This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: xv8JNTMW0QbYJgB7sNDLiktV4KR47yRM/mcvDKYnlcs= Subject key identifier: DA:23:05:30:3F:D5:F2:4B:BE:2A:46:4E:F6:CD:EC:A8:FA:1F:22:8D Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 05EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 05AF Signing time: Tue 20 Jan 2026 22:34:26 +0000 Manifest this update: Tue 20 Jan 2026 22:34:26 +0000 Manifest next update: Tue 27 Jan 2026 22:34:26 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: 7aZD2g8s0ZGqFyHNSxhefapwjcIR4D7ZeA81a4xcpqA=) 2: F6DBFB92B3F311F0929DA35BC4F9AE02.roa (hash: +ZeOSIYk6Ly5nBeaHh56dm3TTkPs3P+Yl4siQcbERQk=) 3: B589332C498611EF90B46962C4F9AE02.roa (hash: 7w9wF8XsqdQtTLhDlS6/cW8MDP0hFJjk/GVvhd+vl1Y=) 4: 9DF3BC14E48011F0AC3D40BC426F56BC.roa (hash: F7JVi3Ysd0rnz27lVTZpYOD/ZVFzooszw+p994EZ3OA=) 5: 48811D22EBB411F0A3585372626F56BC.roa (hash: gn8vnKaXW6ZC2B6o+QxRxKZcAtoDn7RGJ7G1J2ZxsAQ=) 6: 06E8BCB4B3F411F0874AC55BC4F9AE02.roa (hash: X7h+WmVxE7GHZl6Xmec4Vc2w1X+CORKl5y2YgctgHb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 22:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1515 (0x5eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Jan 20 22:34:26 2026 GMT Not After : Jan 27 22:34:26 2026 GMT Subject: CN=697002f2-0337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:54:0b:52:a7:24:68:30:d3:97:33:2f:03:82: ee:1e:e6:5c:50:39:f0:02:b5:40:57:c0:81:86:f9: 00:d0:9d:b5:a1:71:36:63:af:d8:78:ee:e0:20:ad: 42:a5:41:de:fc:eb:16:db:fe:75:89:26:40:11:44: e8:f7:78:cd:55:a4:9b:bf:7e:7f:58:f0:ea:de:3f: f6:dc:da:01:de:7e:2d:b5:41:e2:0a:a9:05:34:be: e8:84:25:fb:a8:6e:82:75:0a:e5:ba:59:09:ed:01: c4:03:42:1b:fd:28:1c:ac:c8:4a:4b:b9:7b:4b:ea: 0b:26:6b:c3:06:40:f5:19:8c:6c:57:3f:c0:d3:d6: 91:f2:8a:9c:77:33:f4:62:82:6a:94:2d:d8:28:5e: cf:b0:b7:d3:a9:e8:7f:39:3f:02:12:27:ec:bb:fd: ff:24:c4:da:58:b8:17:c9:e9:d8:de:fb:d0:34:03: f2:ed:12:73:29:86:50:b7:85:2e:fe:d0:28:de:59: 23:6c:55:e4:6b:4d:2c:66:0e:3d:b5:7f:9d:ed:09: eb:e5:c2:b9:7b:7b:b9:75:5c:6e:55:46:1a:62:03: b8:a8:8b:f4:a3:b9:d6:08:dc:5e:d5:28:f9:25:65: 96:de:f8:91:ad:2d:ae:24:0e:d6:2a:81:9b:0e:b7: 45:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:23:05:30:3F:D5:F2:4B:BE:2A:46:4E:F6:CD:EC:A8:FA:1F:22:8D X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:01:58:c5:6d:d3:b9:15:64:12:ee:62:43:80:60:01:b2:a6: 75:74:c9:b6:83:8f:cd:89:f5:30:c8:43:69:f1:3a:cc:c9:ff: 38:a5:c7:83:ae:68:d1:f8:42:ba:ef:05:ff:dc:8e:e1:a8:6e: 34:f6:39:fe:d4:ff:dd:36:3f:4b:94:9c:c2:f2:6d:2b:22:b5: ad:47:5a:ad:98:79:5b:10:46:93:e6:b9:aa:19:4c:22:6e:2f: cd:5e:5b:18:c2:13:3c:bc:9a:87:f0:30:1a:c7:3a:ed:6d:6e: 87:03:f0:e6:32:de:da:c7:96:7f:72:b4:d4:06:f0:5b:8a:dc: 37:09:2a:46:ad:c6:35:1a:c6:25:e2:e0:1f:c6:d3:d6:04:16: 26:54:fa:d3:ed:03:36:32:90:83:5b:4c:57:99:45:6f:85:86: 3d:5d:69:13:af:b4:4c:e7:83:19:7b:5e:be:29:d4:c4:24:01: 41:ad:e4:0f:f8:f3:e4:21:56:f7:46:82:6d:a6:88:16:8f:6b: 32:9b:21:b6:b6:0f:89:bc:52:00:a0:03:34:f0:61:f0:88:4a: f7:85:a3:17:e2:33:9d:de:41:c8:44:d9:db:eb:2d:7f:94:e7: 90:22:c1:63:4b:24:e6:c5:8f:53:5c:7b:72:16:df:87:c9:ac: 32:d0:45:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjYwMTIwMjIzNDI2WhcNMjYwMTI3MjIzNDI2WjAYMRYwFAYD VQQDDA02OTcwMDJmMi0wMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01QLUqckaDDTlzMvA4LuHuZcUDnwArVAV8CBhvkA0J21oXE2Y6/YeO7gIK1C pUHe/OsW2/51iSZAEUTo93jNVaSbv35/WPDq3j/23NoB3n4ttUHiCqkFNL7ohCX7 qG6CdQrlulkJ7QHEA0Ib/SgcrMhKS7l7S+oLJmvDBkD1GYxsVz/A09aR8oqcdzP0 YoJqlC3YKF7PsLfTqeh/OT8CEifsu/3/JMTaWLgXyenY3vvQNAPy7RJzKYZQt4Uu /tAo3lkjbFXka00sZg49tX+d7Qnr5cK5e3u5dVxuVUYaYgO4qIv0o7nWCNxe1Sj5 JWWW3viRrS2uJA7WKoGbDrdFiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNojBTA/ 1fJLvipGTvbN7Kj6HyKNMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGAVjFbdO5FWQS7mJDgGABsqZ1dMm2g4/NifUwyENp8TrMyf84pceD rmjR+EK67wX/3I7hqG409jn+1P/dNj9LlJzC8m0rIrWtR1qtmHlbEEaT5rmqGUwi bi/NXlsYwhM8vJqH8DAaxzrtbW6HA/DmMt7ax5Z/crTUBvBbitw3CSpGrcY1GsYl 4uAfxtPWBBYmVPrT7QM2MpCDW0xXmUVvhYY9XWkTr7RM54MZe16+KdTEJAFBreQP +PPkIVb3RoJtpogWj2symyG2tg+JvFIAoAM08GHwiEr3haMX4jOd3kHIRNnb6y1/ lOeQIsFjSyTmxY9TXHtyFt+Hyawy0EUQ -----END CERTIFICATE-----Generated at Wed Jan 21 14:17:03 2026 by rpki-client