This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft File: 0pm8o5yZPbgNETe5mbIhhGrPVWs.mft (raw, json) Hash identifier: JXZe9y9Zx87ua71zneqiIzeUy9tCSU/GJc85zCBprpo= Subject key identifier: A5:83:54:74:78:C0:D6:C0:F0:52:D8:A1:11:51:22:62:C9:CD:00:67 Authority key identifier: D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B Certificate issuer: /CN=A9115C2E/serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B Certificate serial: 054D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft Manifest number: 0547 Signing time: Mon 26 Jan 2026 19:10:42 +0000 Manifest this update: Mon 26 Jan 2026 19:10:41 +0000 Manifest next update: Mon 02 Feb 2026 19:10:41 +0000 Files and hashes: 1: 0pm8o5yZPbgNETe5mbIhhGrPVWs.crl (hash: KUvptDNg/vWRhkX9RwE2MBVGJeWohb4JfNI6bpTuCk0=) 2: F490AE2431D811ECA3C4CE3EC4F9AE02.roa (hash: /oifx1YqYxKOVaxnhM6Z6BMW1b5AcpZK0vDtcYNO6Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 16:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1357 (0x54d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B Validity Not Before: Jan 26 19:10:41 2026 GMT Not After : Feb 2 19:10:41 2026 GMT Subject: CN=6977bc32-835a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:92:4d:06:de:7b:b4:45:40:5b:de:7b:c4:28: 19:15:5d:db:1b:61:cf:4c:43:2b:d5:4c:07:89:cf: ac:e3:29:e1:0b:21:fc:c8:27:0a:7b:24:13:66:78: d0:09:24:b3:f8:b7:8a:23:36:c4:14:d1:1f:28:12: dd:ee:be:06:a1:97:ba:b0:7c:16:fd:60:49:96:32: 8c:8e:63:bc:bd:50:2f:54:55:cb:fd:47:7f:eb:53: a1:3a:87:2c:b7:61:e5:dd:c9:e7:ea:0a:50:d0:be: cb:3a:df:7e:c5:be:ad:f1:95:5a:45:cd:6b:8a:80: 81:ef:01:0b:f5:00:d8:1b:ac:3e:89:16:74:68:4d: 79:5e:32:ee:3d:53:7b:88:73:dc:44:54:90:70:13: 3b:02:47:40:71:7e:4b:27:37:ea:70:93:52:96:bb: c8:8b:ef:4a:a4:d9:ce:43:13:f8:74:e6:5d:33:ab: e6:90:9b:3c:2c:30:21:78:6e:63:71:06:f9:9f:53: b1:a4:94:03:c6:a9:06:ba:a5:ac:3b:02:02:1f:e9: 36:bc:49:e9:e4:18:f0:81:2d:3b:d2:21:ca:85:39: c1:74:43:a4:f7:75:66:fb:92:e4:e5:65:ce:2f:02: 4f:e9:87:9f:15:5e:6e:a2:f8:aa:bb:a6:1f:16:61: 3b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:83:54:74:78:C0:D6:C0:F0:52:D8:A1:11:51:22:62:C9:CD:00:67 X509v3 Authority Key Identifier: keyid:D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:09:8d:bc:d4:26:b0:7c:89:d0:86:ae:3f:69:03:16:95:c1: b1:cb:ae:0d:c3:77:3c:25:95:66:25:c2:12:a8:3b:b3:fc:12: ca:d1:cb:6a:84:a6:a8:53:71:4c:d0:89:05:49:51:82:58:9f: 60:40:59:a1:30:e6:f6:ad:7e:cb:87:b8:a3:45:60:5e:d9:80: bc:5f:b5:8f:b4:cb:49:2f:83:cd:b4:d8:6b:d0:e7:13:9f:2a: 66:53:f6:ea:94:2a:ab:d6:cb:4d:d6:dc:01:08:54:db:7a:cb: be:23:c2:46:3e:42:4f:89:53:9a:ac:ba:f7:43:f3:a9:cc:c1: ed:52:1e:3a:ce:5d:ed:a5:05:dc:94:58:c8:dd:2d:a3:97:3a: bf:4e:79:0a:2e:67:da:97:62:fc:d2:92:b9:c1:c6:54:bd:6d: 63:1b:68:bd:9b:98:b9:e7:e4:5f:e2:ba:df:39:38:3a:e5:a5: 11:4a:f4:fd:c4:e1:2c:f4:44:1a:72:5c:7b:e9:1c:98:fd:0d: e1:55:b2:fc:46:ab:42:65:22:7d:d8:b4:6e:b8:e1:dd:e5:e6: 64:9e:bf:98:65:2e:9e:e0:77:11:0b:82:b3:d6:f0:49:da:c1: 0a:01:38:77:45:a5:b7:ce:c3:48:2e:70:77:44:34:f7:2a:bf: f9:31:e0:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKEQyOTlCQ0EzOUM5OTNEQjgwRDExMzdCOTk5QjIyMTg0 NkFDRjU1NkIwHhcNMjYwMTI2MTkxMDQxWhcNMjYwMjAyMTkxMDQxWjAYMRYwFAYD VQQDDA02OTc3YmMzMi04MzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZJNBt57tEVAW957xCgZFV3bG2HPTEMr1UwHic+s4ynhCyH8yCcKeyQTZnjQ CSSz+LeKIzbEFNEfKBLd7r4GoZe6sHwW/WBJljKMjmO8vVAvVFXL/Ud/61OhOocs t2Hl3cnn6gpQ0L7LOt9+xb6t8ZVaRc1rioCB7wEL9QDYG6w+iRZ0aE15XjLuPVN7 iHPcRFSQcBM7AkdAcX5LJzfqcJNSlrvIi+9KpNnOQxP4dOZdM6vmkJs8LDAheG5j cQb5n1OxpJQDxqkGuqWsOwICH+k2vEnp5BjwgS070iHKhTnBdEOk93Vm+5Lk5WXO LwJP6YefFV5uoviqu6YfFmE7eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWDVHR4 wNbA8FLYoRFRImLJzQBnMB8GA1UdIwQYMBaAFNKZvKOcmT24DRE3uZmyIYRqz1Vr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS85NTI3RTZCNDI2 OEUxMUVDOEVEMEJBNkVDNEY5QUUwMi8wcG04bzV5WlBiZ05FVGU1bWJJaGhHclBW V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBwbThvNXlaUGJnTkVUZTVtYkloaEdyUFZXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS85NTI3RTZCNDI2OEUxMUVDOEVEMEJBNkVDNEY5QUUwMi8wcG04bzV5WlBi Z05FVGU1bWJJaGhHclBWV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdCY281CawfInQhq4/aQMWlcGxy64Nw3c8JZVmJcISqDuz/BLK0ctq hKaoU3FM0IkFSVGCWJ9gQFmhMOb2rX7Lh7ijRWBe2YC8X7WPtMtJL4PNtNhr0OcT nypmU/bqlCqr1stN1twBCFTbesu+I8JGPkJPiVOarLr3Q/OpzMHtUh46zl3tpQXc lFjI3S2jlzq/TnkKLmfal2L80pK5wcZUvW1jG2i9m5i55+Rf4rrfOTg65aURSvT9 xOEs9EQaclx76RyY/Q3hVbL8RqtCZSJ92LRuuOHd5eZknr+YZS6e4HcRC4Kz1vBJ 2sEKATh3RaW3zsNILnB3RDT3Kr/5MeCN -----END CERTIFICATE-----Generated at Mon Jan 26 23:26:07 2026 by rpki-client