This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json) Hash identifier: b6dsXLncBdgjDWklJkD/X/9tWKmep1PH+5fRxoCLwFk= Subject key identifier: AF:6B:B4:A7:A2:F1:8A:55:8A:B3:D1:F6:80:C0:CF:9A:EB:D7:E6:95 Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft Manifest number: D9 Signing time: Sun 11 Jan 2026 04:50:36 +0000 Manifest this update: Sun 11 Jan 2026 04:50:35 +0000 Manifest next update: Sun 18 Jan 2026 04:50:35 +0000 Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: xtPMSP031KEOuz0leKjRaQ8EG4/cLzfRmhLvdr9f8Ts=) 2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: aniyMN410sjj0MEX+PDPaHXzJQYHXYAopGV6HCn0kcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 04:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Validity Not Before: Jan 11 04:50:35 2026 GMT Not After : Jan 18 04:50:35 2026 GMT Subject: CN=69632c1c-8a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:51:72:99:c1:2c:61:87:be:fb:39:f8:e8:cf: 76:e5:31:a9:87:21:92:08:19:f1:d0:be:11:aa:c7: 25:7b:c5:a3:6a:60:4a:05:1c:29:83:a2:5d:31:84: 8b:c1:00:0b:c7:b9:18:4a:08:7c:69:42:33:68:a8: 99:a9:05:3e:d6:0c:86:23:de:6e:b4:27:ff:1e:c5: 47:99:b6:3a:48:95:68:5e:9f:3c:c5:de:63:e3:97: 2f:a1:9a:ac:fa:52:0b:2c:0f:bd:4c:e2:67:af:4a: 87:d2:fc:8e:54:e1:79:9a:0c:47:dc:d0:97:cf:75: fc:37:6f:f6:5d:9f:24:55:d6:a7:ab:bf:a8:4c:b3: 01:82:9d:0d:37:51:9e:7b:8d:e0:67:bb:c5:a4:b9: c7:4a:4f:c0:58:45:5d:09:e0:6b:71:2a:01:7f:4a: e7:7c:a8:a2:1b:79:ff:25:bd:e8:d8:18:69:54:5f: 54:1b:1d:58:47:d5:22:55:d9:44:4b:3e:c6:d4:3d: 4c:fe:6a:da:bb:6c:24:03:84:37:ea:84:80:ce:f2: 7b:79:ce:33:90:1e:67:25:29:b9:1e:c3:32:02:d9: a7:d2:73:57:7d:b9:9d:45:72:56:73:02:2d:e2:5b: 4f:6e:05:91:65:ce:f4:b3:fc:cd:b2:9f:67:68:1c: 4b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6B:B4:A7:A2:F1:8A:55:8A:B3:D1:F6:80:C0:CF:9A:EB:D7:E6:95 X509v3 Authority Key Identifier: keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:2d:11:50:09:4b:57:aa:38:72:c4:20:73:2d:b2:4c:04:3a: 72:4c:ab:ac:29:5f:14:2b:c8:fc:15:96:4b:bc:40:93:52:8a: 72:f9:ee:a3:b4:1b:62:c3:0c:e9:76:7b:6d:5c:fb:4c:65:2d: 48:ca:c6:93:79:8e:e0:db:21:84:62:8a:86:8c:bc:39:39:43: 3a:40:86:40:43:e5:41:5b:03:62:66:1a:c3:cd:80:b7:85:be: c2:05:0b:95:93:03:65:16:06:a7:aa:c6:be:0d:89:0e:6e:09: d8:51:db:cc:7f:5a:82:b1:6e:6e:7f:30:de:71:1a:89:84:b9: 07:df:b4:c7:04:2e:eb:20:63:e3:c5:99:a3:87:21:e4:ff:c1: 8a:fa:a5:c2:b6:1c:46:61:01:21:ac:f3:7a:0b:db:80:e1:a1: b4:22:e6:ab:ec:ba:4d:e9:b8:e8:1a:22:3c:8e:c9:88:e3:8b: 1e:3a:39:a5:91:f5:40:c9:60:f6:c0:86:d7:7e:dd:0d:52:94: 1e:54:4d:d0:36:65:ca:87:0e:f6:40:b4:d4:9a:ee:a7:5f:2c: f1:ea:3b:21:2f:ea:bf:e9:51:56:ac:e8:6c:79:25:bd:64:7f: f0:2c:a8:71:0f:39:e1:b0:0b:8b:94:fd:bb:9c:1f:2b:04:ba: 87:f8:be:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCRjAxMTAvBgNVBAUTKDIxQ0ZDRTgxRDg3NUQ1Q0Y4RjU5NkFEQkZDQzM2MDE5 NjFDNDQxRTcwHhcNMjYwMTExMDQ1MDM1WhcNMjYwMTE4MDQ1MDM1WjAYMRYwFAYD VQQDDA02OTYzMmMxYy04YTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVFymcEsYYe++zn46M925TGphyGSCBnx0L4Rqscle8WjamBKBRwpg6JdMYSL wQALx7kYSgh8aUIzaKiZqQU+1gyGI95utCf/HsVHmbY6SJVoXp88xd5j45cvoZqs +lILLA+9TOJnr0qH0vyOVOF5mgxH3NCXz3X8N2/2XZ8kVdanq7+oTLMBgp0NN1Ge e43gZ7vFpLnHSk/AWEVdCeBrcSoBf0rnfKiiG3n/Jb3o2BhpVF9UGx1YR9UiVdlE Sz7G1D1M/mrau2wkA4Q36oSAzvJ7ec4zkB5nJSm5HsMyAtmn0nNXfbmdRXJWcwIt 4ltPbgWRZc70s/zNsp9naBxLyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9rtKei 8YpVirPR9oDAz5rr1+aVMB8GA1UdIwQYMBaAFCHPzoHYddXPj1lq2/zDYBlhxEHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC85RjU5MUU4RUE0 MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFjLVBXV3JiX01OZ0dXSEVR ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUJGMC85RjU5MUU4RUE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFj LVBXV3JiX01OZ0dXSEVRZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDELRFQCUtXqjhyxCBzLbJMBDpyTKusKV8UK8j8FZZLvECTUopy+e6j tBtiwwzpdnttXPtMZS1IysaTeY7g2yGEYoqGjLw5OUM6QIZAQ+VBWwNiZhrDzYC3 hb7CBQuVkwNlFganqsa+DYkObgnYUdvMf1qCsW5ufzDecRqJhLkH37THBC7rIGPj xZmjhyHk/8GK+qXCthxGYQEhrPN6C9uA4aG0Iuar7LpN6bjoGiI8jsmI44seOjml kfVAyWD2wIbXft0NUpQeVE3QNmXKhw72QLTUmu6nXyzx6jshL+q/6VFWrOhseSW9 ZH/wLKhxDznhsAuLlP27nB8rBLqH+L4i -----END CERTIFICATE-----Generated at Sun Jan 11 20:40:49 2026 by rpki-client