This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: t2zn+r/krzFFvyH32Cm0v0Z1PTUjO6of9CEM9PiZ6mk= Subject key identifier: 90:58:DC:DA:58:7A:C4:42:42:CF:88:42:AA:B4:F6:6B:CC:E5:18:45 Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 0486 Signing time: Tue 20 Jan 2026 23:21:53 +0000 Manifest this update: Tue 20 Jan 2026 23:21:53 +0000 Manifest next update: Tue 27 Jan 2026 23:21:53 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: S5FRJ8b7ZSVgC4FJt2nyV4jfQWuilinPw+Ft/ekSr8M=) 2: 1821352EA82D11F0A44D2F49C4F9AE02.roa (hash: 59YGH3d2E5WKtdDDd+SfH5rSD6g6BogQRvsB30CIBqk=) 3: 4AD77714823D11F0A5490821C4F9AE02.roa (hash: VRtVYC+afvhigywAUFy8UkGyU1t5gq1k2av2NI5KhIY=) 4: 12A7BCAEF38111F0BD16EA186E6F56BC.roa (hash: KqhFX4icDOCTSXY9ne92SSAOA4hgHD9Kp2H4jf9s4iA=) 5: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: Ic4R+w1Q3P51Ahg1QyjlaOiynLUhpiYZLqnU6ACR3P8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Jan 20 23:21:53 2026 GMT Not After : Jan 27 23:21:53 2026 GMT Subject: CN=69700e11-8bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7d:0e:9a:1f:9b:78:ac:8d:cd:6d:c5:ee:8f: e7:3c:2a:6d:23:05:2a:f3:c0:7c:bd:48:24:92:17: c9:98:0e:f0:17:31:ff:ae:02:bf:64:53:82:79:75: 0a:bc:b8:f4:13:12:8d:44:be:57:b5:7c:b9:56:c2: 61:96:6f:3b:0c:07:32:ed:cf:92:ca:f0:b9:70:fe: 59:89:b9:d4:0b:fb:c4:29:38:2e:ec:93:ed:7d:b9: 6a:85:ee:9c:d3:f2:b7:0d:d2:d4:e4:5d:b7:8e:c3: bf:12:5c:91:76:cf:a4:a5:41:31:53:e4:6f:f3:ff: 8a:6f:0f:e2:db:b7:db:58:be:1f:3c:84:4c:c3:7c: 11:11:88:a9:41:35:47:61:ef:8d:74:3d:de:5b:ad: d4:ee:ce:2e:b9:df:15:e4:17:29:46:30:4e:bb:f9: 90:50:4a:cb:77:be:b8:24:68:2d:a5:81:ee:86:bc: bf:37:ed:09:48:57:53:0c:7a:ee:3f:bc:6f:d5:ec: 3f:5c:f8:dd:79:16:f0:e5:5f:25:1d:9d:aa:35:22: 10:cc:d0:ba:03:b2:19:92:0f:42:d0:ec:a6:ae:e9: 74:92:07:bf:5b:7b:6e:18:04:e5:1e:cd:0e:97:b3: 6a:a5:b1:67:ae:45:d6:b4:ea:8d:e5:14:17:90:ef: 42:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:58:DC:DA:58:7A:C4:42:42:CF:88:42:AA:B4:F6:6B:CC:E5:18:45 X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4b:89:53:b8:7f:70:9d:fa:ca:9b:cf:84:07:3b:cf:21:cc: 37:9e:cb:3e:84:be:dc:28:52:67:5a:bd:ad:ba:4a:ef:d2:39: df:dc:71:1b:06:01:31:d8:6e:96:85:01:d7:dd:fe:e6:f3:98: 1f:88:65:bf:8d:fc:ba:db:19:d9:29:54:cf:c7:f5:10:e4:d7: 34:75:83:84:ce:c6:db:0d:fa:58:19:32:d2:6e:fc:7a:f3:0a: 29:1e:f7:67:4c:29:91:28:0c:e8:c4:45:0a:6f:45:98:06:0a: e7:23:eb:df:80:b6:ab:6b:0c:a4:7a:f1:a7:04:67:25:41:e9: 5b:23:c9:6e:2b:9c:db:81:35:fa:bc:d6:59:34:83:d5:06:d4: ef:88:ac:2a:44:eb:6f:33:30:07:10:e8:e5:8b:93:1f:e0:55: df:40:7b:b1:c5:50:9d:5c:10:ef:db:e0:1a:a9:d9:29:c8:5f: 63:d5:53:ec:6c:9d:4c:7a:63:35:25:d8:18:b2:4b:49:70:6f: 0f:1b:7f:54:a0:29:58:bc:d0:45:b3:00:06:44:88:9d:75:35: 06:b9:f6:56:45:f9:6b:1f:58:f3:e6:8e:bd:dd:b2:69:82:3e: af:8f:1e:61:dc:f5:8e:46:91:65:e6:b0:37:bf:b2:74:35:02: 47:32:f9:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjYwMTIwMjMyMTUzWhcNMjYwMTI3MjMyMTUzWjAYMRYwFAYD VQQDDA02OTcwMGUxMS04YmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5H0Omh+beKyNzW3F7o/nPCptIwUq88B8vUgkkhfJmA7wFzH/rgK/ZFOCeXUK vLj0ExKNRL5XtXy5VsJhlm87DAcy7c+SyvC5cP5ZibnUC/vEKTgu7JPtfblqhe6c 0/K3DdLU5F23jsO/ElyRds+kpUExU+Rv8/+Kbw/i27fbWL4fPIRMw3wREYipQTVH Ye+NdD3eW63U7s4uud8V5BcpRjBOu/mQUErLd764JGgtpYHuhry/N+0JSFdTDHru P7xv1ew/XPjdeRbw5V8lHZ2qNSIQzNC6A7IZkg9C0Oymrul0kge/W3tuGATlHs0O l7NqpbFnrkXWtOqN5RQXkO9CIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBY3NpY esRCQs+IQqq09mvM5RhFMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6S4lTuH9wnfrKm8+EBzvPIcw3nss+hL7cKFJnWr2tukrv0jnf3HEb BgEx2G6WhQHX3f7m85gfiGW/jfy62xnZKVTPx/UQ5Nc0dYOEzsbbDfpYGTLSbvx6 8wopHvdnTCmRKAzoxEUKb0WYBgrnI+vfgLarawykevGnBGclQelbI8luK5zbgTX6 vNZZNIPVBtTviKwqROtvMzAHEOjli5Mf4FXfQHuxxVCdXBDv2+AaqdkpyF9j1VPs bJ1MemM1JdgYsktJcG8PG39UoClYvNBFswAGRIiddTUGufZWRflrH1jz5o693bJp gj6vjx5h3PWORpFl5rA3v7J0NQJHMvli -----END CERTIFICATE-----Generated at Wed Jan 21 14:16:06 2026 by rpki-client