This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft File: U0krmdbQfZSfaQqTaVsUkoIWmi4.mft (raw, json) Hash identifier: wcnJ2dgpMLMEs0ETBMBwCE0++OHMAwmsFjdk0Kok4Ks= Subject key identifier: 2D:3A:26:64:05:D4:2D:59:94:C5:79:32:E4:90:8B:90:DB:E2:AE:EE Authority key identifier: 53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E Certificate issuer: /CN=A9111623/serialNumber=53492B99D6D07D949F690A93695B149282169A2E Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft Manifest number: 31 Signing time: Sat 17 Jan 2026 03:28:44 +0000 Manifest this update: Sat 17 Jan 2026 03:28:44 +0000 Manifest next update: Sat 24 Jan 2026 03:28:44 +0000 Files and hashes: 1: U0krmdbQfZSfaQqTaVsUkoIWmi4.crl (hash: c+QAdiJe2h4Ai9R0YzoNqiagBlrjWxE1gA/sroddkm0=) 2: 0EFA4E50BEB111F0B971EF51C4F9AE02.roa (hash: 6FoXdKnh4FobFCJ2G0tpVqFddIfSVlw09KcFje53gKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 03:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111623, serialNumber=53492B99D6D07D949F690A93695B149282169A2E Validity Not Before: Jan 17 03:28:44 2026 GMT Not After : Jan 24 03:28:44 2026 GMT Subject: CN=696b01ec-7356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:aa:6e:bb:e3:ee:52:04:e5:32:7b:99:8d: e3:b9:af:f0:5d:65:f3:09:6e:e6:27:f6:ea:96:7d: 7d:a2:63:2d:8c:13:3e:d4:88:3f:db:79:4f:5f:19: e1:01:9e:05:45:1b:90:fa:5a:fd:e3:7b:aa:c4:03: 65:c8:63:64:4f:cf:77:ce:9d:01:bf:ea:f6:44:bc: ea:97:1d:76:56:17:35:a3:f4:f1:94:6e:54:5d:33: 0b:13:42:4d:f3:e3:ed:c6:0e:5d:77:80:0f:e4:4f: 61:40:20:7d:a5:6e:71:fa:5c:8e:1e:9a:ac:43:62: ad:1d:98:45:08:6a:3b:56:ca:c4:4b:b6:23:3d:9d: 82:4f:41:15:37:06:4f:33:3a:d0:b9:46:92:ec:30: 8b:ac:c8:76:3f:71:f2:d0:78:f3:64:37:28:b9:9d: 58:2e:17:c3:61:36:2f:84:c0:37:46:3f:56:20:20: 81:6f:55:0e:b5:b1:e4:64:61:56:af:df:c1:fc:0b: 51:82:83:9c:5c:45:49:82:d9:92:5e:d7:93:fb:32: 14:c5:97:1b:fd:1a:97:4e:2d:4d:97:8e:60:f8:cb: 9e:8c:8b:01:a6:a5:59:bc:eb:22:b9:63:ac:3c:87: 25:6e:c3:52:1d:64:0c:17:6b:db:64:30:46:0e:4c: 95:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3A:26:64:05:D4:2D:59:94:C5:79:32:E4:90:8B:90:DB:E2:AE:EE X509v3 Authority Key Identifier: keyid:53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:03:b9:d4:d3:b8:91:21:7a:b6:ae:bb:95:0f:22:c7:e4:66: 97:63:3b:2f:4e:b7:a5:2f:91:a0:60:07:3e:e9:ba:18:1a:55: