This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json) Hash identifier: 9eDWXMFF0TAFswoW2yTRWkXjRFdKpJtCrUzNaPSrzBI= Subject key identifier: 67:8C:AA:B9:18:9A:A3:9A:5E:E2:30:71:D9:77:03:EF:5D:D0:21:FA Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Certificate serial: 0412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft Manifest number: 040C Signing time: Tue 20 Jan 2026 23:36:29 +0000 Manifest this update: Tue 20 Jan 2026 23:36:29 +0000 Manifest next update: Tue 27 Jan 2026 23:36:29 +0000 Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: p4PerCIoIjPqIaeoMl2d2249BTV99PhLxPD9HRxvqzE=) 2: 2100DB4AE24811F0BB8D45AB726F56BC.roa (hash: zcFuvKA0smcEUUwdDCYB9xqLVXu6tsup5XFVLBOc5rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1042 (0x412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912654A, serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Validity Not Before: Jan 20 23:36:29 2026 GMT Not After : Jan 27 23:36:29 2026 GMT Subject: CN=6970117d-8a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b4:c6:ac:17:74:50:a2:1c:d7:47:2a:54:9e: 32:8d:68:bb:9d:c5:75:00:6c:b4:dd:d8:2b:ac:b6: 00:90:67:37:0b:b0:c7:5f:ae:ec:8e:84:cd:32:fb: ec:68:3f:10:d4:b8:7a:23:72:73:50:26:55:c0:78: 13:6e:3f:e0:52:b3:3b:2f:55:57:17:44:c5:c7:62: c1:9b:25:58:4d:31:89:8d:bd:bf:70:20:bb:34:2d: 15:2d:ad:1d:89:bc:e5:7f:e8:20:96:fd:b1:90:36: 94:ea:7b:c5:36:72:91:58:f2:10:14:2a:fe:40:ab: 58:e2:0c:b2:bc:1b:12:04:44:e4:8b:81:26:93:56: 14:6a:90:70:2d:5d:20:45:ea:db:19:91:b8:dc:7c: d2:7e:44:d8:1f:d9:0d:0f:2c:02:04:7e:74:29:a7: 61:05:5c:89:cf:83:54:15:6e:f4:30:5d:2e:83:96: 20:f1:2f:11:43:e8:e2:3d:96:94:6b:09:e4:95:2f: c5:41:51:75:b0:99:b7:b2:da:39:b4:76:98:b2:ca: 5f:e2:3c:44:61:40:de:6c:a9:f2:1d:5e:52:72:52: 6b:47:ff:cd:a3:00:2b:d0:7e:43:b0:c5:d6:71:42: 40:45:8c:fb:6f:8f:18:97:18:4b:3a:9d:8d:98:7c: 71:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8C:AA:B9:18:9A:A3:9A:5E:E2:30:71:D9:77:03:EF:5D:D0:21:FA X509v3 Authority Key Identifier: keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:0a:4a:6c:ec:d1:c7:57:a1:db:f1:fc:2f:a7:68:1d:b5:e6: 7d:62:52:ae:70:0e:d2:51:fc:ad:5f:d2:18:b4:d1:5d:02:11: 9e:9a:ea:d4:2f:55:fc:27:ba:b9:89:31:6d:3d:96:ee:42:a0: 81:4a:53:8f:19:91:b1:04:98:cc:7b:b3:9d:70:4c:70:e5:e9: a0:b8:4a:ad:93:c5:28:78:d5:da:f3:87:d1:8b:21:a6:df:08: 42:38:55:51:f4:8e:1a:4a:ff:20:47:b5:84:4d:5d:5b:a9:06: ad:94:b4:27:0f:45:14:07:ac:b6:5d:0b:a8:f3:28:83:d9:87: 26:6f:b9:9f:10:88:77:6b:a5:1e:75:79:cf:a8:c5:cf:7d:8c: ed:6d:62:c2:b3:21:11:67:6b:f7:07:d7:71:a5:17:fb:7b:6d: b0:16:c6:fe:03:d2:00:00:02:02:ca:51:f4:ac:f4:dc:34:e2: 18:cc:0c:b7:8a:41:12:ce:0b:a1:0d:d4:eb:c5:35:4c:c6:e9: 55:e6:f9:80:99:ef:d6:b0:4a:fd:f2:a3:93:ac:ff:9a:ee:8a: 3c:0c:95:d7:35:f2:33:bd:70:d2:af:5b:77:d1:29:db:8e:8a: 4d:29:fa:f5:cf:5b:d3:c4:0a:0d:d5:d4:94:b0:53:c5:5c:e5: 98:7a:db:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY1NEExMTAvBgNVBAUTKDk4MTQ1MTc3Q0FDMkY1QkVFNUQyNzY3NDVDRUQ5ODk4 NDA1M0VEQTcwHhcNMjYwMTIwMjMzNjI5WhcNMjYwMTI3MjMzNjI5WjAYMRYwFAYD VQQDDA02OTcwMTE3ZC04YTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bTGrBd0UKIc10cqVJ4yjWi7ncV1AGy03dgrrLYAkGc3C7DHX67sjoTNMvvs aD8Q1Lh6I3JzUCZVwHgTbj/gUrM7L1VXF0TFx2LBmyVYTTGJjb2/cCC7NC0VLa0d ibzlf+gglv2xkDaU6nvFNnKRWPIQFCr+QKtY4gyyvBsSBETki4Emk1YUapBwLV0g RerbGZG43HzSfkTYH9kNDywCBH50KadhBVyJz4NUFW70MF0ug5Yg8S8RQ+jiPZaU awnklS/FQVF1sJm3sto5tHaYsspf4jxEYUDebKnyHV5SclJrR//NowAr0H5DsMXW cUJARYz7b48YlxhLOp2NmHxxAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeMqrkY mqOaXuIwcdl3A+9d0CH6MB8GA1UdIwQYMBaAFJgUUXfKwvW+5dJ2dFztmJhAU+2n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjU0QS9GRkI0NDM3ODlG MEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzliN2wwblowWE8yWW1FQlQ3 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CUlJkOHJDOWI3bDBuWjBYTzJZbUVCVDdhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjU0QS9GRkI0NDM3ODlGMEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzli N2wwblowWE8yWW1FQlQ3YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxCkps7NHHV6Hb8fwvp2gdteZ9YlKucA7SUfytX9IYtNFdAhGemurU L1X8J7q5iTFtPZbuQqCBSlOPGZGxBJjMe7OdcExw5emguEqtk8UoeNXa84fRiyGm 3whCOFVR9I4aSv8gR7WETV1bqQatlLQnD0UUB6y2XQuo8yiD2Ycmb7mfEIh3a6Ue dXnPqMXPfYztbWLCsyERZ2v3B9dxpRf7e22wFsb+A9IAAAICylH0rPTcNOIYzAy3 ikESzguhDdTrxTVMxulV5vmAme/WsEr98qOTrP+a7oo8DJXXNfIzvXDSr1t30Snb jopNKfr1z1vTxAoN1dSUsFPFXOWYetvq -----END CERTIFICATE-----Generated at Thu Jan 22 13:46:16 2026 by rpki-client