This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft File: I2o4zV7FL3Doi4BtcV63sELNfr8.mft (raw, json) Hash identifier: aMnaZ2GPPu1/poiJD8P6im/lXdYFjuNju+WvVbkCgug= Subject key identifier: 42:C4:BA:ED:3F:B7:F0:0E:60:14:B7:26:E0:73:A7:39:D5:54:53:C9 Authority key identifier: 23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF Certificate issuer: /CN=A918120B/serialNumber=236A38CD5EC52F70E88B806D715EB7B042CD7EBF Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft Manifest number: 0D Signing time: Fri 09 Jan 2026 07:17:13 +0000 Manifest this update: Fri 09 Jan 2026 07:17:12 +0000 Manifest next update: Fri 16 Jan 2026 07:17:12 +0000 Files and hashes: 1: I2o4zV7FL3Doi4BtcV63sELNfr8.crl (hash: +9eL0mjO+Jsigoz0NjvtpxgYYJbu1ypeRZiKJ0hyYj0=) 2: 4C5380C8E0B211F084C35B824B6F56BC.roa (hash: SE2/WD+koqRbIH32USZFh08PVySdtJ4g1P4mAg0qHDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.crl rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Jan 2026 07:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918120B, serialNumber=236A38CD5EC52F70E88B806D715EB7B042CD7EBF Validity Not Before: Jan 9 07:17:12 2026 GMT Not After : Jan 16 07:17:12 2026 GMT Subject: CN=6960ab78-a0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:95:4a:02:05:b1:d9:d5:02:ed:d9:6c:6e: 2b:25:94:a8:ee:3a:9f:ca:19:a7:1a:46:d7:b5:cd: 13:ab:24:c8:2d:21:f0:94:54:46:00:59:eb:ae:38: d3:5b:96:cf:21:55:99:9b:41:32:af:6a:d3:06:50: cc:7b:3e:66:69:9d:07:8f:f6:0a:6f:cc:25:3b:e7: 36:69:aa:c4:e7:4f:3d:ad:c1:5a:5a:97:b6:83:61: e5:87:9f:b7:d4:fc:cd:98:3c:07:6e:8f:02:ce:55: 80:f3:84:11:8b:68:26:a1:6c:e6:f5:9d:9b:01:8b: 0f:3d:28:ca:6c:98:ab:88:74:8b:6f:ef:88:91:9a: 2c:1e:56:8a:06:25:7a:d4:86:52:15:ce:a8:0a:be: f1:46:a6:5c:93:4a:ce:41:44:f9:a3:3b:62:a8:05: 43:13:6e:1c:ad:63:f0:11:99:ce:77:aa:9a:ea:43: 0a:38:71:7c:14:fa:1e:80:4f:f6:3e:03:7e:04:3d: 74:5d:0f:f6:aa:8f:22:71:01:c0:6f:e6:b0:0e:a1: f8:05:9a:ce:48:6f:dc:b7:d1:23:14:25:0d:a7:b3: f2:c3:9d:49:6f:b9:c5:63:f7:98:1c:69:92:12:d4: 8b:e9:c5:cd:eb:0d:a5:73:72:dc:ba:cc:89:f3:bd: 57:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C4:BA:ED:3F:B7:F0:0E:60:14:B7:26:E0:73:A7:39:D5:54:53:C9 X509v3 Authority Key Identifier: keyid:23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:73:8a:63:a4:fa:9d:12:66:0c:ea:bd:aa:b1:02:f4:64:19: 