This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft File: 9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json) Hash identifier: O5Pul1jJGdn+pewvWfcchH0MT1+CDNfb5KA4NPYCMPk= Subject key identifier: A3:8C:8B:A2:6A:8B:6A:EA:A4:21:A3:82:3F:16:F0:99:08:44:6B:10 Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft Manifest number: D5 Signing time: Thu 01 Jan 2026 05:36:12 +0000 Manifest this update: Thu 01 Jan 2026 05:36:11 +0000 Manifest next update: Thu 08 Jan 2026 05:36:11 +0000 Files and hashes: 1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: 0VMwZhaEm/kiVWW8x8hR5OxCi8qjzrq4IPiv7dWCPq4=) 2: D1D03D026AB211F0976F001AC4F9AE02.roa (hash: SlcZUPBC731CkDPBH5QtG+XBH8C8VdxLmEudErYJG5E=) 3: D0680FF86AB211F0976F001AC4F9AE02.roa (hash: u4I6OcMWHr68B44EOHhKNv/9O12ptdqG8vuabhMlWB0=) 4: D0E4A1946AB211F0976F001AC4F9AE02.roa (hash: mZq4ESa3sYKUhMXlPEh614v/+7uhBeYVmsv4x4LdoBk=) 5: 974ADC40B6FD11F0BEBA196FC4F9AE02.roa (hash: dFlHoiKovBe7XL6W2rjfYVHX4DwruLCG9HZsmrV1dcw=) 6: 5BE6836E501B11F0928AD730C4F9AE02.roa (hash: ot0PiXgJFtG3ow9OOuQQJ5zHZoHZdTDEI+ufokydrtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 05:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Validity Not Before: Jan 1 05:36:11 2026 GMT Not After : Jan 8 05:36:11 2026 GMT Subject: CN=695607cc-908e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3c:19:9e:40:8f:b6:b0:cb:34:7a:e0:79:06: ee:21:82:07:3a:87:0c:9c:91:0f:7d:55:41:0f:58: cc:80:09:62:5d:d7:39:bd:a9:d0:ad:51:b8:39:eb: 1a:90:11:5b:c9:92:46:2c:5c:af:bf:25:18:60:f7: dd:eb:f6:40:3f:1a:55:6f:e7:31:03:1f:a9:ce:7c: 2f:1b:4c:d0:70:ac:91:83:33:6e:30:f7:2a:a9:b7: 34:7f:11:a2:8b:69:54:fb:87:7d:31:a3:fb:2c:45: 1a:3c:dd:45:d6:98:76:ec:9f:41:1e:96:8f:4d:04: 39:97:ca:d2:e0:22:35:36:72:bc:45:a7:1f:a9:34: ed:91:b5:33:01:45:e4:b6:81:a7:33:75:e8:3d:76: 11:c7:d5:bc:32:83:c8:fe:5a:06:3a:05:98:23:66: eb:63:71:dd:16:ad:ad:7e:1d:96:0b:5a:10:93:44: 26:8e:7e:e2:bc:2f:2f:e0:50:ee:4f:eb:d1:e8:6f: 9a:fe:3a:0b:2b:8a:35:49:5b:d3:b6:41:6d:0b:f8: ec:d4:aa:3b:c9:fd:82:b3:b1:e5:98:38:12:09:89: 0b:5e:26:52:8f:3f:8d:32:9d:de:3a:0d:f8:d8:84: d3:06:c4:0f:c3:ed:c6:a4:81:77:cb:9d:dd:a5:e6: 27:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8C:8B:A2:6A:8B:6A:EA:A4:21:A3:82:3F:16:F0:99:08:44:6B:10 X509v3 Authority Key Identifier: keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:00:2d:f7:e6:1d:62:ef:c4:5c:c2:5b:92:6a:d9:f4:18:d4: 50:3f:85:a1:64:60:55:7c:4b:bf:d9:09:22:79:68:55:ee:fc: e7:a8:10:89:2d:08:61:99:f7:2c:21:e5:3b:5e:4b:cb:2b:8a: fc:f9:cf:12:2b:7c:17:b6:32:08:40:61:b4:fd:e4:03:2d:63: be:5a:0b:70:96:4b:0f:92:06:69:49:af:32:fa:63:81:99:a6: d5:64:f0:e4:70:40:d7:d7:4d:24:e2:1c:42:7e:5f:0a:24:a1: fe:62:80:d2:4a:ff:14:72:c6:34:33:8f:64:8a:ed:4d:3c:35: aa:62:56:25:d3:e9:00:c3:51:02:43:39:be:28:6f:f2:6c:b5: cf:1f:2e:7d:9b:37:7a:ce:82:3a:c4:8f:47:94:ee:e3:d4:bb: 23:9f:dc:10:f9:31:18:3f:18:8d:ec:96:53:82:2e:c7:ad:5a: e4:fc:ce:ce:c8:6b:2e:d8:37:4e:1a:03:0b:94:5f:f5:f4:cf: a9:19:ba:f6:25:15:ed:4b:18:62:15:fb:a0:e4:0f:ff:8b:9f: 0d:88:e7:d6:36:2b:d6:62:a5:9b:49:2f:25:29:32:d2:d9:ac: 8b:44:e5:ec:fa:1a:3e:0e:f9:0c:c1:3d:81:8b:8b:70:8c:2b: 4e:0c:ed:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKEY2OThCNUI0N0EwNkQ1MzA3REVDNjA4OTY5MDYzMDc0 QjY4RkY1Q0EwHhcNMjYwMTAxMDUzNjExWhcNMjYwMTA4MDUzNjExWjAYMRYwFAYD VQQDDA02OTU2MDdjYy05MDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjDwZnkCPtrDLNHrgeQbuIYIHOocMnJEPfVVBD1jMgAliXdc5vanQrVG4Oesa kBFbyZJGLFyvvyUYYPfd6/ZAPxpVb+cxAx+pznwvG0zQcKyRgzNuMPcqqbc0fxGi i2lU+4d9MaP7LEUaPN1F1ph27J9BHpaPTQQ5l8rS4CI1NnK8RacfqTTtkbUzAUXk toGnM3XoPXYRx9W8MoPI/loGOgWYI2brY3HdFq2tfh2WC1oQk0Qmjn7ivC8v4FDu T+vR6G+a/joLK4o1SVvTtkFtC/js1Ko7yf2Cs7HlmDgSCYkLXiZSjz+NMp3eOg34 2ITTBsQPw+3GpIF3y53dpeYnEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOMi6Jq i2rqpCGjgj8W8JkIRGsQMB8GA1UdIwQYMBaAFPaYtbR6BtUwfexgiWkGMHS2j/XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DOTI4MDQzQUQx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFUQjk3R0NKYVFZd2RMYVA5 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDljby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODVFOS9DOTI4MDQzQUQxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFU Qjk3R0NKYVFZd2RMYVA5Y28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFAC335h1i78RcwluSatn0GNRQP4WhZGBVfEu/2QkieWhV7vznqBCJ LQhhmfcsIeU7XkvLK4r8+c8SK3wXtjIIQGG0/eQDLWO+WgtwlksPkgZpSa8y+mOB mabVZPDkcEDX100k4hxCfl8KJKH+YoDSSv8UcsY0M49kiu1NPDWqYlYl0+kAw1EC Qzm+KG/ybLXPHy59mzd6zoI6xI9HlO7j1Lsjn9wQ+TEYPxiN7JZTgi7HrVrk/M7O yGsu2DdOGgMLlF/19M+pGbr2JRXtSxhiFfug5A//i58NiOfWNivWYqWbSS8lKTLS 2ayLROXs+ho+DvkMwT2Bi4twjCtODO3x -----END CERTIFICATE-----Generated at Thu Jan 1 09:06:58 2026 by rpki-client