This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft File: 0XRFPpVj66_LuzKsxs-Gb72OIvA.mft (raw, json) Hash identifier: 1jtO9IZGHHi3nWMQdr+Oz4FeOsdrwmVKzmfVR/SNYZQ= Subject key identifier: D8:59:3A:45:91:47:24:43:C1:70:4C:BD:5B:EC:3B:88:B6:EB:8F:16 Authority key identifier: D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0 Certificate issuer: /CN=A9187325/serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft Manifest number: D8 Signing time: Sat 17 Jan 2026 04:47:12 +0000 Manifest this update: Sat 17 Jan 2026 04:47:12 +0000 Manifest next update: Sat 24 Jan 2026 04:47:12 +0000 Files and hashes: 1: 0XRFPpVj66_LuzKsxs-Gb72OIvA.crl (hash: SuAj/OAwaOkOwrixbX6gUAU4Ly5AIFueTLqRaTEq4Ys=) 2: D9DB29CCAAEF11EF9187EE2AC4F9AE02.roa (hash: UULK3IGuSeSocS4VpNG3+RJ93iY/9M8brkzgIb2XiCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 04:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187325, serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0 Validity Not Before: Jan 17 04:47:12 2026 GMT Not After : Jan 24 04:47:12 2026 GMT Subject: CN=696b1450-4aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e6:2f:b3:04:18:3a:43:db:a1:31:9d:40:38: f9:0c:a9:f6:e3:4d:f1:b8:02:d1:67:00:2b:dc:82: ab:e7:18:c0:ae:60:28:d1:f4:8f:3d:56:28:2d:7c: d8:6c:be:0e:6b:92:f2:f7:c2:df:09:79:bb:97:d6: fa:93:6b:99:cf:65:69:c1:7c:77:a1:1a:3e:cf:df: 89:16:95:90:5e:c4:8b:be:d3:ba:f7:67:f8:cb:62: ef:8f:5d:02:c2:86:9f:de:d5:5b:ca:f9:2d:1e:05: a9:a2:55:e2:de:3b:e9:2b:14:31:17:cd:c5:2b:8c: e9:f9:ca:1f:20:00:9b:95:7d:c5:62:a4:0c:cd:bf: df:ca:ce:6f:df:dc:ce:d9:ce:2e:cb:a6:d9:93:cf: 39:a1:af:9d:29:80:a5:90:a9:9e:95:2f:fb:79:9d: 4a:c9:19:21:ca:61:fb:29:e9:a7:a0:39:a3:92:09: 0e:b5:eb:98:c0:1a:0a:a9:20:2f:eb:c8:ea:91:bc: 7a:52:b3:17:d6:c3:df:38:13:c6:74:13:6d:fd:38: e3:92:ab:86:25:6e:36:56:65:7e:19:23:e7:bb:3f: 68:f5:41:0a:61:e7:cf:76:e3:f8:c4:57:a8:12:d6: f0:2d:fe:a1:88:14:b2:52:a4:c2:c1:dc:55:50:c8: fe:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:59:3A:45:91:47:24:43:C1:70:4C:BD:5B:EC:3B:88:B6:EB:8F:16 X509v3 Authority Key Identifier: keyid:D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:5e:6b:05:19:18:f3:61:e5:38:9e:63:25:a4:72:1f:00:71: fa:6d:36:de:d3:67:71:1b:55:be:b6:b8:1a:7a:95:0d:74:66: 16:a6:bf:5e:d2:05:9b:44:97:cf:12:ba:c7:1a:2e:07:9a:9c: a0:f2:f7:dd:e2:4f:f0:c5:e8:4c:45:5a:10:8f:c8:55:f3:ce: 3b:31:9b:3d:7e:ad:16:ad:1d:6f:5c:5c:8f:f8:92:32:64:f1: b3:c3:ea:3e:05:1f:6e:db:25:bc:8d:6d:5e:0f:88:82:47:54: 11:02:21:db:5a:c6:ed:9a:46:70:ea:8b:e2:32:d8:c0:22:47: 8c:f9:9c:b2:bf:90:21:c9:17:6d:ea:c3:ba:80:c2:36:60:ed: 32:c7:20:d8:b8:77:69:a7:f9:ac:64:a6:95:35:6d:65:17:ee: ef:e1:83:f6:31:3d:20:4f:cc:9a:4a:83:47:b5:af:a2:e0:a9: 83:3f:0d:98:a9:56:52:13:64:8e:ee:56:2a:ac:a3:1c:1e:b8: 94:d5:a4:cb:04:18:62:72:f2:42:fc:70:6b:ff:72:74:3c:ef: 18:60:ef:84:b0:69:2e:ae:b9:91:ec:d8:59:1b:bc:03:b3:24: 54:db:87:a0:cd:ac:12:18:6f:a6:6c:75:6a:f2:60:23:fd:8a: 90:b8:81:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx ODczMjUxMTAvBgNVBAUTKEQxNzQ0NTNFOTU2M0VCQUZDQkJCMzJBQ0M2Q0Y4NjZG QkQ4RTIyRjAwHhcNMjYwMTE3MDQ0NzEyWhcNMjYwMTI0MDQ0NzEyWjAYMRYwFAYD VQQDDA02OTZiMTQ1MC00YWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOYvswQYOkPboTGdQDj5DKn2403xuALRZwAr3IKr5xjArmAo0fSPPVYoLXzY bL4Oa5Ly98LfCXm7l9b6k2uZz2VpwXx3oRo+z9+JFpWQXsSLvtO692f4y2Lvj10C woaf3tVbyvktHgWpolXi3jvpKxQxF83FK4zp+cofIACblX3FYqQMzb/fys5v39zO 2c4uy6bZk885oa+dKYClkKmelS/7eZ1KyRkhymH7KemnoDmjkgkOteuYwBoKqSAv 68jqkbx6UrMX1sPfOBPGdBNt/TjjkquGJW42VmV+GSPnuz9o9UEKYefPduP4xFeo EtbwLf6hiBSyUqTCwdxVUMj+lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhZOkWR RyRDwXBMvVvsO4i2648WMB8GA1UdIwQYMBaAFNF0RT6VY+uvy7syrMbPhm+9jiLw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzMyNS83QjMzNEE0QUFB RTkxMUVGQjcyMUMyNURDNEY5QUUwMi8wWFJGUHBWajY2X0x1ektzeHMtR2I3Mk9J dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBYUkZQcFZqNjZfTHV6S3N4cy1HYjcyT0l2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzMyNS83QjMzNEE0QUFBRTkxMUVGQjcyMUMyNURDNEY5QUUwMi8wWFJGUHBWajY2 X0x1ektzeHMtR2I3Mk9JdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoXmsFGRjzYeU4nmMlpHIfAHH6bTbe02dxG1W+trgaepUNdGYWpr9e 0gWbRJfPErrHGi4Hmpyg8vfd4k/wxehMRVoQj8hV8847MZs9fq0WrR1vXFyP+JIy ZPGzw+o+BR9u2yW8jW1eD4iCR1QRAiHbWsbtmkZw6oviMtjAIkeM+Zyyv5AhyRdt 6sO6gMI2YO0yxyDYuHdpp/msZKaVNW1lF+7v4YP2MT0gT8yaSoNHta+i4KmDPw2Y qVZSE2SO7lYqrKMcHriU1aTLBBhicvJC/HBr/3J0PO8YYO+EsGkurrmR7NhZG7wD syRU24egzawSGG+mbHVq8mAj/YqQuIFI -----END CERTIFICATE-----Generated at Sun Jan 18 03:17:30 2026 by rpki-client