This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft File: XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft (raw, json) Hash identifier: 3ZC/79xOankQZ7dT12KgmDxd2lLgP3LpSvXOL9Azos8= Subject key identifier: CD:32:74:FE:F4:64:AE:B0:9B:DF:CF:E7:82:37:A0:80:9B:D4:27:86 Authority key identifier: 5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB Certificate issuer: /CN=A9162B98/serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft Manifest number: 14 Signing time: Fri 23 Jan 2026 07:00:06 +0000 Manifest this update: Fri 23 Jan 2026 07:00:05 +0000 Manifest next update: Fri 30 Jan 2026 07:00:05 +0000 Files and hashes: 1: XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl (hash: MNP+Cu7ZNRc5g+rz7aBIRWqDo5/jDn7jqnbPWtmDsUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 07:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162B98, serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB Validity Not Before: Jan 23 07:00:05 2026 GMT Not After : Jan 30 07:00:05 2026 GMT Subject: CN=69731c76-3643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:87:87:d3:ae:7e:fd:b2:3f:c2:86:bb:1e: 3f:61:34:a9:0a:c2:f4:bf:f2:d9:42:c2:ae:cc:ca: ee:b3:8d:57:5a:9c:3d:1a:47:d4:34:f4:8c:bf:d9: 11:b9:96:26:28:b7:e0:6f:00:2d:04:15:73:12:fb: dd:a3:5a:d0:da:bc:98:b0:51:6f:e7:09:0d:d5:7e: 66:e9:9d:b9:b6:81:f9:bc:b9:97:ff:9b:09:aa:e5: a1:c1:35:0b:0b:84:04:2c:f0:06:33:4f:81:88:b0: 16:16:13:8f:35:49:2c:b3:82:e4:04:45:eb:c1:d0: b9:39:ef:21:7f:29:07:7e:eb:80:05:75:be:ae:a8: 2f:d3:9e:a7:4d:ee:73:c5:05:35:57:e9:ca:e6:8c: 50:5f:c2:c9:4e:c7:ca:e1:75:b2:de:0f:0b:15:fc: c8:99:90:00:a3:60:9e:83:13:0d:52:83:b2:a7:bb: 77:14:f7:18:ca:7a:98:4f:41:f5:11:ea:26:9f:a6: c4:8a:ea:34:9d:d0:9d:c6:fa:cc:d4:56:c8:b6:f5: 96:64:62:4e:9a:ec:9e:91:b3:dd:00:91:6b:f1:c8: a6:fa:82:73:9c:33:6b:6f:3a:17:d2:99:60:aa:50: fb:96:11:ae:36:58:d9:8a:9a:20:c3:72:29:fd:3f: 56:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:32:74:FE:F4:64:AE:B0:9B:DF:CF:E7:82:37:A0:80:9B:D4:27:86 X509v3 Authority Key Identifier: keyid:5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:0c:9f:40:ae:0b:8a:f7:fb:78:50:12:fc:db:10:3b:65:4e: 1b:41:79:15:e5:88:98:bb:cb:06:c8:7c:45:88:23:3a:13:f6: 8d:a1:01:5d:62:f5:5a:29:86:92:f5:c3:88:4d:3a:62:58:6d: af:ba:70:38:4e:32:ff:b1:41:38:5b:3b:1d:23:46:ed:4c:d8: 2c:f6:d7:88:2e:d7:ee:77:6f:5a:e0:b3:bf:c6:61:20:af:a1: 85:bb:5c:2c:e8:fd:e7:6f:9c:81:d2:69:45:43:c0:8d:15:8a: c4:1a:0a:fd:ae:1f:38:3e:38:e8:d1:82:de:21:85:83:ab:e6: 9f:c5:aa:89:37:78:a8:ae:c7:f3:74:a5:89:ba:28:88:ca:1d: b5:e1:80:f3:d1:d9:66:8d:e3:cb:04:20:0a:16:e9:c1:2a:d3: dc:9f:3c:2f:06:9b:2b:df:62:1b:54:02:f4:f4:4b:8a:01:ae: 7c:7d:77:3e:de:42:27:da:a4:5b:e7:e9:f8:02:e4:e9:c5:1a: 76:e9:3a:79:e5:e1:3e:64:46:7e:27:05:ff:4e:c6:0d:81:e4: 0d:13:fb:f6:fc:ff:73:d8:8d:07:55:20:05:24:be:a1:d3:2a: 6c:eb:82:50:0c:93:eb:3c:dd:42:e9:30:27:71:98:60:a4:f7: 0c:31:50:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE2 MkI5ODExMC8GA1UEBRMoNUMwM0M2QzlDNzI2RkYzRDIwMjc0NzBBMThBMEM4ODIy MkVDNjZGQjAeFw0yNjAxMjMwNzAwMDVaFw0yNjAxMzAwNzAwMDVaMBgxFjAUBgNV BAMMDTY5NzMxYzc2LTM2NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoAoeH065+/bI/woa7Hj9hNKkKwvS/8tlCwq7Myu6zjVdanD0aR9Q09Iy/2RG5 liYot+BvAC0EFXMS+92jWtDavJiwUW/nCQ3Vfmbpnbm2gfm8uZf/mwmq5aHBNQsL hAQs8AYzT4GIsBYWE481SSyzguQERevB0Lk57yF/KQd+64AFdb6uqC/TnqdN7nPF BTVX6crmjFBfwslOx8rhdbLeDwsV/MiZkACjYJ6DEw1Sg7Knu3cU9xjKephPQfUR 6iafpsSK6jSd0J3G+szUVsi29ZZkYk6a7J6Rs90AkWvxyKb6gnOcM2tvOhfSmWCq UPuWEa42WNmKmiDDcin9P1ZjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzTJ0/vRk rrCb38/ngjeggJvUJ4YwHwYDVR0jBBgwFoAUXAPGyccm/z0gJ0cKGKDIgiLsZvsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyQjk4LzIzOUNBMjBFREM5 MzExRjA5OTVEODREOTNGNkY1NkJDL1hBUEd5Y2NtX3owZ0owY0tHS0RJZ2lMc1p2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEFQR3ljY21fejBnSjBjS0dLRElnaUxzWnZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy Qjk4LzIzOUNBMjBFREM5MzExRjA5OTVEODREOTNGNkY1NkJDL1hBUEd5Y2NtX3ow Z0owY0tHS0RJZ2lMc1p2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEAMn0CuC4r3+3hQEvzbEDtlThtBeRXliJi7ywbIfEWIIzoT9o2hAV1i 9VophpL1w4hNOmJYba+6cDhOMv+xQThbOx0jRu1M2Cz214gu1+53b1rgs7/GYSCv oYW7XCzo/edvnIHSaUVDwI0VisQaCv2uHzg+OOjRgt4hhYOr5p/Fqok3eKiux/N0 pYm6KIjKHbXhgPPR2WaN48sEIAoW6cEq09yfPC8GmyvfYhtUAvT0S4oBrnx9dz7e QifapFvn6fgC5OnFGnbpOnnl4T5kRn4nBf9Oxg2B5A0T+/b8/3PYjQdVIAUkvqHT KmzrglAMk+s83ULpMCdxmGCk9wwxUB8= -----END CERTIFICATE-----Generated at Sun Jan 25 05:55:32 2026 by rpki-client