This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json) Hash identifier: +dgy4FX8BVCiFyfm//dVwhFnbOAUA7NDD9iBmI8Fgsc= Subject key identifier: 24:FA:72:A5:AA:7A:26:99:B2:4A:CB:59:C1:F0:E3:B3:A7:8E:74:51 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 0601 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft Manifest number: 05C1 Signing time: Fri 16 Jan 2026 22:31:23 +0000 Manifest this update: Fri 16 Jan 2026 22:31:22 +0000 Manifest next update: Fri 23 Jan 2026 22:31:22 +0000 Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: 0YDPiUj4v/3HqJNreK+C2B1OMXyzIb/ABRi4DEaoNH4=) 2: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: bHifsknQi0NkHDmqRWXM1fMiczawE4gokOksn/oKdCA=) 3: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: WGM85d42jF0RvgbFfnNoubVrh59/d23ICHptXHKbWpI=) 4: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (hash: rPe4vhXZonbANC80nWrcqICh0JnSf/sZ+SChznXkca8=) 5: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: GP/xk9klfhzGUqC9zVSgLsFcoj/SNA7QNKZizL06GJY=) 6: DE6603CAEBD711F092381BAE6B6F56BC.roa (hash: gxvlMyGwQL7lw0xk2eyh8DpmMAWrA6M1mpFv6N2AMeI=) 7: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: 2I5Ge7KBh0e5lEpfrh8ZbOfF9fHkRChHLpkEq2RW7oE=) 8: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: Jx8gJbXn9OtsYSW59bLdCCTB+IjRw64vOzcz4bDoiq4=) 9: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: P6wLHpQqCHGL554TbsS5XznXqZdAAm0+usW172StxkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 22:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1537 (0x601) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Jan 16 22:31:22 2026 GMT Not After : Jan 23 22:31:22 2026 GMT Subject: CN=696abc3b-7452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:75:ab:36:b8:8f:79:e3:a1:97:7a:fa:51: 44:f0:8d:31:08:d5:c2:42:d9:3e:0a:3f:fb:a5:42: 88:db:dc:a3:fa:0c:b4:d9:6a:9b:55:7a:fe:59:b8: 5f:a4:5e:f7:1f:f2:21:c4:8c:a0:19:40:99:10:14: d2:93:7a:d6:ac:87:81:33:5f:c8:1a:9c:f0:ff:83: 5a:96:f4:6a:8a:4b:99:80:9a:52:fd:55:22:bd:e2: 56:de:47:dc:c4:aa:e8:cc:a0:d6:61:e8:69:d7:cf: e8:c1:d3:5b:12:ba:1c:fc:be:b1:20:de:fd:fd:8d: d9:a2:e1:82:7f:46:3d:41:d4:bf:4a:83:4d:af:0c: c7:bb:5f:57:26:88:61:2b:bd:1d:83:ef:e8:63:bc: bb:33:2f:3d:d6:a5:1c:9c:d3:34:bf:14:42:80:0a: 55:b6:d2:7d:dd:68:1e:20:a5:84:7d:04:32:a3:1e: e6:d1:11:f5:40:c9:34:02:e0:8f:df:0b:80:16:7e: 87:45:bf:f5:d4:5a:5b:2a:e2:43:6a:b6:51:cc:ca: c4:95:33:45:66:17:54:ce:d0:13:2f:b3:21:49:de: c6:90:18:72:8d:98:6d:a1:8c:ce:f1:98:02:a9:e4: 59:c5:02:37:ef:5a:d4:c9:ed:29:1c:05:40:8f:e5: e1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FA:72:A5:AA:7A:26:99:B2:4A:CB:59:C1:F0:E3:B3:A7:8E:74:51 X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e4:d6:b5:b3:0a:52:40:72:c8:be:63:ad:5e:e6:a5:3d:03: f7:7d:b5:5e:1e:c7:19:fe:a1:6d:0c:e0:fa:7e:49:f5:0c:35: ff:45:39:f5:fb:d4:64:d9:06:5e:3f:36:a2:ac:f3:8c:57:4b: 79:c0:e4:7c:af:1c:35:93:60:3a:81:79:cb:08:f4:84:c9:19: 9e:7a:44:64:f8:ab:37:8e:7f:86:47:29:51:ac:f4:f4:ff:a5: 65:db:23:a4:c1:48:74:f6:a6:61:3b:f0:79:71:53:ed:71:e3: 33:07:20:7c:6f:89:5f:9f:c6:37:ec:83:03:92:7e:54:4d:56: b5:8e:ff:0b:0d:52:7f:ee:36:80:6b:0a:2b:7f:59:9f:ae:25: d4:c2:2a:ca:d7:8e:f0:61:a8:ad:24:53:61:9f:73:cf:0b:65: 24:a8:d0:4e:8e:ef:2d:13:5f:69:a3:f5:91:a7:51:3b:b2:aa: 9e:72:ec:1f:14:75:a0:01:63:e3:5d:50:03:4b:5b:bc:f6:f0: f3:aa:57:6d:43:46:c4:38:2c:a7:75:e4:59:7d:62:a3:d6:13: a1:2f:72:03:c1:61:35:62:51:45:0f:0b:2e:d8:36:26:36:f2: 71:ff:24:98:3e:29:69:98:8f:a1:45:62:95:ee:bd:30:73:49: 54:30:94:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjYwMTE2MjIzMTIyWhcNMjYwMTIzMjIzMTIyWjAYMRYwFAYD VQQDDA02OTZhYmMzYi03NDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFh1qza4j3njoZd6+lFE8I0xCNXCQtk+Cj/7pUKI29yj+gy02WqbVXr+Wbhf pF73H/IhxIygGUCZEBTSk3rWrIeBM1/IGpzw/4NalvRqikuZgJpS/VUiveJW3kfc xKrozKDWYehp18/owdNbEroc/L6xIN79/Y3ZouGCf0Y9QdS/SoNNrwzHu19XJohh K70dg+/oY7y7My891qUcnNM0vxRCgApVttJ93WgeIKWEfQQyox7m0RH1QMk0AuCP 3wuAFn6HRb/11FpbKuJDarZRzMrElTNFZhdUztATL7MhSd7GkBhyjZhtoYzO8ZgC qeRZxQI371rUye0pHAVAj+XhUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCT6cqWq eiaZskrLWcHw47OnjnRRMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j VC1hZlk2VEtwdHBDU1dLUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD5Na1swpSQHLIvmOtXualPQP3fbVeHscZ/qFtDOD6fkn1DDX/RTn1 +9Rk2QZePzairPOMV0t5wOR8rxw1k2A6gXnLCPSEyRmeekRk+Ks3jn+GRylRrPT0 /6Vl2yOkwUh09qZhO/B5cVPtceMzByB8b4lfn8Y37IMDkn5UTVa1jv8LDVJ/7jaA aworf1mfriXUwirK147wYaitJFNhn3PPC2UkqNBOju8tE19po/WRp1E7sqqecuwf FHWgAWPjXVADS1u89vDzqldtQ0bEOCyndeRZfWKj1hOhL3IDwWE1YlFFDwsu2DYm NvJx/ySYPilpmI+hRWKV7r0wc0lUMJSD -----END CERTIFICATE-----Generated at Sun Jan 18 12:12:09 2026 by rpki-client