This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft File: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft (raw, json) Hash identifier: UfWtdtlyUzmwSbrFqJxGREgOqiow2L8wNS4I/TGBVkM= Subject key identifier: 00:99:0D:50:7C:40:B4:13:9E:85:C8:2B:16:EB:BB:1A:74:FE:58:97 Authority key identifier: 97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 Certificate issuer: /CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft Manifest number: 011E Signing time: Sun 11 Jan 2026 03:58:27 +0000 Manifest this update: Sun 11 Jan 2026 03:58:27 +0000 Manifest next update: Sun 18 Jan 2026 03:58:27 +0000 Files and hashes: 1: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl (hash: J9/YgyqIqifbh5Y1/FfWq1gYaUbRCa00m+T3SYDnxMs=) 2: 470E849A389E11EF83D66176C4F9AE02.roa (hash: N6wnq+SiTT7KZAm9ihuMhFBquoYx3YiKfww2FuMhesA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 03:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Validity Not Before: Jan 11 03:58:27 2026 GMT Not After : Jan 18 03:58:27 2026 GMT Subject: CN=69631fe3-860f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ea:a4:5c:3d:14:39:c7:a0:db:98:c9:ea:e2: 6d:13:9c:0d:b7:c8:1b:8b:90:02:32:06:a8:19:5e: e0:1b:aa:71:3d:54:f6:89:8f:f8:38:60:42:6e:45: 29:bc:9e:ba:e3:65:92:b4:25:46:34:8b:e7:f4:a6: f8:53:5b:14:d5:53:61:ad:99:71:12:a6:6e:19:ad: dc:65:5d:e7:e1:17:07:ea:f7:e9:ad:b8:ac:f2:4c: 5b:22:bd:93:19:95:92:44:bc:cb:9c:91:5d:ff:3c: 0a:14:de:c5:95:4b:0a:c5:8e:d2:4f:4e:8c:9f:78: 36:59:df:5a:b7:ff:ca:8a:bb:b0:0c:3a:0d:60:59: 67:3a:05:a9:85:1b:d1:48:99:ae:68:13:a7:7a:42: 3f:13:77:57:39:82:43:60:8e:d5:0f:47:21:80:8c: 17:72:61:01:dc:bc:89:78:94:66:f0:86:6e:65:01: 5d:98:1a:01:b3:c6:b6:24:4f:65:40:61:35:c7:43: f5:87:5a:cd:0f:7a:63:ba:6d:74:dd:e5:42:4b:35: 1a:b0:ec:63:f3:5b:97:e7:fc:85:8b:76:45:a8:aa: b4:b6:10:ee:13:61:02:97:98:7b:c1:45:ea:80:ec: 2f:f1:1c:16:ff:4f:60:2b:05:63:0e:39:17:17:8b: 1a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:99:0D:50:7C:40:B4:13:9E:85:C8:2B:16:EB:BB:1A:74:FE:58:97 X509v3 Authority Key Identifier: keyid:97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:cf:62:8a:b5:7a:08:5c:dd:41:3e:e7:6f:d5:ad:ff:f6:80: e0:96:17:fb:22:b5:d8:78:cb:5e:0b:22:4f:07:5c:55:10:b1: 5d:0a:58:a8:e0:ac:29:a0:62:46:59:1e:8d:39:d8:9e:ca:ad: 46:d1:da:7a:fe:7b:83:b7:bd:4f:4e:35:3a:57:2a:f3:ab:2b: 4d:e3:9f:39:49:7d:53:d3:24:9e:5e:ce:32:33:08:c9:8b:74: 09:ec:53:57:b9:15:fb:46:1f:02:76:3f:fb:ff:dc:01:1e:a5: 84:3c:33:51:03:e5:e9:56:4d:b1:ce:bd:42:ca:0c:8f:ed:7f: 3c:c9:95:40:01:c0:f3:78:ba:4e:99:22:cc:7f:66:40:78:77: df:9e:b1:0d:1d:1c:77:41:66:5d:33:84:e3:93:c2:84:7a:dd: e9:3c:72:c0:46:cf:32:07:68:dc:8b:d1:0d:d1:e3:a5:7f:bb: 71:83:7a:fc:cb:9a:1e:bd:30:4e:a0:74:4e:ff:91:6d:90:89: ee:53:74:77:4d:ae:6a:e7:8f:80:ca:b1:e3:7b:d6:89:f6:72: 58:b2:e8:b2:9c:b9:41:d7:56:75:c9:e2:3a:51:a9:4e:88:c5: d0:5f:c8:64:cf:8a:27:48:5b:0e:32:34:20:a5:ba:d8:3d:2e: 8a:f2:c5:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKDk3RDA0MTU5RkJCMzdFQTY3NDYyQjg5Njk3NkMxMTQw Qzk1OUU2OTEwHhcNMjYwMTExMDM1ODI3WhcNMjYwMTE4MDM1ODI3WjAYMRYwFAYD VQQDDA02OTYzMWZlMy04NjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eqkXD0UOceg25jJ6uJtE5wNt8gbi5ACMgaoGV7gG6pxPVT2iY/4OGBCbkUp vJ6642WStCVGNIvn9Kb4U1sU1VNhrZlxEqZuGa3cZV3n4RcH6vfprbis8kxbIr2T GZWSRLzLnJFd/zwKFN7FlUsKxY7ST06Mn3g2Wd9at//KiruwDDoNYFlnOgWphRvR SJmuaBOnekI/E3dXOYJDYI7VD0chgIwXcmEB3LyJeJRm8IZuZQFdmBoBs8a2JE9l QGE1x0P1h1rND3pjum103eVCSzUasOxj81uX5/yFi3ZFqKq0thDuE2ECl5h7wUXq gOwv8RwW/09gKwVjDjkXF4saHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACZDVB8 QLQTnoXIKxbruxp0/liXMB8GA1UdIwQYMBaAFJfQQVn7s36mdGK4lpdsEUDJWeaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC80Nzg0NDIwMDM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZxWjBZcmlXbDJ3UlFNbFo1 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5QkJXZnV6ZnFaMFlyaVdsMndSUU1sWjVwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC80Nzg0NDIwMDM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZx WjBZcmlXbDJ3UlFNbFo1cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXz2KKtXoIXN1BPudv1a3/9oDglhf7IrXYeMteCyJPB1xVELFdClio 4KwpoGJGWR6NOdieyq1G0dp6/nuDt71PTjU6VyrzqytN4585SX1T0ySeXs4yMwjJ i3QJ7FNXuRX7Rh8Cdj/7/9wBHqWEPDNRA+XpVk2xzr1CygyP7X88yZVAAcDzeLpO mSLMf2ZAeHffnrENHRx3QWZdM4Tjk8KEet3pPHLARs8yB2jci9EN0eOlf7txg3r8 y5oevTBOoHRO/5FtkInuU3R3Ta5q54+AyrHje9aJ9nJYsuiynLlB11Z1yeI6UalO iMXQX8hkz4onSFsOMjQgpbrYPS6K8sUn -----END CERTIFICATE-----Generated at Tue Jan 13 04:01:31 2026 by rpki-client