This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: zJvc7yGJVpLB2UpVvmihz2wCfA6bmt0vaJzqwMzkx5A= Subject key identifier: 3D:45:D7:2E:D8:78:E9:0E:5F:07:91:46:A5:11:11:E9:D4:0D:C9:E0 Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0CBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0CB6 Signing time: Sat 24 Jan 2026 17:57:23 +0000 Manifest this update: Sat 24 Jan 2026 17:57:23 +0000 Manifest next update: Sat 31 Jan 2026 17:57:23 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: 1/ZZvifI7Bk7/pEK7jNAPnaFvepSh1TVQrBzXSc6Eus=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: yj5GZHfCoa9gYgxaYtgYH1txrxbVJtKRREh8ZNMjOEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3262 (0xcbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: Jan 24 17:57:23 2026 GMT Not After : Jan 31 17:57:23 2026 GMT Subject: CN=69750803-a825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0d:bf:63:01:a1:ef:92:4d:2c:7e:7c:86:3a: e5:0e:c6:fe:a9:20:df:02:75:79:b3:fa:46:fc:e2: 11:0a:4f:d6:91:cc:a7:82:5b:dc:10:d7:ed:9c:09: 16:a9:e6:a1:ef:0d:d9:3f:4a:c1:78:66:09:a5:3d: 00:a9:4c:0e:79:68:e3:b6:9e:86:75:4b:1e:f1:91: a8:34:b5:35:aa:3c:b6:ac:be:0e:9f:84:97:7c:e3: 84:17:ec:e3:52:c9:f0:c5:a7:cf:29:71:c0:44:ce: c5:e7:94:b9:43:d3:b2:f8:4a:56:29:85:95:92:0c: e0:d1:e9:46:67:aa:e9:9c:6c:80:74:3c:9f:e0:27: 83:6e:da:4c:88:c4:22:fd:dc:97:c1:1e:6f:d8:4a: da:17:55:02:53:90:3d:f2:27:7a:08:33:31:a2:f4: c2:61:3e:d9:a0:5d:e9:e2:b8:e5:7a:27:ae:88:b8: 51:8d:1c:fb:09:73:53:2c:f4:20:a6:e9:80:c9:8d: c7:b0:e5:24:f2:95:c1:3c:d4:be:f2:8f:a5:30:d1: a2:d0:04:98:5f:8c:52:44:96:aa:6f:e5:87:73:41: f6:e6:4c:e1:c4:a8:1b:32:a7:8a:d6:e5:14:3d:98: ac:40:95:0a:25:54:eb:34:a6:b1:db:d6:73:e0:6b: 23:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:45:D7:2E:D8:78:E9:0E:5F:07:91:46:A5:11:11:E9:D4:0D:C9:E0 X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:57:9f:8e:e0:f4:90:5f:a5:8b:26:5d:5c:9f:96:42:81:f5: de:8a:7c:94:f6:91:cd:7e:f5:16:89:69:64:dc:79:52:11:d3: 6b:7c:91:0f:a5:48:49:62:06:60:94:47:c2:70:06:42:d3:77: e2:8d:3c:58:bb:6d:6a:bd:17:32:c9:7b:df:6c:ae:d2:41:21: e8:d4:27:06:50:33:50:1c:c0:f3:f0:46:20:f6:13:0b:41:49: 56:7c:05:8a:0b:2b:ca:e6:03:e4:85:eb:9c:2c:ff:79:bd:fd: cb:e1:61:47:43:7d:4f:54:f7:41:da:34:49:56:e1:64:5f:58: dd:5d:fc:aa:36:fb:3d:ba:f1:16:47:88:df:a1:77:af:da:07: 0b:00:08:f1:4f:6a:8f:41:40:52:dc:1f:b3:c4:68:bd:e6:75: 6e:92:3c:af:da:3e:bf:17:5d:25:cc:93:e7:b6:1a:57:44:e6: 5f:99:b9:b7:de:a6:5d:50:ec:05:e4:50:d8:94:1f:e5:ef:40: 3b:6d:b4:be:2f:60:56:29:dc:50:6a:e0:a5:35:55:3c:69:9d: b6:10:bd:6f:6f:02:a4:25:46:74:c4:f1:fe:3a:c0:58:f3:d6: 63:2c:75:43:c3:e8:06:c6:96:e4:65:e7:34:78:16:f3:6b:c6: 8f:d6:e7:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjYwMTI0MTc1NzIzWhcNMjYwMTMxMTc1NzIzWjAYMRYwFAYD VQQDDA02OTc1MDgwMy1hODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnA2/YwGh75JNLH58hjrlDsb+qSDfAnV5s/pG/OIRCk/WkcynglvcENftnAkW qeah7w3ZP0rBeGYJpT0AqUwOeWjjtp6GdUse8ZGoNLU1qjy2rL4On4SXfOOEF+zj UsnwxafPKXHARM7F55S5Q9Oy+EpWKYWVkgzg0elGZ6rpnGyAdDyf4CeDbtpMiMQi /dyXwR5v2EraF1UCU5A98id6CDMxovTCYT7ZoF3p4rjleieuiLhRjRz7CXNTLPQg pumAyY3HsOUk8pXBPNS+8o+lMNGi0ASYX4xSRJaqb+WHc0H25kzhxKgbMqeK1uUU PZisQJUKJVTrNKax29Zz4Gsj4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1F1y7Y eOkOXweRRqUREenUDcngMB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIV5+O4PSQX6WLJl1cn5ZCgfXeinyU9pHNfvUWiWlk3HlSEdNrfJEP pUhJYgZglEfCcAZC03fijTxYu21qvRcyyXvfbK7SQSHo1CcGUDNQHMDz8EYg9hML QUlWfAWKCyvK5gPkheucLP95vf3L4WFHQ31PVPdB2jRJVuFkX1jdXfyqNvs9uvEW R4jfoXev2gcLAAjxT2qPQUBS3B+zxGi95nVukjyv2j6/F10lzJPnthpXROZfmbm3 3qZdUOwF5FDYlB/l70A7bbS+L2BWKdxQauClNVU8aZ22EL1vbwKkJUZ0xPH+OsBY 89ZjLHVDw+gGxpbkZec0eBbza8aP1uei -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:12 2026 by rpki-client