This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft File: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json) Hash identifier: vkEqNMDth2uNFNjqMwr7GK12kgbtCH5GuC+yjXrhIj4= Subject key identifier: 0F:FE:90:42:45:F8:81:A4:C2:E2:86:F9:6E:CC:A1:5F:B0:66:53:2B Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 Certificate issuer: /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft Manifest number: 01BA Signing time: Mon 19 Jan 2026 02:17:03 +0000 Manifest this update: Mon 19 Jan 2026 02:17:03 +0000 Manifest next update: Mon 26 Jan 2026 02:17:03 +0000 Files and hashes: 1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: B+4P5jyN0tOo1gG4IZ57PtVDZwwlqSLR8AkSQxwRXHQ=) 2: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: R7rPLcu7KBIwwKHWQWTFZ/O5x8NWRmyKksg1gxkuSH8=) 3: 337F4584817E11F08861A82EC4F9AE02.roa (hash: KuMW19KH73/hFw8JKl9ArAOUwXbSFArQygkA6LoPJk4=) 4: 4B2AA57A817E11F09C78E12EC4F9AE02.roa (hash: REOJoaqVdrJhNGonqBJNmT+BZxMjjyhTcxLRbt3wFv8=) 5: C45AC058825811F09D83BD57C4F9AE02.roa (hash: awWR/tTohg7Dk0K+TdJ2AhHUsvle/tzHsjESu5B0y7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 02:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Validity Not Before: Jan 19 02:17:03 2026 GMT Not After : Jan 26 02:17:03 2026 GMT Subject: CN=696d941f-c26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:49:93:b4:c7:ad:c2:ce:3e:2a:00:53:c0: 5e:7a:1f:a8:9d:20:e6:e2:fc:3f:9c:71:00:f0:87: 0b:0d:f6:36:cf:3c:7b:3c:f7:3d:9f:9f:3e:3c:e0: 81:5a:9b:4b:66:a5:98:3b:ec:c7:a7:8f:bb:7d:41: 87:bf:b4:3e:64:4b:77:15:51:37:2b:e5:08:4d:e7: 10:eb:ac:1f:43:e1:ea:b6:35:46:87:5e:fe:60:a7: 5a:24:eb:4e:13:90:87:3a:1d:d5:e4:89:7c:e1:73: 1c:03:39:9c:b6:27:a4:3f:20:c0:89:dc:89:13:d8: 94:e1:db:6d:90:f7:d2:a5:d9:48:25:e8:87:59:b3: 4f:95:83:18:8f:da:29:a8:0e:32:f1:61:2f:f4:d8: 1d:04:b6:68:e4:ec:95:dd:76:94:d1:ad:e8:e5:ad: b6:67:9c:e4:73:07:57:b4:30:43:5f:fe:6f:a7:a7: fb:0a:01:41:ff:33:03:e9:eb:d7:01:bf:db:e0:96: 53:b6:3d:72:76:f8:99:73:d9:76:34:b6:c5:2a:09: 98:8f:42:a2:c0:61:36:c7:03:0d:1b:1d:52:4e:38: 80:f8:13:98:f6:08:89:78:a7:b7:7b:b6:d4:9a:bb: 46:43:35:48:c6:1a:24:82:5f:16:b4:18:77:75:81: 7a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FE:90:42:45:F8:81:A4:C2:E2:86:F9:6E:CC:A1:5F:B0:66:53:2B X509v3 Authority Key Identifier: keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:99:8a:cb:9d:b8:05:12:5e:67:76:89:a3:60:60:1e:68:41: 02:56:a6:6d:31:52:97:97:70:20:fa:6b:b9:20:55:7f:41:0a: 29:d7:72:03:93:29:d7:bc:e3:fe:fc:52:2e:dd:b1:26:e3:e5: 00:b8:da:be:0b:23:1d:c3:70:9b:c6:77:b5:31:53:a6:fc:75: 90:3c:23:a7:af:35:37:96:a1:9e:24:09:4d:07:ec:da:65:b3: 83:3d:da:30:27:6a:6c:79:9d:40:f7:97:70:18:b7:61:3e:67: a0:3d:1e:f9:5b:83:a0:0c:21:fe:e4:dc:6c:50:47:43:0b:f6: b1:c0:80:50:cf:5e:e2:7f:9a:81:00:1d:b1:eb:d1:5d:a7:37: 24:29:f6:37:05:97:d7:d8:c1:71:89:c7:3a:37:fe:f0:27:3b: 3f:15:b6:27:82:7d:94:23:cf:01:d0:92:8b:52:6c:c4:46:f7: ec:47:7e:25:38:6f:3b:de:09:b4:96:19:49:1b:78:9d:b8:be: 89:95:a3:c8:c0:8e:6a:34:6a:b6:82:02:43:da:8c:7e:94:1c: 6e:45:43:28:b9:6e:f8:ad:dc:bc:bb:ce:33:d4:94:60:30:ea: 93:99:cb:ae:ab:16:cf:a0:8d:38:bd:37:95:5d:4b:73:e4:e3: 93:29:47:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA3NTMxMTAvBgNVBAUTKERBRDc4Q0FDMzZEMTQzRjE3NEFCRTExMkQ0OTVFRDVB MDZFQ0E3NDAwHhcNMjYwMTE5MDIxNzAzWhcNMjYwMTI2MDIxNzAzWjAYMRYwFAYD VQQDDA02OTZkOTQxZi1jMjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqelJk7THrcLOPioAU8Beeh+onSDm4vw/nHEA8IcLDfY2zzx7PPc9n58+POCB WptLZqWYO+zHp4+7fUGHv7Q+ZEt3FVE3K+UITecQ66wfQ+HqtjVGh17+YKdaJOtO E5CHOh3V5Il84XMcAzmctiekPyDAidyJE9iU4dttkPfSpdlIJeiHWbNPlYMYj9op qA4y8WEv9NgdBLZo5OyV3XaU0a3o5a22Z5zkcwdXtDBDX/5vp6f7CgFB/zMD6evX Ab/b4JZTtj1ydviZc9l2NLbFKgmYj0KiwGE2xwMNGx1STjiA+BOY9giJeKe3e7bU mrtGQzVIxhokgl8WtBh3dYF67wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/+kEJF +IGkwuKG+W7MoV+wZlMrMB8GA1UdIwQYMBaAFNrXjKw20UPxdKvhEtSV7VoG7KdA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDc1My84RUYyNEExMjVC NkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFfRjBxLUVTMUpYdFdnYnNw MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0ZU1yRGJSUV9GMHEtRVMxSlh0V2dic3AwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDc1My84RUYyNEExMjVCNkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFf RjBxLUVTMUpYdFdnYnNwMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtmYrLnbgFEl5ndomjYGAeaEECVqZtMVKXl3Ag+mu5IFV/QQop13ID kynXvOP+/FIu3bEm4+UAuNq+CyMdw3Cbxne1MVOm/HWQPCOnrzU3lqGeJAlNB+za ZbODPdowJ2pseZ1A95dwGLdhPmegPR75W4OgDCH+5NxsUEdDC/axwIBQz17if5qB AB2x69FdpzckKfY3BZfX2MFxicc6N/7wJzs/FbYngn2UI88B0JKLUmzERvfsR34l OG873gm0lhlJG3iduL6JlaPIwI5qNGq2ggJD2ox+lBxuRUMouW74rdy8u84z1JRg MOqTmcuuqxbPoI04vTeVXUtz5OOTKUfx -----END CERTIFICATE-----Generated at Wed Jan 21 02:13:07 2026 by rpki-client