This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json) Hash identifier: pa0x1f4QeGZpAxHh5mcsYkY5RX86r62oShtlBhRzwLY= Subject key identifier: 23:40:01:7E:55:92:AE:A3:BD:96:BB:EC:BD:0C:4C:E9:C4:B6:C8:D9 Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft Manifest number: 01D9 Signing time: Sat 03 Jan 2026 02:02:06 +0000 Manifest this update: Sat 03 Jan 2026 02:02:06 +0000 Manifest next update: Sat 10 Jan 2026 02:02:06 +0000 Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: 3JUE0Yvuf1waDY6OaEXZ8sgrvbAawYx7/xzSsVDt+gM=) 2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: WYVGzlUOokIEqc6nVBCw4EkY//RM5SfsZA3dIIIOBug=) 3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: duhm3OcJs6TmE+F67eO7tEr4XPrYJsej9u+KiPXcJ/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Jan 2026 02:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143848, serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Validity Not Before: Jan 3 02:02:06 2026 GMT Not After : Jan 10 02:02:06 2026 GMT Subject: CN=6958789e-cf06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:76:9a:29:65:d5:d6:18:07:28:29:6a:1e:14: 87:56:fe:74:75:ba:15:45:d6:3e:1f:a7:c2:1f:7b: ac:e5:e1:ba:6c:06:52:1a:bf:f5:b2:74:f9:17:54: eb:4c:b8:20:cb:4b:51:a1:8b:6f:03:b3:a7:ae:5d: 2a:2d:0f:1e:8e:ae:1e:bd:3d:cd:08:03:0a:7a:e7: 74:dd:6c:6d:6b:39:a0:02:c9:e7:b9:65:27:91:2f: 11:47:0f:20:f8:6b:30:83:d1:70:0d:6e:05:1f:80: 8d:c0:24:3a:fb:fc:cc:81:9b:64:03:1e:9c:4e:69: 14:e5:74:76:01:c8:a9:43:9c:4f:98:b5:17:e0:cc: 43:bd:d8:14:a6:68:45:36:74:3c:6d:23:1f:6c:19: 24:62:fc:75:1d:0d:58:d9:b0:fb:28:b8:16:ff:64: ca:6c:cf:4b:e2:78:10:70:c5:69:43:38:db:95:4a: ab:7e:df:5b:8c:9b:b1:26:0d:e4:95:87:e3:06:70: 35:c5:e4:46:3d:18:be:d3:33:0d:b3:25:ae:bd:d0: 4b:f6:43:cb:a1:b7:55:3a:69:42:92:d3:55:03:ca: f6:cf:e3:46:6f:33:7c:fe:b2:e0:0a:a5:65:7d:08: 65:39:fd:35:44:8f:cb:02:fa:df:f1:ec:92:79:ff: 85:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:40:01:7E:55:92:AE:A3:BD:96:BB:EC:BD:0C:4C:E9:C4:B6:C8:D9 X509v3 Authority Key Identifier: keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:9e:ca:1d:cd:d6:57:a8:25:7f:8f:44:56:bd:df:06:e9:c8: 6a:c8:c2:d9:16:88:cb:fe:70:81:2d:94:b2:65:27:25:50:0a: 91:eb:ed:4b:74:a3:c6:35:62:13:7a:bb:d4:a5:ab:fc:8c:18: 91:5d:33:6c:6f:e6:87:d6:f1:ef:ec:42:a9:c0:e2:9e:2a:6c: 05:7a:b9:7b:5b:6d:1e:7b:60:d0:49:f9:2d:92:24:b7:2f:0e: e4:9b:a6:dc:2f:f1:da:f7:e0:39:c1:47:78:a3:18:da:d7:50: aa:40:45:b8:52:4d:47:20:87:3d:0f:fd:72:d0:9e:4e:b8:94: d6:df:c9:b1:95:51:7e:bb:26:30:37:d7:42:27:cb:4a:e9:59: 75:f2:5a:c3:8a:77:bc:00:ae:1c:63:ee:5d:9a:58:ef:5b:77: 1c:d1:3e:84:6f:32:90:7a:3b:3d:85:0b:47:b6:a4:a4:ea:bc: 5d:cc:0c:84:f8:9e:6f:d3:79:16:f6:b2:b4:e2:65:78:36:4a: 7c:03:c6:18:11:0b:3b:68:54:7d:f1:a3:e9:88:90:97:22:c4: 15:ca:c7:6b:8d:83:b9:9c:19:c3:4b:83:53:59:aa:05:89:47: 6b:b7:1b:7d:8c:27:cf:65:03:56:f1:d0:e3:f9:bf:69:21:21: a0:01:ee:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0 RTcxMEQxMzUwHhcNMjYwMTAzMDIwMjA2WhcNMjYwMTEwMDIwMjA2WjAYMRYwFAYD VQQDDA02OTU4Nzg5ZS1jZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0naaKWXV1hgHKClqHhSHVv50dboVRdY+H6fCH3us5eG6bAZSGr/1snT5F1Tr TLggy0tRoYtvA7Onrl0qLQ8ejq4evT3NCAMKeud03WxtazmgAsnnuWUnkS8RRw8g +Gswg9FwDW4FH4CNwCQ6+/zMgZtkAx6cTmkU5XR2AcipQ5xPmLUX4MxDvdgUpmhF NnQ8bSMfbBkkYvx1HQ1Y2bD7KLgW/2TKbM9L4ngQcMVpQzjblUqrft9bjJuxJg3k lYfjBnA1xeRGPRi+0zMNsyWuvdBL9kPLobdVOmlCktNVA8r2z+NGbzN8/rLgCqVl fQhlOf01RI/LAvrf8eySef+FaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNAAX5V kq6jvZa77L0MTOnEtsjZMB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4nsodzdZXqCV/j0RWvd8G6chqyMLZFojL/nCBLZSyZSclUAqR6+1L dKPGNWITervUpav8jBiRXTNsb+aH1vHv7EKpwOKeKmwFerl7W20ee2DQSfktkiS3 Lw7km6bcL/Ha9+A5wUd4oxja11CqQEW4Uk1HIIc9D/1y0J5OuJTW38mxlVF+uyYw N9dCJ8tK6Vl18lrDine8AK4cY+5dmljvW3cc0T6EbzKQejs9hQtHtqSk6rxdzAyE +J5v03kW9rK04mV4Nkp8A8YYEQs7aFR98aPpiJCXIsQVysdrjYO5nBnDS4NTWaoF iUdrtxt9jCfPZQNW8dDj+b9pISGgAe7B -----END CERTIFICATE-----Generated at Sat Jan 3 06:55:00 2026 by rpki-client