This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: xCsfcrCvM6oBRZmPY3atmg+45pXmAWO4YQfYONq7qFs= Subject key identifier: 83:A9:AA:41:04:18:C1:A5:66:6A:A1:97:20:52:78:22:84:AE:9F:31 Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0A40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 0A23 Signing time: Sat 10 Jan 2026 19:16:51 +0000 Manifest this update: Sat 10 Jan 2026 19:16:51 +0000 Manifest next update: Sat 17 Jan 2026 19:16:51 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: gvNT2mIS8KErTLl2dkkwavH0JuKjNZFaEqNqE55Jm6U=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: 0JDfCgaj0qi5DfzCSt+R5bW4oauazIr/umzt83Q1Gmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 19:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2624 (0xa40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Jan 10 19:16:51 2026 GMT Not After : Jan 17 19:16:51 2026 GMT Subject: CN=6962a5a3-a89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0d:6b:ab:15:f0:55:fc:78:fc:0c:e0:72:69: 5e:a2:79:a1:14:ba:0a:bf:b5:fc:bf:8d:d1:0f:8a: 36:ab:91:69:31:7b:48:72:e8:78:7f:01:76:43:bc: 05:95:d7:38:0f:c1:84:76:49:e4:ad:75:d2:1e:15: e9:ce:bd:2b:f6:b3:81:4b:c7:d3:f5:aa:5c:08:09: de:1d:58:ba:6a:9c:af:f6:49:de:25:5e:9a:09:0e: 69:80:a8:d2:a0:5e:3f:17:df:9d:e5:55:4a:72:4b: fc:88:ed:9d:99:29:19:b1:44:1a:8a:a7:f7:69:67: ec:72:b9:8d:87:22:29:99:8e:06:81:8a:1f:c1:b5: 71:ba:9f:3e:9c:a5:1f:fc:5d:45:58:d1:4e:02:b4: ff:59:d7:99:f1:22:4c:e4:5f:5d:64:7a:2a:b6:24: 4e:db:de:09:a5:a1:e2:1c:18:b3:f3:54:35:66:a3: 87:e9:8c:4a:81:ab:b0:ce:82:fb:9f:ca:9a:55:1e: e0:22:b5:aa:f9:75:74:fb:03:78:81:cf:a0:d7:7b: b3:52:57:ea:97:51:77:f8:36:b2:76:a6:00:7a:56: 14:c2:96:03:f5:52:d5:ed:1e:92:5e:a2:14:ac:19: 39:54:d8:67:ae:81:97:a4:a6:e6:32:93:fd:a4:dd: d0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A9:AA:41:04:18:C1:A5:66:6A:A1:97:20:52:78:22:84:AE:9F:31 X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:88:4e:55:74:7c:09:e5:c2:62:7f:57:9a:9b:3e:a2:3f:3d: 1d:2b:44:24:7f:36:d2:51:70:76:ae:1d:bb:be:e2:b7:db:04: 34:8f:df:f9:db:af:03:da:dc:12:2c:0e:61:aa:e8:20:00:ce: 3b:67:ac:d2:f5:76:26:6e:53:88:10:f2:96:91:cb:f4:8d:a3: 1e:60:73:81:a3:ee:64:6c:ca:77:5f:1c:c9:e1:11:57:50:5f: eb:33:94:30:ec:b0:c0:2b:01:e5:f1:51:dd:b3:84:14:d2:90: 05:11:0e:d3:1c:b4:e9:ef:6b:86:c2:1e:0e:bd:2a:15:ca:c5: af:e9:6b:99:21:3e:ec:de:35:7f:93:9e:2d:bd:93:c4:8d:d8: d4:d1:45:82:53:a9:2d:9b:d5:15:57:f8:ed:99:29:cb:df:6a: a4:83:73:28:7a:91:f9:5f:81:af:1e:8b:c6:8d:35:30:de:f5: 7a:7d:96:14:bf:59:ad:27:82:67:6c:fd:b2:7b:75:54:23:b4: 71:16:a7:83:45:06:ad:e2:41:e6:61:6a:83:90:af:b7:ca:8d: a4:70:16:9e:78:a2:24:9f:10:4c:90:79:b6:93:79:4c:c3:07: 06:dc:52:70:0a:d4:4b:3b:e1:17:57:fe:cf:52:c3:01:27:8b: c0:ed:63:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjYwMTEwMTkxNjUxWhcNMjYwMTE3MTkxNjUxWjAYMRYwFAYD VQQDDA02OTYyYTVhMy1hODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ1rqxXwVfx4/AzgcmleonmhFLoKv7X8v43RD4o2q5FpMXtIcuh4fwF2Q7wF ldc4D8GEdknkrXXSHhXpzr0r9rOBS8fT9apcCAneHVi6apyv9kneJV6aCQ5pgKjS oF4/F9+d5VVKckv8iO2dmSkZsUQaiqf3aWfscrmNhyIpmY4GgYofwbVxup8+nKUf /F1FWNFOArT/WdeZ8SJM5F9dZHoqtiRO294JpaHiHBiz81Q1ZqOH6YxKgauwzoL7 n8qaVR7gIrWq+XV0+wN4gc+g13uzUlfql1F3+DaydqYAelYUwpYD9VLV7R6SXqIU rBk5VNhnroGXpKbmMpP9pN3Q/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOpqkEE GMGlZmqhlyBSeCKErp8xMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBiE5VdHwJ5cJif1eamz6iPz0dK0QkfzbSUXB2rh27vuK32wQ0j9/5 268D2twSLA5hquggAM47Z6zS9XYmblOIEPKWkcv0jaMeYHOBo+5kbMp3XxzJ4RFX UF/rM5Qw7LDAKwHl8VHds4QU0pAFEQ7THLTp72uGwh4OvSoVysWv6WuZIT7s3jV/ k54tvZPEjdjU0UWCU6ktm9UVV/jtmSnL32qkg3MoepH5X4GvHovGjTUw3vV6fZYU v1mtJ4JnbP2ye3VUI7RxFqeDRQat4kHmYWqDkK+3yo2kcBaeeKIknxBMkHm2k3lM wwcG3FJwCtRLO+EXV/7PUsMBJ4vA7WM5 -----END CERTIFICATE-----Generated at Sun Jan 11 23:55:43 2026 by rpki-client