This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: It2dBIPnNcnNXFRKEshDB7Z5aFYCUBiyd8kzPpGHYYI= Subject key identifier: 9F:1A:B8:2A:0A:1A:6F:C9:D8:E6:EB:B4:55:EC:35:1B:39:69:DB:9D Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 0673 Signing time: Tue 20 Jan 2026 21:50:41 +0000 Manifest this update: Tue 20 Jan 2026 21:50:40 +0000 Manifest next update: Tue 27 Jan 2026 21:50:40 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: zNRtNVO8lP6EGGZAhaDoYV2+wXA5tNSOV9S24WyUPNQ=) 2: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: +Kdj0gKuBf0PY5h283LzyQmY9m+afZnjRv+cn+9Qh6s=) 3: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: NFCDhwk26+PLfvWvLWF4LR17BmkncUJCTi9+94vSI6k=) 4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: bx+K75Qji7U/L3EOHI9zaUJ5yAV9kmoLl7pZd625FIc=) 5: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: knpLwXQdC9MTp1jnTgeGf5Z4M6oM8mDDcMnK1p/I7B0=) 6: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: WmyJmw5Mihv9A2JQO2xOhy7URLFfnvxzxKThl7eGoxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 21:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Jan 20 21:50:40 2026 GMT Not After : Jan 27 21:50:40 2026 GMT Subject: CN=696ff8b1-57bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1c:cb:fc:1c:25:96:6f:52:bb:18:d0:23:fe: b4:a2:36:92:37:b0:e0:91:e3:e6:c3:4c:29:1c:3b: 30:55:96:1a:7f:2f:f7:3d:d5:4d:92:22:79:a4:a2: 56:4e:c9:36:7a:8f:c4:ff:2e:f6:db:4d:3d:63:d6: 18:64:91:ba:ff:42:f3:dd:57:6a:83:40:ac:8d:85: d6:fd:c4:7c:b2:11:8b:5a:22:75:4f:18:e5:c5:c7: e6:1e:5d:44:64:8a:bc:43:74:54:79:9b:f0:cf:8b: af:cd:a0:9a:56:74:06:6d:4f:d1:48:54:1c:f7:f2: 82:60:69:7e:2c:10:a4:f9:dd:8d:e0:70:7d:1b:62: 86:da:15:cd:23:9e:cf:79:4a:68:8a:b0:10:c7:a6: cb:d7:c0:62:a8:f5:04:5e:d0:35:bd:08:12:fe:2f: 5a:04:db:1a:bd:9f:c9:22:cd:3f:c6:63:61:68:7d: 0a:c9:ee:f6:5c:4c:00:6a:8b:5d:3b:5d:0d:44:3d: b1:aa:4e:9f:50:99:c1:5d:a9:7c:11:ee:01:21:42: 6f:92:3b:3a:fb:0b:7b:97:6d:e2:65:5d:1a:e9:cb: 36:60:af:de:11:1f:96:51:e5:f0:c0:e9:db:66:c4: a2:ae:50:35:17:c1:87:3a:e5:89:72:20:b9:f1:ca: e5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1A:B8:2A:0A:1A:6F:C9:D8:E6:EB:B4:55:EC:35:1B:39:69:DB:9D X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:8e:f4:79:ee:40:9c:28:cc:5e:bf:e2:16:cd:77:db:4e:f3: 32:17:76:91:6f:c5:6a:61:1d:93:d1:df:13:91:48:0e:f1:4d: 00:99:1a:4e:cf:16:6e:b8:a3:49:61:34:d6:81:62:78:2a:e1: 06:89:fd:a8:51:ed:ff:1f:7e:ec:d3:9a:22:cd:ae:63:f8:40: e6:62:32:05:fa:81:9a:b2:0b:3e:40:10:2a:d8:92:ed:20:42: d7:12:90:64:c3:b0:9b:50:2b:5f:30:8b:5f:17:28:4f:24:2b: b7:b7:f6:ff:99:9c:dc:25:55:fe:37:fe:96:13:13:9a:1c:e0: 68:5a:d5:04:62:4b:c0:42:2f:2b:87:c1:8a:e9:21:9c:7c:fb: da:38:c6:08:7b:fc:1d:a0:02:51:6e:aa:18:60:ed:ea:2b:98: c8:cf:db:40:bf:60:34:3d:bc:91:0d:fb:04:1b:b7:8c:6f:0d: 33:95:95:eb:de:3c:a0:6a:f2:4b:8e:cc:12:55:f1:f5:c0:fd: 85:a8:3c:7a:d0:7a:9c:db:fd:dd:d5:54:29:0a:21:98:fe:35: 38:74:7b:9a:0a:ef:09:2e:65:1b:6f:ee:4d:e0:c7:17:cb:15: d8:71:83:51:33:62:4f:f1:b1:78:aa:59:7b:3b:ca:94:21:04: 1f:8e:ad:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjYwMTIwMjE1MDQwWhcNMjYwMTI3MjE1MDQwWjAYMRYwFAYD VQQDDA02OTZmZjhiMS01N2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhzL/Bwllm9SuxjQI/60ojaSN7DgkePmw0wpHDswVZYafy/3PdVNkiJ5pKJW Tsk2eo/E/y722009Y9YYZJG6/0Lz3Vdqg0CsjYXW/cR8shGLWiJ1TxjlxcfmHl1E ZIq8Q3RUeZvwz4uvzaCaVnQGbU/RSFQc9/KCYGl+LBCk+d2N4HB9G2KG2hXNI57P eUpoirAQx6bL18BiqPUEXtA1vQgS/i9aBNsavZ/JIs0/xmNhaH0Kye72XEwAaotd O10NRD2xqk6fUJnBXal8Ee4BIUJvkjs6+wt7l23iZV0a6cs2YK/eER+WUeXwwOnb ZsSirlA1F8GHOuWJciC58crluQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8auCoK Gm/J2ObrtFXsNRs5adudMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYjvR57kCcKMxev+IWzXfbTvMyF3aRb8VqYR2T0d8TkUgO8U0AmRpO zxZuuKNJYTTWgWJ4KuEGif2oUe3/H37s05oiza5j+EDmYjIF+oGasgs+QBAq2JLt IELXEpBkw7CbUCtfMItfFyhPJCu3t/b/mZzcJVX+N/6WExOaHOBoWtUEYkvAQi8r h8GK6SGcfPvaOMYIe/wdoAJRbqoYYO3qK5jIz9tAv2A0PbyRDfsEG7eMbw0zlZXr 3jygavJLjswSVfH1wP2FqDx60Hqc2/3d1VQpCiGY/jU4dHuaCu8JLmUbb+5N4McX yxXYcYNRM2JP8bF4qll7O8qUIQQfjq33 -----END CERTIFICATE-----Generated at Thu Jan 22 17:22:16 2026 by rpki-client