This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft File: tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json) Hash identifier: On42j5ttnszETwoqckVYoIIq2NRIr6+FKCEZzJC6ZCU= Subject key identifier: C7:0A:F3:C9:6E:34:51:9F:3D:C9:EA:11:B8:40:0D:DF:29:4F:B5:44 Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Certificate serial: 0A8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft Manifest number: 0A84 Signing time: Mon 12 Jan 2026 19:02:30 +0000 Manifest this update: Mon 12 Jan 2026 19:02:30 +0000 Manifest next update: Mon 19 Jan 2026 19:02:30 +0000 Files and hashes: 1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: psQYyJbCpN4HB34o8kv2BC+DdKYAVnRaqzHF26oOCDY=) 2: F6179D9E736011EA9EDED344C4F9AE02.roa (hash: ojzFvMsiRonOZ+xCsta/hhoUMpbqKKfUmVfepQYjpIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 19:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2700 (0xa8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Validity Not Before: Jan 12 19:02:30 2026 GMT Not After : Jan 19 19:02:30 2026 GMT Subject: CN=69654546-5bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:62:4b:6a:e2:19:7b:0f:7f:8f:54:e4:07:c8: 2e:e1:92:14:b0:1c:9e:d4:58:18:18:bd:b2:c9:87: d7:4b:6e:5c:ca:d9:a6:ab:4e:64:9e:02:ab:ba:dc: ae:09:bb:51:d2:78:ce:ed:04:1e:e4:d6:69:f0:ca: a6:59:28:ba:b1:cb:94:c1:d5:61:72:ab:ff:cd:64: ad:5d:1b:6c:f7:ec:b2:45:cd:ec:93:96:44:a3:20: fa:66:9f:5e:8a:3e:aa:88:88:65:49:af:29:c7:56: 38:62:90:ee:ff:a3:f7:f9:0b:ef:99:df:50:a9:68: 41:19:85:9a:62:cf:89:6f:5d:a5:7e:ce:59:29:9c: f9:ab:e6:e8:6c:1f:77:b5:7d:73:33:90:1e:67:6f: 2f:68:97:f7:48:bc:c4:50:92:e2:cd:a9:13:55:5e: 1c:e6:33:55:f5:b8:65:2e:2a:d7:19:51:e7:b3:6e: 9a:7e:22:70:81:25:78:62:3f:2e:ac:58:e1:85:ae: 1b:5f:84:46:aa:c4:b4:44:9b:b7:2b:f9:a5:c5:ec: 45:89:cb:ae:7f:a4:01:9d:75:0b:bd:2f:b8:d3:cd: be:2c:38:c0:27:e4:d3:e6:6c:6a:3d:a6:84:19:59: ab:56:29:c1:c9:5f:fb:ab:12:07:23:95:c7:e5:67: 2c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0A:F3:C9:6E:34:51:9F:3D:C9:EA:11:B8:40:0D:DF:29:4F:B5:44 X509v3 Authority Key Identifier: keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:bf:69:55:f3:ff:ac:b0:60:26:dd:1f:26:d8:93:94:18:eb: 4e:1f:20:54:c1:93:8c:ef:86:5f:61:68:76:15:c8:fc:63:40: 8d:b8:6a:ae:f4:a6:0a:4e:7f:af:e0:bb:12:e4:ee:42:6e:90: 97:98:a1:5b:79:b4:dc:b6:e7:e5:0f:2e:c6:76:b0:90:c1:49: 26:5a:15:de:77:b9:14:fa:12:fb:ba:e5:59:21:86:0c:6a:d9: aa:68:c5:84:81:60:82:3f:92:52:5a:3c:8e:26:4d:3a:97:45: b8:ca:26:14:cd:f9:9f:58:48:fc:b1:95:63:0a:f0:0d:a4:e6: 31:d1:cf:be:ad:8a:62:fa:d8:c0:a7:75:2e:8f:99:80:f4:8d: ba:b1:f6:8f:23:c0:b2:8f:88:0b:f5:ed:9a:6a:e5:67:69:34: 5b:93:ed:bc:60:8d:0b:40:e1:45:9a:fd:b3:7b:ae:0c:8b:a5: b4:36:f6:af:37:66:7e:fd:07:b1:67:56:80:0c:c0:81:f3:ca: 2a:62:af:d7:aa:03:62:19:4f:ce:a3:10:91:6d:5c:78:d7:28: 47:a7:6f:e1:73:1f:e1:7c:ce:f8:c8:6c:44:62:7b:2a:16:12: be:35:2c:03:fa:eb:ec:8d:2c:e8:25:8c:23:3c:71:cf:24:0f: bd:39:7d:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYwODEyRTdGQzJF MzYyMzJEMkYwHhcNMjYwMTEyMTkwMjMwWhcNMjYwMTE5MTkwMjMwWjAYMRYwFAYD VQQDDA02OTY1NDU0Ni01YmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGJLauIZew9/j1TkB8gu4ZIUsBye1FgYGL2yyYfXS25cytmmq05kngKrutyu CbtR0njO7QQe5NZp8MqmWSi6scuUwdVhcqv/zWStXRts9+yyRc3sk5ZEoyD6Zp9e ij6qiIhlSa8px1Y4YpDu/6P3+Qvvmd9QqWhBGYWaYs+Jb12lfs5ZKZz5q+bobB93 tX1zM5AeZ28vaJf3SLzEUJLizakTVV4c5jNV9bhlLirXGVHns26afiJwgSV4Yj8u rFjhha4bX4RGqsS0RJu3K/mlxexFicuuf6QBnXULvS+4082+LDjAJ+TT5mxqPaaE GVmrVinByV/7qxIHI5XH5WcsuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcK88lu NFGfPcnqEbhADd8pT7VEMB8GA1UdIwQYMBaAFLZCm6HpolrkrhIPCBLn/C42Iy0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDE1Ni8zNjQ3OTM4NDcz NjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1U3VFZzhJRXVmOExqWWpM UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrS2JvZW1pV3VTdUVnOElFdWY4TGpZakxTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDE1Ni8zNjQ3OTM4NDczNjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1 U3VFZzhJRXVmOExqWWpMUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlv2lV8/+ssGAm3R8m2JOUGOtOHyBUwZOM74ZfYWh2Fcj8Y0CNuGqu 9KYKTn+v4LsS5O5CbpCXmKFbebTctuflDy7GdrCQwUkmWhXed7kU+hL7uuVZIYYM atmqaMWEgWCCP5JSWjyOJk06l0W4yiYUzfmfWEj8sZVjCvANpOYx0c++rYpi+tjA p3Uuj5mA9I26sfaPI8Cyj4gL9e2aauVnaTRbk+28YI0LQOFFmv2ze64Mi6W0Nvav N2Z+/QexZ1aADMCB88oqYq/XqgNiGU/OoxCRbVx41yhHp2/hcx/hfM74yGxEYnsq FhK+NSwD+uvsjSzoJYwjPHHPJA+9OX2P -----END CERTIFICATE-----Generated at Mon Jan 12 23:55:31 2026 by rpki-client