This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft File: iXa1-0jy5BEdeNWjzVovyhlhOXo.mft (raw, json) Hash identifier: a8TjkRRA3gIqQzAjfm6wImzva3iAxI67b90Y8RZsVj4= Subject key identifier: 35:1B:45:AF:17:1D:0F:81:8C:E4:A5:39:64:8E:ED:23:0C:3C:A4:31 Authority key identifier: 89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A Certificate issuer: /CN=A9128C7F/serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft Manifest number: 0283 Signing time: Sun 25 Jan 2026 00:45:51 +0000 Manifest this update: Sun 25 Jan 2026 00:45:51 +0000 Manifest next update: Sun 01 Feb 2026 00:45:51 +0000 Files and hashes: 1: iXa1-0jy5BEdeNWjzVovyhlhOXo.crl (hash: ESGja0EfCDjNr+7J0sojCCLsLxQyFmdPSwX6/MZiuaY=) 2: FBE538ECC55511F0B6ACB62BC4F9AE02.roa (hash: Xm8YDhtFdsbSB/JaCf1eeLvxGvfVGvAsGyj9y3iXBIE=) 3: A0A9D798C0AB11F0B1CBD10FC4F9AE02.roa (hash: meFnR87+GI3v6nomBtYeU7WZPVYP4nD3qbJitsfc+J0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C7F, serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Validity Not Before: Jan 25 00:45:51 2026 GMT Not After : Feb 1 00:45:51 2026 GMT Subject: CN=697567bf-4805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:34:76:4e:3a:25:c1:e2:f8:88:62:03:37:93: e0:25:93:c7:37:e8:8a:be:7d:be:ec:62:e4:b2:ae: ae:af:c8:a6:8a:4b:69:e1:0c:cb:b0:05:60:15:23: dd:e1:76:7a:cd:77:89:d9:4d:98:f9:32:27:63:ed: f4:79:94:45:46:0e:a0:0f:93:e6:3a:f2:6c:6f:a7: af:59:81:f5:4d:34:5c:56:78:53:ea:72:43:55:f8: d0:87:a0:bd:66:ae:d6:26:c3:28:49:a1:29:75:d6: 91:0a:8c:02:c5:6a:53:ed:81:95:22:2b:a5:bb:b0: 5a:07:fe:ad:fd:48:c8:16:79:ad:a9:20:f4:19:dd: ff:c1:6e:53:e5:82:cb:db:d8:76:74:7e:b2:57:6f: 93:04:41:3a:1c:7b:28:33:d6:5b:5f:9e:e9:fb:19: 54:a0:71:00:60:6c:35:d1:ec:f3:67:f2:39:f2:9b: e8:e9:dd:65:70:3e:8f:14:d7:41:e4:aa:88:da:7d: b8:35:76:aa:0b:d2:7d:6b:29:de:b5:47:54:3f:37: 16:64:fc:af:16:97:a6:a5:98:2a:bc:d7:b7:6e:70: 6b:75:5a:e3:d1:74:9d:c6:0a:29:f9:b2:5a:2a:c8: 7c:20:7e:c9:f2:5e:d9:c3:38:ec:c9:c6:d4:cb:0e: fc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1B:45:AF:17:1D:0F:81:8C:E4:A5:39:64:8E:ED:23:0C:3C:A4:31 X509v3 Authority Key Identifier: keyid:89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a9:a4:fe:73:6d:0a:e1:d6:af:55:76:ee:95:18:7d:f3:1a: 1f:a9:d0:df:ad:09:2c:05:54:71:08:f2:ab:6e:78:77:76:f0: f8:6f:21:1f:fe:79:e9:53:8c:9f:8a:eb:16:52:f6:b5:e4:3f: 97:08:96:ff:bb:b7:f1:15:68:fb:8e:28:a9:58:26:c0:ac:74: 6d:7f:b2:99:ca:3b:49:33:38:61:d1:7f:f9:36:14:a2:b4:29: ee:48:8b:f1:33:57:35:24:88:3e:8b:61:e8:59:ce:94:02:f7: d8:42:2b:1d:c1:01:14:66:a5:58:33:ba:7d:9b:1d:07:0a:50: fd:8f:f9:1c:1b:22:16:3b:32:44:68:66:3b:37:e6:37:9c:57: 22:75:3e:e5:72:df:de:d9:09:5e:7d:d6:d6:6c:9f:9d:5f:6b: 62:ea:f7:77:64:2c:35:01:62:39:aa:3a:f5:47:62:ca:b8:7a: d5:70:dc:93:46:b0:04:ff:0e:52:a2:ca:0b:d1:c1:e1:70:50: 0d:68:28:04:65:35:ce:28:26:0b:bc:af:63:70:0b:9b:9e:df: 5a:8a:bc:58:ae:f8:9d:73:ae:5e:2b:02:ee:fd:74:b7:18:56: b3:f0:1e:f7:51:8e:8e:af:dd:7b:36:6b:33:f8:31:c0:95:cd: 13:4a:d9:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDN0YxMTAvBgNVBAUTKDg5NzZCNUZCNDhGMkU0MTExRDc4RDVBM0NENUEyRkNB MTk2MTM5N0EwHhcNMjYwMTI1MDA0NTUxWhcNMjYwMjAxMDA0NTUxWjAYMRYwFAYD VQQDDA02OTc1NjdiZi00ODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zR2TjolweL4iGIDN5PgJZPHN+iKvn2+7GLksq6ur8imiktp4QzLsAVgFSPd 4XZ6zXeJ2U2Y+TInY+30eZRFRg6gD5PmOvJsb6evWYH1TTRcVnhT6nJDVfjQh6C9 Zq7WJsMoSaEpddaRCowCxWpT7YGVIiulu7BaB/6t/UjIFnmtqSD0Gd3/wW5T5YLL 29h2dH6yV2+TBEE6HHsoM9ZbX57p+xlUoHEAYGw10ezzZ/I58pvo6d1lcD6PFNdB 5KqI2n24NXaqC9J9aynetUdUPzcWZPyvFpempZgqvNe3bnBrdVrj0XSdxgop+bJa Ksh8IH7J8l7ZwzjsycbUyw78QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUbRa8X HQ+BjOSlOWSO7SMMPKQxMB8GA1UdIwQYMBaAFIl2tftI8uQRHXjVo81aL8oZYTl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM3Ri8zQjdCREFCRTNG QzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVCRWRlTldqelZvdnlobGhP WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYYTEtMGp5NUJFZGVOV2p6Vm92eWhsaE9Yby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM3Ri8zQjdCREFCRTNGQzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVC RWRlTldqelZvdnlobGhPWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMqaT+c20K4davVXbulRh98xofqdDfrQksBVRxCPKrbnh3dvD4byEf /nnpU4yfiusWUva15D+XCJb/u7fxFWj7jiipWCbArHRtf7KZyjtJMzhh0X/5NhSi tCnuSIvxM1c1JIg+i2HoWc6UAvfYQisdwQEUZqVYM7p9mx0HClD9j/kcGyIWOzJE aGY7N+Y3nFcidT7lct/e2QlefdbWbJ+dX2ti6vd3ZCw1AWI5qjr1R2LKuHrVcNyT RrAE/w5SosoL0cHhcFANaCgEZTXOKCYLvK9jcAubnt9airxYrvidc65eKwLu/XS3 GFaz8B73UY6Or917Nmsz+DHAlc0TStkK -----END CERTIFICATE-----Generated at Sun Jan 25 10:42:49 2026 by rpki-client