This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json) Hash identifier: 6flgr7kksZcTQcJCFHspsUpJPboV9OlY8CFxzhj+cIU= Subject key identifier: 4B:C6:13:0F:0E:19:8B:08:50:2D:5B:AE:38:C7:27:86:76:66:F3:82 Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Certificate serial: 06C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft Manifest number: 06B8 Signing time: Sat 24 Jan 2026 21:37:19 +0000 Manifest this update: Sat 24 Jan 2026 21:37:18 +0000 Manifest next update: Sat 31 Jan 2026 21:37:18 +0000 Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: Ta7eHjh8fEF3VtK8FiPzmvZGItv/sR3XK+5VeSUwxvE=) 2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: xehlefIOCjN/1m1sil/A3Br1rK2e2Chjm65NVpSEx0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1730 (0x6c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500 Validity Not Before: Jan 24 21:37:18 2026 GMT Not After : Jan 31 21:37:18 2026 GMT Subject: CN=69753b8e-913b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3d:f2:a6:53:a8:dc:14:e3:3c:9e:31:ef:7d: 42:4f:13:eb:21:50:ee:30:23:b9:74:e7:50:a5:a7: 7d:48:6d:68:c4:92:aa:7a:71:6f:65:88:da:23:22: 9d:4f:c7:2f:29:2a:61:81:10:8a:3d:c1:d0:ba:54: 0a:a4:41:0c:ab:48:72:fb:3d:8e:5f:03:3e:28:ac: 1a:63:c7:95:13:3e:ec:50:db:ae:72:3b:fc:15:55: b0:75:df:d8:6f:29:2f:7c:e7:74:92:f8:29:5c:03: 14:33:d5:74:ff:e2:1d:cf:eb:f6:61:2e:58:b5:83: ea:5b:14:89:51:5a:52:1a:ed:3e:cf:b1:bd:e7:3d: 60:a0:e8:e9:7e:20:15:4c:e9:e3:54:89:4c:62:14: a2:f5:76:1e:e8:b1:7a:1d:bc:0c:86:36:ce:3b:3e: 32:57:1a:9b:3d:dc:ab:c0:f1:50:ef:98:28:d4:74: bb:7c:cf:cd:ef:e4:2a:9f:95:88:2f:d0:fb:69:dc: c4:07:ed:b9:d1:55:6a:b6:22:c6:71:0f:0c:f7:0b: 96:90:69:f6:c8:59:23:cc:bd:12:ca:a1:0b:95:62: a5:56:a4:19:ac:f2:dc:46:77:d6:54:7f:c2:d9:54: ee:c1:bf:a6:5e:e0:c3:5f:02:4c:1a:71:ad:07:09: 85:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C6:13:0F:0E:19:8B:08:50:2D:5B:AE:38:C7:27:86:76:66:F3:82 X509v3 Authority Key Identifier: keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:13:cf:f3:8a:da:b0:d3:ff:0c:f4:9c:cb:f8:18:26:3f:14: cc:61:46:7c:ff:32:1e:6a:29:d9:49:4a:42:5c:cc:bd:51:4b: d1:b3:54:a8:1d:9a:5a:7d:5a:ec:b3:e9:8e:58:5b:ea:1c:7e: db:89:f5:26:b8:af:cf:c6:05:ee:b3:f7:c9:2c:0c:42:a4:5b: 0b:6a:e0:2b:ee:0d:80:e1:b1:63:59:da:a4:95:79:fa:bb:00: cb:02:ef:b6:e8:b7:c6:cd:50:fa:1a:bf:d7:0c:62:84:e3:51: a3:d9:92:00:85:61:3a:4f:7d:16:51:52:ab:4e:36:21:53:7f: 87:6a:ae:ae:fe:79:c5:f8:94:ae:f2:49:0d:e2:97:5d:45:97: 3a:ca:ce:6b:7d:f2:e8:97:48:1d:d8:80:24:2e:8f:ff:5f:5c: 70:df:3e:f2:00:4d:75:c7:4d:69:71:b7:31:40:f1:92:b2:8a: 6b:6d:c2:c8:05:cf:e5:26:76:d6:f0:b4:ee:12:cd:ca:5f:2d: b6:2d:3c:2a:21:be:db:0e:cc:e6:d1:26:bd:44:2d:e4:d5:c7: 69:2b:19:94:6e:25:46:71:d8:9d:95:d2:07:ba:e6:2b:c6:71: 6c:4e:fe:0e:54:f4:55:40:35:a6:b4:64:4e:8a:e9:44:17:57: cc:e6:00:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF Q0REMTA1MDAwHhcNMjYwMTI0MjEzNzE4WhcNMjYwMTMxMjEzNzE4WjAYMRYwFAYD VQQDDA02OTc1M2I4ZS05MTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0T3yplOo3BTjPJ4x731CTxPrIVDuMCO5dOdQpad9SG1oxJKqenFvZYjaIyKd T8cvKSphgRCKPcHQulQKpEEMq0hy+z2OXwM+KKwaY8eVEz7sUNuucjv8FVWwdd/Y bykvfOd0kvgpXAMUM9V0/+Idz+v2YS5YtYPqWxSJUVpSGu0+z7G95z1goOjpfiAV TOnjVIlMYhSi9XYe6LF6HbwMhjbOOz4yVxqbPdyrwPFQ75go1HS7fM/N7+Qqn5WI L9D7adzEB+250VVqtiLGcQ8M9wuWkGn2yFkjzL0SyqELlWKlVqQZrPLcRnfWVH/C 2VTuwb+mXuDDXwJMGnGtBwmFfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvGEw8O GYsIUC1brjjHJ4Z2ZvOCMB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQyMC9DMEM2QUU1QzkzNUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4 Y1JBbk1vRTVoRW5zM1JCUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATE8/zitqw0/8M9JzL+BgmPxTMYUZ8/zIeainZSUpCXMy9UUvRs1So HZpafVrss+mOWFvqHH7bifUmuK/PxgXus/fJLAxCpFsLauAr7g2A4bFjWdqklXn6 uwDLAu+26LfGzVD6Gr/XDGKE41Gj2ZIAhWE6T30WUVKrTjYhU3+Haq6u/nnF+JSu 8kkN4pddRZc6ys5rffLol0gd2IAkLo//X1xw3z7yAE11x01pcbcxQPGSsoprbcLI Bc/lJnbW8LTuEs3KXy22LTwqIb7bDszm0Sa9RC3k1cdpKxmUbiVGcdidldIHuuYr xnFsTv4OVPRVQDWmtGROiulEF1fM5gAX -----END CERTIFICATE-----Generated at Sun Jan 25 04:32:48 2026 by rpki-client