This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json) Hash identifier: ZuAb5OKMpbLwclMd03+KdYGZF8YK/76kPetDIEKRAZI= Subject key identifier: E3:75:BF:CA:8F:DE:A2:87:13:51:D2:DA:C8:EA:21:52:76:80:4E:76 Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft Manifest number: 0243 Signing time: Wed 21 Jan 2026 01:26:00 +0000 Manifest this update: Wed 21 Jan 2026 01:25:59 +0000 Manifest next update: Wed 28 Jan 2026 01:25:59 +0000 Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: W3/S9kY35UNZk7cmCOsTm5qwySfLWTQ836v0P8iB82M=) 2: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: YAG2MNWzPx3qv2gqkqHL4HomQQn9WRVJ3LMr6N4DzO8=) 3: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: p5sOlQdOsm0uuNV7G6DKNuM9BbnStZ2ZIjZVpc+0Hyo=) 4: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: vc7xFL7n/2DvUqwMvBAa7Bpo4jcv0S1d4kEos5vCVco=) 5: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: VkPzYi2ZNs0vU05onLKrq1O6hJdtK/SNgO3aXYDbRas=) 6: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: OIJRm8GaBU5y1XIhl90QydPQzIYTf07qs+pUpIzxFiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Validity Not Before: Jan 21 01:25:59 2026 GMT Not After : Jan 28 01:25:59 2026 GMT Subject: CN=69702b28-9d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ea:62:a2:5f:37:e6:fb:f4:3c:14:2c:1d:82: 5f:ba:b3:18:e5:1d:ad:68:fc:fa:49:1e:cf:9f:46: 4f:cd:0a:49:30:fa:74:37:2c:5d:1a:69:2b:7b:0b: 18:cb:1e:4f:f7:dc:ed:71:56:2a:99:2a:9c:03:a9: 69:67:32:38:fe:f1:04:a7:0d:7f:26:da:82:b0:91: 12:be:ac:f7:42:37:16:5e:24:18:52:c4:76:b7:5c: 55:15:6e:f8:45:4a:3d:53:6c:8e:35:a9:0b:55:a8: 63:7c:83:3d:09:fa:d4:ce:12:9a:8b:ca:e7:60:56: d5:11:99:8d:df:8d:74:ba:70:9a:5e:54:8e:fc:b3: 1a:cd:e8:48:6e:34:6a:22:f4:5a:2d:2a:59:db:e7: 30:9c:e6:ca:7d:39:c4:08:dc:81:4d:ea:04:14:7d: 61:87:54:d8:03:9a:14:10:2c:8d:12:f5:72:9d:fa: 19:b6:26:87:39:7b:24:03:ed:8f:94:f5:23:78:06: 23:6b:e2:93:99:15:c0:c8:00:77:92:75:d7:6d:44: a4:5b:8c:b5:87:30:d7:ca:04:93:f0:db:b2:f2:07: a1:2f:cb:dd:c8:5b:99:7b:d1:ae:18:62:b4:cc:4e: de:ba:44:4f:b3:24:30:cc:60:43:b8:66:47:e5:c6: b5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:75:BF:CA:8F:DE:A2:87:13:51:D2:DA:C8:EA:21:52:76:80:4E:76 X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:a7:9f:ca:6d:f1:a7:c0:1d:a4:f6:0d:93:80:5e:3e:d8:e2: 8c:54:86:9e:95:05:9e:ce:3d:40:43:d8:c1:3b:79:42:3a:19: ce:44:42:12:e7:b1:69:04:a2:ec:80:18:96:fc:da:07:a3:b7: d7:95:b2:c7:9e:13:24:44:23:de:ce:1b:c5:72:37:12:56:eb: cc:66:56:18:21:28:0e:51:19:d5:e8:73:65:b9:33:f1:b2:c1: d1:56:4e:4d:fe:28:9b:e6:ee:c2:dc:0d:16:f7:fc:dc:91:6e: 11:2a:39:43:a3:2d:0b:5c:a8:f3:ba:3b:00:79:b0:d9:fd:d5: 20:e0:c1:00:8a:fd:eb:df:54:88:f6:c2:5c:bf:b0:a5:e7:cc: 01:a5:e7:ef:a7:b5:31:db:ab:cd:2e:90:6f:67:ec:21:47:6d: 7e:a1:ed:48:60:17:3f:3c:b8:90:65:9f:aa:bd:35:84:2d:bd: 08:f7:f7:54:5e:86:2a:31:58:09:c2:bd:dc:f8:70:cf:89:e1: a8:a1:19:ca:68:a2:03:18:7b:a2:fb:9a:68:e9:fb:b3:70:e1: 56:03:09:b1:43:f7:a3:cb:2e:01:29:84:f9:aa:d9:e7:7c:50: 63:22:2f:49:39:9a:e1:ef:d1:05:6a:6d:9c:c4:7e:94:6a:5d: dd:e6:0e:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjYwMTIxMDEyNTU5WhcNMjYwMTI4MDEyNTU5WjAYMRYwFAYD VQQDDA02OTcwMmIyOC05ZDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5epiol835vv0PBQsHYJfurMY5R2taPz6SR7Pn0ZPzQpJMPp0NyxdGmkrewsY yx5P99ztcVYqmSqcA6lpZzI4/vEEpw1/JtqCsJESvqz3QjcWXiQYUsR2t1xVFW74 RUo9U2yONakLVahjfIM9CfrUzhKai8rnYFbVEZmN3410unCaXlSO/LMazehIbjRq IvRaLSpZ2+cwnObKfTnECNyBTeoEFH1hh1TYA5oUECyNEvVynfoZtiaHOXskA+2P lPUjeAYja+KTmRXAyAB3knXXbUSkW4y1hzDXygST8Nuy8gehL8vdyFuZe9GuGGK0 zE7eukRPsyQwzGBDuGZH5ca1kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFON1v8qP 3qKHE1HS2sjqIVJ2gE52MB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzlo WlFOaWxENXRfdmxSdVhkX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJp5/KbfGnwB2k9g2TgF4+2OKMVIaelQWezj1AQ9jBO3lCOhnOREIS 57FpBKLsgBiW/NoHo7fXlbLHnhMkRCPezhvFcjcSVuvMZlYYISgOURnV6HNluTPx ssHRVk5N/iib5u7C3A0W9/zckW4RKjlDoy0LXKjzujsAebDZ/dUg4MEAiv3r31SI 9sJcv7Cl58wBpefvp7Ux26vNLpBvZ+whR21+oe1IYBc/PLiQZZ+qvTWELb0I9/dU XoYqMVgJwr3c+HDPieGooRnKaKIDGHui+5po6fuzcOFWAwmxQ/ejyy4BKYT5qtnn fFBjIi9JOZrh79EFam2cxH6Ual3d5g4f -----END CERTIFICATE-----Generated at Thu Jan 22 23:06:04 2026 by rpki-client