e0:f8:1e:ea:14:f7:74:3c:f8:e0:52:0b:6c:5e:6a:d3:86:bc: 8a:a0:56:c0:10:e7:b1:0a:30:be:dd:6d:28:9f:20:67:72:2c: b3:f5:dc:2c:f4:e2:c9:3d:93:51:5a:85:43:d1:ac:f7:67:e0: 3e:56:f1:55:ef:df:07:f6:6d:17:b2:c2:ac:ae:e3:d8:7a:db: 40:b5:19:73:3f:e4:98:9c:e4:2d:8a:dc:19:b4:aa:7d:3a:68: cf:b7:ea:0f:58:de:d3:50:4a:e5:fb:94:62:d8:71:a7:d0:1f: d1:28:b6:57:67:eb:62:f5:6e:ea:02:5e:13:bd:78:96:9f:a2: fc:1c:60:68:22:69:1e:2d:58:3b:96:fb:78:d3:d5:55:04:48: 1c:fd:2b:19:37:f3:c8:6e:1b:fa:55:a3:93:27:7f:52:3b:a1: 0f:1c:88:f2:30:29:d9:c5:7f:77:3f:d2:04:d4:d0:73:19:0b: be:1a:33:f0:9d:fe:9e:53:4c:53:7f:3f:5c:32:0d:f0:7f:6d: fc:38:cd:87:21:68:02:bd:14:f2:f7:e3:97:98:ba:6a:f4:f3: af:f9:30:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTYyMzExMC8GA1UEBRMoNTM0OTJCOTlENkQwN0Q5NDlGNjkwQTkzNjk1QjE0OTI4 MjE2OUEyRTAeFw0yNjAxMTcwMzI4NDRaFw0yNjAxMjQwMzI4NDRaMBgxFjAUBgNV BAMMDTY5NmIwMWVjLTczNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAVapuu+PuUgTlMnuZjeO5r/BdZfMJbuYn9uqWfX2iYy2MEz7UiD/beU9fGeEB ngVFG5D6Wv3je6rEA2XIY2RPz3fOnQG/6vZEvOqXHXZWFzWj9PGUblRdMwsTQk3z 4+3GDl13gA/kT2FAIH2lbnH6XI4emqxDYq0dmEUIajtWysRLtiM9nYJPQRU3Bk8z OtC5RpLsMIusyHY/cfLQePNkNyi5nVguF8NhNi+EwDdGP1YgIIFvVQ61seRkYVav 38H8C1GCg5xcRUmC2ZJe15P7MhTFlxv9GpdOLU2XjmD4y56MiwGmpVm86yK5Y6w8 hyVuw1IdZAwXa9tkMEYOTJWTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULTomZAXU LVmUxXky5JCLkNviru4wHwYDVR0jBBgwFoAUU0krmdbQfZSfaQqTaVsUkoIWmi4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExNjIzLzkwNzAwMEY2QUIy NDExRjBBRkNFNUQyRkM0RjlBRTAyL1Uwa3JtZGJRZlpTZmFRcVRhVnNVa29JV21p NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVTBrcm1kYlFmWlNmYVFxVGFWc1Vrb0lXbWk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx NjIzLzkwNzAwMEY2QUIyNDExRjBBRkNFNUQyRkM0RjlBRTAyL1Uwa3JtZGJRZlpT ZmFRcVRhVnNVa29JV21pNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADwDudTTuJEherauu5UPIsfkZpdjOy9Ot6UvkaBgBz7puhgaVeD4HuoU 93Q8+OBSC2xeatOGvIqgVsAQ57EKML7dbSifIGdyLLP13Cz04sk9k1FahUPRrPdn 4D5W8VXv3wf2bReywqyu49h620C1GXM/5Jic5C2K3Bm0qn06aM+36g9Y3tNQSuX7 lGLYcafQH9Eotldn62L1buoCXhO9eJafovwcYGgiaR4tWDuW+3jT1VUESBz9Kxk3 88huG/pVo5Mnf1I7oQ8ciPIwKdnFf3c/0gTU0HMZC74aM/Cd/p5TTFN/P1wyDfB/ bfw4zYchaAK9FPL345eYumr086/5MPA= -----END CERTIFICATE-----Generated at Sun Jan 18 02:57:59 2026 by rpki-client