This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json) Hash identifier: nILP/XTbb4LHLoJxQ1GNckF8LLDJ4Wdv+m2Nw3mXVkA= Subject key identifier: D9:B0:7D:75:B3:13:D0:6C:74:C0:17:51:EC:86:EE:C4:02:39:67:94 Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft Manifest number: 01F1 Signing time: Thu 01 Jan 2026 02:11:51 +0000 Manifest this update: Thu 01 Jan 2026 02:11:50 +0000 Manifest next update: Thu 08 Jan 2026 02:11:50 +0000 Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: C7pBgcNewZZFxcHqhcNz3FZEGzdzperrtaI3CSiD4H4=) 2: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: TYXUwM1es+viCTvOIJkrXn99Lf7hGCjK/asxpXmwfB0=) 3: 1C46B158029711EEB8410455C4F9AE02.roa (hash: 9PDqSioWn5hBKEyF3Xh2bcZ5nBkq113KFDA0GhUPDK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 02:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Validity Not Before: Jan 1 02:11:50 2026 GMT Not After : Jan 8 02:11:50 2026 GMT Subject: CN=6955d7e7-3428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:19:3d:3e:1c:71:eb:1e:55:90:d1:e0:44:57: 1e:52:04:c5:70:a6:fd:0b:38:eb:a7:85:fe:f0:f6: 35:88:d7:82:87:0d:f8:5c:c2:0c:c4:00:15:70:3e: 3c:f1:34:de:48:dd:89:0d:a3:cf:e7:47:ec:d0:b0: 19:2d:e6:35:a2:63:93:f6:68:90:cd:03:17:46:ee: fb:22:52:85:4d:df:e2:1a:05:87:4e:4d:c1:83:1e: b3:ba:54:58:a7:93:da:37:73:a2:fb:19:5e:f5:00: f9:e0:16:80:27:58:a8:99:f3:9b:5f:b5:da:be:c8: b2:ce:12:3f:a2:38:73:f2:fb:aa:73:0e:5d:55:da: 81:97:72:63:8d:1d:1a:93:69:2d:f8:2b:63:6a:21: 4a:9a:20:c5:7e:92:65:8d:3d:ca:36:5f:e4:e3:a2: dd:d5:f2:8e:1f:ba:b2:44:8c:13:35:cf:0d:f3:9a: f2:52:fc:e1:c7:dc:42:db:11:13:03:2c:7e:97:3b: a4:b1:c7:b8:ec:36:0c:db:27:9a:35:25:e2:65:71: cc:ce:02:02:0e:60:7a:7b:36:f0:80:0d:40:48:7f: 42:ec:c2:8b:77:96:2d:f0:2d:a9:e9:e8:22:50:1e: 50:95:d0:54:12:ac:cb:fd:f3:b7:5e:a3:23:7f:38: d6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B0:7D:75:B3:13:D0:6C:74:C0:17:51:EC:86:EE:C4:02:39:67:94 X509v3 Authority Key Identifier: keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:08:43:f8:2d:32:35:1f:9c:ed:63:0f:bd:4e:7e:5d:2c:a1: f0:dd:be:92:0d:8a:46:18:05:84:e6:b6:53:83:d4:33:74:2e: 18:96:ab:97:4c:2f:6f:20:f0:bb:65:e7:f8:22:1e:81:15:ea: bd:43:02:21:19:d4:a6:ce:db:77:c9:86:c2:84:bb:5f:b7:15: 11:a7:f1:fd:6e:63:e0:21:28:2b:80:74:c4:1f:46:b8:d4:12: 56:1f:71:06:33:30:74:27:de:36:ba:60:a7:db:35:57:cc:13: a8:68:a5:a7:37:33:cb:cc:40:5c:f3:bc:9b:ac:e8:d5:ed:0d: 2f:5c:d9:1d:43:bc:17:f8:6e:21:dd:e8:05:f0:04:55:f4:93: 05:e7:be:77:8b:3f:c7:7f:0d:b6:74:c2:5f:04:e7:2c:64:5b: 9f:59:ae:79:70:33:b6:fa:e3:94:6c:5b:68:85:a4:11:1b:ed: d7:a6:96:12:bb:00:26:88:4e:29:5d:56:af:9a:69:47:0e:73: f7:18:9e:32:2e:02:ce:d5:13:3e:28:6f:a1:66:88:5c:f2:82: ed:6f:91:93:34:bc:a2:8e:37:09:ba:ee:68:bb:2c:9e:bb:03: 1a:e4:d3:5f:13:a2:87:9a:a2:a6:6b:e0:92:ce:1d:c6:83:0b: a5:18:ce:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU4OTYxMTAvBgNVBAUTKDFBQjZCQUU3OTNBQjhBQUNBM0JGRDY2QzZDMjlCMEFE NTEwM0YwOTAwHhcNMjYwMTAxMDIxMTUwWhcNMjYwMTA4MDIxMTUwWjAYMRYwFAYD VQQDDA02OTU1ZDdlNy0zNDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Rk9Phxx6x5VkNHgRFceUgTFcKb9Czjrp4X+8PY1iNeChw34XMIMxAAVcD48 8TTeSN2JDaPP50fs0LAZLeY1omOT9miQzQMXRu77IlKFTd/iGgWHTk3Bgx6zulRY p5PaN3Oi+xle9QD54BaAJ1iomfObX7XavsiyzhI/ojhz8vuqcw5dVdqBl3JjjR0a k2kt+CtjaiFKmiDFfpJljT3KNl/k46Ld1fKOH7qyRIwTNc8N85ryUvzhx9xC2xET Ayx+lzuksce47DYM2yeaNSXiZXHMzgICDmB6ezbwgA1ASH9C7MKLd5Yt8C2p6egi UB5QldBUEqzL/fO3XqMjfzjWEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmwfXWz E9BsdMAXUeyG7sQCOWeUMB8GA1UdIwQYMBaAFBq2uueTq4qso7/WbGwpsK1RA/CQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTg5Ni9FMTIyNzI3Q0Y2 N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlxeWp2OVpzYkNtd3JWRUQ4 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyYTY1NU9yaXF5anY5WnNiQ213clZFRDhKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTg5Ni9FMTIyNzI3Q0Y2N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlx eWp2OVpzYkNtd3JWRUQ4SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8CEP4LTI1H5ztYw+9Tn5dLKHw3b6SDYpGGAWE5rZTg9QzdC4YlquX TC9vIPC7Zef4Ih6BFeq9QwIhGdSmztt3yYbChLtftxURp/H9bmPgISgrgHTEH0a4 1BJWH3EGMzB0J942umCn2zVXzBOoaKWnNzPLzEBc87ybrOjV7Q0vXNkdQ7wX+G4h 3egF8ARV9JMF5753iz/Hfw22dMJfBOcsZFufWa55cDO2+uOUbFtohaQRG+3XppYS uwAmiE4pXVavmmlHDnP3GJ4yLgLO1RM+KG+hZohc8oLtb5GTNLyijjcJuu5ouyye uwMa5NNfE6KHmqKma+CSzh3GgwulGM6Y -----END CERTIFICATE-----Generated at Thu Jan 1 19:53:20 2026 by rpki-client