This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: 6qNlJkVq/8zeJDFxEwhDq/mRgF1T7qG/35MhJmmrxzc= Subject key identifier: 2F:57:11:81:B2:CF:93:0D:DC:5F:C0:A5:E5:4C:96:1C:48:C3:C3:0D Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 0BE93C4FB72B6ECC2A15A3FCED624E5DEA8A1129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: 0215 Signing time: Tue 27 Jan 2026 06:27:00 +0000 Manifest this update: Tue 27 Jan 2026 06:22:00 +0000 Manifest next update: Wed 28 Jan 2026 08:31:00 +0000 Files and hashes: 1: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: 84fsFqA4xpfTi+KHm47DPgX+eUSx4XhfzqHhkdPZtfo=) 2: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=) 3: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=) 4: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=) 5: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=) 6: 3130332e32352e3132342e302f32342d3234203d3e20313534303437.roa (hash: Vssq/QZ62h+n1ehYmeNIPp3ZdHP8q1YlxIRMrb3EDzM=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 08:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e9:3c:4f:b7:2b:6e:cc:2a:15:a3:fc:ed:62:4e:5d:ea:8a:11:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Jan 27 06:22:00 2026 GMT Not After : Jan 28 08:31:00 2026 GMT Subject: CN=2F571181B2CF930DDC5FC0A5E54C961C48C3C30D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f4:83:8d:3c:a7:2a:13:67:d1:fb:58:35:c1: b3:67:22:37:57:fe:fc:18:89:0e:7f:b0:b5:7d:06: 65:3d:29:1e:0a:79:4c:44:88:66:f6:17:57:e5:5f: 77:fe:3b:5c:ad:72:68:da:cf:ca:90:39:bd:6c:48: a7:70:8f:fe:4c:e3:66:00:6c:d8:81:8a:a8:ac:b9: 4a:97:36:4d:41:7a:7b:0c:a6:5b:73:b2:a3:5d:50: 7a:2b:29:10:49:19:fd:73:e7:bc:43:ca:d0:cf:c5: 29:17:fd:03:b4:05:24:4a:43:82:63:bb:57:03:ce: 86:e3:42:94:4c:e9:39:30:cf:bd:d7:f8:0b:49:bc: 87:90:58:ec:d2:7f:27:93:f6:e0:ef:4f:5d:dc:d3: d7:f2:c5:40:47:8b:4e:1b:47:6a:4f:6f:e1:12:8e: a4:da:c5:bc:76:88:25:04:9e:0b:4e:8a:ad:40:ef: 0a:4c:19:aa:c2:a8:04:89:7c:8a:91:0d:e6:fe:95: 74:e0:aa:3f:6f:25:69:df:f7:7b:76:2a:a7:69:06: 8e:74:3d:cc:2e:30:a6:b3:dd:b0:ff:07:f9:e9:77: 4e:e6:48:1a:76:7b:27:04:b0:7e:3d:cf:d9:63:18: fd:21:24:80:2e:d2:30:5c:36:7d:60:fa:28:6f:96: d6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:57:11:81:B2:CF:93:0D:DC:5F:C0:A5:E5:4C:96:1C:48:C3:C3:0D X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:d8:eb:e8:57:17:84:7d:0e:c0:3d:b3:d8:53:ea:1e:a1:da: c4:35:2a:d5:d9:19:9c:24:1c:51:5d:87:c1:49:53:8f:9f:13: 1c:c5:c7:50:45:19:c1:b3:85:15:76:59:8f:d5:b6:d0:2f:cb: a5:7d:af:54:f0:68:7f:a3:7f:fc:ea:64:da:ef:a0:01:5a:8c: 49:fd:5d:6f:27:eb:b9:d8:2b:94:92:3c:83:b0:a0:c4:94:23: f5:41:21:47:3e:cd:17:ea:45:d6:ce:4c:47:10:d0:51:8b:a4: c1:02:d8:d4:34:bd:f0:d6:f0:6c:81:01:f0:73:d7:21:ac:63: 3b:28:63:47:c5:5d:fa:50:7e:b2:fb:2c:df:41:58:6b:63:56: 09:2c:5d:d5:75:52:86:1d:bf:9f:d6:80:fb:48:64:ed:46:e1: 34:f9:00:4c:bd:73:ab:b5:9a:4e:d9:3e:78:99:56:20:a9:d8: 9e:04:23:ba:88:6a:90:e3:38:cd:64:cc:ee:4c:f5:d0:23:01: d2:ec:69:25:8f:5c:7f:e1:af:17:5b:98:9d:f5:2d:5e:aa:be: 73:5c:d5:50:a8:e9:05:27:e7:3d:f5:57:99:44:24:cb:9b:1f: 39:10:14:88:15:0c:57:22:00:6f:d8:c4:5e:a2:be:4d:6e:c3: a4:60:26:07 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUC+k8T7crbswqFaP87WJOXeqKESkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI2MDEyNzA2MjIwMFoX DTI2MDEyODA4MzEwMFowMzExMC8GA1UEAxMoMkY1NzExODFCMkNGOTMwRERDNUZD MEE1RTU0Qzk2MUM0OEMzQzMwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI70g408pyoTZ9H7WDXBs2ciN1f+/BiJDn+wtX0GZT0pHgp5TESIZvYXV+Vf d/47XK1yaNrPypA5vWxIp3CP/kzjZgBs2IGKqKy5Spc2TUF6ewymW3Oyo11Qeisp EEkZ/XPnvEPK0M/FKRf9A7QFJEpDgmO7VwPOhuNClEzpOTDPvdf4C0m8h5BY7NJ/ J5P24O9PXdzT1/LFQEeLThtHak9v4RKOpNrFvHaIJQSeC06KrUDvCkwZqsKoBIl8 ipEN5v6VdOCqP28lad/3e3Yqp2kGjnQ9zC4wprPdsP8H+el3TuZIGnZ7JwSwfj3P 2WMY/SEkgC7SMFw2fWD6KG+W1s8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBQvVxGB ss+TDdxfwKXlTJYcSMPDDTAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAYdjr6FcXhH0OwD2z2FPqHqHaxDUq1dkZnCQcUV2HwUlTj58T HMXHUEUZwbOFFXZZj9W20C/LpX2vVPBof6N//Opk2u+gAVqMSf1dbyfrudgrlJI8 g7CgxJQj9UEhRz7NF+pF1s5MRxDQUYukwQLY1DS98NbwbIEB8HPXIaxjOyhjR8Vd +lB+svss30FYa2NWCSxd1XVShh2/n9aA+0hk7UbhNPkATL1zq7WaTtk+eJlWIKnY ngQjuohqkOM4zWTM7kz10CMB0uxpJY9cf+GvF1uYnfUtXqq+c1zVUKjpBSfnPfVX mUQky5sfORAUiBUMVyIAb9jEXqK+TW7DpGAmBw== -----END CERTIFICATE-----Generated at Tue Jan 27 14:58:10 2026 by rpki-client