This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft File: xiGEgVH3l79yMQfxTWLGeiE6U-M.mft (raw, json) Hash identifier: qp9Vh2Bd9ijXizUFFI/gfqLwDhRHQ72vQchXDNsK3o4= Subject key identifier: 73:9C:CD:2D:55:F3:0E:BF:9E:9D:42:E6:7A:F7:3D:5E:5E:2E:A2:5D Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3 Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft Manifest number: 021F Signing time: Sun 25 Jan 2026 01:44:22 +0000 Manifest this update: Sun 25 Jan 2026 01:44:21 +0000 Manifest next update: Sun 01 Feb 2026 01:44:21 +0000 Files and hashes: 1: xiGEgVH3l79yMQfxTWLGeiE6U-M.crl (hash: Yx/ncgmDus+0vFxRqF8VOic46uhSyu1KsFUxKIHl058=) 2: AC61350A4E3C11EF9286040CC4F9AE02.roa (hash: TUo7uv4rXTA0iRyimVV1a57fjFNt5Gy9xOb0XovcHoI=) 3: 1DAE236CC9D411F0A61E0021C4F9AE02.roa (hash: vFnHMZDmaAEJX6sDkXcevocgA5u3JoklJPdgGoC+BEI=) 4: 9BB3FAB6CCB511EE8612FB18C4F9AE02.roa (hash: AeF6+orX99LwnbHGZiB851tFWKGqrAIMqoROhOgxFpw=) 5: 7755D5B2FADD11EE880BF37DC4F9AE02.roa (hash: 7c9RXUhll7RjmfKdCACTxBkSEfUtF0muR2dkJbiSbMQ=) 6: 781637A8FADD11EE880BF37DC4F9AE02.roa (hash: NHs0+oLxPl8uuJffLMiSnsDVJyHvtsfXj9mt3FT2mqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3 Validity Not Before: Jan 25 01:44:21 2026 GMT Not After : Feb 1 01:44:21 2026 GMT Subject: CN=69757576-f0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:a3:7d:09:6d:83:47:80:0b:e1:cb:43:1f: ec:9d:53:0a:e7:3a:56:f4:77:a7:fb:cc:04:ac:26: d7:99:03:50:11:99:bc:25:f3:66:8d:76:23:7d:ca: ed:84:8c:5e:80:a8:c5:e6:b3:4a:30:ca:6d:d3:2f: 1d:0b:aa:fa:c7:ec:b8:3a:f4:9d:0a:ce:be:86:d0: e6:9f:45:11:fd:0d:f7:ea:a1:3e:ba:99:f8:8b:f4: 90:d8:e1:4a:2e:b8:b5:a8:9f:2b:76:5f:b6:ef:77: cc:12:9a:c7:5f:2f:de:82:0b:87:cd:1e:67:4d:52: 6b:8d:46:1b:e5:17:8e:a9:3a:7e:bc:3d:d8:bf:ce: e5:f3:c5:2b:d3:b6:d1:df:71:f9:57:a4:8e:e8:90: 89:0e:53:f8:29:55:36:d9:c2:98:4e:82:bd:28:f0: 67:5d:2d:bf:68:c3:30:02:b5:0e:31:72:ef:0a:11: 49:28:ac:69:da:37:9e:bc:d8:07:13:cc:97:d6:9a: 37:28:e8:c7:e4:a8:db:3f:2e:e3:f9:3a:ff:e8:24: 40:47:6f:b7:bc:13:31:53:2f:8a:18:36:a1:23:95: 7c:0d:47:42:a4:28:1e:14:41:15:47:93:04:29:2d: fd:17:4e:32:16:ae:83:88:f8:31:ad:3a:7e:0f:59: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9C:CD:2D:55:F3:0E:BF:9E:9D:42:E6:7A:F7:3D:5E:5E:2E:A2:5D X509v3 Authority Key Identifier: keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:85:87:ad:5c:dd:00:31:e1:c9:dc:a1:25:8a:26:81:1a:49: 