This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json) Hash identifier: komjW6WfFp59NKYUGEBZLAC2vc0WzsjDWyixR5bprpg= Subject key identifier: 30:6D:3D:A6:39:28:38:88:70:FF:78:26:7A:15:94:C1:16:41:35:FA Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft Manifest number: 01D7 Signing time: Sun 11 Jan 2026 02:09:11 +0000 Manifest this update: Sun 11 Jan 2026 02:09:10 +0000 Manifest next update: Sun 18 Jan 2026 02:09:10 +0000 Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: 7RzPjSLKWxmdGdfTrKSiyhOR81IWTZgbvWb2PKLEw3U=) 2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: Q0kMZvSMppTmP/L1MFuKtKcyvw4++N9BtkqfdKNNGdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 02:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Validity Not Before: Jan 11 02:09:10 2026 GMT Not After : Jan 18 02:09:10 2026 GMT Subject: CN=69630646-bc0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ce:92:04:a8:32:54:6f:d7:ac:52:8a:62:15: ba:e5:d8:3b:f8:9a:d3:ae:ff:1a:fa:49:ae:88:53: d9:ea:4e:62:21:e9:73:bc:43:5e:78:57:5f:a4:f8: 52:41:c7:23:03:52:c7:a4:b0:4c:5b:5e:d4:32:a9: 10:ed:13:ba:fe:68:cd:57:51:e3:ed:b0:b6:62:41: 03:9b:81:58:82:7f:3f:ff:cf:ca:3f:c2:74:a1:13: a8:10:f5:95:07:59:f0:b9:6a:36:20:89:7c:8a:4d: 44:f9:17:db:ad:51:3c:f5:2e:c2:ee:87:1a:63:44: b3:9b:0a:aa:24:56:34:be:b5:39:83:64:21:80:3a: 0f:78:65:71:24:21:e3:d0:85:58:1a:45:82:9e:64: b4:92:70:1b:b0:8f:03:26:71:54:fb:63:c6:5e:7e: 39:fe:5c:16:85:a8:57:49:5b:ef:00:26:92:28:cf: e4:e8:d0:52:4b:fa:ce:4f:9e:cb:61:99:c4:97:ed: 31:e8:d8:bd:1a:20:0e:4e:9f:b9:77:64:70:57:91: fc:e9:ae:e7:47:b9:5d:4f:33:76:7e:85:bc:68:59: 37:90:93:93:0d:15:06:e6:36:59:cc:15:84:71:9a: 44:a9:11:ff:a7:2e:ff:b4:ae:27:3b:49:d3:93:a0: 95:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6D:3D:A6:39:28:38:88:70:FF:78:26:7A:15:94:C1:16:41:35:FA X509v3 Authority Key Identifier: keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:07:67:31:e5:3f:04:e4:60:4a:e5:87:5b:de:50:5c:2d:8e: 73:05:f3:9f:2b:ac:3f:68:83:2c:d1:b9:fc:ee:ec:4c:38:7e: 76:98:d3:57:b9:a8:8a:f9:6e:0e:25:c4:43:18:f7:ec:0b:86: 88:87:d1:74:49:12:0f:94:4a:1c:a9:df:dc:fd:c8:e0:b6:67: d0:cc:b3:c7:7e:12:1d:e4:39:c2:13:95:2e:05:c0:53:dc:7b: bd:9c:a7:d8:d5:95:ca:35:9c:56:6a:1f:91:50:09:3a:04:4f: 31:f9:01:f7:bd:96:8c:d1:97:c1:c2:a4:39:0f:4b:e5:81:9d: 78:b4:3c:e2:0b:1b:66:eb:32:7c:46:f5:e8:10:21:73:e6:da: 33:29:07:a3:ca:dc:6c:8d:23:00:f1:e9:df:28:cb:de:fb:01: 9d:10:e7:d9:40:63:38:3a:3a:b4:2a:5a:24:41:5c:29:4e:58: 9e:3b:69:ad:b8:7c:4e:5a:24:d6:66:95:25:0c:3f:b1:44:a9: 81:e3:96:f7:b7:43:d5:c2:b5:da:94:70:d3:bb:f6:62:e7:3d: 69:4c:a1:91:34:5c:6b:96:0f:57:d6:b2:b4:08:19:dd:76:77: 42:0f:b6:80:d3:67:2d:47:44:66:36:89:27:7f:9c:b1:a8:25: b0:d1:7b:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG MDMzRDQ1QzQwHhcNMjYwMTExMDIwOTEwWhcNMjYwMTE4MDIwOTEwWjAYMRYwFAYD VQQDDA02OTYzMDY0Ni1iYzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk86SBKgyVG/XrFKKYhW65dg7+JrTrv8a+kmuiFPZ6k5iIelzvENeeFdfpPhS QccjA1LHpLBMW17UMqkQ7RO6/mjNV1Hj7bC2YkEDm4FYgn8//8/KP8J0oROoEPWV B1nwuWo2IIl8ik1E+RfbrVE89S7C7ocaY0SzmwqqJFY0vrU5g2QhgDoPeGVxJCHj 0IVYGkWCnmS0knAbsI8DJnFU+2PGXn45/lwWhahXSVvvACaSKM/k6NBSS/rOT57L YZnEl+0x6Ni9GiAOTp+5d2RwV5H86a7nR7ldTzN2foW8aFk3kJOTDRUG5jZZzBWE cZpEqRH/py7/tK4nO0nTk6CVdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBtPaY5 KDiIcP94JnoVlMEWQTX6MB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw MGxnaTJaRW82N3p3TTlSY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvB2cx5T8E5GBK5Ydb3lBcLY5zBfOfK6w/aIMs0bn87uxMOH52mNNX uaiK+W4OJcRDGPfsC4aIh9F0SRIPlEocqd/c/cjgtmfQzLPHfhId5DnCE5UuBcBT 3Hu9nKfY1ZXKNZxWah+RUAk6BE8x+QH3vZaM0ZfBwqQ5D0vlgZ14tDziCxtm6zJ8 RvXoECFz5tozKQejytxsjSMA8enfKMve+wGdEOfZQGM4Ojq0KlokQVwpTlieO2mt uHxOWiTWZpUlDD+xRKmB45b3t0PVwrXalHDTu/Zi5z1pTKGRNFxrlg9X1rK0CBnd dndCD7aA02ctR0RmNoknf5yxqCWw0XuZ -----END CERTIFICATE-----Generated at Sun Jan 11 23:26:36 2026 by rpki-client