This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json) Hash identifier: 4fpZsRg09itNd5xcgI+XS4X5z9wuVYIjJboNDQfRBmA= Subject key identifier: D8:BA:42:3C:39:CC:F7:71:81:B4:68:EB:4E:BA:0F:35:62:51:67:61 Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft Manifest number: 0213 Signing time: Thu 01 Jan 2026 02:00:10 +0000 Manifest this update: Thu 01 Jan 2026 02:00:10 +0000 Manifest next update: Thu 08 Jan 2026 02:00:10 +0000 Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: emXXNOA74xH56ax/oCcgHz+vNvDab0L5rfeH7uw2soc=) 2: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: qGZaQNJyLZku/SzxDCB0Nuw0a/+OoUo9qDOPnkwwD5Q=) 3: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: SxVaSYD8PBsvrx1NB8E9HKd/vHjJ1IDDsPlNRnpIlg4=) 4: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: PoKf6o7yXw/Qv4BZeY7gOn7tsUE0LnvpCUG0WyWE5AY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 02:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Validity Not Before: Jan 1 02:00:10 2026 GMT Not After : Jan 8 02:00:10 2026 GMT Subject: CN=6955d52a-b5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:86:b0:9c:60:25:db:55:86:f6:51:c5:f3: bc:c1:43:7e:dc:bd:d9:ec:b4:7e:c6:47:8d:c7:d1: eb:06:e5:3f:f8:99:c8:63:61:b5:50:f9:f3:13:50: 34:70:fa:6d:e2:c6:50:7a:74:b7:34:d2:d6:c3:ab: 89:c3:28:a6:e3:d5:70:de:49:c3:67:b3:9f:59:c7: b8:6f:70:f5:82:2e:50:1e:c7:dc:c3:e6:fc:a9:09: cb:86:72:24:ec:e0:ba:c9:3a:ba:73:5d:72:e5:42: db:4b:37:8a:f5:ab:aa:99:d9:96:75:65:a7:9c:a6: 18:cc:0a:02:4b:1f:6d:81:71:8c:4a:f2:c9:c1:46: 78:5b:f6:7a:05:4c:f5:73:f7:42:c8:9e:bb:7d:7a: f1:24:b5:f3:db:73:4a:c9:84:ef:c9:8a:a3:3b:d9: 26:7c:c7:6b:d5:04:3c:3d:da:fb:0f:fc:27:21:df: 2e:71:cb:eb:10:91:ee:94:2a:8e:ba:49:c4:3d:5f: 73:0e:3d:97:45:32:77:75:92:1b:c5:de:71:ea:63: 99:88:a4:73:85:fb:84:1f:87:c8:37:fc:b0:57:ae: 01:3d:7f:af:da:42:88:f5:68:a0:d1:3b:ad:ce:8c: 93:02:7a:7f:1c:ce:42:29:77:b2:31:6b:9b:ba:05: 36:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BA:42:3C:39:CC:F7:71:81:B4:68:EB:4E:BA:0F:35:62:51:67:61 X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:2d:cc:d2:f1:e6:92:3d:4b:9a:c0:9c:13:d5:0e:d8:cf:43: 44:cf:2b:df:77:e7:4f:ba:41:1e:14:07:67:35:58:c6:61:bb: 84:c7:63:99:00:4a:bc:5f:fc:63:20:52:23:5f:40:d3:ec:4a: 87:2d:df:2e:73:60:d2:7c:40:e5:11:66:ca:3a:65:1d:d6:9a: 68:00:fd:aa:71:5a:3e:25:ab:00:be:66:4d:01:78:32:ac:01: 17:3c:91:07:c4:d2:3c:ef:94:eb:36:ad:bb:29:90:e2:c8:7a: ac:b4:ac:23:86:01:e1:86:b6:8e:a3:ce:19:b1:f3:e2:99:b9: 1e:b3:3e:38:e0:63:f1:5d:01:98:f7:31:ce:96:f3:e3:ea:26: 31:da:01:ef:82:03:f7:f1:f3:fc:ae:2e:6d:ee:ea:c2:61:55: d2:bf:bc:0a:e9:14:a0:81:ea:a7:df:04:70:48:0e:01:68:b4: 4e:99:f4:2e:f4:dc:5d:2f:a2:d9:85:99:b1:91:ac:5f:fd:a7: c1:45:2a:91:bb:7d:ab:7f:77:0b:93:72:7e:7e:0d:37:41:ac: 7e:2d:30:0b:a4:02:2c:95:61:62:4f:92:7a:45:ce:f5:d2:24: 7b:03:e9:73:cb:00:94:8b:e1:2a:1f:d0:4c:ca:f9:ba:87:4b: 14:15:5b:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjYwMTAxMDIwMDEwWhcNMjYwMTA4MDIwMDEwWjAYMRYwFAYD VQQDDA02OTU1ZDUyYS1iNWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVGGsJxgJdtVhvZRxfO8wUN+3L3Z7LR+xkeNx9HrBuU/+JnIY2G1UPnzE1A0 cPpt4sZQenS3NNLWw6uJwyim49Vw3knDZ7OfWce4b3D1gi5QHsfcw+b8qQnLhnIk 7OC6yTq6c11y5ULbSzeK9auqmdmWdWWnnKYYzAoCSx9tgXGMSvLJwUZ4W/Z6BUz1 c/dCyJ67fXrxJLXz23NKyYTvyYqjO9kmfMdr1QQ8Pdr7D/wnId8uccvrEJHulCqO uknEPV9zDj2XRTJ3dZIbxd5x6mOZiKRzhfuEH4fIN/ywV64BPX+v2kKI9Wig0Tut zoyTAnp/HM5CKXeyMWubugU20QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNi6Qjw5 zPdxgbRo6066DzViUWdhMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEQwQS81NjRBMTM1RUQyMjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5 YW1hejVMVVEzTWFURE5Td3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAULczS8eaSPUuawJwT1Q7Yz0NEzyvfd+dPukEeFAdnNVjGYbuEx2OZ AEq8X/xjIFIjX0DT7EqHLd8uc2DSfEDlEWbKOmUd1ppoAP2qcVo+JasAvmZNAXgy rAEXPJEHxNI875TrNq27KZDiyHqstKwjhgHhhraOo84ZsfPimbkesz444GPxXQGY 9zHOlvPj6iYx2gHvggP38fP8ri5t7urCYVXSv7wK6RSggeqn3wRwSA4BaLROmfQu 9NxdL6LZhZmxkaxf/afBRSqRu32rf3cLk3J+fg03Qax+LTALpAIslWFiT5J6Rc71 0iR7A+lzywCUi+EqH9BMyvm6h0sUFVuo -----END CERTIFICATE-----Generated at Fri Jan 2 18:37:12 2026 by rpki-client