This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: pd00F3z86+36gWqX+Gti/a6E+2yOI2GwZYk2NtbB/yk= Subject key identifier: C7:19:6F:B5:F6:EA:60:80:38:56:06:3E:FA:22:34:BC:53:38:8B:D3 Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0D2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0D0F Signing time: Mon 26 Jan 2026 17:44:42 +0000 Manifest this update: Mon 26 Jan 2026 17:44:42 +0000 Manifest next update: Mon 02 Feb 2026 17:44:42 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: bBcAWlTK0J4dJTQ0cz3jkRMrLmahEWCwBPIMQOiNA3Q=) 2: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: r+LFkrlJTgbZU79TY9/LdqDV0Dn4YAtBa1DktA8v3qs=) 3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: tjqskq9N3o/egf3xRNWQ42djlqYwKoTyXRLEqPg8Ljw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 17:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3370 (0xd2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Jan 26 17:44:42 2026 GMT Not After : Feb 2 17:44:42 2026 GMT Subject: CN=6977a80a-11dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:84:0d:40:b2:0a:01:99:1c:29:56:b6:a8:c7: d6:11:9b:6a:41:22:f9:c2:a3:f1:05:2b:d5:4e:3c: 5c:d5:ae:f1:64:3e:fe:a6:7d:b1:cf:71:4c:11:28: ee:81:02:2b:04:68:14:74:83:a6:7f:a9:23:a0:2a: a4:a7:96:c3:5a:06:d3:a4:e1:c0:af:3e:df:53:7c: 9a:ec:7e:03:b5:95:58:99:3f:f8:c4:f1:c4:d5:95: a3:05:7f:05:17:b8:b4:f4:83:79:17:e3:ea:9b:b4: 98:6b:38:6b:31:46:d4:46:75:69:ed:95:d2:1a:3c: 25:d7:13:51:a3:ad:90:02:67:54:6e:88:29:03:f2: 94:ce:d0:be:b0:e5:cc:c6:2f:c2:76:b6:05:0a:7a: ce:f6:7d:6f:0f:b0:85:cd:b1:71:35:bf:da:26:db: 59:81:67:5d:48:ae:96:1a:79:e5:52:de:85:7f:42: 4c:db:b4:b3:7b:a9:37:22:f5:bb:22:3c:49:14:49: 58:c2:03:e6:43:b7:a7:a7:70:c9:dc:3d:36:b9:b8: b6:bc:45:01:21:14:54:f5:86:c9:15:8e:88:d7:dc: a9:cd:fe:c0:47:ff:07:16:59:05:dc:ee:e7:20:a7: ea:ee:44:c5:ab:b6:ea:ef:74:f1:3a:9a:ef:11:17: 79:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:19:6F:B5:F6:EA:60:80:38:56:06:3E:FA:22:34:BC:53:38:8B:D3 X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:96:ae:f8:ec:a7:bd:57:c3:24:e4:8e:1b:87:14:c2:21:11: d1:d9:7e:06:0c:8c:3d:6f:b6:3d:e1:c4:12:d7:f8:13:6d:66: d6:98:17:fd:22:64:0c:52:ff:ba:00:22:9f:cb:10:04:a7:fc: 1a:3b:7e:1d:33:a4:5f:ca:a0:cc:13:64:73:8e:33:e9:33:59: 95:65:72:87:ae:9e:c3:9b:36:25:8f:ac:4b:84:89:78:35:4e: 48:39:56:84:a9:c3:20:fd:50:d9:76:12:59:f3:bc:70:87:9c: e7:ac:b3:5b:fd:ff:2f:7e:61:16:32:d8:c2:f1:9a:d7:62:26: 2c:aa:0f:8b:11:12:a2:34:d2:98:e5:fd:8a:e7:44:3a:8e:fc: 95:e3:9d:55:d8:e5:d1:4b:ce:6a:ac:e6:82:19:1e:85:2e:81: 27:b2:ae:bb:f8:31:de:d7:8d:ed:98:0d:b1:22:8f:10:75:49: 1f:01:19:3f:2b:58:bd:d8:50:6e:c2:e9:0c:ad:a9:3a:c4:64: 9a:91:bb:44:a9:71:7f:71:d3:3a:0a:45:93:3c:c7:6a:1a:84: ac:2b:60:c6:8f:5a:0f:9a:02:56:59:4d:98:75:6d:36:c3:ca: d5:c4:36:ca:ef:0c:37:da:62:67:8f:56:61:e3:21:f8:8e:df: 37:6d:94:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjYwMTI2MTc0NDQyWhcNMjYwMjAyMTc0NDQyWjAYMRYwFAYD VQQDDA02OTc3YTgwYS0xMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYQNQLIKAZkcKVa2qMfWEZtqQSL5wqPxBSvVTjxc1a7xZD7+pn2xz3FMESju gQIrBGgUdIOmf6kjoCqkp5bDWgbTpOHArz7fU3ya7H4DtZVYmT/4xPHE1ZWjBX8F F7i09IN5F+Pqm7SYazhrMUbURnVp7ZXSGjwl1xNRo62QAmdUbogpA/KUztC+sOXM xi/CdrYFCnrO9n1vD7CFzbFxNb/aJttZgWddSK6WGnnlUt6Ff0JM27Sze6k3IvW7 IjxJFElYwgPmQ7enp3DJ3D02ubi2vEUBIRRU9YbJFY6I19ypzf7AR/8HFlkF3O7n IKfq7kTFq7bq73TxOprvERd5sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcZb7X2 6mCAOFYGPvoiNLxTOIvTMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCelq747Ke9V8Mk5I4bhxTCIRHR2X4GDIw9b7Y94cQS1/gTbWbWmBf9 ImQMUv+6ACKfyxAEp/waO34dM6RfyqDME2RzjjPpM1mVZXKHrp7DmzYlj6xLhIl4 NU5IOVaEqcMg/VDZdhJZ87xwh5znrLNb/f8vfmEWMtjC8ZrXYiYsqg+LERKiNNKY 5f2K50Q6jvyV451V2OXRS85qrOaCGR6FLoEnsq67+DHe143tmA2xIo8QdUkfARk/ K1i92FBuwukMrak6xGSakbtEqXF/cdM6CkWTPMdqGoSsK2DGj1oPmgJWWU2YdW02 w8rVxDbK7ww32mJnj1Zh4yH4jt83bZSy -----END CERTIFICATE-----Generated at Tue Jan 27 17:51:31 2026 by rpki-client