This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft File: tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json) Hash identifier: anoH03D0GrehVvwOq9ee1YqjvJRoUuLaT6yjdhxhTV0= Subject key identifier: 28:0B:23:02:E8:95:65:73:75:81:31:09:16:78:5C:C7:5E:2D:0C:A8 Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Certificate serial: 043F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft Manifest number: 042B Signing time: Tue 20 Jan 2026 23:30:55 +0000 Manifest this update: Tue 20 Jan 2026 23:30:54 +0000 Manifest next update: Tue 27 Jan 2026 23:30:54 +0000 Files and hashes: 1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: skIUfvVqoqQggT6WP05MLi2lp8UN4ZFKGcZIuHh+nR0=) 2: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: XGuuKVGIEltroOkaLIfkXvo4+Qd8e1UxzERGE1Xa7EM=) 3: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: TEe1vP6DRB8YT8k0USYkc2bmS+7dNHehlpCLdcwXNpM=) 4: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: nBxVvzmtBqkJjIM89kDyeNDRTPleOjC1xfsXd7rUY30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Validity Not Before: Jan 20 23:30:54 2026 GMT Not After : Jan 27 23:30:54 2026 GMT Subject: CN=6970102f-c156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:95:fa:85:c0:fb:c9:1a:c8:b3:d5:a8:4e:fe: be:24:58:37:10:9e:7f:30:f3:ec:4a:d3:33:28:fc: 3c:7e:9d:57:1a:c1:a4:44:a5:0a:c5:5e:fc:38:03: 80:a2:14:b7:80:bd:09:5f:9e:4b:47:24:d4:7f:6b: bd:9c:c3:ca:0a:b6:96:cf:9f:21:98:5d:e7:0f:76: e3:5c:5b:ed:e2:72:fe:e1:32:45:8d:92:d8:a9:03: 5c:39:5e:66:56:9b:24:f4:bf:6d:ff:98:32:6d:d5: 67:ef:8a:f9:ae:55:8e:2d:ea:8f:2b:ea:0c:8f:59: eb:97:a8:76:b1:9c:48:88:b1:4b:ed:e3:82:3b:a2: a5:fe:ac:46:48:46:9b:d8:c1:87:3d:4b:78:83:70: 2e:59:f7:da:f2:d2:83:2c:4f:95:17:9e:cb:37:c6: de:9c:a2:ca:88:ea:b1:09:43:8a:2a:fd:af:7d:22: db:b6:45:e4:40:4e:2e:cd:65:b2:69:b9:d2:3b:e6: d3:8b:33:e2:82:57:62:c2:a6:66:39:9b:e4:bd:c1: 27:d1:31:10:9a:e1:91:32:bd:b2:58:07:cd:81:c1: 6e:e5:aa:e8:c5:b2:39:df:b2:aa:74:d8:b3:49:b7: 18:32:83:0a:13:0b:78:83:8c:4b:4f:0c:01:48:3a: ae:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0B:23:02:E8:95:65:73:75:81:31:09:16:78:5C:C7:5E:2D:0C:A8 X509v3 Authority Key Identifier: keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:77:9e:1a:bf:da:aa:ef:e0:01:79:f9:b8:67:a8:34:16:bf: 2c:9a:7f:bc:6a:00:ec:7d:a8:87:12:c6:fe:64:38:09:eb:e1: 46:1b:98:56:ec:35:28:1f:04:ed:51:65:79:f2:bc:05:b0:20: 0a:c5:a3:65:11:ed:64:8d:92:38:22:b0:a5:c5:73:c6:db:36: ff:3f:b2:9f:96:3d:80:7b:74:36:4b:fb:cd:39:bb:6a:cd:5d: 0d:7a:82:b0:72:5f:cb:e3:aa:fa:ba:a2:c9:a6:e1:01:68:67: f9:40:e1:a0:e1:da:2b:21:22:c9:b7:16:02:44:20:40:97:25: 07:92:79:4e:f0:e9:3f:56:95:c0:ee:d8:7a:0b:04:42:17:2c: c4:37:0b:43:19:9e:69:c6:12:e2:dc:b6:2b:de:89:b9:8e:cf: fb:48:f5:b7:bc:56:5f:ab:b2:2c:c5:03:b0:98:20:ab:d8:2e: 21:87:0f:ed:cd:11:5a:62:4e:54:53:90:d8:c6:21:16:54:9a: 8e:9e:a2:50:ab:4b:f1:66:a5:06:f5:f8:91:b1:a2:b3:d4:c1: 5b:6b:c5:0d:a4:b2:73:db:91:da:de:b0:5f:74:67:1e:bd:2d: c2:28:98:d7:18:b5:3e:c6:48:28:5b:b4:c3:af:63:40:dc:aa: 12:0e:55:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMjAxMTAvBgNVBAUTKEI2MzIxM0Q4RTY2MkY0NTRCRUFFRUM3RjNDNDJFM0FG NkY4OTVGQjIwHhcNMjYwMTIwMjMzMDU0WhcNMjYwMTI3MjMzMDU0WjAYMRYwFAYD VQQDDA02OTcwMTAyZi1jMTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pX6hcD7yRrIs9WoTv6+JFg3EJ5/MPPsStMzKPw8fp1XGsGkRKUKxV78OAOA ohS3gL0JX55LRyTUf2u9nMPKCraWz58hmF3nD3bjXFvt4nL+4TJFjZLYqQNcOV5m Vpsk9L9t/5gybdVn74r5rlWOLeqPK+oMj1nrl6h2sZxIiLFL7eOCO6Kl/qxGSEab 2MGHPUt4g3AuWffa8tKDLE+VF57LN8benKLKiOqxCUOKKv2vfSLbtkXkQE4uzWWy abnSO+bTizPigldiwqZmOZvkvcEn0TEQmuGRMr2yWAfNgcFu5aroxbI537KqdNiz SbcYMoMKEwt4g4xLTwwBSDquBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgLIwLo lWVzdYExCRZ4XMdeLQyoMB8GA1UdIwQYMBaAFLYyE9jmYvRUvq7sfzxC469viV+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAyMC9CRTFFRTUwNDk0 NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlGUy1ydXhfUEVManIyLUpY N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqSVQyT1ppOUZTLXJ1eF9QRUxqcjItSlg3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAyMC9CRTFFRTUwNDk0NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlG Uy1ydXhfUEVManIyLUpYN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATd54av9qq7+ABefm4Z6g0Fr8smn+8agDsfaiHEsb+ZDgJ6+FGG5hW 7DUoHwTtUWV58rwFsCAKxaNlEe1kjZI4IrClxXPG2zb/P7Kflj2Ae3Q2S/vNObtq zV0NeoKwcl/L46r6uqLJpuEBaGf5QOGg4dorISLJtxYCRCBAlyUHknlO8Ok/VpXA 7th6CwRCFyzENwtDGZ5pxhLi3LYr3om5js/7SPW3vFZfq7IsxQOwmCCr2C4hhw/t zRFaYk5UU5DYxiEWVJqOnqJQq0vxZqUG9fiRsaKz1MFba8UNpLJz25Ha3rBfdGce vS3CKJjXGLU+xkgoW7TDr2NA3KoSDlW+ -----END CERTIFICATE-----Generated at Wed Jan 21 19:27:11 2026 by rpki-client