This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft File: tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft (raw, json) Hash identifier: o8+/aNWl9N1ONpYOeojWCjZ9QO+cL2/4b5yJiM45S8s= Subject key identifier: 36:97:E5:20:82:8F:EF:0E:D8:29:5B:1D:D3:6B:A3:CD:8D:C3:98:A5 Authority key identifier: B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C Certificate issuer: /CN=A9131711/serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft Manifest number: 016D Signing time: Sat 17 Jan 2026 03:07:31 +0000 Manifest this update: Sat 17 Jan 2026 03:07:30 +0000 Manifest next update: Sat 24 Jan 2026 03:07:30 +0000 Files and hashes: 1: tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl (hash: eGDO1v7kjLGixtT6wqr0G6OXhR9DnTOeT1oO1gf+6A4=) 2: B2B006BAE3E911EEB845B268C4F9AE02.roa (hash: fj5an6uMsWFMPTZr6PrKep91XRX3rQER6UmH0deptJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 03:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131711, serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C Validity Not Before: Jan 17 03:07:30 2026 GMT Not After : Jan 24 03:07:30 2026 GMT Subject: CN=696afcf3-6600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6f:29:6d:5a:6b:69:e3:b8:84:e7:c8:e1:8f: 3b:e8:b8:4b:21:38:08:26:8a:60:f3:f6:2e:1c:8c: d2:db:2c:8f:5a:1c:28:e4:09:4c:a0:56:a3:ad:39: e0:b7:39:29:f2:e9:a2:3c:ee:64:e4:66:27:69:10: 22:57:de:b2:e6:67:03:ff:64:0e:dd:c0:e8:b4:d6: 44:50:48:1e:35:de:a0:6c:fe:ec:88:63:90:d3:e7: b2:04:b4:2c:97:66:80:14:cf:35:25:e2:e2:ac:31: 2a:e9:98:7f:f8:0e:1e:6f:dc:b3:7b:14:5d:5c:32: 00:6f:7a:91:1a:43:8f:26:09:9e:7b:00:3f:c8:45: d1:2e:fe:80:08:18:16:7a:83:10:57:2e:e3:69:a4: d8:aa:d1:ea:f6:3e:1a:44:de:e0:51:2d:c3:fa:d5: a6:3a:d7:3b:b5:d9:0b:1f:3d:43:dc:5b:69:8b:21: b0:cf:25:5d:19:aa:24:bb:ea:b8:9a:b8:c5:cf:d9: 61:20:2d:2a:82:84:df:15:9a:db:fb:26:0c:8a:2f: 7e:3d:48:b1:37:87:f2:36:a5:92:eb:4a:0a:f6:a3: 00:73:53:a1:b0:37:fe:ac:ea:d7:7a:a4:b0:0b:e4: 2c:31:d6:3e:40:6b:41:1c:8b:c7:d8:80:af:d9:61: 06:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:97:E5:20:82:8F:EF:0E:D8:29:5B:1D:D3:6B:A3:CD:8D:C3:98:A5 X509v3 Authority Key Identifier: keyid:B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:72:71:59:2a:9f:53:ae:9d:59:8b:73:0c:8f:5c:99:61:85: a6:12:65:7f:9c:96:76:ba:a0:c6:fc:c8:e9:15:27:d6:5c:e1: c8:96:3d:5d:a5:2a:60:71:db:e8:02:7b:87:1f:fe:d0:bc:19: 57:85:c5:1b:24:75:02:a7:90:5d:56:06:8c:c6:75:2f:43:e1: b2:18:81:eb:be:e6:d3:4f:b0:fa:e0:fa:a5:1b:43:bc:1f:ff: fc:22:72:ca:4e:cf:9d:b7:49:99:47:3c:43:1e:92:4b:61:31: 71:14:db:00:86:e4:3d:74:0a:e0:f0:29:4e:17:71:d2:5f:dd: 16:5b:33:1f:76:1b:13:74:3b:88:58:76:08:e2:ce:65:2d:14: df:27:3b:7b:e2:52:f0:bf:cd:20:7d:81:d3:5d:3a:86:a7:e1: b5:3c:ed:31:4d:8e:e2:d3:bd:45:d8:bc:83:b3:91:65:3d:c9: 2f:4c:ab:77:fc:fd:29:47:74:e5:39:19:c7:7f:02:b3:17:fa: dd:fb:1f:cc:5e:c5:72:b9:26:2b:f2:6b:34:d7:15:0c:19:52: 11:cf:3b:2b:ee:c8:df:fd:7d:49:d0:b0:c0:73:a2:68:e6:9e: df:2f:ea:f5:1b:e6:53:fe:7d:10:cd:51:8c:3e:ae:db:4e:04: 3a:e3:36:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3MTExMTAvBgNVBAUTKEI1N0IyMDdGMEUxQzFCQTg3M0EwNzkzNTgyQzdBODEz NDA5ODY3NEMwHhcNMjYwMTE3MDMwNzMwWhcNMjYwMTI0MDMwNzMwWjAYMRYwFAYD VQQDDA02OTZhZmNmMy02NjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyW8pbVpraeO4hOfI4Y876LhLITgIJopg8/YuHIzS2yyPWhwo5AlMoFajrTng tzkp8umiPO5k5GYnaRAiV96y5mcD/2QO3cDotNZEUEgeNd6gbP7siGOQ0+eyBLQs l2aAFM81JeLirDEq6Zh/+A4eb9yzexRdXDIAb3qRGkOPJgmeewA/yEXRLv6ACBgW eoMQVy7jaaTYqtHq9j4aRN7gUS3D+tWmOtc7tdkLHz1D3FtpiyGwzyVdGaoku+q4 mrjFz9lhIC0qgoTfFZrb+yYMii9+PUixN4fyNqWS60oK9qMAc1OhsDf+rOrXeqSw C+QsMdY+QGtBHIvH2ICv2WEGFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaX5SCC j+8O2ClbHdNro82Nw5ilMB8GA1UdIwQYMBaAFLV7IH8OHBuoc6B5NYLHqBNAmGdM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTcxMS85RkREMkRBMEM5 OTExMUVFODkxQkE0MTlDNEY5QUUwMi90WHNnZnc0Y0c2aHpvSGsxZ3Nlb0UwQ1la MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RYc2dmdzRjRzZoem9IazFnc2VvRTBDWVowdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTcxMS85RkREMkRBMEM5OTExMUVFODkxQkE0MTlDNEY5QUUwMi90WHNnZnc0Y0c2 aHpvSGsxZ3Nlb0UwQ1laMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1cnFZKp9Trp1Zi3MMj1yZYYWmEmV/nJZ2uqDG/MjpFSfWXOHIlj1d pSpgcdvoAnuHH/7QvBlXhcUbJHUCp5BdVgaMxnUvQ+GyGIHrvubTT7D64PqlG0O8 H//8InLKTs+dt0mZRzxDHpJLYTFxFNsAhuQ9dArg8ClOF3HSX90WWzMfdhsTdDuI WHYI4s5lLRTfJzt74lLwv80gfYHTXTqGp+G1PO0xTY7i071F2LyDs5FlPckvTKt3 /P0pR3TlORnHfwKzF/rd+x/MXsVyuSYr8ms01xUMGVIRzzsr7sjf/X1J0LDAc6Jo 5p7fL+r1G+ZT/n0QzVGMPq7bTgQ64zba -----END CERTIFICATE-----Generated at Sun Jan 18 03:17:15 2026 by rpki-client