This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: bSmB49m/g6eKn8RqEXkVtDiBQg1quAXJb2TXTLhBMC8= Subject key identifier: 9A:05:DC:33:24:DD:EF:BE:80:45:DE:63:F6:C2:CC:F4:87:6D:B1:CF Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 087B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 0852 Signing time: Tue 20 Jan 2026 20:15:30 +0000 Manifest this update: Tue 20 Jan 2026 20:15:30 +0000 Manifest next update: Tue 27 Jan 2026 20:15:30 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: aLFZN83NUYftZjGF/TWTMbjF0+G1GlGnlw5kQ2vTR9I=) 2: C3738F60A78511F0B1D3342CC4F9AE02.roa (hash: doeraFCMJ4YY06qP/CyZ7CStviCw2H65v541coUCoQs=) 3: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: RVujGjgRtNml2s4B1MbyglZHc1wuuQ8z+GSwbNfvR2o=) 4: 0C64C6B2821011F0B329B866C4F9AE02.roa (hash: D2PIDDhjMLrJzP//kuZEMaof293KC1FejYs4Z1FlT9g=) 5: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: AjNKnPWs+wQxA57p7oeqhPGR6IMIStHtSJ7A+NHTTwU=) 6: 7F9EB0A28CF111F09EC8727CC4F9AE02.roa (hash: BxPajmDdLGfIydsWc2EIPgDs9jrVdPhKlvGIPc4xwYE=) 7: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: vJqvl3p3GZGjPo1+bFOu/lz3UGNmQtiNtsOQmfP7QoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2171 (0x87b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Jan 20 20:15:30 2026 GMT Not After : Jan 27 20:15:30 2026 GMT Subject: CN=696fe262-ebf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9d:0a:c8:19:9c:fc:37:de:71:35:9f:49:e1: a9:d9:8f:d7:c5:f2:1a:c5:11:ea:8b:92:6c:41:0b: 85:4f:82:ac:05:a7:5d:fa:f7:3a:7f:a9:eb:6a:8a: 48:fa:f8:8f:dc:9f:d5:5d:dd:a8:93:57:61:d0:b8: 60:3e:da:24:45:83:16:a3:b4:79:ba:b5:fb:a6:79: 51:7f:17:68:f2:2e:db:72:9f:ad:4b:f4:7e:17:9b: 74:d7:56:c5:18:fb:1b:01:41:bc:83:32:fa:cb:34: 70:49:96:8c:62:bb:3c:e3:3e:9b:8e:96:b7:ae:42: 17:26:46:3e:44:e2:6d:c6:4a:3f:08:14:82:ce:ae: 53:a2:0d:81:3f:05:e1:16:81:b2:40:14:ff:14:3a: f7:5e:27:9a:60:8a:e4:24:68:5f:bd:4b:a1:fc:88: 09:0f:93:bd:63:63:26:55:a7:80:f5:6c:e2:77:07: 7a:12:ad:6d:ae:16:ae:83:ec:0e:0c:16:d7:52:79: 35:95:19:61:52:d9:d1:a0:22:78:e9:d9:d8:1b:8d: 5f:eb:5c:73:1c:5d:6b:28:cd:a5:50:09:e9:88:3e: b6:e2:cf:1e:9d:5f:04:5d:de:42:bb:2e:bc:bd:7c: 2b:69:6c:6e:d3:69:36:68:ee:36:ed:cf:7e:87:9a: 44:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:05:DC:33:24:DD:EF:BE:80:45:DE:63:F6:C2:CC:F4:87:6D:B1:CF X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:f3:f6:74:56:ec:e6:0a:5c:94:bd:ce:97:c5:f2:92:cb:71: 9d:b0:de:ea:f2:75:da:d6:55:7e:9e:29:8e:1e:79:1d:9f:f0: 8a:f6:64:77:39:56:e0:53:90:2c:66:2b:1c:51:23:c4:72:c5: a4:b2:f1:2f:72:63:70:95:83:29:a8:60:c2:f4:af:36:f6:bb: 5d:2a:cb:57:b2:87:6b:38:61:a2:71:70:d4:5d:c8:50:b9:d1: ea:fd:cd:4d:46:c2:ad:65:02:e8:93:d2:5d:00:50:a4:e6:54: 6f:62:c5:f4:6c:94:eb:d5:3f:62:83:52:23:4c:56:7a:23:89: 1b:11:1b:43:a4:ae:9c:7b:62:a0:ce:5f:9d:67:36:62:34:da: dc:60:11:fa:e4:41:e4:fe:6a:3a:bf:17:bd:cd:8f:a2:c5:88: 9c:8b:20:3e:de:cd:10:a9:ca:8c:7a:fe:75:13:03:99:b6:ed: 74:a0:fa:42:71:72:e1:6f:0e:67:de:0b:c9:57:d6:f6:2b:74: f7:77:dd:bd:45:84:76:94:a1:b4:7e:80:d6:91:be:ac:6c:91: d9:2d:0c:93:07:ba:55:87:ee:24:37:03:99:e0:15:5b:35:e2: 12:48:0d:3c:44:e8:ea:82:8d:53:43:0d:da:ec:1b:4e:f3:5d: 11:54:8d:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwMTIwMjAxNTMwWhcNMjYwMTI3MjAxNTMwWjAYMRYwFAYD VQQDDA02OTZmZTI2Mi1lYmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJ0KyBmc/DfecTWfSeGp2Y/XxfIaxRHqi5JsQQuFT4KsBadd+vc6f6nraopI +viP3J/VXd2ok1dh0LhgPtokRYMWo7R5urX7pnlRfxdo8i7bcp+tS/R+F5t011bF GPsbAUG8gzL6yzRwSZaMYrs84z6bjpa3rkIXJkY+ROJtxko/CBSCzq5Tog2BPwXh FoGyQBT/FDr3XieaYIrkJGhfvUuh/IgJD5O9Y2MmVaeA9Wzidwd6Eq1trhaug+wO DBbXUnk1lRlhUtnRoCJ46dnYG41f61xzHF1rKM2lUAnpiD624s8enV8EXd5Cuy68 vXwraWxu02k2aO427c9+h5pEBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJoF3DMk 3e++gEXeY/bCzPSHbbHPMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG8/Z0VuzmClyUvc6XxfKSy3GdsN7q8nXa1lV+nimOHnkdn/CK9mR3 OVbgU5AsZiscUSPEcsWksvEvcmNwlYMpqGDC9K829rtdKstXsodrOGGicXDUXchQ udHq/c1NRsKtZQLok9JdAFCk5lRvYsX0bJTr1T9ig1IjTFZ6I4kbERtDpK6ce2Kg zl+dZzZiNNrcYBH65EHk/mo6vxe9zY+ixYiciyA+3s0QqcqMev51EwOZtu10oPpC cXLhbw5n3gvJV9b2K3T3d929RYR2lKG0foDWkb6sbJHZLQyTB7pVh+4kNwOZ4BVb NeISSA08ROjqgo1TQw3a7BtO810RVI39 -----END CERTIFICATE-----Generated at Wed Jan 21 05:39:42 2026 by rpki-client