This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft File: X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft (raw, json) Hash identifier: 80QujODa+hCCkTK9n8j+v6hXBLX1C4b/GtYk0HK5Nbc= Subject key identifier: 96:E2:4A:2C:1A:17:73:E8:D1:82:40:C3:35:02:A5:61:B0:29:F9:67 Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 3511 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft Manifest number: 3508 Signing time: Sat 24 Jan 2026 14:36:53 +0000 Manifest this update: Sat 24 Jan 2026 14:36:52 +0000 Manifest next update: Sat 31 Jan 2026 14:36:52 +0000 Files and hashes: 1: X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl (hash: +QMvYUQSODkrLIBTh65x1ixnU/BXZp6UUH2YEcDsz7M=) 2: 3A304DB4F54411EE8FF34627C4F9AE02.roa (hash: Zl4gUZhHt66LNUFLaLmernm+th1hHU0/5O3LszjxBds=) 3: 6D106CEE3AA011EB963B4842C4F9AE02.roa (hash: m1Ja+K+BQF88h58Y18w9A7vu3WiRuOsB65pKsql8BvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13585 (0x3511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Jan 24 14:36:52 2026 GMT Not After : Jan 31 14:36:52 2026 GMT Subject: CN=6974d905-a35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1d:14:1d:6b:fa:37:0c:dc:e4:f1:d8:2e:13: a8:f8:2a:25:93:e0:22:40:6e:ba:80:6c:ea:85:34: 7c:b1:2a:cb:da:ce:31:74:b2:f6:72:5c:25:e3:ef: 48:8f:d5:93:2d:31:91:45:e8:31:58:33:8f:e2:85: 87:e1:e2:1c:92:ea:92:50:73:44:e6:b8:18:29:09: 29:5e:dd:7b:24:4d:0d:ed:09:3a:86:9f:a4:d9:37: a6:4a:88:71:55:12:4e:1e:32:5f:fb:e3:22:f6:b0: 53:ac:52:a1:7d:08:d7:c6:4a:df:69:60:95:5c:e3: 14:bf:2a:39:9a:31:10:20:3c:31:68:c1:d1:78:b6: fc:7b:c4:ff:e0:78:55:7c:4d:44:49:75:0e:2a:ef: df:f8:b4:ba:75:45:74:8c:36:db:38:e0:70:8a:f7: 81:ae:b7:7f:4a:dd:a7:4a:0e:14:46:27:d0:4d:d6: 47:07:0e:aa:23:4a:2e:36:85:1f:87:75:13:69:55: 6c:2a:37:7b:5d:84:7f:58:ab:05:c8:2e:b2:f7:1e: e7:5b:ac:91:8b:1a:38:9a:62:ff:b7:a0:ab:81:cb: 7e:39:65:81:8d:cb:9e:45:b5:d7:0a:26:cf:96:9f: 2a:53:b8:e5:77:5d:50:74:8d:64:9c:24:a9:ee:3c: 9f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E2:4A:2C:1A:17:73:E8:D1:82:40:C3:35:02:A5:61:B0:29:F9:67 X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:77:1c:e2:0c:55:7e:f6:89:f8:ac:6f:19:53:fa:df:2e:49: 7d:75:37:5c:c9:f2:26:86:f8:89:2e:d9:ad:f3:09:62:1f:6d: 4e:44:94:fd:da:83:ae:3a:3d:f1:c7:bc:11:1b:a4:83:77:d5: cd:21:b0:32:c4:6b:df:7a:35:56:cf:0c:3d:ed:7b:c4:21:3e: 05:02:59:fd:c4:49:65:ad:b7:5d:84:a3:1c:3c:a7:73:cd:32: 1a:7a:5d:07:f3:a2:b4:f8:5f:00:28:9a:53:7d:23:ff:1a:a0: b4:81:a2:f5:9d:11:ac:3e:6d:fb:ad:83:9c:e0:e1:da:5a:df: 67:13:cb:2f:83:ab:a5:ed:7c:d6:c1:9e:9e:ad:76:6f:bc:f5: 89:39:d4:31:26:be:48:6b:42:1f:b6:70:81:41:e2:67:e2:8b: 1e:fb:c0:be:25:91:44:65:cd:98:fd:34:8c:5c:a6:09:ff:15: b8:18:39:03:e3:47:4f:40:24:0e:7c:5c:a2:27:ce:de:c5:d7: 97:cf:fc:9f:60:1b:6b:68:23:ed:1e:5a:63:19:8d:eb:6e:fe: e8:0e:ad:19:07:05:21:c4:19:29:9b:63:30:56:d4:cf:73:b4: 25:fc:89:f7:8b:9b:81:1d:c3:10:67:b0:86:63:6a:d2:8e:2e: f9:97:04:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjYwMTI0MTQzNjUyWhcNMjYwMTMxMTQzNjUyWjAYMRYwFAYD VQQDDA02OTc0ZDkwNS1hMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhR0UHWv6Nwzc5PHYLhOo+Colk+AiQG66gGzqhTR8sSrL2s4xdLL2clwl4+9I j9WTLTGRRegxWDOP4oWH4eIckuqSUHNE5rgYKQkpXt17JE0N7Qk6hp+k2TemSohx VRJOHjJf++Mi9rBTrFKhfQjXxkrfaWCVXOMUvyo5mjEQIDwxaMHReLb8e8T/4HhV fE1ESXUOKu/f+LS6dUV0jDbbOOBwiveBrrd/St2nSg4URifQTdZHBw6qI0ouNoUf h3UTaVVsKjd7XYR/WKsFyC6y9x7nW6yRixo4mmL/t6Crgct+OWWBjcueRbXXCibP lp8qU7jld11QdI1knCSp7jyfUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbiSiwa F3Po0YJAwzUCpWGwKflnMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC9BQjgyNDlCMjFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVG ZURuV2lLY0xZUEIyS3JxelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwdxziDFV+9on4rG8ZU/rfLkl9dTdcyfImhviJLtmt8wliH21ORJT9 2oOuOj3xx7wRG6SDd9XNIbAyxGvfejVWzww97XvEIT4FAln9xEllrbddhKMcPKdz zTIael0H86K0+F8AKJpTfSP/GqC0gaL1nRGsPm37rYOc4OHaWt9nE8svg6ul7XzW wZ6erXZvvPWJOdQxJr5Ia0IftnCBQeJn4ose+8C+JZFEZc2Y/TSMXKYJ/xW4GDkD 40dPQCQOfFyiJ87exdeXz/yfYBtraCPtHlpjGY3rbv7oDq0ZBwUhxBkpm2MwVtTP c7Ql/In3i5uBHcMQZ7CGY2rSji75lwRx -----END CERTIFICATE-----Generated at Sun Jan 25 07:52:51 2026 by rpki-client