This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json) Hash identifier: sKInoAKIzLQ23E0tK2+0TechaVtXgEI4hkAzhboIZ5o= Subject key identifier: 5B:E7:71:A2:57:BC:9C:AB:24:CE:A8:A9:16:43:6E:88:D3:86:ED:BF Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 02BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft Manifest number: 02A2 Signing time: Thu 01 Jan 2026 01:02:00 +0000 Manifest this update: Thu 01 Jan 2026 01:02:00 +0000 Manifest next update: Thu 08 Jan 2026 01:02:00 +0000 Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: aSj6YIIZaX8upob12CPNsUfDglRn1EYiV0e7fBH6UcE=) 2: 66E8964AE4B911EE8EC7426CC4F9AE02.roa (hash: 09gHaKHodm8DnpQuTY9BuW6MFW3h5Zayu3XFpgrbJoc=) 3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: s8gyc+lMEl4nS7dY6mvX8/vnSbnC7+O4jW7tyoFs1/s=) 4: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: Jo5fPiYa65aMAoum6b7Ul8L0BSiMHOWrhdixO3zUwaU=) 5: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: lFYxSl2pOGkakLM+J9NHER06FELZm5NAXjqBVUZYCW4=) 6: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: EbZ289YqTjjHul9Gc5OsYaqkiIBsHmwVJ9L1aCN8g68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Jan 1 01:02:00 2026 GMT Not After : Jan 8 01:02:00 2026 GMT Subject: CN=6955c788-30d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c7:c1:67:0a:88:cb:b0:06:be:87:3b:02:5c: c7:83:e3:06:0b:6a:2d:c0:8b:06:36:16:a3:25:f2: 03:b3:d3:cb:be:49:5a:a5:0d:d0:75:51:44:60:93: 99:02:88:57:3d:60:2b:74:5b:aa:f5:6f:76:a7:d1: 91:2f:fb:3f:a9:09:ed:57:e6:19:23:61:a7:fb:c4: 9d:ea:69:a9:c7:50:d4:01:94:6a:4b:8d:d5:77:d2: c6:f4:26:27:00:3e:99:3c:ab:f4:bc:d6:4a:c1:39: f4:cb:0b:31:82:76:f0:ef:26:d5:fb:30:65:32:86: 1e:dc:f2:b5:4a:5b:90:66:e1:33:b6:eb:50:f9:ee: a5:cc:e9:fc:f8:76:85:f4:ad:ee:76:7a:1b:7e:c2: c9:c1:14:cb:53:c5:a8:b3:b3:93:6c:a8:40:d1:b8: ee:7e:9b:ea:d2:7c:7e:0b:91:7e:48:4a:d8:dc:31: 4f:33:fe:41:5b:a5:33:70:30:df:cd:b3:88:ff:12: fc:09:27:e7:c7:72:ff:4a:88:b4:0c:24:e3:fd:60: f7:d2:75:71:a9:2d:07:67:7a:60:b5:ef:dc:7f:14: e7:fa:5e:5c:65:2b:2e:44:83:2e:d8:06:a9:95:46: 2f:6b:ff:9e:86:be:f0:4f:19:ab:9c:77:95:7e:7b: ac:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E7:71:A2:57:BC:9C:AB:24:CE:A8:A9:16:43:6E:88:D3:86:ED:BF X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:46:52:d5:ed:29:2f:38:94:f0:b1:8f:b1:d2:20:df:0b:65: bc:8d:7a:3f:8c:6b:09:16:55:36:05:89:70:55:6f:e8:0a:6e: e0:f0:88:7e:ce:e2:bb:db:8a:7c:9e:f8:9b:46:76:3f:f0:8e: 87:f2:3d:2e:f3:b8:ee:76:ae:3d:0f:ce:a9:ca:a1:48:4f:af: c9:d3:6b:b6:96:f2:1a:43:cf:26:c0:d7:22:25:d6:ce:69:0e: c0:2f:4e:8e:55:1f:8d:49:98:42:7c:75:f4:43:a3:fd:6e:17: 57:96:84:58:c0:e2:76:51:fa:38:f9:a7:88:db:d9:6d:9e:af: db:e8:f7:f0:7b:7b:63:ca:82:b6:67:cd:51:03:45:1c:40:fa: cf:bf:37:af:c8:b4:cb:74:6a:0a:1b:10:7a:f1:9d:55:75:82: cb:74:5c:37:0a:98:98:0f:ac:cd:52:67:29:90:84:84:46:33: 8c:bd:cd:a7:e2:95:53:34:e8:11:24:81:30:76:b8:60:b4:6a: 7f:d1:b4:cf:ea:1c:14:14:3e:d4:53:72:64:8a:70:27:3b:ec: d1:30:60:b6:c4:d0:71:16:c4:58:a6:92:f4:21:b2:cc:01:11: 3c:f3:3b:43:50:b6:e7:79:d9:74:c7:9f:3f:e5:31:bd:41:43: 72:57:42:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjYwMTAxMDEwMjAwWhcNMjYwMTA4MDEwMjAwWjAYMRYwFAYD VQQDDA02OTU1Yzc4OC0zMGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMfBZwqIy7AGvoc7AlzHg+MGC2otwIsGNhajJfIDs9PLvklapQ3QdVFEYJOZ AohXPWArdFuq9W92p9GRL/s/qQntV+YZI2Gn+8Sd6mmpx1DUAZRqS43Vd9LG9CYn AD6ZPKv0vNZKwTn0ywsxgnbw7ybV+zBlMoYe3PK1SluQZuEztutQ+e6lzOn8+HaF 9K3udnobfsLJwRTLU8Wos7OTbKhA0bjufpvq0nx+C5F+SErY3DFPM/5BW6UzcDDf zbOI/xL8CSfnx3L/Soi0DCTj/WD30nVxqS0HZ3pgte/cfxTn+l5cZSsuRIMu2Aap lUYva/+ehr7wTxmrnHeVfnusSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvncaJX vJyrJM6oqRZDbojThu2/MB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9FODhFOUM3RTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJh alRST2Q3YzNtYWpuVmlRMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0RlLV7SkvOJTwsY+x0iDfC2W8jXo/jGsJFlU2BYlwVW/oCm7g8Ih+ zuK724p8nvibRnY/8I6H8j0u87judq49D86pyqFIT6/J02u2lvIaQ88mwNciJdbO aQ7AL06OVR+NSZhCfHX0Q6P9bhdXloRYwOJ2Ufo4+aeI29ltnq/b6Pfwe3tjyoK2 Z81RA0UcQPrPvzevyLTLdGoKGxB68Z1VdYLLdFw3CpiYD6zNUmcpkISERjOMvc2n 4pVTNOgRJIEwdrhgtGp/0bTP6hwUFD7UU3JkinAnO+zRMGC2xNBxFsRYppL0IbLM ARE88ztDULbnedl0x58/5TG9QUNyV0Lq -----END CERTIFICATE-----Generated at Thu Jan 1 14:25:57 2026 by rpki-client