This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft File: dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json) Hash identifier: PbjhFeLXvON/kbfEpUpbqVzbFpCHMZ3zAc641mRZfdU= Subject key identifier: 1E:47:E1:7D:C8:95:53:CC:13:E4:39:75:2C:A4:3A:42:A2:B1:49:D8 Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 Certificate issuer: /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft Manifest number: 39 Signing time: Sat 17 Jan 2026 06:29:15 +0000 Manifest this update: Sat 17 Jan 2026 06:29:15 +0000 Manifest next update: Sat 24 Jan 2026 06:29:15 +0000 Files and hashes: 1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: 7RsTFCd6coVjEPtPSDarTO0jeNpc4Qed9teeb3GR1Do=) 2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: /OONPuUDLnHhTMEraEKTABbJUmrt5brSg9FbXWyrZbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Validity Not Before: Jan 17 06:29:15 2026 GMT Not After : Jan 24 06:29:15 2026 GMT Subject: CN=696b2c3b-9b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:24:d3:53:39:95:d0:12:06:81:2e:bc:c9: a6:4f:84:fd:db:6d:fa:b2:aa:92:72:b1:dc:fb:78: 7b:12:5e:b5:73:be:e8:d7:d3:5c:bc:b9:55:f5:93: 09:71:7f:fd:cb:97:de:59:48:29:31:81:02:ba:11: d0:4d:f1:ba:10:69:94:fc:30:c3:a8:13:10:b1:03: c2:8d:80:c3:29:39:5a:63:99:92:60:eb:54:98:13: 6a:bd:ed:e7:c4:63:5c:d8:85:8c:66:11:de:97:ef: 6b:5a:42:3a:51:e2:42:a7:c7:ad:3e:ab:1a:a5:e2: 17:a2:e6:96:4a:89:bb:57:ca:b7:af:a9:0f:7e:c6: 19:c0:5d:0f:4d:75:de:cf:af:56:7c:2b:92:05:e3: 94:0f:3f:1e:9b:46:52:95:d2:ed:7c:21:c6:82:88: 2c:72:2a:2c:5e:59:a6:5e:1d:75:6e:4c:8d:62:4a: 28:6a:41:48:a6:ef:b4:0c:2e:29:65:b6:7c:e6:0b: 30:ad:43:89:17:77:1a:b0:a2:4e:7d:7d:78:44:3c: 83:43:e6:71:e9:fe:f6:4e:97:db:92:fe:0e:99:d2: cd:f1:b7:ca:d8:83:50:6f:72:0e:eb:f9:19:b4:d3: a6:c8:70:64:ce:aa:ad:bc:cd:ce:61:a5:46:a9:17: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:47:E1:7D:C8:95:53:CC:13:E4:39:75:2C:A4:3A:42:A2:B1:49:D8 X509v3 Authority Key Identifier: keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:9f:24:e9:42:0d:5a:88:7d:cd:a8:f6:a4:1d:1a:ed:95:a2: 36:2f:5f:09:aa:e9:1c:b5:76:da:39:b9:1e:c2:8d:9a:b8:a4: b7:d6:6a:13:78:41:e4:65:b0:4b:1c:33:fc:27:fa:b8:2a:7d: aa:ec:6d:19:02:63:60:86:4e:17:30:7a:74:f0:25:8e:8e:81: 98:70:a9:da:b9:1a:fd:6d:99:ae:f4:4f:66:a9:74:50:f4:88: b3:f3:4f:dc:99:24:f6:87:39:17:5c:cd:5d:46:77:f3:f6:d5: c7:ba:63:62:5e:28:3f:6d:ab:77:10:fb:de:01:b2:4d:16:fd: 77:e6:7a:e0:76:14:af:c1:ad:0b:e9:36:e9:15:25:68:d9:3f: 50:10:93:8e:8a:8b:81:c9:d6:21:7e:24:c9:c7:9c:1e:ec:05: 76:a7:83:89:31:2d:8d:9a:43:4c:be:b6:cd:09:f4:ae:a7:a1: 10:05:dd:6d:fc:d2:e9:62:90:e6:3b:0b:4e:23:f5:c2:4f:0c: 30:f6:54:ca:a4:5c:10:0a:e9:c5:39:9e:2a:30:f8:4c:d3:6d: f3:55:3a:f2:7a:a7:e1:79:0f:af:c4:6c:92:41:2d:3a:77:6f: a8:c1:3b:a6:6f:72:f9:61:49:68:5f:bd:89:2e:83:49:49:79: 74:41:4e:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTI1OTExMC8GA1UEBRMoNzQ1MDM2MDk3NDI5Q0MxQUM3NkM0Qzk5ODk4RDA2Rjgz RTA3NUMxMzAeFw0yNjAxMTcwNjI5MTVaFw0yNjAxMjQwNjI5MTVaMBgxFjAUBgNV BAMMDTY5NmIyYzNiLTliOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4ZSTTUzmV0BIGgS68yaZPhP3bbfqyqpJysdz7eHsSXrVzvujX01y8uVX1kwlx f/3Ll95ZSCkxgQK6EdBN8boQaZT8MMOoExCxA8KNgMMpOVpjmZJg61SYE2q97efE Y1zYhYxmEd6X72taQjpR4kKnx60+qxql4hei5pZKibtXyrevqQ9+xhnAXQ9Ndd7P r1Z8K5IF45QPPx6bRlKV0u18IcaCiCxyKixeWaZeHXVuTI1iSihqQUim77QMLill tnzmCzCtQ4kXdxqwok59fXhEPIND5nHp/vZOl9uS/g6Z0s3xt8rYg1Bvcg7r+Rm0 06bIcGTOqq28zc5hpUapF6TrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHkfhfciV U8wT5Dl1LKQ6QqKxSdgwHwYDVR0jBBgwFoAUdFA2CXQpzBrHbEyZiY0G+D4HXBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MjU5L0ZGOTA5MjhDOUNG ODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJySGJFeVppWTBHLUQ0SFhC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEZBMkNYUXB6QnJIYkV5WmlZMEctRDRIWEJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 MjU5L0ZGOTA5MjhDOUNGODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJy SGJFeVppWTBHLUQ0SFhCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAWfJOlCDVqIfc2o9qQdGu2VojYvXwmq6Ry1dto5uR7CjZq4pLfWahN4 QeRlsEscM/wn+rgqfarsbRkCY2CGThcwenTwJY6OgZhwqdq5Gv1tma70T2apdFD0 iLPzT9yZJPaHORdczV1Gd/P21ce6Y2JeKD9tq3cQ+94Bsk0W/XfmeuB2FK/BrQvp NukVJWjZP1AQk46Ki4HJ1iF+JMnHnB7sBXang4kxLY2aQ0y+ts0J9K6noRAF3W38 0ulikOY7C04j9cJPDDD2VMqkXBAK6cU5niow+EzTbfNVOvJ6p+F5D6/EbJJBLTp3 b6jBO6ZvcvlhSWhfvYkug0lJeXRBTlE= -----END CERTIFICATE-----Generated at Sun Jan 18 03:17:31 2026 by rpki-client