This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json) Hash identifier: 69Ej2SC7c7fNrkLvHk1d/zaqj8I+Ogy+2CENzmushlU= Subject key identifier: A0:66:6F:18:C8:C0:85:B6:37:3D:6D:59:E4:8B:7D:2A:35:CA:3A:11 Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft Manifest number: 0104 Signing time: Sun 11 Jan 2026 04:18:17 +0000 Manifest this update: Sun 11 Jan 2026 04:18:17 +0000 Manifest next update: Sun 18 Jan 2026 04:18:17 +0000 Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: DphkdM+azojjRn8po01fZvUTFZCZ9BF0QPA14lqIS5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 04:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Validity Not Before: Jan 11 04:18:17 2026 GMT Not After : Jan 18 04:18:17 2026 GMT Subject: CN=69632489-0926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e3:4d:3c:95:c0:b7:64:10:ac:59:13:d6:a2: 11:19:d4:06:50:41:6c:cf:74:1e:35:8d:e0:a6:d6: a0:c4:ca:23:8c:79:43:1d:08:cb:7c:f9:4b:eb:ec: f6:63:ff:4c:ff:eb:31:23:a3:3f:ff:28:48:f5:f8: 42:8c:c1:8e:21:9e:27:c6:d3:83:08:78:fb:65:69: 0f:c7:2a:bc:af:5b:41:8c:7a:56:67:db:ef:0a:a5: 7b:b2:e5:5a:d9:50:63:34:e4:c1:6a:d3:d7:96:69: 33:8b:f1:da:ce:5b:50:9c:33:64:58:42:9f:2b:2d: a2:f1:99:71:f2:f5:f3:20:44:a9:95:a4:8b:70:e9: 8c:7e:70:bb:e3:82:f6:07:13:bb:5a:29:89:28:83: d6:ca:ec:5c:b2:a8:f8:e2:7d:85:84:c2:bb:4c:00: 69:b8:25:74:78:26:f4:03:d0:9b:1e:f3:55:f8:0d: 02:93:78:5f:a8:4d:5b:89:5b:f4:45:9c:87:ba:c3: 14:27:a7:30:dd:09:a1:0c:ce:7b:51:85:ad:ec:1b: dc:4d:36:5f:8d:81:f5:ea:a7:c5:f7:b9:e9:a4:9f: 61:de:a4:70:77:e5:09:52:59:d4:9e:7e:81:e4:95: 03:6f:9b:47:84:fe:17:3e:c0:ad:13:1a:f7:bd:fb: 32:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:66:6F:18:C8:C0:85:B6:37:3D:6D:59:E4:8B:7D:2A:35:CA:3A:11 X509v3 Authority Key Identifier: keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:05:dc:0e:09:60:10:b4:2c:43:50:cb:fc:a6:dd:ae:3f:0d: 8e:2c:93:b2:da:38:ba:28:86:77:38:3f:58:fc:57:e2:b6:c4: 57:a9:d7:35:13:a4:e3:8f:4f:c5:5e:3b:e1:17:1d:2a:2b:96: 9a:8b:f9:eb:57:c4:24:89:a6:a3:77:8e:f9:ee:30:f4:99:a7: bf:d2:de:af:9a:7b:5d:68:e7:15:dd:9c:e6:a2:2c:9b:cc:3c: 8b:c4:26:07:de:08:4a:d8:56:31:a4:bc:8e:7e:b4:8b:2c:52: 7a:d7:82:1a:e8:e9:e2:da:2b:a7:65:3d:f7:40:0e:8c:6a:9e: 2b:3f:77:43:7d:2a:3e:da:34:b8:be:de:9f:f9:77:b0:e2:51: fc:3f:ea:a6:0c:78:e1:28:7b:be:b2:15:fa:41:d3:3f:6d:26: 0e:76:f8:05:54:ea:24:39:a4:d7:f7:5a:50:e9:78:4d:da:cd: 72:bc:b1:80:31:e4:e4:60:ae:3e:b0:9d:67:74:58:2f:53:d6: 54:c9:8d:ce:6b:b6:f2:fb:f1:cd:77:15:10:03:92:01:ca:73: 33:55:62:ad:5b:94:71:4a:1d:b8:fa:f0:e5:60:d5:43:92:7d: 0d:e9:23:9d:6e:e4:1a:ff:44:58:8c:69:06:7c:3b:8d:78:66: ff:be:f3:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCNDExMTAvBgNVBAUTKDIyREU5MzcxNThBRTk4REVBMjIxMUY5QkJDOUE3NUQw RUQwRDQ0MzYwHhcNMjYwMTExMDQxODE3WhcNMjYwMTE4MDQxODE3WjAYMRYwFAYD VQQDDA02OTYzMjQ4OS0wOTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiuNNPJXAt2QQrFkT1qIRGdQGUEFsz3QeNY3gptagxMojjHlDHQjLfPlL6+z2 Y/9M/+sxI6M//yhI9fhCjMGOIZ4nxtODCHj7ZWkPxyq8r1tBjHpWZ9vvCqV7suVa 2VBjNOTBatPXlmkzi/HazltQnDNkWEKfKy2i8Zlx8vXzIESplaSLcOmMfnC744L2 BxO7WimJKIPWyuxcsqj44n2FhMK7TABpuCV0eCb0A9CbHvNV+A0Ck3hfqE1biVv0 RZyHusMUJ6cw3QmhDM57UYWt7BvcTTZfjYH16qfF97nppJ9h3qRwd+UJUlnUnn6B 5JUDb5tHhP4XPsCtExr3vfsydwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBmbxjI wIW2Nz1tWeSLfSo1yjoRMB8GA1UdIwQYMBaAFCLek3FYrpjeoiEfm7yaddDtDUQ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS83MjZFM0FEMDYw NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1ONmlJUi1idkpwMTBPME5S RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0NlRjVml1bU42aUlSLWJ2SnAxME8wTlJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUI0MS83MjZFM0FEMDYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1O NmlJUi1idkpwMTBPME5SRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuBdwOCWAQtCxDUMv8pt2uPw2OLJOy2ji6KIZ3OD9Y/FfitsRXqdc1 E6Tjj0/FXjvhFx0qK5aai/nrV8Qkiaajd4757jD0mae/0t6vmntdaOcV3Zzmoiyb zDyLxCYH3ghK2FYxpLyOfrSLLFJ614Ia6Oni2iunZT33QA6Map4rP3dDfSo+2jS4 vt6f+Xew4lH8P+qmDHjhKHu+shX6QdM/bSYOdvgFVOokOaTX91pQ6XhN2s1yvLGA MeTkYK4+sJ1ndFgvU9ZUyY3Oa7by+/HNdxUQA5IBynMzVWKtW5RxSh24+vDlYNVD kn0N6SOdbuQa/0RYjGkGfDuNeGb/vvPM -----END CERTIFICATE-----Generated at Sun Jan 11 21:07:29 2026 by rpki-client