This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft File: XOvYaFsXSV2z4edFmXn-hPBDg_I.mft (raw, json) Hash identifier: Gxrqlk17JAwWVtf+DcoBTs4j1V3ruoMOB+/18vl9a/4= Subject key identifier: C1:B0:2F:AE:35:B3:D7:DA:B6:4F:3F:32:D5:27:DA:FE:46:A0:B2:9C Authority key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 Certificate issuer: /CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft Manifest number: 049B Signing time: Sun 25 Jan 2026 00:30:19 +0000 Manifest this update: Sun 25 Jan 2026 00:30:18 +0000 Manifest next update: Sun 01 Feb 2026 00:30:18 +0000 Files and hashes: 1: XOvYaFsXSV2z4edFmXn-hPBDg_I.crl (hash: Dtj+9IcILBAM8zPoydUdf1XsVuiAsBHZR11AQ2XXsLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Validity Not Before: Jan 25 00:30:18 2026 GMT Not After : Feb 1 00:30:18 2026 GMT Subject: CN=6975641a-91f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:33:89:e5:0e:a2:56:6a:d8:d8:2d:93:2d:67: cd:2a:2f:ff:47:5a:92:0a:97:04:01:cc:0b:12:3d: e1:ee:6e:db:b4:e7:12:cc:4f:c8:4e:cb:9f:11:a9: bd:09:58:e3:1e:c2:47:68:87:74:e0:60:67:bb:c6: 82:48:eb:5b:0b:40:1b:b9:f7:bf:ca:b2:a1:3e:75: 6d:13:98:6a:1c:d8:32:89:0e:33:40:1d:29:8d:fc: 50:3a:e1:1b:26:4d:2f:1e:01:d5:26:5a:66:51:0b: 08:b6:fc:53:51:22:aa:ea:49:75:db:7c:c1:4f:11: 16:81:04:76:ac:df:27:55:8e:f5:11:ed:9b:86:49: 52:30:23:39:1f:98:64:40:96:b8:bf:72:79:33:db: 37:9a:6b:48:c0:a8:30:59:fb:ad:ca:fc:58:7c:7b: 15:2c:51:00:f2:ae:c1:de:1d:4a:56:85:80:0d:df: e7:1e:f3:73:73:19:e0:11:a4:fe:e3:83:72:04:f4: 08:a5:9f:11:77:7a:a2:89:93:20:01:94:8d:e6:6d: 0d:f6:a6:5f:be:24:52:c8:41:f5:9e:59:be:85:53: cd:65:fe:99:47:83:85:c1:87:a5:50:e7:d8:1c:da: 9e:4e:66:08:78:2d:f2:a0:e2:ce:c5:0c:07:c5:78: d0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B0:2F:AE:35:B3:D7:DA:B6:4F:3F:32:D5:27:DA:FE:46:A0:B2:9C X509v3 Authority Key Identifier: keyid:5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:cf:38:39:99:dc:37:7f:ef:f6:b2:27:7f:bc:2d:68:0f:0e: 30:b3:ad:2a:31:f3:c9:67:14:09:de:e0:51:f9:07:75:b4:65: 46:32:4b:ab:76:76:b8:63:03:35:d6:2d:26:b2:a0:e2:56:f9: 95:17:f7:00:17:fb:65:09:80:b4:fa:18:39:21:ad:d2:95:d0: cd:ec:5b:91:bf:c4:05:46:ef:77:9a:e4:9d:99:a6:5f:ba:08: 7f:ff:a4:98:48:d9:dc:b4:d9:60:d7:d9:01:ab:37:13:ae:04: 39:a0:c3:17:ef:5b:d2:2c:ac:c4:0f:3d:cb:bd:62:cb:d1:2b: 82:7d:6a:43:a8:96:fe:ef:d3:e4:c8:33:e8:c2:8c:33:69:d8: 55:24:86:ee:6f:6f:72:e1:95:4f:a9:cb:5c:73:05:38:5e:d1: 56:e3:38:86:5c:4b:d6:f8:80:f5:73:8a:d6:8d:55:04:37:ac: 7f:05:17:1e:07:4b:f3:65:69:c3:0c:65:88:34:44:94:4b:2e: 0c:c9:7a:64:9e:41:24:ae:d9:1f:28:ed:b2:14:ac:95:e4:e8: 79:39:71:0f:32:38:3d:fa:e7:1c:a3:79:01:61:df:fb:f8:99: 51:c4:5d:96:72:61:9b:f0:fa:33:f3:c5:3d:64:d0:b3:0d:93: 13:4e:76:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx N0M3MTYxMTAvBgNVBAUTKDVDRUJEODY4NUIxNzQ5NURCM0UxRTc0NTk5NzlGRTg0 RjA0MzgzRjIwHhcNMjYwMTI1MDAzMDE4WhcNMjYwMjAxMDAzMDE4WjAYMRYwFAYD VQQDDA02OTc1NjQxYS05MWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzOJ5Q6iVmrY2C2TLWfNKi//R1qSCpcEAcwLEj3h7m7btOcSzE/ITsufEam9 CVjjHsJHaId04GBnu8aCSOtbC0Abufe/yrKhPnVtE5hqHNgyiQ4zQB0pjfxQOuEb Jk0vHgHVJlpmUQsItvxTUSKq6kl123zBTxEWgQR2rN8nVY71Ee2bhklSMCM5H5hk QJa4v3J5M9s3mmtIwKgwWfutyvxYfHsVLFEA8q7B3h1KVoWADd/nHvNzcxngEaT+ 44NyBPQIpZ8Rd3qiiZMgAZSN5m0N9qZfviRSyEH1nlm+hVPNZf6ZR4OFwYelUOfY HNqeTmYIeC3yoOLOxQwHxXjQBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGwL641 s9fatk8/MtUn2v5GoLKcMB8GA1UdIwQYMBaAFFzr2GhbF0lds+HnRZl5/oTwQ4Py MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNWMno0ZWRGbVhuLWhQQkRn X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPdllhRnNYU1YyejRlZEZtWG4taFBCRGdfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNW Mno0ZWRGbVhuLWhQQkRnX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvzzg5mdw3f+/2sid/vC1oDw4ws60qMfPJZxQJ3uBR+Qd1tGVGMkur dna4YwM11i0msqDiVvmVF/cAF/tlCYC0+hg5Ia3SldDN7FuRv8QFRu93muSdmaZf ugh//6SYSNnctNlg19kBqzcTrgQ5oMMX71vSLKzEDz3LvWLL0SuCfWpDqJb+79Pk yDPowowzadhVJIbub29y4ZVPqctccwU4XtFW4ziGXEvW+ID1c4rWjVUEN6x/BRce B0vzZWnDDGWINESUSy4MyXpknkEkrtkfKO2yFKyV5Oh5OXEPMjg9+ucco3kBYd/7 +JlRxF2WcmGb8Poz88U9ZNCzDZMTTnab -----END CERTIFICATE-----Generated at Sun Jan 25 12:27:39 2026 by rpki-client