This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json) Hash identifier: J5+7rlwhoetjQQGt7WQ3bGuG8ySNJCFNvvcvf9dAlig= Subject key identifier: 10:FF:FD:3D:BD:A6:07:AB:F6:AC:38:0E:B9:30:21:0F:04:6F:5F:D6 Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Certificate serial: 10D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft Manifest number: 10CA Signing time: Fri 16 Jan 2026 17:02:02 +0000 Manifest this update: Fri 16 Jan 2026 17:02:01 +0000 Manifest next update: Fri 23 Jan 2026 17:02:01 +0000 Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: pZKoPv8kH8qSUe6VE8aeY8iQwZzDKgHH0xhrm62fBgM=) 2: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: 8EmwRqTTi0D6Jqb1QQoQFecB/Y41qpXK3rVqh44z4W0=) 3: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (hash: 7SbyZl6WzchDvPbf0/nq4tvYfqbtpgq7UAgLfrYKHTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 17:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4304 (0x10d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Validity Not Before: Jan 16 17:02:01 2026 GMT Not After : Jan 23 17:02:01 2026 GMT Subject: CN=696a6f0a-ccd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:09:87:1c:2b:55:68:2e:6e:a8:cc:83:e4:f3: b3:63:4d:98:f6:d5:79:56:b1:44:e1:37:01:0d:8d: 8e:c8:2e:3d:2f:de:f1:05:97:64:6b:56:f5:77:4a: 87:5c:59:ea:36:94:d0:dd:3f:8f:80:38:4a:d4:fb: 5b:3f:ca:65:02:c7:ce:2d:f2:ac:5a:f8:2c:5f:4e: 84:13:e0:76:10:ef:05:85:53:04:1e:f6:b1:5d:4e: 62:4e:a9:2b:01:c9:f4:20:8a:b1:a6:f7:03:fb:31: 7d:e9:0c:24:52:34:53:8e:8b:5e:ff:00:3f:72:66: ec:d6:35:c2:bc:62:32:8f:42:c7:c9:d0:18:b6:ba: 0e:ce:50:c0:47:76:d8:8b:62:98:f2:da:8d:72:f4: f3:76:af:68:30:0e:cd:94:72:b6:e1:8e:c1:90:56: 39:f7:29:40:16:54:08:37:bc:ef:62:79:bc:82:e3: 4e:30:46:e2:49:4c:7e:71:33:13:3a:7e:d2:e4:d5: d7:c6:0e:8f:19:dd:96:cd:f2:e9:d6:3f:a3:9f:8e: e9:9f:e5:ec:5c:74:b9:4e:d1:8c:43:c6:da:9b:f1: 1e:4a:96:07:78:8f:c6:44:f6:0f:62:3d:72:63:c3: d9:54:43:68:b2:76:0f:66:f6:ed:08:98:7d:0b:cc: 47:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FF:FD:3D:BD:A6:07:AB:F6:AC:38:0E:B9:30:21:0F:04:6F:5F:D6 X509v3 Authority Key Identifier: keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:55:26:cf:1f:06:25:ba:67:af:c0:a6:52:de:f6:a4:f7:98: 76:56:b6:8e:f4:59:89:b7:4f:c4:df:f5:19:b5:28:81:91:74: 8b:91:48:e0:d9:ad:9b:48:8f:b5:41:ed:33:33:c7:99:0f:ea: ab:6f:ba:40:df:b2:1d:4f:d5:f9:37:00:21:9d:a8:28:de:2f: ff:8c:2a:bb:3b:99:1a:80:0c:4c:16:8d:2f:5f:d1:c7:86:a0: 67:70:60:5d:63:b2:f3:b6:e3:e2:b3:f9:ca:37:15:a2:ee:15: 3d:c6:4d:b7:ce:bd:f4:8b:99:c6:6b:75:48:30:1a:59:00:73: 74:17:1d:61:81:64:5c:10:72:d2:98:ea:5a:74:d9:1e:9d:6c: 79:38:d2:4a:ce:02:e3:3d:a8:65:67:41:ea:1d:6a:c8:3f:5f: e0:a1:7d:22:c2:ec:30:a4:28:24:16:9e:b6:d4:c2:b4:d8:b9: e6:5c:a6:e9:d9:ab:2a:bb:7f:79:99:85:d8:1e:67:12:27:84: ed:14:7e:86:d3:01:4e:23:e3:a5:1f:f8:06:05:37:10:39:30: d3:2c:cd:00:c3:05:bf:bb:a5:49:69:19:6f:74:86:08:d7:e9: 38:8e:ea:9c:ab:65:fc:f8:b9:cc:55:fd:ed:31:88:32:8f:84: 77:9e:03:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4 ODNCQjkxNDUwHhcNMjYwMTE2MTcwMjAxWhcNMjYwMTIzMTcwMjAxWjAYMRYwFAYD VQQDDA02OTZhNmYwYS1jY2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwmHHCtVaC5uqMyD5POzY02Y9tV5VrFE4TcBDY2OyC49L97xBZdka1b1d0qH XFnqNpTQ3T+PgDhK1PtbP8plAsfOLfKsWvgsX06EE+B2EO8FhVMEHvaxXU5iTqkr Acn0IIqxpvcD+zF96QwkUjRTjote/wA/cmbs1jXCvGIyj0LHydAYtroOzlDAR3bY i2KY8tqNcvTzdq9oMA7NlHK24Y7BkFY59ylAFlQIN7zvYnm8guNOMEbiSUx+cTMT On7S5NXXxg6PGd2WzfLp1j+jn47pn+XsXHS5TtGMQ8bam/EeSpYHeI/GRPYPYj1y Y8PZVENosnYPZvbtCJh9C8xHnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBD//T29 pger9qw4DrkwIQ8Eb1/WMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl TmxXNWwwTGZzNTZJTzdrVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVVSbPHwYlumevwKZS3vak95h2VraO9FmJt0/E3/UZtSiBkXSLkUjg 2a2bSI+1Qe0zM8eZD+qrb7pA37IdT9X5NwAhnago3i//jCq7O5kagAxMFo0vX9HH hqBncGBdY7LztuPis/nKNxWi7hU9xk23zr30i5nGa3VIMBpZAHN0Fx1hgWRcEHLS mOpadNkenWx5ONJKzgLjPahlZ0HqHWrIP1/goX0iwuwwpCgkFp621MK02LnmXKbp 2asqu395mYXYHmcSJ4TtFH6G0wFOI+OlH/gGBTcQOTDTLM0AwwW/u6VJaRlvdIYI 1+k4juqcq2X8+LnMVf3tMYgyj4R3ngPu -----END CERTIFICATE-----Generated at Sun Jan 18 03:16:30 2026 by rpki-client