This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft File: 1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft (raw, json) Hash identifier: fNCWEDvMdiQ0B8YFY1M6ex6bzD2ge7C/HHhp/ML8xLA= Subject key identifier: B0:F3:5B:F0:2A:1C:14:59:F0:9A:13:8E:E0:E9:58:10:C1:21:17:5A Authority key identifier: D4:80:9E:AA:A2:51:06:46:DD:85:35:9D:F8:6E:65:25:19:47:0F:C3 Certificate issuer: /CN=A918120B/serialNumber=D4809EAAA2510646DD85359DF86E652519470FC3 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft Manifest number: 0A Signing time: Mon 05 Jan 2026 06:56:38 +0000 Manifest this update: Mon 05 Jan 2026 06:56:38 +0000 Manifest next update: Mon 12 Jan 2026 06:56:38 +0000 Files and hashes: 1: 1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl (hash: eP3pMnxdQd/pF3NOtlwxQz9MXA1ZDD8hvUYOxTLf5S4=) 2: 78DCA304E0B211F0865FCE9C4B6F56BC.roa (hash: 6AUHnTelCF3W/iVa24MNrbClZ9xiHdNzUBf2Ksi2FnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 06:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918120B, serialNumber=D4809EAAA2510646DD85359DF86E652519470FC3 Validity Not Before: Jan 5 06:56:38 2026 GMT Not After : Jan 12 06:56:38 2026 GMT Subject: CN=695b60a6-93ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c2:67:a7:c0:6e:22:f5:0a:58:d0:af:e3:0c: 61:52:0c:92:fc:56:0b:c4:a3:d5:bc:7b:8d:0f:38: 24:c5:8f:cc:43:92:33:ec:01:86:74:8e:89:c2:57: bf:d3:d4:f3:0b:b4:a4:aa:b3:0e:c3:22:8b:06:44: 9b:a9:4d:61:7f:31:c7:f2:9c:98:ff:67:9d:1d:66: cd:f6:a1:15:bb:5e:c6:66:a0:f2:fa:c8:30:e5:fc: 16:d8:a4:21:91:60:f4:4f:cb:66:d5:54:ed:c8:1c: 3e:10:4f:54:bc:93:dd:c8:19:48:a5:0b:d5:2f:41: 7c:02:71:ec:69:36:07:f5:2d:76:1f:f7:35:ca:ff: b0:7f:e0:50:db:8d:15:e4:0c:8a:2e:5e:f1:5d:93: a4:3f:29:3e:8e:4d:05:78:e3:48:3c:ab:3b:29:37: 2b:45:c4:5c:47:44:7c:5f:fa:ca:60:1d:66:10:72: ec:f1:c6:b3:c1:9b:50:ee:e3:76:ad:ad:78:d3:e1: be:e9:63:f5:bc:bb:3d:2a:b7:f9:c8:c8:43:9a:23: 56:d9:32:76:68:2b:81:62:75:36:6d:01:52:db:c5: aa:eb:7d:b6:a6:cf:72:2c:44:39:e1:28:83:f7:7b: c3:48:a3:b3:bc:72:5a:06:08:61:8d:06:7b:0d:49: ae:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F3:5B:F0:2A:1C:14:59:F0:9A:13:8E:E0:E9:58:10:C1:21:17:5A X509v3 Authority Key Identifier: keyid:D4:80:9E:AA:A2:51:06:46:DD:85:35:9D:F8:6E:65:25:19:47:0F:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:12:02:f0:38:04:97:d2:0b:39:4c:88:ef:15:72:54:e2:d5: 