This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json) Hash identifier: tPXJqsE5jnDDJZ+yXsbSCi1rx5OHbY5+sGpVaxSmzXQ= Subject key identifier: 51:89:C2:DE:44:A3:1A:CD:A0:48:BD:25:BD:1D:8B:C1:F1:27:42:51 Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 0A50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft Manifest number: 0A43 Signing time: Mon 26 Jan 2026 19:10:39 +0000 Manifest this update: Mon 26 Jan 2026 19:10:39 +0000 Manifest next update: Mon 02 Feb 2026 19:10:39 +0000 Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: 0dsRYfdcUoHRVsIKV+zUGlgCABlqZ3oZMtNrWbHgv2U=) 2: C9F37B86584111F09E8EC450C4F9AE02.roa (hash: KrEmXnI7T+V4fJrByDl+yUXAqLDUTHQO1G1OMCM+LiE=) 3: E35939C2261711EC9990A750C4F9AE02.roa (hash: EKL344c874zXObfFghZmauIp/iQl7AGjIR7DSSwVyAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 19:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2640 (0xa50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: Jan 26 19:10:39 2026 GMT Not After : Feb 2 19:10:39 2026 GMT Subject: CN=6977bc2f-5682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:c4:90:41:e4:59:45:ee:ef:f5:9a:39:d6:88: a5:87:4d:f6:2e:3e:9b:c3:8e:df:45:18:23:a7:ff: d7:36:50:50:24:6f:4b:93:13:3d:1f:59:c4:22:40: e8:34:1f:b9:a2:55:e1:17:1f:63:33:ee:14:8d:ad: e5:0a:fb:20:af:58:bd:47:7a:13:8f:85:d0:f6:3b: eb:6f:c8:ee:b7:40:95:8c:ae:0c:a6:0a:75:e9:76: 9d:3c:62:63:48:d2:01:d6:35:35:cc:48:71:15:cd: 68:57:bd:5d:8e:5f:03:95:b1:8f:01:12:f4:c7:b9: 9c:d0:2a:15:d7:f9:de:88:cf:67:72:e8:c6:df:2b: 89:d2:b4:43:ba:9c:ed:be:97:1b:1c:a3:90:55:c1: 74:08:21:18:e3:6b:06:49:a6:58:10:e7:d2:d9:f5: b2:65:7a:5a:64:42:a7:88:52:4e:34:20:9f:8c:c6: ad:81:bf:24:bb:71:36:4c:01:7b:f8:44:18:72:b0: 9c:95:4a:dc:b9:14:f8:2a:8b:09:88:8e:66:21:c8: 8e:60:96:5e:21:7c:0b:bc:7e:0e:1f:56:ae:1f:6d: a7:3d:94:ba:80:1e:ba:21:09:61:dd:ae:d3:88:fb: b8:8f:9e:0a:29:e6:ff:9a:59:dc:3e:5f:cd:e6:0b: 32:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:89:C2:DE:44:A3:1A:CD:A0:48:BD:25:BD:1D:8B:C1:F1:27:42:51 X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5c:c3:bd:0a:ff:08:cf:fe:40:63:a5:5f:a2:51:47:68:8e: fe:fc:9e:88:e3:1b:44:3e:04:bf:6d:d3:d8:1e:6b:cc:f3:74: 70:76:7e:40:51:d0:d5:d9:a8:7f:07:52:76:d6:c0:9d:13:d8: cf:3c:fe:86:f1:5b:a7:30:f8:cc:97:31:eb:36:36:dc:ab:d4: 78:2d:7a:99:2b:90:57:28:83:3a:5f:4b:c0:db:be:c8:d7:7c: 25:b2:05:53:82:05:fb:95:00:e9:6f:52:a0:1a:b5:1b:6d:54: ed:29:0c:47:7f:e1:82:98:6c:69:ac:53:9a:2a:7e:d0:c3:c8: 83:9b:39:5a:0a:75:b5:c0:1d:94:98:20:c4:44:bb:bd:e8:c2: bf:01:bc:4a:34:5d:c3:92:c3:e3:95:2f:12:6b:05:ec:7c:01: 67:35:d2:1a:3a:97:46:d0:4c:04:4b:b7:59:bf:eb:0c:01:99: c1:e7:55:20:37:70:35:18:77:bf:bc:8b:cf:0e:09:6a:55:74: fe:fd:d1:41:15:ec:ae:91:d4:c2:87:69:01:69:2a:ae:2e:7d: a8:a0:92:4e:bd:3f:ae:70:d9:fe:0f:c3:b8:39:70:fe:b1:1b: 29:73:6a:47:bc:b5:fb:c6:d6:a6:e1:52:bc:a6:1f:44:09:00: 1c:92:02:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjYwMTI2MTkxMDM5WhcNMjYwMjAyMTkxMDM5WjAYMRYwFAYD VQQDDA02OTc3YmMyZi01NjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+sSQQeRZRe7v9Zo51oilh032Lj6bw47fRRgjp//XNlBQJG9LkxM9H1nEIkDo NB+5olXhFx9jM+4Uja3lCvsgr1i9R3oTj4XQ9jvrb8jut0CVjK4Mpgp16XadPGJj SNIB1jU1zEhxFc1oV71djl8DlbGPARL0x7mc0CoV1/neiM9ncujG3yuJ0rRDupzt vpcbHKOQVcF0CCEY42sGSaZYEOfS2fWyZXpaZEKniFJONCCfjMatgb8ku3E2TAF7 +EQYcrCclUrcuRT4KosJiI5mIciOYJZeIXwLvH4OH1auH22nPZS6gB66IQlh3a7T iPu4j54KKeb/mlncPl/N5gsycwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGJwt5E oxrNoEi9Jb0di8HxJ0JRMB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS8zOEQxNDAxQzgzNDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdt SVZjdnJhckdVYVBPdXlGancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8XMO9Cv8Iz/5AY6VfolFHaI7+/J6I4xtEPgS/bdPYHmvM83Rwdn5A UdDV2ah/B1J21sCdE9jPPP6G8VunMPjMlzHrNjbcq9R4LXqZK5BXKIM6X0vA277I 13wlsgVTggX7lQDpb1KgGrUbbVTtKQxHf+GCmGxprFOaKn7Qw8iDmzlaCnW1wB2U mCDERLu96MK/AbxKNF3DksPjlS8SawXsfAFnNdIaOpdG0EwES7dZv+sMAZnB51Ug N3A1GHe/vIvPDglqVXT+/dFBFeyukdTCh2kBaSquLn2ooJJOvT+ucNn+D8O4OXD+ sRspc2pHvLX7xtam4VK8ph9ECQAckgL6 -----END CERTIFICATE-----Generated at Mon Jan 26 22:05:01 2026 by rpki-client