This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft File: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft (raw, json) Hash identifier: dY03bao8qYmld2L476umtNYdO/TN33e8O9C3+5qYO4Y= Subject key identifier: 22:B6:37:A4:81:48:93:0B:4C:52:96:7A:EA:0B:82:1D:C8:F8:D4:E1 Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft Manifest number: 14 Signing time: Sat 17 Jan 2026 05:31:37 +0000 Manifest this update: Sat 17 Jan 2026 05:31:37 +0000 Manifest next update: Sat 24 Jan 2026 05:31:37 +0000 Files and hashes: 1: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl (hash: texda0g5Mz7HFg1EHCcC/R6Y+277444zJ1fimd9MB7s=) 2: 7D2D672CDED711F0AB94945E506F56BC.roa (hash: u2zduMkx4xhg9DLF082d9hmsAswVdTWy9LumUJPHJOI=) 3: 5B694A50EAD711F0B1E9CBE6646F56BC.roa (hash: 3eLRypPEUhfByves6spSdNQSjrY66WsDnd8NSp3B+Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 05:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Validity Not Before: Jan 17 05:31:37 2026 GMT Not After : Jan 24 05:31:37 2026 GMT Subject: CN=696b1eb9-d955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:ad:b7:14:ba:4c:36:5b:5f:01:5d:56:5a: 7f:d6:46:f7:04:4a:e9:3f:0a:68:07:10:fc:89:30: 68:29:2d:76:23:10:96:07:7f:4b:97:2e:ba:4a:61: 20:30:79:64:df:49:4a:5f:52:a4:be:1f:5e:08:c7: 72:8b:a4:af:8c:6f:ee:aa:b0:ba:8f:cc:5b:80:58: 3b:96:18:8b:eb:fc:71:b1:33:3e:99:c1:2a:09:d8: 34:bc:22:8f:95:af:ea:1f:25:36:08:c4:70:70:ec: a5:8d:e3:ee:d7:6a:a8:38:e7:c0:26:c6:29:e2:1d: b4:a2:d3:e8:85:15:b4:2b:bf:77:1e:22:91:2a:75: 66:6f:40:d1:49:5c:8c:fd:96:f8:c9:72:96:c7:1c: 66:e4:2e:9d:60:04:0f:41:08:6f:c6:66:5a:a2:5d: c9:0d:4b:4f:d6:bc:00:3e:d4:9b:b8:2d:ea:7e:91: 2a:31:03:fb:e2:a1:96:08:87:17:fa:b3:d1:d9:8d: da:26:c6:6d:0d:82:8a:03:34:04:7b:a6:5c:bc:3b: 2d:51:38:13:ca:f9:2b:f2:28:b3:c3:18:b3:cd:64: 06:26:b5:a1:8b:31:02:b9:57:8f:69:89:c8:2e:c6: f3:03:6d:f0:9b:ed:85:65:be:f1:72:36:ee:58:96: 15:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B6:37:A4:81:48:93:0B:4C:52:96:7A:EA:0B:82:1D:C8:F8:D4:E1 X509v3 Authority Key Identifier: keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:21:2d:40:9e:79:e2:e7:07:b4:78:f0:83:64:ec:9f:c7:c4: 43:14:65:c4:c5:da:dd:c1:98:9b:f7:5a:37:e2:ee:b5:06:16: 39:b7:f2:fb:e2:1a:af:d0:c7:9f:18:a3:35:53:34:24:06:96: 78:08:b9:05:69:15:66:cc:b1:1a:26:4f:02:50:e8:87:25:48: 16:5a:d6:ae:cd:d0:52:f9:9b:f6:63:b4:f3:c5:64:b4:32:55: 9f:91:a7:9b:d8:c1:05:4c:bd:77:3f:b6:54:d4:aa:4c:ae:00: 0b:19:4d:4a:db:c0:79:dc:e3:35:60:bb:63:fa:69:95:9f:c6: 91:0b:eb:3c:b2:a4:f0:64:4a:52:5c:08:eb:96:06:a4:05:ae: af:bc:9a:66:8b:94:28:ca:e1:c8:31:0c:d1:b5:b5:cc:37:37: c9:84:bf:52:fe:24:05:13:ed:33:59:7e:f0:9d:6d:eb:9f:93: 33:2e:45:e3:94:4e:d8:53:f6:b4:d1:7d:11:59:fa:80:62:7a: 80:15:b8:c0:b6:29:d7:7a:37:1d:b4:2c:4f:00:78:02:ed:e7: 42:c1:f3:f7:e6:ef:4f:b1:40:98:f9:31:52:ce:96:2f:55:12: 8a:0b:ce:67:35:26:9c:38:4c:38:1e:6c:aa:cf:4a:9d:87:84: 79:16:b7:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEx MkZFMTExMC8GA1UEBRMoMEM1OEM2OTY5RUU2NEM0MTkxQUFCNjY5NjNGNDA5RDQ1 QUVBRjY5ODAeFw0yNjAxMTcwNTMxMzdaFw0yNjAxMjQwNTMxMzdaMBgxFjAUBgNV BAMMDTY5NmIxZWI5LWQ5NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMO623FLpMNltfAV1WWn/WRvcESuk/CmgHEPyJMGgpLXYjEJYHf0uXLrpKYSAw eWTfSUpfUqS+H14Ix3KLpK+Mb+6qsLqPzFuAWDuWGIvr/HGxMz6ZwSoJ2DS8Io+V r+ofJTYIxHBw7KWN4+7Xaqg458AmxiniHbSi0+iFFbQrv3ceIpEqdWZvQNFJXIz9 lvjJcpbHHGbkLp1gBA9BCG/GZlqiXckNS0/WvAA+1Ju4Lep+kSoxA/vioZYIhxf6 s9HZjdomxm0NgooDNAR7ply8Oy1ROBPK+SvyKLPDGLPNZAYmtaGLMQK5V49picgu xvMDbfCb7YVlvvFyNu5YlhU1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIrY3pIFI kwtMUpZ66guCHcj41OEwHwYDVR0jBBgwFoAUDFjGlp7mTEGRqrZpY/QJ1Frq9pgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0ZCMjhEOUYwREM5 QzExRjA4MTdFODk2MUEyRUU1MjhFL0RGakdscDdtVEVHUnFyWnBZX1FKMUZycTlw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvREZqR2xwN21URUdScXJacFlfUUoxRnJxOXBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0ZCMjhEOUYwREM5QzExRjA4MTdFODk2MUEyRUU1MjhFL0RGakdscDdtVEVH UnFyWnBZX1FKMUZycTlwZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG8hLUCeeeLnB7R48INk7J/HxEMUZcTF2t3BmJv3Wjfi7rUGFjm38vvi Gq/Qx58YozVTNCQGlngIuQVpFWbMsRomTwJQ6IclSBZa1q7N0FL5m/ZjtPPFZLQy VZ+Rp5vYwQVMvXc/tlTUqkyuAAsZTUrbwHnc4zVgu2P6aZWfxpEL6zyypPBkSlJc COuWBqQFrq+8mmaLlCjK4cgxDNG1tcw3N8mEv1L+JAUT7TNZfvCdbeufkzMuReOU TthT9rTRfRFZ+oBieoAVuMC2Kdd6Nx20LE8AeALt50LB8/fm70+xQJj5MVLOli9V EooLzmc1Jpw4TDgebKrPSp2HhHkWtxE= -----END CERTIFICATE-----Generated at Sun Jan 18 03:13:10 2026 by rpki-client