This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft File: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft (raw, json) Hash identifier: NFQM1/LHYCoaxrXFaAPjfWPtB1rJk6qvfKy6P/qOODs= Subject key identifier: 19:FE:95:20:0B:9B:97:75:92:54:9C:F0:A5:3F:0A:64:1D:44:D3:7C Authority key identifier: C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7 Certificate issuer: /CN=A91243FE/serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7 Certificate serial: 0427 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft Manifest number: 0423 Signing time: Sat 24 Jan 2026 23:32:15 +0000 Manifest this update: Sat 24 Jan 2026 23:32:14 +0000 Manifest next update: Sat 31 Jan 2026 23:32:14 +0000 Files and hashes: 1: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl (hash: fbTawrMqjhGDG+KXCt8As8lE8eUtIBhmPX8O6bdLq9g=) 2: 5ADF4C92956811EC9028F155C4F9AE02.roa (hash: 6C9pOBCK4sWDlaS78t/pprsEcl/8A0s9Wlk6KVMoAhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91243FE, serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7 Validity Not Before: Jan 24 23:32:14 2026 GMT Not After : Jan 31 23:32:14 2026 GMT Subject: CN=6975567f-9da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:91:cf:5b:c4:b9:c7:f1:f7:e3:18:fd:6e:8b: 18:f5:44:a0:67:d7:6c:23:1c:e6:f6:a9:ce:fd:39: ce:a3:e8:02:21:9d:78:2b:50:42:b3:d4:00:da:4b: ec:d6:f2:0b:69:9a:ba:48:37:e4:cf:ab:6e:e0:ca: 3f:b1:a8:c0:fd:ce:28:34:6a:62:c9:a6:7b:62:84: 7d:a4:1c:3f:43:70:fa:d5:4a:fa:4f:b7:65:d0:cb: 0b:96:b5:cb:b0:17:7b:30:ec:11:13:6c:cf:e8:59: 07:f1:2e:2a:39:0c:76:b1:2f:b0:50:13:34:08:a6: c5:0f:cd:a3:2e:e3:b1:40:74:81:09:04:8c:ae:04: 65:5e:d9:9c:37:69:d7:b5:45:86:17:67:1f:d6:8a: ec:8e:eb:aa:f9:f5:63:88:c9:b7:ff:c2:61:37:ed: 6f:d3:d6:93:a0:5d:09:21:03:24:39:94:48:2f:26: 52:56:7b:04:99:ed:e4:71:5c:b6:e6:cc:e0:7e:d4: c0:c8:9f:60:d0:e2:50:87:1b:bf:5e:67:06:90:07: 26:83:56:1f:80:f1:21:d9:4b:cd:f8:90:3a:8c:a5: 8e:20:78:03:08:9c:a7:09:cb:f9:2e:3f:ec:74:8f: e9:a9:40:4d:42:e8:36:bf:85:aa:f9:55:46:86:7e: 47:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FE:95:20:0B:9B:97:75:92:54:9C:F0:A5:3F:0A:64:1D:44:D3:7C X509v3 Authority Key Identifier: keyid:C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:0e:a3:e1:c0:73:53:6f:ed:24:84:2c:e3:09:73:6c:c7:db: ea:8c:59:32:30:0b:e5:ff:d8:54:dc:ea:cc:86:e8:db:aa:56: 87:4d:ad:3c:ed:fc:65:23:fa:b4:d6:ff:65:30:19:fc:db:c7: 8a:07:ef:5a:71:5b:c2:11:74:b9:96:74:57:c8:db:79:9e:1a: 1b:da:a2:bd:13:c3:e6:3c:40:5c:d2:6a:25:9a:93:5b:49:40: e9:01:5d:6c:8f:84:70:b2:b2:ab:fa:6f:2b:ca:7f:cd:44:bb: e8:11:fc:8d:29:ef:ba:37:86:4b:b8:9a:61:59:5b:3a:3c:3b: 89:c1:45:d5:04:71:32:c6:49:02:d5:93:cb:06:77:43:b3:71: 4c:85:0f:e4:c9:dc:30:ea:d4:da:cd:27:23:5d:30:75:96:98: bf:5a:50:ae:fc:2a:69:6d:df:79:73:b6:09:38:3c:d2:9f:f6: bc:71:0a:25:f5:de:0a:4d:a8:65:84:10:17:64:d2:0d:79:da: 01:b8:2d:68:67:32:d0:55:d1:4f:d8:ad:d0:c0:a7:26:c6:d2: 52:52:ff:b3:7a:d2:05:ca:b3:0f:9c:c9:17:33:8d:73:6b:fb: 73:8d:9b:28:05:fc:07:1e:42:60:a7:20:b6:c9:94:39:70:4a: 4a:4f:63:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzRkUxMTAvBgNVBAUTKEM3MEJGM0RGRjQ1MDIzRDQxQUY0QzRERjVENzY1MDQw QjkyNDFBQzcwHhcNMjYwMTI0MjMzMjE0WhcNMjYwMTMxMjMzMjE0WjAYMRYwFAYD VQQDDA02OTc1NTY3Zi05ZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZHPW8S5x/H34xj9bosY9USgZ9dsIxzm9qnO/TnOo+gCIZ14K1BCs9QA2kvs 1vILaZq6SDfkz6tu4Mo/sajA/c4oNGpiyaZ7YoR9pBw/Q3D61Ur6T7dl0MsLlrXL sBd7MOwRE2zP6FkH8S4qOQx2sS+wUBM0CKbFD82jLuOxQHSBCQSMrgRlXtmcN2nX tUWGF2cf1orsjuuq+fVjiMm3/8JhN+1v09aToF0JIQMkOZRILyZSVnsEme3kcVy2 5szgftTAyJ9g0OJQhxu/XmcGkAcmg1YfgPEh2UvN+JA6jKWOIHgDCJynCcv5Lj/s dI/pqUBNQug2v4Wq+VVGhn5H8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBn+lSAL m5d1klSc8KU/CmQdRNN8MB8GA1UdIwQYMBaAFMcL89/0UCPUGvTE3112UEC5JBrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDNGRS85ODE0ODA2Mjk1 NjUxMUVDOTE4M0JFNTNDNEY5QUUwMi94d3Z6M19SUUk5UWE5TVRmWFhaUVFMa2tH c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3dnozX1JRSTlRYTlNVGZYWFpRUUxra0dzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDNGRS85ODE0ODA2Mjk1NjUxMUVDOTE4M0JFNTNDNEY5QUUwMi94d3Z6M19SUUk5 UWE5TVRmWFhaUVFMa2tHc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxDqPhwHNTb+0khCzjCXNsx9vqjFkyMAvl/9hU3OrMhujbqlaHTa08 7fxlI/q01v9lMBn828eKB+9acVvCEXS5lnRXyNt5nhob2qK9E8PmPEBc0molmpNb SUDpAV1sj4RwsrKr+m8ryn/NRLvoEfyNKe+6N4ZLuJphWVs6PDuJwUXVBHEyxkkC 1ZPLBndDs3FMhQ/kydww6tTazScjXTB1lpi/WlCu/Cppbd95c7YJODzSn/a8cQol 9d4KTahlhBAXZNINedoBuC1oZzLQVdFP2K3QwKcmxtJSUv+zetIFyrMPnMkXM41z a/tzjZsoBfwHHkJgpyC2yZQ5cEpKT2NW -----END CERTIFICATE-----Generated at Sun Jan 25 10:55:13 2026 by rpki-client