This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft File: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json) Hash identifier: iGMD63UPsJvNmjroS91Awf5ilMSGNPCOXxx/bCsSSh0= Subject key identifier: 96:AA:D3:0E:0C:23:5A:38:BA:F6:85:D4:78:8F:F0:73:67:A7:3A:34 Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7 Certificate issuer: /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7 Certificate serial: 0CB7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft Manifest number: 0CA9 Signing time: Sat 10 Jan 2026 18:01:08 +0000 Manifest this update: Sat 10 Jan 2026 18:01:08 +0000 Manifest next update: Sat 17 Jan 2026 18:01:08 +0000 Files and hashes: 1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: Meywro5c9OnsGAtCLb4sZQ0WlYHI+CHWRmqlAzt1+AQ=) 2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: IIl+hrMnm94EE997te9hu/Nd32AVZAIsxiVc91AGezY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7 Validity Not Before: Jan 10 18:01:08 2026 GMT Not After : Jan 17 18:01:08 2026 GMT Subject: CN=696293e4-abbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:87:72:d8:cf:b7:53:60:ac:9b:b3:7a:8f:c0: 01:d3:e3:bb:9c:26:7f:fb:f3:53:f3:c6:21:67:bd: 5c:f5:2b:6a:96:fc:33:a6:ef:b1:4d:ac:e2:c8:8b: 84:58:01:3a:37:9e:2b:15:0b:b2:97:69:26:54:ae: cf:75:21:9d:5b:c1:d9:55:97:a5:05:c0:d9:c1:4b: 28:78:68:52:55:5d:ef:fb:18:b8:cf:a7:08:bd:73: 20:43:8b:c8:2c:c5:90:ec:80:eb:7b:6a:e4:3d:3d: b7:a1:bd:ae:fb:a2:2f:7b:e1:6f:67:89:db:c0:6e: 84:6a:21:ee:56:38:25:f0:09:13:5a:0f:9f:f2:c5: 6a:be:f2:74:09:27:24:00:ae:1b:35:65:00:bb:75: 03:1d:b5:19:7f:f1:8b:e7:19:18:60:56:58:a8:6b: a0:82:fc:c5:7d:3f:d7:ee:b2:51:cf:0f:5e:c2:2b: e4:0c:08:87:0c:54:4c:42:ed:35:91:c2:ad:21:a7: 6e:4f:a8:50:8f:69:5e:6e:aa:71:86:5e:6f:49:af: a5:5c:08:52:7b:07:e8:17:5a:e9:44:d7:00:61:f0: 0e:2a:11:89:63:5d:06:3c:b5:9e:12:34:66:94:1e: af:d5:4b:3b:1e:66:0f:e0:c7:5c:4f:06:61:65:9a: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AA:D3:0E:0C:23:5A:38:BA:F6:85:D4:78:8F:F0:73:67:A7:3A:34 X509v3 Authority Key Identifier: keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:8d:04:aa:7d:01:1c:3f:49:59:8e:03:e6:9a:d6:93:6c:0c: 62:43:45:04:d0:2f:85:3d:99:a1:44:51:d1:c1:d1:a6:7d:61: f3:01:5e:89:45:89:e4:61:63:2d:5b:09:8c:91:33:38:12:4b: 54:ba:18:9e:9d:d6:db:93:4a:11:b5:6e:c2:0f:2a:40:7f:eb: 58:6e:27:71:8b:19:58:29:db:72:76:80:7e:8d:91:56:ba:39: d8:90:dc:9f:81:60:37:a2:1a:dc:ff:5c:09:84:4d:fa:6f:a8: 73:cc:f1:e7:c7:6e:6c:a9:42:fe:86:2c:5d:3c:fe:ae:8a:94: 7d:e7:a5:ef:bc:93:f7:fc:02:c4:45:e4:ed:5c:5e:ad:36:45: d3:b0:f2:df:1e:51:e8:36:eb:3b:d4:e1:10:60:2d:ac:87:80: 3b:a2:8c:a6:9e:2d:fe:68:57:cb:fd:30:5a:6c:44:42:cc:ef: ec:bf:81:78:d6:72:c0:8b:d1:bc:34:34:b7:2e:57:5d:11:aa: b1:8d:55:e3:bd:65:7d:b4:5b:87:1c:b6:4d:c3:94:12:0e:e6: 72:e5:7c:d2:e8:4c:59:66:f6:36:ba:a7:02:10:5a:62:6e:92: 70:ea:77:e3:47:68:e5:57:ea:ed:23:3e:8a:96:8a:37:9d:35: 02:7a:76:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKEY1Mzk4M0I3QUI4Mzg2QzY5OTU4Nzg0RkZBRjBFNjk3 MjYyNDU3QTcwHhcNMjYwMTEwMTgwMTA4WhcNMjYwMTE3MTgwMTA4WjAYMRYwFAYD VQQDDA02OTYyOTNlNC1hYmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34dy2M+3U2Csm7N6j8AB0+O7nCZ/+/NT88YhZ71c9Stqlvwzpu+xTaziyIuE WAE6N54rFQuyl2kmVK7PdSGdW8HZVZelBcDZwUsoeGhSVV3v+xi4z6cIvXMgQ4vI LMWQ7IDre2rkPT23ob2u+6Ive+FvZ4nbwG6EaiHuVjgl8AkTWg+f8sVqvvJ0CSck AK4bNWUAu3UDHbUZf/GL5xkYYFZYqGuggvzFfT/X7rJRzw9ewivkDAiHDFRMQu01 kcKtIaduT6hQj2lebqpxhl5vSa+lXAhSewfoF1rpRNcAYfAOKhGJY10GPLWeEjRm lB6v1Us7HmYP4MdcTwZhZZpwbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaq0w4M I1o4uvaF1HiP8HNnpzo0MB8GA1UdIwQYMBaAFPU5g7erg4bGmVh4T/rw5pcmJFen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC84N0MzMTY4ODA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhzYVpXSGhQLXZEbWx5WWtW NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlUbUR0NnVEaHNhWldIaFAtdkRtbHlZa1Y2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC84N0MzMTY4ODA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhz YVpXSGhQLXZEbWx5WWtWNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjjQSqfQEcP0lZjgPmmtaTbAxiQ0UE0C+FPZmhRFHRwdGmfWHzAV6J RYnkYWMtWwmMkTM4EktUuhiendbbk0oRtW7CDypAf+tYbidxixlYKdtydoB+jZFW ujnYkNyfgWA3ohrc/1wJhE36b6hzzPHnx25sqUL+hixdPP6uipR956XvvJP3/ALE ReTtXF6tNkXTsPLfHlHoNus71OEQYC2sh4A7ooymni3+aFfL/TBabERCzO/sv4F4 1nLAi9G8NDS3LlddEaqxjVXjvWV9tFuHHLZNw5QSDuZy5XzS6ExZZvY2uqcCEFpi bpJw6nfjR2jlV+rtIz6Kloo3nTUCenZx -----END CERTIFICATE-----Generated at Mon Jan 12 09:05:35 2026 by rpki-client