This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft File: Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft (raw, json) Hash identifier: OsKBxT4BJ0aXI5loP3Li2KYzRoYjWZ6eOrgbw2vJuNg= Subject key identifier: F8:3A:A5:19:CB:EC:C1:DB:D8:AF:35:B1:50:D0:4D:75:E3:60:C7:5C Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft Manifest number: 0404 Signing time: Sat 24 Jan 2026 23:43:41 +0000 Manifest this update: Sat 24 Jan 2026 23:43:41 +0000 Manifest next update: Sat 31 Jan 2026 23:43:41 +0000 Files and hashes: 1: Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl (hash: n8CYaRF32K2w4V7oUadFfG78WAQAdI/KUHrYzTJaeGE=) 2: 7B6F6276E03811EFAC3C5652C4F9AE02.roa (hash: melteXR1cRharD5muHTsf70+edihxivjKNNQzAZNpLE=) 3: 7AA94F3CE03811EFAC3C5652C4F9AE02.roa (hash: ImUvDtTwcm68idWdwXB7tEHKc5rG51UP9vCEMxdSyRc=) 4: 79C2D638E03811EFAC3C5652C4F9AE02.roa (hash: pIl/ybOSWeNJuXyu7vI+RsUvtpL0KXP/t0jEbgQtU7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E8E, serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Validity Not Before: Jan 24 23:43:41 2026 GMT Not After : Jan 31 23:43:41 2026 GMT Subject: CN=6975592d-b1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5f:55:55:9b:35:6b:80:95:59:16:47:ed:1a: b3:0c:19:78:46:10:85:73:d6:f8:d4:b9:e0:9e:d9: 87:ea:d6:d9:96:19:20:f3:06:75:df:a1:d5:39:7b: 80:85:f2:20:c4:b8:ed:b6:f9:18:de:7e:0b:2f:e2: 48:dc:0d:44:65:5e:02:a5:a8:cb:d2:60:c9:55:6c: d2:66:bf:42:5a:25:7f:6f:3f:e4:e0:72:2d:9d:55: 1c:c4:39:2f:05:5e:47:4a:06:8b:8a:89:ad:e6:4b: e8:88:90:88:1c:48:95:b7:fd:97:81:2e:80:f0:72: 76:6c:3b:52:30:85:eb:e8:fa:44:61:d4:73:5c:65: 9a:35:79:e1:ab:d4:42:0a:5b:4c:15:1d:b7:ae:8c: c4:10:c5:04:29:aa:24:3d:c5:7d:39:d3:11:0d:63: 01:fd:52:5a:18:61:f7:79:87:96:c4:9b:cf:9c:28: 96:b8:2b:74:03:f9:15:cc:a0:d1:5f:3f:51:7b:9f: f4:a2:3e:e6:9f:57:9f:28:94:0b:24:9e:06:b3:05: 9a:33:26:64:cc:d8:17:2a:a9:e8:be:88:e3:59:45: e6:bb:17:11:d7:e8:74:d7:67:4b:42:c9:c6:6a:3b: 14:b1:b5:79:07:3f:f3:55:99:d3:52:55:64:ea:98: a9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3A:A5:19:CB:EC:C1:DB:D8:AF:35:B1:50:D0:4D:75:E3:60:C7:5C X509v3 Authority Key Identifier: keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:6e:17:d8:f7:58:a1:50:c4:2f:12:65:17:5a:ea:2d:77:35: ce:09:f4:cb:b4:c8:5e:c1:5e:50:b6:10:ce:5b:05:5d:e7:76: a2:70:ae:1c:10:66:dd:00:33:8b:f4:fd:a8:3c:e3:ff:a4:8a: 27:9a:f3:83:d5:16:53:90:06:9f:b1:5e:f2:a9:d3:d4:46:79: 4a:1b:1b:e7:f9:01:5f:5e:c8:be:99:73:2c:17:ea:f4:20:86: b9:e2:16:25:4c:21:0b:7b:33:0f:b3:f3:fe:80:81:bb:36:80: 0f:52:10:9e:52:a1:93:18:e1:d8:21:d0:34:e9:a8:3a:c2:31: 13:a7:cc:e1:48:29:28:90:24:12:46:04:96:1f:75:c0:ce:eb: 2c:80:e6:44:8e:57:5a:76:d1:13:bb:eb:4e:bb:08:f5:48:e5: 82:88:59:03:e7:fe:e0:3a:01:68:5b:2c:5b:4c:f1:e3:aa:00: 57:e2:cc:b6:1c:c5:6f:7d:f6:14:8c:c0:f6:a0:5b:96:1c:6e: 0c:f2:c3:f4:96:62:16:1d:d0:85:1a:e7:f8:26:c9:0f:e5:ef: 07:db:dd:91:00:af:da:18:df:db:e2:3b:80:6f:63:6a:1b:4a: eb:78:d8:c4:50:68:b3:a4:90:ff:77:c4:9e:81:0e:29:a5:9b: ce:e9:41:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFOEUxMTAvBgNVBAUTKDVGMkU1RTYyOTMyQkI1MEE4NUZGMkY5QTVGMzFCMkJB REQ1RjM0QUMwHhcNMjYwMTI0MjM0MzQxWhcNMjYwMTMxMjM0MzQxWjAYMRYwFAYD VQQDDA02OTc1NTkyZC1iMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1F9VVZs1a4CVWRZH7RqzDBl4RhCFc9b41LngntmH6tbZlhkg8wZ136HVOXuA hfIgxLjttvkY3n4LL+JI3A1EZV4CpajL0mDJVWzSZr9CWiV/bz/k4HItnVUcxDkv BV5HSgaLiomt5kvoiJCIHEiVt/2XgS6A8HJ2bDtSMIXr6PpEYdRzXGWaNXnhq9RC CltMFR23rozEEMUEKaokPcV9OdMRDWMB/VJaGGH3eYeWxJvPnCiWuCt0A/kVzKDR Xz9Re5/0oj7mn1efKJQLJJ4GswWaMyZkzNgXKqnovojjWUXmuxcR1+h012dLQsnG ajsUsbV5Bz/zVZnTUlVk6pipxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPg6pRnL 7MHb2K81sVDQTXXjYMdcMB8GA1UdIwQYMBaAFF8uXmKTK7UKhf8vml8xsrrdXzSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEU4RS8wNEZCQjhGMEFF MEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRRcUZfeS1hWHpHeXV0MWZO S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5NWVZcE1ydFFxRl95LWFYekd5dXQxZk5Ldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEU4RS8wNEZCQjhGMEFFMEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRR cUZfeS1hWHpHeXV0MWZOS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAbhfY91ihUMQvEmUXWuotdzXOCfTLtMhewV5QthDOWwVd53aicK4c EGbdADOL9P2oPOP/pIonmvOD1RZTkAafsV7yqdPURnlKGxvn+QFfXsi+mXMsF+r0 IIa54hYlTCELezMPs/P+gIG7NoAPUhCeUqGTGOHYIdA06ag6wjETp8zhSCkokCQS RgSWH3XAzussgOZEjldadtETu+tOuwj1SOWCiFkD5/7gOgFoWyxbTPHjqgBX4sy2 HMVvffYUjMD2oFuWHG4M8sP0lmIWHdCFGuf4JskP5e8H292RAK/aGN/b4juAb2Nq G0rreNjEUGizpJD/d8SegQ4ppZvO6UHl -----END CERTIFICATE-----Generated at Sun Jan 25 23:40:37 2026 by rpki-client