57:29:53:48:8d:89:67:f4: 13:22:ab:d1:9b:94:7d:8c:51:f5:a0:30:9a:2f:47: cd:ba:53:2c:c6:24:7d:22:40:19:1a:28:52:43:cb: 78:33:3e:51:c4:77:85:36:fe:b9:5a:53:dd:f1:b5: 2c:b0:e9:9c:69:73:d6:c4:2f:8d:dd:9e:b6:71:21: ac:d1:42:88:e2:25:95:41:93:c6:d4:73:e4:2b:ba: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5B:8C:AB:1E:F2:8C:C4:0B:02:62:5E:DA:4D:DB:53:79:40:43:DF X509v3 Authority Key Identifier: keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:89:0b:9b:80:ee:eb:7f:af:ad:4b:50:f5:13:7a:4f:a1:86: 7f:fd:bc:a4:4a:87:a0:e4:f0:b6:02:12:39:77:15:e3:56:f2: ba:06:c5:9d:e2:82:c6:8c:ef:54:c2:4b:d0:bf:62:5f:da:c9: e7:7a:e8:55:96:71:fd:3c:d8:c4:0f:54:bb:fa:52:f1:c6:4e: e6:07:11:c5:da:2e:b8:93:67:f8:e6:6f:a8:39:3f:07:dd:42: 4e:da:b9:ae:26:d4:9b:37:20:2f:86:cc:98:cf:72:ae:af:cd: ef:c7:f4:28:de:1f:15:f2:00:f7:f2:0c:3b:92:97:6c:42:0a: 8c:13:73:47:83:b2:d2:c1:ec:ca:7f:ee:5e:49:03:b1:2d:10: 7b:a6:91:f2:c6:a7:a1:2a:dd:cc:c9:07:7a:d6:bd:35:10:30: e7:ea:14:e9:dc:b2:86:11:05:b5:8b:b3:f6:e8:3c:a5:bd:b6: 1e:36:4b:4f:7d:49:fd:d2:a0:06:f3:42:9c:53:3f:d0:ff:ad: b0:42:51:a3:b7:91:7b:65:b9:75:16:53:f9:d0:b5:b4:95:c2: 48:e7:7c:53:27:b2:83:3d:23:19:b5:0b:4e:50:eb:43:d4:10: ff:0c:4e:c6:bf:fc:d0:35:1a:ce:0e:63:3e:50:f6:38:11:a3: 3d:b3:de:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlBOTAxMTAvBgNVBAUTKDUxODkyQkU1QjBCNEFCQzYwMjU0NDVGNDAzOUZDNzk1 RDhCQTU4RTIwHhcNMjYwMTExMDM1NjEwWhcNMjYwMTE4MDM1NjEwWjAYMRYwFAYD VQQDDA02OTYzMWY1YS03NTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKsz/FsDpBk2w0Vvgwv08Mf67KxtOrIlM/3ta3txyDE7DKx5oHZOXkQ5c8zd ySPzA2Nx2ecPZCx1MAO5omy5diXCoBskIvvF8COWUkyDu6oDncihWJjtsQAmK94p POTOWUjBrchqecWFpHzDki8Z/D66wM0JqL0A/I4Dx4nb/qTQ+uWnCgKgLSgIfjjM gel0hJzH7Yc2p68UxkCgZQhUCakO2kbf0vhWKwY0VylTSI2JZ/QTIqvRm5R9jFH1 oDCaL0fNulMsxiR9IkAZGihSQ8t4Mz5RxHeFNv65WlPd8bUssOmcaXPWxC+N3Z62 cSGs0UKI4iWVQZPG1HPkK7pQCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9bjKse 8ozECwJiXtpN21N5QEPfMB8GA1UdIwQYMBaAFFGJK+WwtKvGAlRF9AOfx5XYulji MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUE5MC8xRkU4NEVEMjMz NzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9VWWtyNWJDMHE4WUNWRVgwQTVfSGxkaTZX T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VZa3I1YkMwcThZQ1ZFWDBBNV9IbGRpNldPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUE5MC8xRkU4NEVEMjMzNzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9VWWtyNWJDMHE4 WUNWRVgwQTVfSGxkaTZXT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/iQubgO7rf6+tS1D1E3pPoYZ//bykSoeg5PC2AhI5dxXjVvK6BsWd 4oLGjO9UwkvQv2Jf2snneuhVlnH9PNjED1S7+lLxxk7mBxHF2i64k2f45m+oOT8H 3UJO2rmuJtSbNyAvhsyYz3Kur83vx/Qo3h8V8gD38gw7kpdsQgqME3NHg7LSwezK f+5eSQOxLRB7ppHyxqehKt3MyQd61r01EDDn6hTp3LKGEQW1i7P26DylvbYeNktP fUn90qAG80KcUz/Q/62wQlGjt5F7Zbl1FlP50LW0lcJI53xTJ7KDPSMZtQtOUOtD 1BD/DE7Gv/zQNRrODmM+UPY4EaM9s95L -----END CERTIFICATE-----Generated at Mon Jan 12 08:10:50 2026 by rpki-client