This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft File: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json) Hash identifier: N6Ump1Q+Ys5c54yPDjdh8jGkqM0s8fHkGgyJ1nN+heo= Subject key identifier: A6:1B:7D:F5:97:8F:A9:F1:3B:9B:D4:38:6E:FF:E1:14:80:9F:1C:7B Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Certificate serial: 05AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft Manifest number: 05A8 Signing time: Sat 24 Jan 2026 22:23:05 +0000 Manifest this update: Sat 24 Jan 2026 22:23:04 +0000 Manifest next update: Sat 31 Jan 2026 22:23:04 +0000 Files and hashes: 1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: Mb5C1uR0frsotl15/LM+yOQxFWdebxeGkMwVM4BPH2Q=) 2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: 2XbXZcyCmkwNngGPogkbhBm8QONSr+SCdJI+4quVjcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222FA, serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Validity Not Before: Jan 24 22:23:04 2026 GMT Not After : Jan 31 22:23:04 2026 GMT Subject: CN=69754648-12b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:38:6c:cd:b2:cc:43:ab:e7:6f:bd:29:21:57: 4e:18:27:46:f5:f6:5f:09:dd:8f:d0:7e:c1:dc:d4: 8d:23:48:9d:2a:fb:9f:fc:72:ea:6a:23:b3:85:ad: 75:9e:6b:9f:bc:21:67:b0:12:46:b8:ca:0f:66:5d: 56:70:db:23:a4:4c:37:0d:80:d8:68:33:2a:45:5a: d2:13:d0:97:12:0d:26:fa:10:2c:74:2c:9f:ad:da: 0f:98:c2:8c:64:12:85:0b:2b:a5:47:3f:c7:0a:22: 1f:2c:da:d0:31:3a:a5:22:a9:4d:0f:59:c5:b7:6c: 9f:f3:d6:e8:42:9b:f8:99:10:f9:65:e0:45:2c:05: 8f:50:25:5b:93:1c:d6:ec:9d:53:0f:f6:8e:2f:df: 3d:de:20:d1:e9:45:8f:d9:76:be:14:19:b2:c7:c4: 19:dd:97:dc:f5:0f:c4:a2:92:53:cb:b7:a1:ca:a9: 8b:77:bc:d0:f6:97:e1:fa:66:51:02:92:f0:e6:72: ca:7e:71:bd:67:56:77:78:7d:fc:55:56:4d:4b:6b: 31:00:b2:4a:59:0f:2a:4f:a3:0c:27:ff:95:8e:f7: 53:90:58:cd:8f:60:45:86:5e:57:61:59:cc:14:98: 67:7c:9b:29:6c:87:98:e7:1e:b2:24:d0:53:17:e5: 0f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1B:7D:F5:97:8F:A9:F1:3B:9B:D4:38:6E:FF:E1:14:80:9F:1C:7B X509v3 Authority Key Identifier: keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:09:2a:8c:8d:e3:16:1a:b6:b7:7c:d5:4f:65:c2:7d:11:88: d3:74:51:97:6a:82:8b:5d:55:27:6a:0e:6c:7f:81:2c:c7:c5: 43:fe:b6:6c:f1:af:11:94:3b:ee:16:34:95:ce:37:8f:38:c1: e3:ca:59:cb:25:01:f5:98:65:59:09:1b:78:62:0e:7f:56:22: 23:37:57:d3:a6:ac:d3:5c:9e:20:67:d0:fb:95:09:46:7b:21: cd:e7:5a:75:b3:c5:90:d8:e3:34:dc:6b:60:ea:35:a9:6b:04: 5d:19:a7:c8:4d:30:2e:70:cb:57:f6:79:21:4a:9b:66:ee:95: 99:fc:22:2d:3c:d7:87:b7:53:97:a7:c3:5e:c5:01:91:22:1c: 92:10:a5:32:e2:f9:79:6c:e2:cc:bb:bc:6c:32:f1:e4:db:7a: df:7d:47:1f:d8:bf:d1:cc:2e:18:15:85:d5:93:9e:25:34:36: 70:c7:94:5b:fc:a2:65:a4:d8:0b:79:69:4a:14:f2:34:b1:c2: a0:bf:64:00:9a:83:96:4e:e8:9a:80:c7:68:78:3f:dc:f9:3d: 95:b3:25:e5:bf:2a:78:1f:63:cd:6e:03:62:de:44:3c:50:38: fd:1c:29:42:8e:06:18:7b:34:33:fb:f8:34:10:97:9d:ea:ad: 1b:ce:35:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyRkExMTAvBgNVBAUTKEM3NDBERDQ5MjRDMDgyMzQxNzM3RTIxOUUxNUFFNjhG NzAxN0RDQjgwHhcNMjYwMTI0MjIyMzA0WhcNMjYwMTMxMjIyMzA0WjAYMRYwFAYD VQQDDA02OTc1NDY0OC0xMmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzhszbLMQ6vnb70pIVdOGCdG9fZfCd2P0H7B3NSNI0idKvuf/HLqaiOzha11 nmufvCFnsBJGuMoPZl1WcNsjpEw3DYDYaDMqRVrSE9CXEg0m+hAsdCyfrdoPmMKM ZBKFCyulRz/HCiIfLNrQMTqlIqlND1nFt2yf89boQpv4mRD5ZeBFLAWPUCVbkxzW 7J1TD/aOL9893iDR6UWP2Xa+FBmyx8QZ3Zfc9Q/EopJTy7ehyqmLd7zQ9pfh+mZR ApLw5nLKfnG9Z1Z3eH38VVZNS2sxALJKWQ8qT6MMJ/+VjvdTkFjNj2BFhl5XYVnM FJhnfJspbIeY5x6yJNBTF+UPnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYbffWX j6nxO5vUOG7/4RSAnxx7MB8GA1UdIwQYMBaAFMdA3UkkwII0FzfiGeFa5o9wF9y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJGQS9FODBEQUEyRUZB ODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdqUVhOLUlaNFZybWozQVgz TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwRGRTU1RBZ2pRWE4tSVo0VnJtajNBWDNMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJGQS9FODBEQUEyRUZBODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdq UVhOLUlaNFZybWozQVgzTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuCSqMjeMWGra3fNVPZcJ9EYjTdFGXaoKLXVUnag5sf4Esx8VD/rZs 8a8RlDvuFjSVzjePOMHjylnLJQH1mGVZCRt4Yg5/ViIjN1fTpqzTXJ4gZ9D7lQlG eyHN51p1s8WQ2OM03Gtg6jWpawRdGafITTAucMtX9nkhSptm7pWZ/CItPNeHt1OX p8NexQGRIhySEKUy4vl5bOLMu7xsMvHk23rffUcf2L/RzC4YFYXVk54lNDZwx5Rb /KJlpNgLeWlKFPI0scKgv2QAmoOWTuiagMdoeD/c+T2VsyXlvyp4H2PNbgNi3kQ8 UDj9HClCjgYYezQz+/g0EJed6q0bzjVn -----END CERTIFICATE-----Generated at Sun Jan 25 12:20:40 2026 by rpki-client