This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft File: D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft (raw, json) Hash identifier: kHF40giq4ACdsfpJVKyEmyo5LoThL770Ii52LJlDUHo= Subject key identifier: BA:7B:02:F6:DB:D4:52:2B:F3:0E:63:BC:41:03:E0:09:68:82:71:8D Authority key identifier: 0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75 Certificate issuer: /CN=A91A9720/serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft Manifest number: 08 Signing time: Fri 09 Jan 2026 07:19:27 +0000 Manifest this update: Fri 09 Jan 2026 07:19:26 +0000 Manifest next update: Fri 16 Jan 2026 07:19:26 +0000 Files and hashes: 1: D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl (hash: RTqw6ExxTWnlbYlA0bZG8XLpflNju5fwV9k/YY9t1r0=) 2: 88128B34E55A11F0A78CF268396F56BC.roa (hash: HHL6kdnlbPDQz7AjXAsWLR46QCw18YsY0020DlTzrO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Jan 2026 07:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9720, serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075 Validity Not Before: Jan 9 07:19:26 2026 GMT Not After : Jan 16 07:19:26 2026 GMT Subject: CN=6960abff-544d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:e8:5c:bc:b6:e1:02:ef:89:9f:e4:a3:a7: 5e:d4:ef:dd:d4:73:d4:a3:ef:26:47:c1:3d:b2:ef: 1a:a6:08:ec:64:50:2d:95:85:94:60:63:d5:ea:2a: 84:ea:89:52:df:64:1a:59:61:a9:b7:c2:5f:7d:7c: fd:60:2a:7e:61:4b:36:af:16:17:e0:54:63:dd:df: 3b:0e:c6:fe:63:7f:11:e8:fc:8f:4f:3e:14:a0:44: d7:c3:5b:31:0c:ff:f7:8d:64:d6:3e:d8:b1:ed:59: 78:b6:81:c0:41:d6:f4:fa:81:29:1d:09:ca:2c:27: f2:5e:f3:d8:a0:72:84:d6:d0:0e:bb:2d:e1:0a:5c: 02:6b:e0:b1:4d:15:6d:d6:cd:84:98:90:e2:5b:6f: 80:77:c2:e3:65:56:64:c0:7e:b4:3f:39:38:0c:03: 49:b9:8d:dd:a0:24:6c:fb:d0:35:46:3b:68:b9:d9: d7:7f:8f:43:9e:64:c3:72:fa:38:ea:c0:d1:8b:f6: bd:64:08:70:d1:1b:2e:c0:57:9a:02:d1:93:1f:e6: e6:16:8e:d8:04:66:32:84:7a:91:be:19:5f:89:f4: fd:d2:3b:99:9f:ca:c3:e2:c2:43:57:d8:1c:b4:83: 29:b7:55:8a:da:66:44:56:0a:7b:5e:52:d7:50:e7: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7B:02:F6:DB:D4:52:2B:F3:0E:63:BC:41:03:E0:09:68:82:71:8D X509v3 Authority Key Identifier: keyid:0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:28:95:b6:11:9c:94:93:45:3d:04:b4:67:d5:14:10:1e:5b: bf:0b:22:70:e8:e3:e8:64:90:df:c1:a9:04:3c:56:94:ba:69: ec:10:bd:05:3d:fb:62:cc:e7:86:c5:1f:d4:3c:7f:a0:e7:03: bd:0d:de:cd:59:c9:21:6e:d7:43:de:14:45:45:5d:83:16:f6: 2f:0e:a6:0c:fe:7d:6c:71:6a:38:bf:13:a9:46:3d:19:8d:32: 5f:53:38:9f:54:45:c8:ff:39:59:a7:a2:41:3e:4d:d7:c6:ea: 4c:6e:34:19:b7:2e:a5:77:13:63:f2:71:35:a1:a1:04:0e:5e: 3b:40:e9:96:52:f1:e6:98:5f:e4:04:36:92:f3:a5:f4:66:9c: 91:fc:b0:19:b9:5b:17:27:61:38:33:80:ca:4b:d4:27:af:6f: cb:01:8c:05:88:ee:2a:9a:77:ef:36:bb:22:f0:3e:cb:33:70: bf:5f:a0:99:2d:69:ad:72:d1:7e:f8:a3:ae:17:a9:59:e2:50: a5:9b:17:06:14:7b:cd:ec:17:f8:ed:d3:9b:72:14:4e:d1:27: 44:ea:fd:fe:07:93:47:48:87:5e:95:92:62:92:8a:d7:f8:7b: 73:e6:5f:63:7f:80:49:e1:9d:db:71:66:c0:b8:02:c2:83:2d: ef:85:c6:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFB OTcyMDExMC8GA1UEBRMoMEY1NDY3QTlEMUVCMDk4QjUyQ0MxMzlENTc0M0I0NzQ1 QkY1OTA3NTAeFw0yNjAxMDkwNzE5MjZaFw0yNjAxMTYwNzE5MjZaMBgxFjAUBgNV BAMMDTY5NjBhYmZmLTU0NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGr+hcvLbhAu+Jn+Sjp17U793Uc9Sj7yZHwT2y7xqmCOxkUC2VhZRgY9XqKoTq iVLfZBpZYam3wl99fP1gKn5hSzavFhfgVGPd3zsOxv5jfxHo/I9PPhSgRNfDWzEM //eNZNY+2LHtWXi2gcBB1vT6gSkdCcosJ/Je89igcoTW0A67LeEKXAJr4LFNFW3W zYSYkOJbb4B3wuNlVmTAfrQ/OTgMA0m5jd2gJGz70DVGO2i52dd/j0OeZMNy+jjq wNGL9r1kCHDRGy7AV5oC0ZMf5uYWjtgEZjKEepG+GV+J9P3SO5mfysPiwkNX2By0 gym3VYraZkRWCnteUtdQ5z1hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUunsC9tvU UivzDmO8QQPgCWiCcY0wHwYDVR0jBBgwFoAUD1RnqdHrCYtSzBOdV0O0dFv1kHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5NzIwLzUxOUMxMDRFRTU1 OTExRjBCMjI4ODk1ODM4NkY1NkJDL0QxUm5xZEhyQ1l0U3pCT2RWME8wZEZ2MWtI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDFSbnFkSHJDWXRTekJPZFYwTzBkRnYxa0hVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 NzIwLzUxOUMxMDRFRTU1OTExRjBCMjI4ODk1ODM4NkY1NkJDL0QxUm5xZEhyQ1l0 U3pCT2RWME8wZEZ2MWtIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABUolbYRnJSTRT0EtGfVFBAeW78LInDo4+hkkN/BqQQ8VpS6aewQvQU9 +2LM54bFH9Q8f6DnA70N3s1ZySFu10PeFEVFXYMW9i8Opgz+fWxxaji/E6lGPRmN Ml9TOJ9URcj/OVmnokE+TdfG6kxuNBm3LqV3E2PycTWhoQQOXjtA6ZZS8eaYX+QE NpLzpfRmnJH8sBm5WxcnYTgzgMpL1Cevb8sBjAWI7iqad+82uyLwPsszcL9foJkt aa1y0X74o64XqVniUKWbFwYUe83sF/jt05tyFE7RJ0Tq/f4Hk0dIh16VkmKSitf4 e3PmX2N/gEnhndtxZsC4AsKDLe+FxhU= -----END CERTIFICATE-----Generated at Sat Jan 10 06:30:21 2026 by rpki-client