This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft File: xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft (raw, json) Hash identifier: xCGw5wZ+5bTQboz2WMylN5KSaDBj21Q1rhA6Usfb6GY= Subject key identifier: E9:E2:52:56:CE:10:C3:06:82:40:C4:81:64:AD:88:B6:E4:8D:A9:96 Authority key identifier: C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 Certificate issuer: /CN=A9157B66/serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Certificate serial: 06BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft Manifest number: 06B8 Signing time: Sat 24 Jan 2026 21:33:40 +0000 Manifest this update: Sat 24 Jan 2026 21:33:40 +0000 Manifest next update: Sat 31 Jan 2026 21:33:40 +0000 Files and hashes: 1: xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl (hash: K92brO7AGT4bC7IdeKLxyiaBkjAuLP2LOvq7txxyC0c=) 2: 807CB298903A11EBA9783756C4F9AE02.roa (hash: Q95/nW6cBcg6eSxuqekACSAFlF9Gvg9OiOnkTSpqx38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1726 (0x6be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B66, serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Validity Not Before: Jan 24 21:33:40 2026 GMT Not After : Jan 31 21:33:40 2026 GMT Subject: CN=69753ab4-60a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b7:67:66:8b:d9:74:de:6c:f5:97:72:81:4f: 80:93:cd:a4:2b:a5:f4:4f:ba:da:b0:d1:fd:dd:ec: 7d:72:d8:9e:e4:20:2a:67:68:49:1d:7f:8c:63:e7: 66:24:97:16:cd:7e:a1:81:79:7d:fd:62:7b:71:23: 72:37:89:ea:f5:a7:f8:c1:e1:af:1b:34:f0:b1:8d: 20:dd:80:8b:64:e5:3d:d2:ba:93:5e:6e:e6:8e:35: 40:62:ca:1b:2b:c0:9d:5b:8a:07:73:ae:d4:8b:42: af:cc:52:dd:06:61:bb:5a:d3:ee:e9:bb:89:03:7e: d0:e4:b7:a8:cd:97:16:96:70:31:46:4e:58:70:8a: 6c:33:c8:63:9d:f9:b7:63:9c:e5:f2:2a:9f:ec:59: 36:53:6b:25:6a:18:ec:85:54:54:14:df:21:71:50: d5:79:f0:b5:60:76:f5:9d:93:f5:03:93:69:55:56: d6:63:d6:a2:a0:eb:7c:f6:09:25:5a:77:ce:ec:d2: 22:96:be:50:ae:a7:f9:f8:cb:b0:83:27:e5:45:d8: e0:7f:7d:65:ed:0a:ca:5a:0b:e6:96:a5:92:17:b5: 3f:4c:a3:56:e0:46:bb:43:7a:42:7e:9c:d1:2f:ec: bd:f8:6f:ee:0b:80:b4:4a:85:7d:83:ca:4b:c3:8a: f1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E2:52:56:CE:10:C3:06:82:40:C4:81:64:AD:88:B6:E4:8D:A9:96 X509v3 Authority Key Identifier: keyid:C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:13:f7:32:b6:1a:73:a5:01:78:2d:4c:b6:e8:35:31:b6:e8: 8a:52:41:6f:72:f8:76:4b:ef:bf:bb:b8:75:49:d6:ce:ee:b4: eb:25:f8:e6:88:a4:43:dd:b1:6c:80:c6:86:9d:67:0b:65:dc: 8f:77:c7:86:f6:50:6f:e3:28:61:48:e6:45:e8:1f:bf:48:85: b4:6f:53:ad:70:c1:96:cd:f7:87:aa:00:8b:97:70:8e:8a:47: 40:db:c3:6c:5f:75:89:47:d7:b4:0f:03:8e:23:83:b4:a6:6c: 6d:5a:b0:a7:1a:d9:d3:3b:44:64:9f:85:67:7b:76:b8:68:e5: d8:3f:df:19:d7:53:c8:65:7d:c6:37:23:be:46:b7:38:c2:ab: a6:3d:90:60:59:40:a1:8a:12:34:13:09:9a:17:0f:3c:c4:5e: 77:d4:33:c1:ed:ab:52:ba:26:f4:e6:3b:1e:31:9a:b9:6d:ef: af:67:27:4c:4e:77:c1:60:21:f5:3e:4e:0c:94:7d:c8:ab:ea: 5d:f7:4d:75:fd:f7:1d:be:8c:f6:03:d1:f4:b5:9d:f4:9c:b0: c9:8d:0c:c8:f5:76:67:21:af:5e:71:fd:af:63:6a:75:23:88: 17:35:8f:f1:97:82:e1:38:e9:49:3c:53:71:8e:b8:10:0b:cb: 56:d2:30:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCNjYxMTAvBgNVBAUTKEM0NTVCMDg2QkFCODY0N0NEMjUxMENBODMyNDFFNzAw MTRDRDhBNDQwHhcNMjYwMTI0MjEzMzQwWhcNMjYwMTMxMjEzMzQwWjAYMRYwFAYD VQQDDA02OTc1M2FiNC02MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkbdnZovZdN5s9ZdygU+Ak82kK6X0T7rasNH93ex9ctie5CAqZ2hJHX+MY+dm JJcWzX6hgXl9/WJ7cSNyN4nq9af4weGvGzTwsY0g3YCLZOU90rqTXm7mjjVAYsob K8CdW4oHc67Ui0KvzFLdBmG7WtPu6buJA37Q5LeozZcWlnAxRk5YcIpsM8hjnfm3 Y5zl8iqf7Fk2U2slahjshVRUFN8hcVDVefC1YHb1nZP1A5NpVVbWY9aioOt89gkl WnfO7NIilr5Qrqf5+MuwgyflRdjgf31l7QrKWgvmlqWSF7U/TKNW4Ea7Q3pCfpzR L+y9+G/uC4C0SoV9g8pLw4rxdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOniUlbO EMMGgkDEgWStiLbkjamWMB8GA1UdIwQYMBaAFMRVsIa6uGR80lEMqDJB5wAUzYpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I2Ni9FNUM0RDMyNjkw MzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJxNFpIelNVUXlvTWtIbkFCVE5p a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hGV3docnE0Wkh6U1VReW9Na0huQUJUTmlrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0I2Ni9FNUM0RDMyNjkwMzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJxNFpI elNVUXlvTWtIbkFCVE5pa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgE/cythpzpQF4LUy26DUxtuiKUkFvcvh2S++/u7h1SdbO7rTrJfjm iKRD3bFsgMaGnWcLZdyPd8eG9lBv4yhhSOZF6B+/SIW0b1OtcMGWzfeHqgCLl3CO ikdA28NsX3WJR9e0DwOOI4O0pmxtWrCnGtnTO0Rkn4Vne3a4aOXYP98Z11PIZX3G NyO+Rrc4wqumPZBgWUChihI0EwmaFw88xF531DPB7atSuib05jseMZq5be+vZydM TnfBYCH1Pk4MlH3Iq+pd9011/fcdvoz2A9H0tZ30nLDJjQzI9XZnIa9ecf2vY2p1 I4gXNY/xl4LhOOlJPFNxjrgQC8tW0jCD -----END CERTIFICATE-----Generated at Sun Jan 25 08:05:32 2026 by rpki-client