This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft File: D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json) Hash identifier: brXkuLBn+xHx+CaJTn5bAlOayKyG3DhKnpc0vQkuzYE= Subject key identifier: 92:AC:D8:A9:D3:E5:10:D3:90:A6:1A:1A:19:B9:5B:E0:D5:9E:49:B0 Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB Certificate issuer: /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB Certificate serial: 0C9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft Manifest number: 0C84 Signing time: Sat 10 Jan 2026 18:09:10 +0000 Manifest this update: Sat 10 Jan 2026 18:09:09 +0000 Manifest next update: Sat 17 Jan 2026 18:09:09 +0000 Files and hashes: 1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: dv8ifakPMeZCx0/0kbiwN00Lz0JLca4fuLc1xC9EY6c=) 2: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: FO7phPYzfDla6aPOyvXALwSuyaWj8a9hgRlX/QWvNY4=) 3: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: hANV6ERnDblIoU8kPVg1/VC/XygDNvVoYUOvd3sESZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 18:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3227 (0xc9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160455, serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB Validity Not Before: Jan 10 18:09:09 2026 GMT Not After : Jan 17 18:09:09 2026 GMT Subject: CN=696295c5-c747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:72:a8:86:c6:81:57:2e:dc:48:08:d1:10:31: 45:af:d1:01:50:1b:a1:9c:7f:4d:06:eb:95:1a:fc: a3:87:da:f0:de:99:c7:04:b1:f3:b6:92:9c:f2:38: 13:09:fe:f6:8c:4b:c1:d6:0d:7d:06:e3:f2:df:fa: 27:f4:c6:98:3b:ec:64:a5:06:15:57:a6:b0:a9:b7: 94:c9:70:94:60:55:f2:fc:82:c2:90:af:e0:4f:22: 1c:b0:fa:89:8f:55:d8:95:d7:ff:90:ea:d1:34:d2: a7:a6:b9:cb:6a:ed:c6:02:24:37:df:48:72:cd:d0: de:82:69:dc:9f:27:a7:d7:c1:ba:08:7b:98:08:2b: d2:7b:91:b3:c8:d6:f7:c2:a9:2f:a6:92:06:6f:f9: 7d:96:26:7e:a4:f9:52:8b:af:8f:98:a8:b3:0a:c5: 68:92:0f:29:15:f8:4d:b2:3a:02:62:9c:53:7e:ee: b8:de:37:25:cb:36:88:8a:ad:94:79:d7:22:14:c9: 8a:77:f4:76:37:30:a8:a6:29:a5:0d:fc:7a:eb:20: d5:24:d4:f8:c5:c1:03:6e:ed:df:3d:3f:3f:01:1a: 75:ac:36:99:79:00:ee:a0:50:fa:eb:51:ba:4a:22: fa:f5:1e:f3:55:c6:12:46:30:a2:24:c8:30:1c:00: b8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AC:D8:A9:D3:E5:10:D3:90:A6:1A:1A:19:B9:5B:E0:D5:9E:49:B0 X509v3 Authority Key Identifier: keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:59:f9:42:40:ab:21:10:64:ad:43:98:6a:5a:16:3e:61:a0: 2e:85:89:ba:e6:45:8c:57:16:23:03:17:47:33:d2:29:56:36: a2:ea:c3:f5:dc:a6:b8:f5:cd:a7:67:a2:a5:59:3b:d3:95:07: fb:94:1d:da:5d:7f:c0:0e:d3:72:92:d1:49:59:93:46:23:d2: 6b:d3:ed:61:52:3d:31:2f:c9:5f:99:78:bc:a8:81:3a:26:51: 8d:b2:e0:c6:ab:46:30:d3:ab:cf:76:de:9a:82:10:4f:04:60: 9d:0d:58:14:95:cb:3b:f3:ce:95:34:14:98:9c:88:ba:c2:12: 8d:ae:2d:91:b3:17:7e:af:ed:42:5d:eb:1f:1d:05:39:f6:6f: 96:8d:01:f9:5c:30:99:e5:5f:06:f2:af:41:19:1a:ad:78:f6: b0:6e:a3:d7:25:53:4f:3b:27:72:80:31:1b:f4:8e:dd:b1:e6: b9:3d:17:9c:da:80:a6:5d:c5:b9:01:57:b2:0e:d8:e7:ca:a4: d1:a0:1a:39:62:8d:e4:37:ae:78:04:92:0c:04:b0:ec:68:ba: a0:cf:95:ff:e5:a6:d4:85:5e:61:16:dd:c3:44:b0:2f:88:c3: a4:28:97:27:55:56:e7:3a:ed:12:16:f6:ce:35:ab:9d:d7:9e: 74:e4:a1:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0NTUxMTAvBgNVBAUTKDBGQTlFNTMzRTg1QTE4M0MxNDUzMDAwOEE4Qjk2MjNG ODU2RDVERUIwHhcNMjYwMTEwMTgwOTA5WhcNMjYwMTE3MTgwOTA5WjAYMRYwFAYD VQQDDA02OTYyOTVjNS1jNzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlHKohsaBVy7cSAjREDFFr9EBUBuhnH9NBuuVGvyjh9rw3pnHBLHztpKc8jgT Cf72jEvB1g19BuPy3/on9MaYO+xkpQYVV6awqbeUyXCUYFXy/ILCkK/gTyIcsPqJ j1XYldf/kOrRNNKnprnLau3GAiQ330hyzdDegmncnyen18G6CHuYCCvSe5GzyNb3 wqkvppIGb/l9liZ+pPlSi6+PmKizCsVokg8pFfhNsjoCYpxTfu643jclyzaIiq2U edciFMmKd/R2NzCopimlDfx66yDVJNT4xcEDbu3fPT8/ARp1rDaZeQDuoFD661G6 SiL69R7zVcYSRjCiJMgwHAC49wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKs2KnT 5RDTkKYaGhm5W+DVnkmwMB8GA1UdIwQYMBaAFA+p5TPoWhg8FFMACKi5Yj+FbV3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQ1NS9BNTVFNEY5NjEx RjUxMUVBQkFCODIwMjhDNEY5QUUwMi9ENm5sTS1oYUdEd1VVd0FJcUxsaVA0VnRY ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q2bmxNLWhhR0R3VVV3QUlxTGxpUDRWdFhlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDQ1NS9BNTVFNEY5NjExRjUxMUVBQkFCODIwMjhDNEY5QUUwMi9ENm5sTS1oYUdE d1VVd0FJcUxsaVA0VnRYZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUWflCQKshEGStQ5hqWhY+YaAuhYm65kWMVxYjAxdHM9IpVjai6sP1 3Ka49c2nZ6KlWTvTlQf7lB3aXX/ADtNyktFJWZNGI9Jr0+1hUj0xL8lfmXi8qIE6 JlGNsuDGq0Yw06vPdt6aghBPBGCdDVgUlcs7886VNBSYnIi6whKNri2Rsxd+r+1C XesfHQU59m+WjQH5XDCZ5V8G8q9BGRqtePawbqPXJVNPOydygDEb9I7dsea5PRec 2oCmXcW5AVeyDtjnyqTRoBo5Yo3kN654BJIMBLDsaLqgz5X/5abUhV5hFt3DRLAv iMOkKJcnVVbnOu0SFvbONaud15505KF5 -----END CERTIFICATE-----Generated at Mon Jan 12 16:03:25 2026 by rpki-client