56:a3:a8:f8:dc:a0:68:e4:06:38:06:39:50:90:7a:3d:d8:a7: 06:a8:cf:76:e8:f9:28:81:4d:05:9d:87:ee:10:d1:9c:5f:38: 14:29:b0:ea:13:c3:32:84:80:8b:cb:74:17:9f:1f:cd:2d:e0: c0:72:20:b3:7f:03:5f:58:19:36:94:f9:71:88:50:96:e4:97: 44:6c:c0:4f:af:2c:60:44:64:3e:16:46:cf:e1:f3:c4:f3:4d: 46:6a:67:ed:58:23:42:f1:5d:ee:9c:6b:ae:3a:0c:8b:77:87: 1c:5a:c9:38:ec:c8:5a:34:af:13:1b:12:99:68:05:ae:3f:46: 7a:78:bd:ab:27:07:d1:64:75:38:f9:82:98:89:08:4a:9d:05: b5:54:0d:88:88:65:41:2c:4b:be:38:6b:6b:63:e2:d0:82:5b: 4a:29:41:bf:e8:e7:cf:65:64:e6:ba:01:e2:58:5c:1e:1d:77: b2:51:0c:58:f3:41:ee:cd:82:47:e8:28:9a:44:c3:15:56:f9: 50:83:42:2b:48:8d:d4:5f:e3:96:61:3f:79:a0:de:b0:d0:e9: e1:87:fe:0a:e1:a0:d7:1e:34:3f:e0:b2:30:1f:fa:05:a1:ea: 9f:fb:47:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE4 MTIwQjExMC8GA1UEBRMoRDQ4MDlFQUFBMjUxMDY0NkREODUzNTlERjg2RTY1MjUx OTQ3MEZDMzAeFw0yNjAxMDUwNjU2MzhaFw0yNjAxMTIwNjU2MzhaMBgxFjAUBgNV BAMMDTY5NWI2MGE2LTkzZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8wmenwG4i9QpY0K/jDGFSDJL8VgvEo9W8e40POCTFj8xDkjPsAYZ0jonCV7/T 1PMLtKSqsw7DIosGRJupTWF/McfynJj/Z50dZs32oRW7XsZmoPL6yDDl/BbYpCGR YPRPy2bVVO3IHD4QT1S8k93IGUilC9UvQXwCcexpNgf1LXYf9zXK/7B/4FDbjRXk DIouXvFdk6Q/KT6OTQV440g8qzspNytFxFxHRHxf+spgHWYQcuzxxrPBm1Du43at rXjT4b7pY/W8uz0qt/nIyEOaI1bZMnZoK4FidTZtAVLbxarrfbamz3IsRDnhKIP3 e8NIo7O8cloGCGGNBnsNSa7TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsPNb8Coc FFnwmhOO4OlYEMEhF1owHwYDVR0jBBgwFoAU1ICeqqJRBkbdhTWd+G5lJRlHD8Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMjBCL0NDOTk2OTA0RTBB RTExRjA5NkQ3RTI4ODQ5NkY1NkJDLzFJQ2VxcUpSQmtiZGhUV2QtRzVsSlJsSEQ4 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUlDZXFxSlJCa2JkaFRXZC1HNWxKUmxIRDhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx MjBCL0NDOTk2OTA0RTBBRTExRjA5NkQ3RTI4ODQ5NkY1NkJDLzFJQ2VxcUpSQmti ZGhUV2QtRzVsSlJsSEQ4TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEkSAvA4BJfSCzlMiO8VclTi1VajqPjcoGjkBjgGOVCQej3Ypwaoz3bo +SiBTQWdh+4Q0ZxfOBQpsOoTwzKEgIvLdBefH80t4MByILN/A19YGTaU+XGIUJbk l0RswE+vLGBEZD4WRs/h88TzTUZqZ+1YI0LxXe6ca646DIt3hxxayTjsyFo0rxMb EploBa4/Rnp4vasnB9FkdTj5gpiJCEqdBbVUDYiIZUEsS744a2tj4tCCW0opQb/o 589lZOa6AeJYXB4dd7JRDFjzQe7NgkfoKJpEwxVW+VCDQitIjdRf45ZhP3mg3rDQ 6eGH/grhoNceND/gsjAf+gWh6p/7R7g= -----END CERTIFICATE-----Generated at Wed Jan 7 06:36:36 2026 by rpki-client