This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: taa6x0A8ZTWjcXQUpmDTdakd8WQ3YAWw9uTW/TFYrFQ= Subject key identifier: 25:D1:BB:81:ED:6B:CC:8E:44:ED:97:20:04:AF:EE:B2:72:B7:40:D7 Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 239F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 236A Signing time: Sat 24 Jan 2026 15:40:09 +0000 Manifest this update: Sat 24 Jan 2026 15:40:08 +0000 Manifest next update: Sat 31 Jan 2026 15:40:08 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: QYuwdh87f7vcn/erwynIgPFekgIpJAmnO7Mn7PXSFNU=) 2: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: LWfr/eGpKsZfBdNv+WTg0Gn+ekMi8PDH3dFvI2YahRg=) 3: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: wkM6M3U1AcqPEwtXwQs73INeN4ZTzf2doazXiha3Fmw=) 4: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: mPtYiN+/TfiyRV+YmeA5Y60Ko/M3jijCuHZDr0zx9nM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9119 (0x239f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Jan 24 15:40:08 2026 GMT Not After : Jan 31 15:40:08 2026 GMT Subject: CN=6974e7d8-ac58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ca:b8:0e:11:8a:6d:4b:9d:08:51:e5:42:00: 95:40:9d:fe:b5:24:07:1b:f3:39:03:f4:59:ea:5b: ea:19:b9:11:ec:e3:65:3d:6d:03:42:3a:83:8c:df: d3:06:cc:69:bf:f1:fd:3b:f0:46:91:73:3e:22:fd: 84:bc:a3:18:0b:aa:ee:81:26:62:d8:34:3d:91:b0: 9a:8f:86:6b:98:30:22:f6:67:09:6d:ed:79:64:f9: 4e:5b:3d:24:9c:ab:ef:fc:9a:0d:9f:34:a3:e0:5c: ac:45:65:2b:00:ca:7f:f5:32:cc:a8:ba:1d:80:28: 7e:15:55:dd:01:c4:65:95:e7:19:b3:58:0b:20:65: 20:0f:84:9d:07:4e:5f:4c:78:26:fa:6f:2e:7b:89: 73:bc:09:f3:ab:2e:dc:96:2f:5b:2b:dd:0c:f6:65: 90:00:23:42:0c:f0:ad:da:06:7b:90:2d:6d:f1:e6: 48:a1:da:ef:05:32:51:e6:cf:19:0a:6b:11:d2:82: c1:72:74:48:dd:da:10:e1:b0:1b:44:11:a2:99:e8: 8e:6b:67:7e:12:4c:09:83:32:be:1f:30:34:d2:c5: b5:24:8c:17:69:28:59:dc:bd:9e:2c:ba:c7:3f:cf: 68:80:b1:74:a1:06:db:eb:47:bd:70:9b:a5:1d:2f: 61:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D1:BB:81:ED:6B:CC:8E:44:ED:97:20:04:AF:EE:B2:72:B7:40:D7 X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:09:04:98:a3:19:54:0e:50:82:82:c7:4e:e2:98:fe:df:e3: 28:fb:96:c7:63:8a:a1:f2:d1:32:bc:4c:e6:1a:80:88:bc:d0: e3:b3:ed:e0:d4:d3:1d:9e:45:82:7c:dc:a4:a2:12:21:34:96: b5:8d:8f:f9:c6:13:52:0e:a8:05:18:e4:36:7e:a9:64:3a:20: 08:fc:9c:bd:ae:6a:d0:c2:fc:54:f1:4b:cb:c5:7c:25:c1:a9: 50:ad:a7:ef:34:eb:41:a7:5c:76:52:2a:8e:65:ba:91:19:41: be:91:5d:cd:e8:d4:94:46:ef:2e:7b:56:a5:cb:8d:33:b4:11: 10:9b:e4:ad:a3:21:01:21:d3:b4:67:1d:a7:ff:71:79:f1:b4: 59:28:b8:bb:c6:31:ff:ee:d3:85:ed:ac:f6:eb:51:76:18:c5: df:48:db:91:57:6a:62:9d:32:04:72:80:a5:02:54:e5:89:a3: aa:64:27:cd:72:13:99:3e:dc:98:a9:b5:14:3a:1f:86:7f:d2: 8c:21:18:60:59:d9:95:89:74:ce:31:9f:ef:63:bb:2a:af:f2: a0:e8:c8:14:1f:79:12:0a:1a:61:bd:6a:a2:e1:38:fc:99:43: eb:c8:30:cb:da:91:ac:15:c0:fd:7e:0e:ce:b4:c5:29:26:6d: 3d:52:d2:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjYwMTI0MTU0MDA4WhcNMjYwMTMxMTU0MDA4WjAYMRYwFAYD VQQDDA02OTc0ZTdkOC1hYzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sq4DhGKbUudCFHlQgCVQJ3+tSQHG/M5A/RZ6lvqGbkR7ONlPW0DQjqDjN/T Bsxpv/H9O/BGkXM+Iv2EvKMYC6rugSZi2DQ9kbCaj4ZrmDAi9mcJbe15ZPlOWz0k nKvv/JoNnzSj4FysRWUrAMp/9TLMqLodgCh+FVXdAcRllecZs1gLIGUgD4SdB05f THgm+m8ue4lzvAnzqy7cli9bK90M9mWQACNCDPCt2gZ7kC1t8eZIodrvBTJR5s8Z CmsR0oLBcnRI3doQ4bAbRBGimeiOa2d+EkwJgzK+HzA00sW1JIwXaShZ3L2eLLrH P89ogLF0oQbb60e9cJulHS9hdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXRu4Ht a8yORO2XIASv7rJyt0DXMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiCQSYoxlUDlCCgsdO4pj+3+Mo+5bHY4qh8tEyvEzmGoCIvNDjs+3g 1NMdnkWCfNykohIhNJa1jY/5xhNSDqgFGOQ2fqlkOiAI/Jy9rmrQwvxU8UvLxXwl walQrafvNOtBp1x2UiqOZbqRGUG+kV3N6NSURu8ue1aly40ztBEQm+StoyEBIdO0 Zx2n/3F58bRZKLi7xjH/7tOF7az261F2GMXfSNuRV2pinTIEcoClAlTliaOqZCfN chOZPtyYqbUUOh+Gf9KMIRhgWdmViXTOMZ/vY7sqr/Kg6MgUH3kSChphvWqi4Tj8 mUPryDDL2pGsFcD9fg7OtMUpJm09UtIN -----END CERTIFICATE-----Generated at Sun Jan 25 02:56:34 2026 by rpki-client