This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft File: 7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json) Hash identifier: Dq1q5vpRnTNTYz7zCQNl6qgiDOU6DXYX072qdV6cBoI= Subject key identifier: 0E:79:77:E5:68:10:DC:D9:2B:4E:1D:FC:A8:72:D4:C3:9F:56:14:85 Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 Certificate issuer: /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft Manifest number: 01FF Signing time: Sat 10 Jan 2026 22:14:25 +0000 Manifest this update: Sat 10 Jan 2026 22:14:25 +0000 Manifest next update: Sat 17 Jan 2026 22:14:25 +0000 Files and hashes: 1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: QXIk+3JbSv1krpDwYru7EO1mDBrOtbTP7rgo9Iz50GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 22:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Validity Not Before: Jan 10 22:14:25 2026 GMT Not After : Jan 17 22:14:25 2026 GMT Subject: CN=6962cf41-0bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f9:fc:c9:57:93:66:56:c7:cb:af:e8:1a:7b: 04:9d:51:85:e6:83:cb:4b:6b:d8:70:2d:6d:67:a8: 65:d9:2d:21:c4:8b:dd:81:25:c5:81:25:59:d7:c1: 07:64:0f:47:f0:6d:db:a1:69:e5:05:65:8a:96:97: f5:5c:33:e6:f5:c0:9a:65:95:e9:a8:87:5e:d4:f3: bc:2f:32:7f:20:90:55:d9:b6:cc:33:2f:ac:48:9a: d0:db:84:0a:fc:f3:82:04:13:b2:5b:f9:03:17:13: 36:eb:27:6f:68:82:dc:8f:90:59:42:1e:79:38:43: 94:d7:0a:3e:c5:18:07:15:e2:cc:74:1f:56:9d:85: fd:f8:ea:6e:64:12:06:f8:4e:e4:17:08:41:a2:eb: 78:db:b8:fa:c3:d2:d5:98:bd:e2:9d:f5:16:f6:aa: 74:93:39:3d:8f:6f:a6:68:3c:38:4d:0b:da:0b:20: 7b:f7:86:cc:e7:ce:08:d7:bb:36:1a:53:e0:21:f8: 58:72:80:33:5a:b4:24:9f:56:e6:d2:e9:c7:0b:64: 96:d7:cf:00:1e:96:fe:e0:99:78:73:d9:5e:00:6a: 4e:fe:c4:2b:d0:2d:c9:57:3e:f9:f5:07:d9:8e:78: 29:d3:a9:62:ec:00:7b:66:6e:b9:ac:f1:b4:d6:c2: c1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:79:77:E5:68:10:DC:D9:2B:4E:1D:FC:A8:72:D4:C3:9F:56:14:85 X509v3 Authority Key Identifier: keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:08:fb:9e:f8:12:62:86:05:b0:cb:4a:3e:b1:68:c1:db:28: ff:a5:c8:ea:f5:6c:91:8c:45:dd:6c:24:e4:be:f4:b9:a3:59: b7:98:32:9f:60:a9:8e:ac:7b:58:55:1a:db:eb:95:48:52:60: 4f:72:d8:45:53:6b:77:6b:dc:3f:c5:e6:4c:b7:c3:1d:fd:45: d4:e8:64:ff:53:09:3f:21:2c:2d:e9:ef:fb:fc:e8:fc:79:4c: d1:b3:c8:0d:f6:72:5e:16:cd:2f:b4:e1:a8:52:af:2e:3b:2f: 3c:85:5c:9c:08:f3:b7:d7:90:2a:9d:32:1c:8c:45:38:a5:81: a6:49:35:8f:0c:f7:4b:9b:16:2e:cc:a8:53:c6:63:8e:83:f0: be:90:64:b4:34:1c:b5:9c:ee:dd:43:6a:68:cd:69:10:4f:ff: 4f:ba:b3:35:aa:91:5f:b0:f5:c4:04:05:bf:05:e6:5b:62:32: a6:02:48:22:0a:34:87:5d:78:1c:bc:ca:93:b1:14:47:f0:88: 7b:4f:7a:28:bb:da:6c:b7:a6:d4:78:69:04:d9:61:9a:9d:32: 4c:ea:98:4d:75:99:46:1d:32:ca:33:91:6c:9a:bb:4f:24:c3: b0:ea:e6:7d:04:93:e7:bd:a9:38:fe:ec:20:b6:2e:2f:90:21: ab:0c:81:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKEVDODQ3NjkxNTJCREVERENCNzBGQkMyMUQ2QzZDQTNC RkY0ODk3ODEwHhcNMjYwMTEwMjIxNDI1WhcNMjYwMTE3MjIxNDI1WjAYMRYwFAYD VQQDDA02OTYyY2Y0MS0wYmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg/n8yVeTZlbHy6/oGnsEnVGF5oPLS2vYcC1tZ6hl2S0hxIvdgSXFgSVZ18EH ZA9H8G3boWnlBWWKlpf1XDPm9cCaZZXpqIde1PO8LzJ/IJBV2bbMMy+sSJrQ24QK /POCBBOyW/kDFxM26ydvaILcj5BZQh55OEOU1wo+xRgHFeLMdB9WnYX9+OpuZBIG +E7kFwhBout427j6w9LVmL3infUW9qp0kzk9j2+maDw4TQvaCyB794bM584I17s2 GlPgIfhYcoAzWrQkn1bm0unHC2SW188AHpb+4Jl4c9leAGpO/sQr0C3JVz759QfZ jngp06li7AB7Zm65rPG01sLBIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA55d+Vo ENzZK04d/Khy1MOfVhSFMB8GA1UdIwQYMBaAFOyEdpFSve3ctw+8IdbGyjv/SJeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9FODA3MkQ4MERG RkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdkeTNEN3doMXNiS09fOUls NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJUjJrVks5N2R5M0Q3d2gxc2JLT185SWw0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9FODA3MkQ4MERGRkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdk eTNEN3doMXNiS09fOUlsNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaCPue+BJihgWwy0o+sWjB2yj/pcjq9WyRjEXdbCTkvvS5o1m3mDKf YKmOrHtYVRrb65VIUmBPcthFU2t3a9w/xeZMt8Md/UXU6GT/Uwk/ISwt6e/7/Oj8 eUzRs8gN9nJeFs0vtOGoUq8uOy88hVycCPO315AqnTIcjEU4pYGmSTWPDPdLmxYu zKhTxmOOg/C+kGS0NBy1nO7dQ2pozWkQT/9PurM1qpFfsPXEBAW/BeZbYjKmAkgi CjSHXXgcvMqTsRRH8Ih7T3oou9pst6bUeGkE2WGanTJM6phNdZlGHTLKM5FsmrtP JMOw6uZ9BJPnvak4/uwgti4vkCGrDIGL -----END CERTIFICATE-----Generated at Mon Jan 12 09:59:40 2026 by rpki-client