This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json) Hash identifier: 6vRw1V11FlET6gxTpOC5anftWEyfiByf//iqJah0oUs= Subject key identifier: C7:A1:18:14:E4:B8:D0:1E:D0:E6:A5:B5:AE:97:32:76:90:9F:AD:F2 Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0E1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft Manifest number: 0DE4 Signing time: Mon 26 Jan 2026 17:33:33 +0000 Manifest this update: Mon 26 Jan 2026 17:33:32 +0000 Manifest next update: Mon 02 Feb 2026 17:33:32 +0000 Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: GYBEkhNOD3rp6JQWhbh0r01+Rcx5q6dMbTO6AJoI6pU=) 2: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: KMP4fS0KJ0rV6tzyJoqXTC8btS2FqftO8fBCSBS+5IE=) 3: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: TY0we0LCT2NhieXnw4ZC8SmWs1+jQYEFzS94Z1jJrh0=) 4: 8E8D88CC7FF911F09985006DC4F9AE02.roa (hash: ephMktk7dldPDpqOYOq0zlTVGd1aoKcLbgXlsFlKEgM=) 5: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: eIKfHf/XSmCHqSrtE/mqXSvnhQ2z8uL0Vg+6q1rOPNA=) 6: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: e7UzY1XC0eLBl2c9zPdawS11TdFN1eY25CHBco5Agic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 17:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3611 (0xe1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Jan 26 17:33:32 2026 GMT Not After : Feb 2 17:33:32 2026 GMT Subject: CN=6977a56d-26de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:34:a0:d2:e1:00:2f:e7:67:8f:9f:de:32: e8:08:80:27:16:8d:c4:25:ec:7f:9e:e9:2d:15:9b: c7:dd:a8:89:48:b0:f3:d9:0f:9e:5f:59:d8:ce:53: f9:71:a0:62:8e:ed:c0:15:f7:27:df:f7:3e:20:25: 34:4c:eb:59:2b:ef:90:ec:0b:0f:15:ea:28:6f:93: b1:c9:17:5a:32:f0:44:e8:39:30:67:86:a3:ac:22: 4a:f5:03:18:26:6a:e1:7d:cb:97:35:94:37:23:e0: 04:b1:f9:ea:b5:aa:99:09:a1:10:e6:04:17:9b:45: 61:44:19:bf:5f:2b:b1:f7:58:9a:94:ca:bb:5b:2b: 19:90:f2:23:53:24:cb:79:64:6b:58:49:bc:4c:0e: 9c:16:49:01:a0:b2:b2:38:7e:d2:9f:08:da:2a:d4: 20:ca:a5:8e:2a:9b:fa:dc:a5:35:5f:5d:87:2c:84: 96:96:7f:fc:8d:a5:19:8c:92:63:37:6d:2e:0a:0e: bb:f6:6b:3f:f4:92:03:83:7b:c1:14:ae:a8:02:ea: 2a:7e:8f:d3:6c:18:3e:a8:10:a8:ae:df:8a:6c:a5: 52:ea:86:be:50:95:29:60:84:d6:88:ba:c2:18:1a: 32:13:73:9c:6f:0f:f4:32:2a:64:09:4f:50:85:1f: ed:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A1:18:14:E4:B8:D0:1E:D0:E6:A5:B5:AE:97:32:76:90:9F:AD:F2 X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d0:9e:95:ee:dd:b4:7f:dc:ad:50:7a:f5:5a:fe:b7:35:f1: 59:c1:70:f4:ae:28:d9:eb:0b:53:06:3b:1a:ca:ad:a3:82:82: 5b:e2:ce:a3:05:e6:58:f0:9b:cc:ce:39:5f:99:48:65:25:d9: 31:72:f3:b8:45:1a:c6:5b:b6:4c:d6:11:3e:dc:61:53:ba:1e: b2:92:e7:27:69:81:1a:1c:79:4c:48:6c:15:d6:af:0c:9c:5f: 38:e4:2c:69:86:35:64:d6:80:78:50:42:aa:f8:69:b4:12:4f: 3c:51:22:ca:5a:0e:eb:43:0b:c4:80:ce:85:6e:33:2a:73:41: 72:22:78:05:b2:c8:52:f6:10:73:f1:fd:1d:4d:de:ab:95:5d: a7:65:82:7b:fc:8f:47:1d:dd:ae:31:12:52:27:f5:68:35:0a: c3:f9:56:4c:2e:55:f5:77:5d:3f:75:8a:84:b3:79:01:84:17: cd:55:f2:6d:8b:be:e2:d5:52:c5:9a:80:99:6a:03:b9:b6:86: 2c:8f:c6:ce:7d:11:84:e4:e4:e5:6c:86:0f:2e:98:8a:02:d3: 54:7f:3f:8b:28:b3:7a:7e:93:5f:0b:b5:b5:c3:cb:4b:7f:4c: 38:d0:e5:71:9c:f1:80:b7:4c:ec:eb:b2:34:91:f5:1c:8e:51: ad:49:1f:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjYwMTI2MTczMzMyWhcNMjYwMjAyMTczMzMyWjAYMRYwFAYD VQQDDA02OTc3YTU2ZC0yNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+Y0oNLhAC/nZ4+f3jLoCIAnFo3EJex/nuktFZvH3aiJSLDz2Q+eX1nYzlP5 caBiju3AFfcn3/c+ICU0TOtZK++Q7AsPFeoob5OxyRdaMvBE6DkwZ4ajrCJK9QMY JmrhfcuXNZQ3I+AEsfnqtaqZCaEQ5gQXm0VhRBm/Xyux91ialMq7WysZkPIjUyTL eWRrWEm8TA6cFkkBoLKyOH7SnwjaKtQgyqWOKpv63KU1X12HLISWln/8jaUZjJJj N20uCg679ms/9JIDg3vBFK6oAuoqfo/TbBg+qBCort+KbKVS6oa+UJUpYITWiLrC GBoyE3Ocbw/0MipkCU9QhR/tMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMehGBTk uNAe0Oalta6XMnaQn63yMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD SEhqSWdwRzczMXhSS2pQMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF0J6V7t20f9ytUHr1Wv63NfFZwXD0rijZ6wtTBjsayq2jgoJb4s6j BeZY8JvMzjlfmUhlJdkxcvO4RRrGW7ZM1hE+3GFTuh6ykucnaYEaHHlMSGwV1q8M nF845CxphjVk1oB4UEKq+Gm0Ek88USLKWg7rQwvEgM6FbjMqc0FyIngFsshS9hBz 8f0dTd6rlV2nZYJ7/I9HHd2uMRJSJ/VoNQrD+VZMLlX1d10/dYqEs3kBhBfNVfJt i77i1VLFmoCZagO5toYsj8bOfRGE5OTlbIYPLpiKAtNUfz+LKLN6fpNfC7W1w8tL f0w40OVxnPGAt0zs67I0kfUcjlGtSR8G -----END CERTIFICATE-----Generated at Tue Jan 27 17:52:35 2026 by rpki-client