This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft File: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft (raw, json) Hash identifier: 5xGzhkQcrwUG94fwEE1dNdoYzrUuJ4IXrX8lq667QTk= Subject key identifier: 5E:C9:57:4C:88:63:E0:33:57:25:48:70:F3:DB:50:34:B0:CD:FC:C9 Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Certificate serial: 02EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft Manifest number: 02D8 Signing time: Thu 01 Jan 2026 00:54:43 +0000 Manifest this update: Thu 01 Jan 2026 00:54:42 +0000 Manifest next update: Thu 08 Jan 2026 00:54:42 +0000 Files and hashes: 1: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl (hash: xxSCARMe+zdDAyU3ynXzpgmSTXtVr5axGt5Co2st17s=) 2: 1BB90D46DABA11F0A08D9BA06CD3641D.roa (hash: W208+/AZnsORqdbbJvVBW/6jMidrM1a1vXE+rl2w2zg=) 3: F2FD03E4CB3211F08B73F33CC4F9AE02.roa (hash: eafs/wPS9m35JWCg2L50cH9A4hVIgy6eQW+XBulFt7U=) 4: 97FE22F2DA4B11F0BA2C614F91D3641D.roa (hash: UyTmI2kW1DlwxdYRZqJBRQWAZxNLwJSCFQ/YlYMN28I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 00:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 747 (0x2eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Validity Not Before: Jan 1 00:54:42 2026 GMT Not After : Jan 8 00:54:42 2026 GMT Subject: CN=6955c5d2-9634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e9:c2:50:27:d2:56:8e:03:3d:fb:52:d1:7d: 97:68:09:84:f6:1f:88:da:99:d2:fb:b9:80:45:40: 1b:e2:12:c5:60:a9:69:d9:30:d0:b1:d5:72:60:03: e2:3c:01:96:b0:ee:ba:6b:e1:f9:b1:72:79:51:71: 3c:b5:1f:26:e5:c8:7b:f6:08:91:b3:f4:ec:1a:b7: d9:57:74:90:2b:e3:47:53:0c:09:0d:c0:f0:d6:f7: bb:50:c5:2c:27:88:5c:3d:1c:21:57:22:c0:c9:a8: e3:fa:ad:7d:61:63:a4:3d:a3:ea:c0:ca:c6:b0:6b: 54:3f:d0:a9:db:9b:46:e0:11:7d:57:13:7c:eb:59: 7b:c1:1f:3f:81:73:b8:71:70:eb:36:9c:5c:67:0c: ad:23:3b:4a:3c:59:6e:d7:de:4b:67:10:cc:86:92: 4f:b9:c7:32:74:42:4a:e5:24:e6:b3:b0:27:0d:28: de:08:60:7f:9a:05:c9:be:df:b6:d9:4e:e9:85:29: 98:3a:78:c3:39:07:5a:dd:1f:68:59:75:b4:09:4f: 99:1b:e3:79:b1:80:13:df:05:9c:95:31:bc:38:93: 89:b9:c7:68:e0:20:3b:1e:95:82:36:ae:77:35:62: 62:2a:e6:6f:96:7c:62:bb:4a:97:d2:91:fb:f5:84: 24:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C9:57:4C:88:63:E0:33:57:25:48:70:F3:DB:50:34:B0:CD:FC:C9 X509v3 Authority Key Identifier: keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:87:a9:eb:56:33:46:07:3f:bd:fe:f6:0b:8c:ca:44:fe:92: c9:66:f9:7d:1b:06:a3:f1:99:25:2c:43:ed:a9:40:c0:96:d4: 46:5e:1b:33:94:73:f6:fb:60:9d:21:e9:57:44:15:55:ce:00: f4:d0:f4:68:c8:da:4b:2a:9f:82:cb:45:77:e7:aa:dc:1e:98: 12:b6:22:70:64:91:ee:22:6e:1a:56:a6:19:da:67:99:3d:18: 63:22:6b:ac:14:a8:c2:1b:b6:90:dd:8b:69:c7:25:88:2c:5a: 11:9f:87:f2:76:07:90:03:da:b8:90:fd:89:dc:04:ff:3b:d2: 21:d6:77:a0:7a:ce:9c:a7:be:f5:66:a3:1b:7a:13:2a:85:c2: ba:2a:20:e6:9b:18:9f:5c:14:75:8b:3c:d8:83:7e:5b:2d:57: 85:ee:9f:2c:c8:af:90:b6:a2:16:a3:4b:08:7a:3e:99:60:ae: a5:dd:d2:63:bd:e6:98:ee:1c:7c:04:ed:20:c4:2c:d8:88:33: c1:93:12:b8:b8:1a:a5:e3:5e:dd:ec:c4:89:c5:6d:49:6b:8f: 31:ea:52:ab:02:53:3e:e8:69:29:28:c5:e1:9e:d4:4e:b6:92: ee:5c:1e:64:e5:0a:03:78:e5:cd:9d:40:da:e3:3d:e4:0b:3c: cb:13:37:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1QUQxMTAvBgNVBAUTKEY1MTJBRDY2M0E2MzMyNjM1NUNBOEQ4RTkxMDBCM0NF QUIzQ0I5RkIwHhcNMjYwMTAxMDA1NDQyWhcNMjYwMTA4MDA1NDQyWjAYMRYwFAYD VQQDDA02OTU1YzVkMi05NjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnunCUCfSVo4DPftS0X2XaAmE9h+I2pnS+7mARUAb4hLFYKlp2TDQsdVyYAPi PAGWsO66a+H5sXJ5UXE8tR8m5ch79giRs/TsGrfZV3SQK+NHUwwJDcDw1ve7UMUs J4hcPRwhVyLAyajj+q19YWOkPaPqwMrGsGtUP9Cp25tG4BF9VxN861l7wR8/gXO4 cXDrNpxcZwytIztKPFlu195LZxDMhpJPuccydEJK5STms7AnDSjeCGB/mgXJvt+2 2U7phSmYOnjDOQda3R9oWXW0CU+ZG+N5sYAT3wWclTG8OJOJucdo4CA7HpWCNq53 NWJiKuZvlnxiu0qX0pH79YQkLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7JV0yI Y+AzVyVIcPPbUDSwzfzJMB8GA1UdIwQYMBaAFPUSrWY6YzJjVcqNjpEAs86rPLn7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVBRC85NUJFM0JENjFE MzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpwak1tTlZ5bzJPa1FDenpxczh1 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSS3RaanBqTW1OVnlvMk9rUUN6enFzOHVmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVBRC85NUJFM0JENjFEMzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpwak1t TlZ5bzJPa1FDenpxczh1ZnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6h6nrVjNGBz+9/vYLjMpE/pLJZvl9Gwaj8ZklLEPtqUDAltRGXhsz lHP2+2CdIelXRBVVzgD00PRoyNpLKp+Cy0V356rcHpgStiJwZJHuIm4aVqYZ2meZ PRhjImusFKjCG7aQ3YtpxyWILFoRn4fydgeQA9q4kP2J3AT/O9Ih1neges6cp771 ZqMbehMqhcK6KiDmmxifXBR1izzYg35bLVeF7p8syK+QtqIWo0sIej6ZYK6l3dJj veaY7hx8BO0gxCzYiDPBkxK4uBql417d7MSJxW1Ja48x6lKrAlM+6GkpKMXhntRO tpLuXB5k5QoDeOXNnUDa4z3kCzzLEzfE -----END CERTIFICATE-----Generated at Thu Jan 1 20:42:00 2026 by rpki-client