This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: 7c4SV0tPDmt/dHCcsEzOQ09ImvX2MiezytEApcl/8ho= Subject key identifier: 95:B7:B4:16:88:D7:EA:71:E6:B8:01:C3:73:AE:51:55:04:CE:20:4D Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 0691 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 066E Signing time: Sat 10 Jan 2026 21:51:06 +0000 Manifest this update: Sat 10 Jan 2026 21:51:06 +0000 Manifest next update: Sat 17 Jan 2026 21:51:06 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: H7rFo3amSmtIRzbnQvbTh2Hg8lNl7hJPi7VStY6O+g0=) 2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: WmyJmw5Mihv9A2JQO2xOhy7URLFfnvxzxKThl7eGoxs=) 3: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: NFCDhwk26+PLfvWvLWF4LR17BmkncUJCTi9+94vSI6k=) 4: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: knpLwXQdC9MTp1jnTgeGf5Z4M6oM8mDDcMnK1p/I7B0=) 5: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: bx+K75Qji7U/L3EOHI9zaUJ5yAV9kmoLl7pZd625FIc=) 6: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: +Kdj0gKuBf0PY5h283LzyQmY9m+afZnjRv+cn+9Qh6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 21:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1681 (0x691) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Jan 10 21:51:06 2026 GMT Not After : Jan 17 21:51:06 2026 GMT Subject: CN=6962c9ca-d642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:b8:2d:79:9b:40:36:e2:d0:9e:18:a2:ce: cf:4f:3d:fd:a6:08:bf:9b:a0:ee:36:68:c4:18:a7: 06:50:32:e4:e9:34:d8:e7:f4:23:d2:a8:f2:11:cb: 4a:35:e0:19:9e:42:96:79:9b:98:3c:67:8e:08:7c: 95:57:da:04:1f:82:c9:bd:9f:50:7a:db:df:97:1e: e1:98:e2:75:6a:b5:96:36:71:07:0e:4d:5c:44:a2: 52:bf:1c:3b:c2:90:13:91:73:a0:d7:de:fc:89:13: c6:5e:cd:d0:a8:ea:6b:21:cb:f4:4b:39:d3:f3:dc: d1:f0:8c:74:b4:84:94:c7:fc:f0:0c:ac:e4:16:ef: 2d:5d:2c:bb:12:21:c3:bf:75:e0:89:8e:3f:72:7c: cd:88:9c:9b:11:24:64:8a:03:4b:f2:8c:25:b1:5f: 7f:4c:f4:62:1d:c7:b7:eb:31:36:00:c6:dc:01:d0: dd:6c:3f:0a:3a:c9:cc:c6:d2:9c:21:80:7d:08:52: 41:92:ef:5c:06:84:88:f6:84:d5:d0:4b:9c:24:36: ad:da:23:1a:0b:3c:77:f8:e5:c4:68:ba:89:f5:14: c9:af:71:09:52:99:69:ba:84:b3:e8:bb:9f:3d:8c: 9d:c7:8e:f9:3c:14:09:64:9e:98:cd:3d:eb:9b:37: 4a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B7:B4:16:88:D7:EA:71:E6:B8:01:C3:73:AE:51:55:04:CE:20:4D X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:cd:89:75:60:70:4d:6d:df:e2:35:90:5e:03:a4:93:26:59: 78:6a:3b:ed:57:23:32:fc:30:f0:84:fc:75:4b:34:32:f5:ae: 91:04:dd:c9:95:5a:b0:4f:23:61:8a:8e:4f:6d:6f:f9:79:b9: 6d:ab:4e:87:af:e0:ac:e0:81:3f:9c:08:52:69:85:6a:b8:c6: 0b:e3:19:a3:be:c4:0d:7d:f6:90:2a:b4:0c:75:f7:d5:93:a0: 9b:4d:8d:97:39:9a:d3:e6:65:a4:c4:0b:76:c3:e8:10:a7:40: 6e:8a:81:41:e3:22:13:81:52:7e:a3:fa:b6:3e:8d:b4:a1:b2: 69:1c:71:20:fe:77:55:e2:9b:5b:34:cf:32:c4:83:c3:77:33: 22:07:bd:ee:83:b3:a8:34:95:97:c9:e1:bf:d6:cf:2d:c7:9d: 1b:1d:13:47:6c:d9:15:86:56:e0:bb:81:4b:95:e0:84:33:fd: 94:f8:34:b7:95:dc:bb:d4:68:af:1f:d8:24:fd:cc:89:ae:95: 6a:5c:62:1b:52:bd:14:c3:62:97:0a:72:10:71:e0:d4:f6:00: 6c:97:d2:e5:0b:8e:fa:07:18:61:5d:ef:34:ee:c2:8f:54:e3: 61:d4:31:a1:46:ca:48:f0:23:18:87:b0:6b:b0:78:78:96:46: 7c:99:7d:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjYwMTEwMjE1MTA2WhcNMjYwMTE3MjE1MTA2WjAYMRYwFAYD VQQDDA02OTYyYzljYS1kNjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/e4LXmbQDbi0J4Yos7PTz39pgi/m6DuNmjEGKcGUDLk6TTY5/Qj0qjyEctK NeAZnkKWeZuYPGeOCHyVV9oEH4LJvZ9Qetvflx7hmOJ1arWWNnEHDk1cRKJSvxw7 wpATkXOg1978iRPGXs3QqOprIcv0SznT89zR8Ix0tISUx/zwDKzkFu8tXSy7EiHD v3XgiY4/cnzNiJybESRkigNL8owlsV9/TPRiHce36zE2AMbcAdDdbD8KOsnMxtKc IYB9CFJBku9cBoSI9oTV0EucJDat2iMaCzx3+OXEaLqJ9RTJr3EJUplpuoSz6Luf PYydx475PBQJZJ6YzT3rmzdKQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJW3tBaI 1+px5rgBw3OuUVUEziBNMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/zYl1YHBNbd/iNZBeA6STJll4ajvtVyMy/DDwhPx1SzQy9a6RBN3J lVqwTyNhio5PbW/5ebltq06Hr+Cs4IE/nAhSaYVquMYL4xmjvsQNffaQKrQMdffV k6CbTY2XOZrT5mWkxAt2w+gQp0BuioFB4yITgVJ+o/q2Po20obJpHHEg/ndV4ptb NM8yxIPDdzMiB73ug7OoNJWXyeG/1s8tx50bHRNHbNkVhlbgu4FLleCEM/2U+DS3 ldy71GivH9gk/cyJrpVqXGIbUr0Uw2KXCnIQceDU9gBsl9LlC476BxhhXe807sKP VONh1DGhRspI8CMYh7BrsHh4lkZ8mX14 -----END CERTIFICATE-----Generated at Sun Jan 11 07:49:27 2026 by rpki-client