21:e3:cc:46:b2:0d:86:ba:7d:f2:ba:e4:08:d7:f5:66:e7:34: 69:10:e9:1a:44:ef:58:b9:ff:80:7e:fa:4c:65:14:eb:ea:59: ef:60:e2:e3:ca:4c:a6:5e:ab:5e:2e:9d:a3:7a:ab:8b:b3:0c: a5:33:18:74:1d:6c:bd:60:f0:6c:a7:a3:fc:24:25:fb:45:57: 47:d9:9b:9d:55:8f:71:4b:65:ce:67:9f:33:e8:36:d2:0f:ab: 29:2b:e5:50:6c:8d:d1:cb:ab:21:04:88:8a:11:da:37:9d:da: 06:54:51:19:97:a4:3a:46:a2:3f:38:68:80:28:7c:98:2b:f1: fa:0b:8a:fc:45:e8:49:7e:64:8e:28:77:e5:51:78:47:d7:28: 86:7a:68:07:ac:45:41:1b:fd:92:93:8b:00:ae:88:ca:41:e4: e4:f4:d8:44:ef:0b:24:0a:5f:06:a0:80:05:ce:46:2b:26:28: af:e5:8a:e9:66:51:71:5d:e0:e4:87:8a:9b:b0:54:34:fd:90: fd:95:7b:2e:b6:83:bb:28:fc:8d:f8:fc:0a:61:38:d5:62:cd: ea:25:8d:38:c9:db:37:61:ea:f8:c1:6c:79:73:e8:4e:56:3a: 56:e1:f9:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQzgxMTAvBgNVBAUTKEM2MjE4NDgxNTFGNzk3QkY3MjMxMDdGMTRENjJDNjdB MjEzQTUzRTMwHhcNMjYwMTI1MDE0NDIxWhcNMjYwMjAxMDE0NDIxWjAYMRYwFAYD VQQDDA02OTc1NzU3Ni1mMGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4mjfQltg0eAC+HLQx/snVMK5zpW9Hen+8wErCbXmQNQEZm8JfNmjXYjfcrt hIxegKjF5rNKMMpt0y8dC6r6x+y4OvSdCs6+htDmn0UR/Q336qE+upn4i/SQ2OFK Lri1qJ8rdl+273fMEprHXy/egguHzR5nTVJrjUYb5ReOqTp+vD3Yv87l88Ur07bR 33H5V6SO6JCJDlP4KVU22cKYToK9KPBnXS2/aMMwArUOMXLvChFJKKxp2jeevNgH E8yX1po3KOjH5KjbPy7j+Tr/6CRAR2+3vBMxUy+KGDahI5V8DUdCpCgeFEEVR5ME KS39F04yFq6DiPgxrTp+D1kpLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOczS1V 8w6/np1C5nr3PV5eLqJdMB8GA1UdIwQYMBaAFMYhhIFR95e/cjEH8U1ixnohOlPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJDOC81ODk4MjBDMkVG MDIxMUVEOEMyREQ5MUZDNEY5QUUwMi94aUdFZ1ZIM2w3OXlNUWZ4VFdMR2VpRTZV LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hpR0VnVkgzbDc5eU1RZnhUV0xHZWlFNlUtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUJDOC81ODk4MjBDMkVGMDIxMUVEOEMyREQ5MUZDNEY5QUUwMi94aUdFZ1ZIM2w3 OXlNUWZ4VFdMR2VpRTZVLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCohYetXN0AMeHJ3KEliiaBGkkh48xGsg2Gun3yuuQI1/Vm5zRpEOka RO9Yuf+AfvpMZRTr6lnvYOLjykymXqteLp2jequLswylMxh0HWy9YPBsp6P8JCX7 RVdH2ZudVY9xS2XOZ58z6DbSD6spK+VQbI3Ry6shBIiKEdo3ndoGVFEZl6Q6RqI/ OGiAKHyYK/H6C4r8RehJfmSOKHflUXhH1yiGemgHrEVBG/2Sk4sArojKQeTk9NhE 7wskCl8GoIAFzkYrJiiv5YrpZlFxXeDkh4qbsFQ0/ZD9lXsutoO7KPyN+PwKYTjV Ys3qJY04yds3Yer4wWx5c+hOVjpW4fmK -----END CERTIFICATE-----Generated at Sun Jan 25 12:24:50 2026 by rpki-client