This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft File: hA_W9-iR44BKfbMJ0EzoXBr3htE.mft (raw, json) Hash identifier: DHKzGDwtU3Y216O5A3jOjoZLW8keOYNwUVnvoGsRYp4= Subject key identifier: 55:AD:9A:4B:59:B6:94:9B:FD:9F:26:AF:B7:39:B3:7E:B2:ED:F6:2D Authority key identifier: 84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 Certificate issuer: /CN=A912C8AF/serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft Manifest number: DE Signing time: Sun 18 Jan 2026 18:53:00 +0000 Manifest this update: Sun 18 Jan 2026 18:53:00 +0000 Manifest next update: Sun 25 Jan 2026 18:53:00 +0000 Files and hashes: 1: hA_W9-iR44BKfbMJ0EzoXBr3htE.crl (hash: ixpVgrdR6O6FlYeKHitKRgaKE6lHRj3fAByUqUMbQ3I=) 2: 245F176CA81311F0A8A82B85C4F9AE02.roa (hash: ebzMyTtJaZgd5qEdDD8H3gUyuweRz4YwhdGqKlk2YpI=) 3: 7B73A414A81311F0A69E5E49C4F9AE02.roa (hash: vf/Qz1zNWab4GZKpZSQw8SUPGRrLV9FUb2vcsaGOSLY=) 4: FD4056EC7CC411F0BAFA214CC4F9AE02.roa (hash: 0lZOVOfd15vpeG++w5mAWXS/YLQjKe0BETzMm0Ic6h8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Validity Not Before: Jan 18 18:53:00 2026 GMT Not After : Jan 25 18:53:00 2026 GMT Subject: CN=696d2c0c-2a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:88:c3:0e:3a:1b:70:2b:03:8a:80:55:34:e6: cf:4a:6b:35:c4:3e:a3:32:8d:61:71:88:39:a6:db: f0:a4:bd:ba:0a:41:20:d8:6d:78:80:84:8d:6f:f6: f5:5d:22:11:eb:f8:d9:e7:42:25:19:53:42:02:ee: ca:7c:aa:0d:c4:1e:63:58:93:32:c4:be:a5:18:57: eb:19:bb:dc:85:e3:85:7b:4f:f1:d5:cd:ab:ba:2e: ff:ff:73:12:47:92:95:ce:42:4c:aa:7d:90:31:42: 53:b2:52:95:01:8d:5c:fe:23:ce:cd:d2:9a:9b:e5: e9:83:35:0b:ab:ba:06:82:f3:63:90:cd:7c:86:c4: c8:da:04:77:f1:0d:02:b5:f6:96:de:b7:c1:b8:4c: 26:42:4f:8f:d8:95:50:ab:85:a9:26:cf:34:b0:c7: de:30:81:df:80:35:47:b8:93:2c:7c:c8:f9:37:86: cb:05:9d:2d:2d:66:8e:25:36:83:97:05:62:a6:8b: dc:8b:71:f8:15:ef:da:25:06:67:49:7f:65:05:d2: 1e:7f:4d:e2:78:d5:63:ea:89:6b:89:fd:65:e1:56: a1:f9:c8:65:83:c9:2c:e5:d7:0e:d4:f5:37:31:31: 55:96:33:e3:a6:a9:9b:34:21:af:5a:ca:3d:34:6a: fb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AD:9A:4B:59:B6:94:9B:FD:9F:26:AF:B7:39:B3:7E:B2:ED:F6:2D X509v3 Authority Key Identifier: keyid:84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:51:d3:12:2b:1b:67:2a:08:af:52:46:24:8b:17:fd:f1:78: 87:d2:19:d5:d1:36:1e:43:a4:29:5f:c6:59:6b:d1:75:2b:d3: 7d:80:40:24:b0:2f:af:50:10:84:cb:da:4d:8d:19:40:9c:60: 0d:30:d3:13:55:f7:be:ed:81:8c:76:76:d6:47:4d:b2:b0:6f: 9d:2e:64:32:d7:0b:fc:27:0c:ad:ab:5a:4f:4d:27:78:c3:25: 5e:60:63:e0:a7:fd:a2:5f:c0:56:29:f9:d9:a1:9c:db:f5:c2: 5e:08:99:cc:25:91:26:2b:b1:f3:3a:31:c0:1d:3a:cb:59:fd: cb:c8:e6:32:a1:c4:c1:07:43:12:0b:97:5e:9a:c7:e1:80:0f: e7:60:9a:f6:aa:f3:05:65:c0:7a:af:ce:c8:13:c7:64:2e:66: 23:17:a9:25:90:a5:a3:c5:ee:ed:ee:1a:43:4e:28:92:76:07: 64:95:d2:24:72:20:17:0b:27:6e:cd:62:78:7b:ac:39:22:62: 50:76:57:0a:1f:17:18:d9:7a:6c:dc:31:47:98:2f:31:51:5c: 8c:68:b2:76:8d:75:5f:8a:90:19:8a:17:f1:f2:f5:f8:f9:60: 8e:75:e0:b2:40:de:44:27:6e:19:de:3e:c1:51:d8:7d:5d:55: 84:1a:ae:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDg0MEZENkY3RTg5MUUzODA0QTdEQjMwOUQwNENFODVD MUFGNzg2RDEwHhcNMjYwMTE4MTg1MzAwWhcNMjYwMTI1MTg1MzAwWjAYMRYwFAYD VQQDDA02OTZkMmMwYy0yYTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6YjDDjobcCsDioBVNObPSms1xD6jMo1hcYg5ptvwpL26CkEg2G14gISNb/b1 XSIR6/jZ50IlGVNCAu7KfKoNxB5jWJMyxL6lGFfrGbvcheOFe0/x1c2rui7//3MS R5KVzkJMqn2QMUJTslKVAY1c/iPOzdKam+XpgzULq7oGgvNjkM18hsTI2gR38Q0C tfaW3rfBuEwmQk+P2JVQq4WpJs80sMfeMIHfgDVHuJMsfMj5N4bLBZ0tLWaOJTaD lwVipovci3H4Fe/aJQZnSX9lBdIef03ieNVj6olrif1l4Vah+chlg8ks5dcO1PU3 MTFVljPjpqmbNCGvWso9NGr7RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWtmktZ tpSb/Z8mr7c5s36y7fYtMB8GA1UdIwQYMBaAFIQP1vfokeOASn2zCdBM6Fwa94bR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi8xOTdGRjdBMkI0 MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0QktmYk1KMEV6b1hCcjNo dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hBX1c5LWlSNDRCS2ZiTUowRXpvWEJyM2h0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi8xOTdGRjdBMkI0MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0 QktmYk1KMEV6b1hCcjNodEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCUdMSKxtnKgivUkYkixf98XiH0hnV0TYeQ6QpX8ZZa9F1K9N9gEAk sC+vUBCEy9pNjRlAnGANMNMTVfe+7YGMdnbWR02ysG+dLmQy1wv8Jwytq1pPTSd4 wyVeYGPgp/2iX8BWKfnZoZzb9cJeCJnMJZEmK7HzOjHAHTrLWf3LyOYyocTBB0MS C5demsfhgA/nYJr2qvMFZcB6r87IE8dkLmYjF6klkKWjxe7t7hpDTiiSdgdkldIk ciAXCyduzWJ4e6w5ImJQdlcKHxcY2Xps3DFHmC8xUVyMaLJ2jXVfipAZihfx8vX4 +WCOdeCyQN5EJ24Z3j7BUdh9XVWEGq5N -----END CERTIFICATE-----Generated at Mon Jan 19 10:40:10 2026 by rpki-client