This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: nIo+b8dhisuQPU4TnlzswTREQHhef3dXPoFzb5eBq8I= Subject key identifier: 33:97:6F:CA:B0:72:FB:52:7F:D8:C9:93:C2:31:96:4D:22:14:12:E2 Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 0A66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 0A5C Signing time: Mon 26 Jan 2026 19:07:34 +0000 Manifest this update: Mon 26 Jan 2026 19:07:33 +0000 Manifest next update: Mon 02 Feb 2026 19:07:33 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: Ter8yE8ap4+UU4K/1/OSfKnaEuGBYdbiej9oZNYIawI=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: oi91Qfh6vx3udOQFWmZQlAlwWv2n7sWukG/Y5qWMZrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 19:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2662 (0xa66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: Jan 26 19:07:33 2026 GMT Not After : Feb 2 19:07:33 2026 GMT Subject: CN=6977bb75-fdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:2b:99:de:88:ca:9a:ee:1f:8b:a2:4c:a6: 55:4c:2a:dc:a2:21:48:e2:3b:ac:ae:05:69:9e:61: 60:d5:70:2d:6e:c3:81:d0:be:de:aa:2c:1f:f7:b7: 26:fe:82:f1:a7:f4:2a:8c:cb:6d:64:9a:43:8f:00: 44:fb:43:f6:9c:73:65:3e:1e:9f:fd:b6:db:4a:c1: a8:0c:72:44:0b:89:62:f7:2c:dc:63:08:46:a5:bb: 3a:76:d9:01:b0:34:f7:ad:06:24:3c:c4:e3:78:9a: 2b:85:f5:4c:56:b6:5d:40:bf:aa:88:27:3e:82:2c: 1c:1a:7b:67:e9:14:5e:fb:e5:84:85:49:8b:9a:0d: 65:32:a5:b7:67:c5:82:61:fd:97:3b:02:b0:85:0c: f4:ba:4e:51:ab:9c:ce:0f:5d:0c:ef:fc:b5:00:b1: 6c:e5:0e:d9:89:0d:4e:4c:ab:74:2f:80:48:2c:0c: 09:03:c1:7c:fc:9a:31:a6:37:92:1a:e3:48:f7:02: 14:4d:dc:7b:f6:f8:ad:7e:0c:5b:28:ea:8c:56:fb: fd:39:22:ab:9e:a2:80:8d:0a:59:f7:40:bf:c3:8d: 36:c1:8f:6e:a0:0c:f8:db:39:68:8d:5f:7b:7b:6b: 01:6c:32:67:8e:04:e4:b2:76:63:ed:6e:65:31:c8: 21:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:97:6F:CA:B0:72:FB:52:7F:D8:C9:93:C2:31:96:4D:22:14:12:E2 X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:92:d2:c5:75:6a:3a:d7:0d:6f:ef:fb:d3:d7:46:3f:18:00: 5f:72:95:22:77:e2:20:d4:7d:1d:55:b8:de:1d:50:db:0e:23: f6:3a:32:45:ed:aa:52:52:32:c0:26:4b:fa:f7:cf:03:21:cc: 70:c0:73:13:04:53:05:b9:7b:d7:b9:a5:f2:a2:4d:86:3d:68: e7:1d:c5:3f:73:56:68:dd:24:fc:0f:d0:a8:73:c4:d1:6d:af: 38:83:99:ff:9d:c5:75:4b:16:f4:65:7e:79:60:8e:2c:4b:4b: b0:36:a1:31:fb:fa:b0:43:49:2b:7c:cf:c6:de:cb:c4:e4:02: a8:a3:61:d4:db:eb:ea:f7:86:ca:cc:e8:dd:73:eb:8f:bd:57: 01:52:0c:3e:24:ce:c7:b7:ca:f8:1c:a4:79:ae:b5:c6:e8:ab: 70:ec:42:fa:cc:18:62:10:18:b6:40:96:13:27:aa:22:17:ff: 3a:16:b1:4a:3c:12:96:f0:46:c9:83:a7:4d:e9:65:3c:e8:87: ee:5d:b2:6a:b8:0f:f3:6f:75:f7:a4:c0:a5:92:55:11:d1:01: 0f:07:c6:79:85:63:d5:f3:28:72:89:ac:a4:39:2e:52:f7:13: 50:92:88:73:6b:6d:77:37:ae:1d:33:88:d3:1f:70:49:4f:58: 64:78:b1:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjYwMTI2MTkwNzMzWhcNMjYwMjAyMTkwNzMzWjAYMRYwFAYD VQQDDA02OTc3YmI3NS1mZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAErmd6IypruH4uiTKZVTCrcoiFI4jusrgVpnmFg1XAtbsOB0L7eqiwf97cm /oLxp/QqjMttZJpDjwBE+0P2nHNlPh6f/bbbSsGoDHJEC4li9yzcYwhGpbs6dtkB sDT3rQYkPMTjeJorhfVMVrZdQL+qiCc+giwcGntn6RRe++WEhUmLmg1lMqW3Z8WC Yf2XOwKwhQz0uk5Rq5zOD10M7/y1ALFs5Q7ZiQ1OTKt0L4BILAwJA8F8/JoxpjeS GuNI9wIUTdx79vitfgxbKOqMVvv9OSKrnqKAjQpZ90C/w402wY9uoAz42zlojV97 e2sBbDJnjgTksnZj7W5lMcgh4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOXb8qw cvtSf9jJk8Ixlk0iFBLiMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaktLFdWo61w1v7/vT10Y/GABfcpUid+Ig1H0dVbjeHVDbDiP2OjJF 7apSUjLAJkv6988DIcxwwHMTBFMFuXvXuaXyok2GPWjnHcU/c1Zo3ST8D9Coc8TR ba84g5n/ncV1Sxb0ZX55YI4sS0uwNqEx+/qwQ0krfM/G3svE5AKoo2HU2+vq94bK zOjdc+uPvVcBUgw+JM7Ht8r4HKR5rrXG6Ktw7EL6zBhiEBi2QJYTJ6oiF/86FrFK PBKW8EbJg6dN6WU86IfuXbJquA/zb3X3pMClklUR0QEPB8Z5hWPV8yhyiaykOS5S 9xNQkohza213N64dM4jTH3BJT1hkeLHX -----END CERTIFICATE-----Generated at Tue Jan 27 23:16:40 2026 by rpki-client