This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json) Hash identifier: Lvlhmq9ECusf2MsM05VGTgHWBI3Qx/8SchM2dSr0m1Y= Subject key identifier: 5D:F0:D7:98:E0:3B:EF:40:58:5A:3F:33:FF:13:CF:74:6D:EF:13:F2 Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft Manifest number: 01B4 Signing time: Sun 11 Jan 2026 09:49:06 +0000 Manifest this update: Sun 11 Jan 2026 09:49:05 +0000 Manifest next update: Sun 18 Jan 2026 09:49:05 +0000 Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: dgV3RnPsLAQDXqrT9meJI5z39FPnWmGCzKRU77RUeQc=) 2: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: M7jRTXUUxsXllPmDL18I1jFn9NqYlH0GKE7w5Dxvhe0=) 3: C2412F50EED211F08AE562A4736F56BC.roa (hash: i2jqd73//NQms2Q20LyI4+TRfC5IrauRbePOlBJHtTc=) 4: 8F4855FA719D11EF89D9262FC4F9AE02.roa (hash: PwrdrhDZAUvpoeswVRlW4enrKnpklIZJadw0mW5Czq0=) 5: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: 7e1bIIpY60NREKCU3ueEl2g/koitX0hrLn6cquJbTFo=) 6: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: 4jQKo5E0XfC+Bh102tpwq0SPDRbmpx2RDfSXwme/Vtk=) 7: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: nBxiatkIvna62kGHJDpRTxWGzVu/8J7M6fdEO+/Y3Ws=) 8: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: XpEdNMaKGtUEN6hIgRHzqxQfHq0kQwSpdYHVdb7TK5A=) 9: D1825C02598911F0848EA472C4F9AE02.roa (hash: 6FiZKuLIgUtIYIA1D6XNL/A4ah2P8QXaPUVRBeti7CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 09:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Jan 11 09:49:05 2026 GMT Not After : Jan 18 09:49:05 2026 GMT Subject: CN=69637211-e2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:84:6f:e3:3b:12:d5:04:af:13:59:98:c8:e4: 89:1c:ba:85:7a:64:06:c9:46:9e:fd:89:29:06:59: 2f:ac:39:69:13:12:08:91:6f:29:d0:fd:13:6c:f8: a3:89:54:af:e9:9a:4a:d9:b6:32:84:9e:14:cb:91: 56:03:64:33:7a:b1:4b:16:44:5b:fe:37:df:93:97: 08:6b:18:fa:a2:ef:03:3e:7b:a3:07:9e:0e:8b:26: 31:d4:1e:5c:a4:dc:86:22:7c:a4:5f:1e:58:c8:5c: e6:35:32:53:c6:38:e3:10:ec:b2:cb:02:e6:d7:3b: 5e:5f:7b:e5:31:b3:2a:ec:17:6d:ae:c5:dd:d7:18: 56:b2:5e:f1:28:e7:e9:cd:0e:8c:15:9d:98:33:83: b9:9a:68:0e:8d:e4:21:29:c0:d7:6a:18:68:a2:50: fe:66:e5:43:e5:90:ef:f6:7b:7d:00:2a:6b:2e:0b: a1:37:b5:78:ca:b7:3a:e7:48:6b:eb:f4:19:23:5a: d8:71:6a:ca:9a:ff:45:1c:af:f7:04:4e:e0:9b:7c: 60:74:53:46:98:b9:76:50:71:48:7e:7b:68:e8:8b: 3f:43:80:a2:12:ac:45:02:34:a4:46:a6:1b:fd:76: f5:10:80:6e:f2:53:96:97:f4:99:dd:22:a3:82:a7: db:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F0:D7:98:E0:3B:EF:40:58:5A:3F:33:FF:13:CF:74:6D:EF:13:F2 X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:8d:18:df:b1:5c:74:da:2e:b2:cf:86:0c:12:aa:f6:c4:78: 52:3d:34:98:e8:aa:cb:a2:c9:6c:cb:0c:a1:15:ed:b2:a3:49: 9f:2a:3d:44:3a:f0:03:00:e6:c0:c4:78:42:a1:da:41:ef:79: 14:84:fd:fe:cf:cd:6d:ac:a0:61:94:a6:c4:4f:e7:66:06:a7: a5:9c:80:02:a2:5d:42:c3:76:e7:81:e2:38:3f:a3:0f:37:a3: 48:b2:de:89:58:ed:0e:a3:9b:cd:7b:c0:b9:d5:2a:f3:da:af: 50:ea:da:2e:f2:9a:a1:8f:ef:51:7c:87:89:9a:9f:8e:c6:17: 57:77:9e:8a:56:8f:60:f6:48:56:b0:59:6a:1d:d8:b1:2c:77: d8:68:2b:86:27:cf:41:09:47:b0:92:b2:6e:7c:f0:b1:e3:e9: b5:e1:cf:8e:7e:ae:92:02:17:2f:99:c1:e3:c9:28:5a:af:7e: be:b4:ef:12:cc:fd:1a:5e:65:a1:24:be:26:73:61:91:09:7d: f9:3d:b3:69:5b:5b:1b:96:4a:b8:0e:f3:26:b8:ba:ea:2f:57: 9d:af:70:07:78:0e:dd:8a:fe:8b:4f:17:e4:1f:21:06:39:aa: 4d:a0:35:52:86:1c:23:61:c5:2b:53:a6:9c:c5:31:30:4f:56: f4:bd:8e:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjYwMTExMDk0OTA1WhcNMjYwMTE4MDk0OTA1WjAYMRYwFAYD VQQDDA02OTYzNzIxMS1lMmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYRv4zsS1QSvE1mYyOSJHLqFemQGyUae/YkpBlkvrDlpExIIkW8p0P0TbPij iVSv6ZpK2bYyhJ4Uy5FWA2QzerFLFkRb/jffk5cIaxj6ou8DPnujB54OiyYx1B5c pNyGInykXx5YyFzmNTJTxjjjEOyyywLm1zteX3vlMbMq7BdtrsXd1xhWsl7xKOfp zQ6MFZ2YM4O5mmgOjeQhKcDXahhoolD+ZuVD5ZDv9nt9ACprLguhN7V4yrc650hr 6/QZI1rYcWrKmv9FHK/3BE7gm3xgdFNGmLl2UHFIfnto6Is/Q4CiEqxFAjSkRqYb /Xb1EIBu8lOWl/SZ3SKjgqfb8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3w15jg O+9AWFo/M/8Tz3Rt7xPyMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4 SVZwSjVDZnhyblFBMTRpX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABjRjfsVx02i6yz4YMEqr2xHhSPTSY6KrLoslsywyhFe2yo0mfKj1E OvADAObAxHhCodpB73kUhP3+z81trKBhlKbET+dmBqelnIACol1Cw3bngeI4P6MP N6NIst6JWO0Oo5vNe8C51Srz2q9Q6tou8pqhj+9RfIeJmp+OxhdXd56KVo9g9khW sFlqHdixLHfYaCuGJ89BCUewkrJufPCx4+m14c+Ofq6SAhcvmcHjyShar36+tO8S zP0aXmWhJL4mc2GRCX35PbNpW1sblkq4DvMmuLrqL1edr3AHeA7div6LTxfkHyEG OapNoDVShhwjYcUrU6acxTEwT1b0vY4m -----END CERTIFICATE-----Generated at Mon Jan 12 16:03:28 2026 by rpki-client