1d:41:2b:68:a4:42:c2:92:68:9f:69:04:cc:3d:ef:c6:df:9b: 7c:42:85:ef:38:a9:a8:05:58:a1:c4:eb:03:ba:53:12:1d:72: b8:7a:bc:00:e3:e4:b0:cf:f2:71:46:e5:52:4a:25:bb:9e:c1: fc:46:7a:b9:ce:04:95:d9:a4:85:c7:b3:ea:8a:55:59:d7:75: ae:eb:5e:73:cb:ca:51:14:6b:d3:68:94:7e:a7:f6:14:86:88: d2:f0:f3:7a:8e:6c:5b:c4:1d:17:75:48:4e:39:9a:5a:c5:2d: 1b:8c:54:31:fb:08:38:24:70:fd:79:34:87:f9:00:0f:dc:eb: 7d:50:24:66:ac:02:b8:d8:d4:c1:6d:5b:f0:43:d1:1f:f5:d8: e5:1b:d3:9d:bc:50:db:8c:48:bc:50:dd:b0:17:86:83:de:37: 2d:fc:2e:e3:04:28:55:00:dc:7d:03:83:66:60:cc:d6:ac:7b: 10:49:ee:e1:f3:8b:51:1c:d2:e5:35:84:d1:e0:d9:46:3e:1d: 3c:56:51:e8:35:91:cc:d2:ae:57:4e:b8:92:a4:d5:3c:0b:16: ab:07:1a:5d:69:a3:48:c4:7d:ce:c6:16:ec:72:f8:d4:f1:30: 86:14:a3:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE4 MTIwQjExMC8GA1UEBRMoMjM2QTM4Q0Q1RUM1MkY3MEU4OEI4MDZENzE1RUI3QjA0 MkNEN0VCRjAeFw0yNjAxMDkwNzE3MTJaFw0yNjAxMTYwNzE3MTJaMBgxFjAUBgNV BAMMDTY5NjBhYjc4LWEwY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdfJVKAgWx2dUC7dlsbisllKjuOp/KGacaRte1zROrJMgtIfCUVEYAWeuuONNb ls8hVZmbQTKvatMGUMx7PmZpnQeP9gpvzCU75zZpqsTnTz2twVpal7aDYeWHn7fU /M2YPAdujwLOVYDzhBGLaCahbOb1nZsBiw89KMpsmKuIdItv74iRmiweVooGJXrU hlIVzqgKvvFGplyTSs5BRPmjO2KoBUMTbhytY/ARmc53qprqQwo4cXwU+h6AT/Y+ A34EPXRdD/aqjyJxAcBv5rAOofgFms5Ib9y30SMUJQ2ns/LDnUlvucVj95gcaZIS 1Ivpxc3rDaVzcty6zInzvVelAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQsS67T+3 8A5gFLcm4HOnOdVUU8kwHwYDVR0jBBgwFoAUI2o4zV7FL3Doi4BtcV63sELNfr8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMjBCL0M0MkUzNDNFRTBB RTExRjA5NkQ3RTI4ODQ5NkY1NkJDL0kybzR6VjdGTDNEb2k0QnRjVjYzc0VMTmZy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSTJvNHpWN0ZMM0RvaTRCdGNWNjNzRUxOZnI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx MjBCL0M0MkUzNDNFRTBBRTExRjA5NkQ3RTI4ODQ5NkY1NkJDL0kybzR6VjdGTDNE b2k0QnRjVjYzc0VMTmZyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIBzimOk+p0SZgzqvaqxAvRkGR1BK2ikQsKSaJ9pBMw978bfm3xChe84 qagFWKHE6wO6UxIdcrh6vADj5LDP8nFG5VJKJbuewfxGernOBJXZpIXHs+qKVVnX da7rXnPLylEUa9NolH6n9hSGiNLw83qObFvEHRd1SE45mlrFLRuMVDH7CDgkcP15 NIf5AA/c631QJGasArjY1MFtW/BD0R/12OUb0528UNuMSLxQ3bAXhoPeNy38LuME KFUA3H0Dg2ZgzNasexBJ7uHzi1Ec0uU1hNHg2UY+HTxWUeg1kczSrldOuJKk1TwL FqsHGl1po0jEfc7GFuxy+NTxMIYUo1M= -----END CERTIFICATE-----Generated at Sat Jan 10 08:04:38 2026 by rpki-client