This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: njvU+HLno2TRntzCx+U/OnjWmo+DT8h+AnV/Xmz5Rmk= Subject key identifier: E2:3D:5E:1E:A1:C7:18:D2:A2:B5:66:87:C1:2C:A9:C0:1A:39:B9:13 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 0414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 0405 Signing time: Sat 24 Jan 2026 23:40:34 +0000 Manifest this update: Sat 24 Jan 2026 23:40:33 +0000 Manifest next update: Sat 31 Jan 2026 23:40:33 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: N7f1Rqn7Pr86Yvl6hfSt1EYK2qIhtYFwvYrJ5iuTKwg=) 2: 892F26B4EEF411F0A51D99D83B6F56BC.roa (hash: jrvzvu2HttLsHNzjZYsWd8qIkjND9xDfEJO2bNSyg2w=) 3: 0663DADAEEF511F0AEB0B1D83B6F56BC.roa (hash: 7T0Y2/QuHAgII13KO6CuN5pvwsBXDuinAQW+Up6Wxuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1044 (0x414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: Jan 24 23:40:33 2026 GMT Not After : Jan 31 23:40:33 2026 GMT Subject: CN=69755872-c315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ac:c4:8d:da:6f:2c:de:e6:0d:49:6c:7d:4e: 5c:d0:71:b0:9c:28:33:77:df:0e:1f:38:ca:15:7d: 20:e8:dc:3e:a4:0f:a6:0a:96:00:8d:1c:c2:ba:16: 31:df:12:a4:5f:b9:9a:e4:ae:91:71:43:af:2f:76: f8:3c:74:70:cf:bb:94:0a:70:f0:c3:1b:e2:2c:b1: 51:98:44:f7:3b:c0:c8:71:d3:0a:d7:e8:33:ff:f0: 04:f7:6b:75:79:9d:3f:dc:8f:66:dc:d7:99:dd:ca: 34:dc:ac:aa:f5:15:d8:b9:2a:f9:ee:4e:96:d5:06: da:80:22:23:3b:39:fc:0a:49:e3:da:0c:37:1a:4d: 9d:f4:0b:d3:f9:8b:12:f6:26:ab:bd:23:82:b3:bd: ed:a8:fd:a2:04:a7:3d:e3:68:dd:d1:be:5d:76:cb: f6:ec:ad:ab:1f:29:9e:8e:bb:ff:0b:66:c6:ff:8a: b1:99:80:52:14:14:62:fd:de:50:b5:99:e1:61:bb: 32:4d:01:a2:7c:52:54:ae:18:f9:55:fe:fd:03:d5: 4e:0c:6c:8e:7c:91:a9:b8:78:ae:0f:a7:0b:31:f7: 72:c8:05:57:33:14:81:6e:6d:97:32:23:79:43:f3: ca:83:36:fd:21:a7:ca:a6:10:41:37:c2:83:39:ce: b8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3D:5E:1E:A1:C7:18:D2:A2:B5:66:87:C1:2C:A9:C0:1A:39:B9:13 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:80:b0:e0:a1:ec:13:6b:76:5f:da:c3:a4:84:cd:1b:9d:d3: 59:dd:53:86:98:86:35:09:1d:c8:e9:30:ba:f0:5d:1c:a5:e4: 68:b4:58:85:73:b3:74:76:13:d6:43:de:cc:13:f6:2b:1e:6f: 8a:f9:67:39:c0:69:13:30:bf:69:94:5a:2d:52:f0:63:94:d9: 42:ec:60:02:a7:dd:54:0e:b1:60:fb:cf:a5:de:5c:b1:bf:92: 9d:3d:af:a3:19:f3:84:74:0a:ee:81:98:78:a2:f0:0e:6d:9a: ed:19:2f:cc:f1:ba:0a:b2:9c:0d:d2:6f:9a:ad:f9:8e:9c:82: 36:5e:46:c0:d4:d6:39:02:98:17:55:38:93:7a:e4:05:1b:b9: 08:c5:6f:ee:7c:07:9e:e4:c9:7c:2a:13:ab:4b:fc:2f:b3:5b: d3:ed:df:23:e4:b4:1f:1e:a0:05:fd:03:b4:0a:db:4e:2f:f7: 61:9b:e3:de:88:3f:b8:a1:0f:1c:42:19:06:12:0d:a4:67:33: ae:48:4f:ab:63:e5:63:46:bb:07:ac:2d:65:c2:58:4c:46:7c: 49:43:86:6c:e7:91:8a:12:ae:ba:b0:22:dd:0a:30:29:8a:72: fb:22:39:51:4b:cc:ae:4c:3e:26:49:60:cd:f3:06:76:14:0c: fd:b7:87:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjYwMTI0MjM0MDMzWhcNMjYwMTMxMjM0MDMzWjAYMRYwFAYD VQQDDA02OTc1NTg3Mi1jMzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KzEjdpvLN7mDUlsfU5c0HGwnCgzd98OHzjKFX0g6Nw+pA+mCpYAjRzCuhYx 3xKkX7ma5K6RcUOvL3b4PHRwz7uUCnDwwxviLLFRmET3O8DIcdMK1+gz//AE92t1 eZ0/3I9m3NeZ3co03Kyq9RXYuSr57k6W1QbagCIjOzn8Cknj2gw3Gk2d9AvT+YsS 9iarvSOCs73tqP2iBKc942jd0b5ddsv27K2rHymejrv/C2bG/4qxmYBSFBRi/d5Q tZnhYbsyTQGifFJUrhj5Vf79A9VODGyOfJGpuHiuD6cLMfdyyAVXMxSBbm2XMiN5 Q/PKgzb9IafKphBBN8KDOc64XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOI9Xh6h xxjSorVmh8EsqcAaObkTMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkgLDgoewTa3Zf2sOkhM0bndNZ3VOGmIY1CR3I6TC68F0cpeRotFiF c7N0dhPWQ97ME/YrHm+K+Wc5wGkTML9plFotUvBjlNlC7GACp91UDrFg+8+l3lyx v5KdPa+jGfOEdArugZh4ovAObZrtGS/M8boKspwN0m+arfmOnII2XkbA1NY5ApgX VTiTeuQFG7kIxW/ufAee5Ml8KhOrS/wvs1vT7d8j5LQfHqAF/QO0CttOL/dhm+Pe iD+4oQ8cQhkGEg2kZzOuSE+rY+VjRrsHrC1lwlhMRnxJQ4Zs55GKEq66sCLdCjAp inL7IjlRS8yuTD4mSWDN8wZ2FAz9t4cL -----END CERTIFICATE-----Generated at Sun Jan 25 06:10:12 2026 by rpki-client