This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: 7CNmeGsssMLzLUchzFdRkbDawNFDPsQFEt8d+ZTnS/0= Subject key identifier: CD:94:D0:64:8A:86:FE:61:9D:6D:B7:59:DC:70:2E:DB:8B:C4:EE:8A Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 0A89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 0A7E Signing time: Sat 24 Jan 2026 19:04:16 +0000 Manifest this update: Sat 24 Jan 2026 19:04:16 +0000 Manifest next update: Sat 31 Jan 2026 19:04:16 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: b98opwQwoJU/r4jJEqnWbMqPc3e/QtMmWyHmM4r6xDc=) 2: 51D92BD25DD711F09B20C44DC4F9AE02.roa (hash: GSOu67thxVMGW+aBdpC8IU1FXpmsRcWLr3fcMku7g6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2697 (0xa89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: Jan 24 19:04:16 2026 GMT Not After : Jan 31 19:04:16 2026 GMT Subject: CN=697517b0-c17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:7a:91:0b:8d:08:cb:86:b0:e6:f1:f7:c0: 95:08:4e:f3:dc:2d:40:b8:81:ec:ce:82:b4:1f:b7: 3a:db:73:02:67:0b:b5:ae:67:80:9a:29:87:98:9e: 13:f8:a2:40:26:39:ac:82:5d:8e:a4:2c:da:a1:6c: f5:c3:26:db:94:c5:90:3c:ff:9a:6c:b2:9c:00:76: cd:21:fd:dd:d4:26:09:5f:61:af:94:a6:84:73:fb: 26:cb:43:09:de:70:a5:5e:5f:fb:c4:5e:47:1c:74: a6:ba:e5:bc:8d:41:43:d3:1c:64:cd:1c:4c:d6:66: fb:a9:b5:f5:27:6e:c5:4d:b4:1b:ea:a7:07:a0:3a: 2d:d8:e5:51:35:91:76:a9:4c:1f:12:2a:4a:ac:4d: 09:cf:1c:be:78:4b:99:29:de:9a:b0:79:c1:a7:6b: 78:69:13:e7:cf:58:89:f0:a8:d8:74:c8:cf:2e:a6: f5:63:f2:6a:24:12:d9:fa:6e:1d:7f:ec:9b:f6:27: 90:3e:18:91:aa:8b:cb:f9:e4:36:60:60:d8:9c:d4: 8e:70:0c:b3:cc:6e:6d:2a:db:e8:dd:4c:1f:3e:1c: 53:1b:ed:e2:79:be:37:41:60:c6:49:7e:e8:57:20: 94:f8:94:1c:7d:dd:9c:18:80:5c:62:13:a5:e9:4f: 0f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:94:D0:64:8A:86:FE:61:9D:6D:B7:59:DC:70:2E:DB:8B:C4:EE:8A X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:6a:c1:30:33:6d:a1:a0:99:04:48:c8:df:7f:cd:db:f9:40: ba:e3:92:72:6c:f5:a5:91:e0:b1:d1:42:42:58:1b:e1:46:dd: 91:bd:3b:7c:f2:9d:55:54:dd:c8:91:b3:2b:aa:0b:65:da:5c: 2b:ad:3e:75:22:a5:65:7f:b9:55:4f:a2:d2:71:fc:d3:53:47: ae:a3:6a:d5:e5:e9:de:0f:89:c9:7a:45:67:ee:53:d1:6c:35: bf:9d:6e:89:43:cd:96:ff:60:9f:28:82:dd:f7:2b:ec:64:35: f1:5e:09:e4:0d:9a:bb:31:dd:c3:27:e3:13:c3:51:68:c4:08: f5:3f:98:f3:59:13:fa:71:c4:81:1b:e0:d2:95:28:de:05:3d: 7f:c3:47:93:6c:c3:9d:b1:da:a6:cf:50:cd:45:0c:1b:48:4c: e9:d8:b1:c1:75:bc:fe:d7:7d:ff:5d:c2:80:be:ab:d6:06:e2: de:8f:af:89:c3:4a:32:2d:37:62:11:02:58:93:a3:5b:b3:75: 51:12:5d:ae:b7:60:7e:bb:fe:70:19:8e:5d:f1:6f:13:fa:70: 4f:65:64:86:7f:75:84:9d:af:3e:aa:79:63:8b:7f:34:cb:4d: a5:01:93:a5:e0:ce:45:07:02:e6:9c:b4:fc:ff:62:82:91:22: f8:fb:1e:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjYwMTI0MTkwNDE2WhcNMjYwMTMxMTkwNDE2WjAYMRYwFAYD VQQDDA02OTc1MTdiMC1jMTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDZ6kQuNCMuGsObx98CVCE7z3C1AuIHszoK0H7c623MCZwu1rmeAmimHmJ4T +KJAJjmsgl2OpCzaoWz1wybblMWQPP+abLKcAHbNIf3d1CYJX2GvlKaEc/smy0MJ 3nClXl/7xF5HHHSmuuW8jUFD0xxkzRxM1mb7qbX1J27FTbQb6qcHoDot2OVRNZF2 qUwfEipKrE0Jzxy+eEuZKd6asHnBp2t4aRPnz1iJ8KjYdMjPLqb1Y/JqJBLZ+m4d f+yb9ieQPhiRqovL+eQ2YGDYnNSOcAyzzG5tKtvo3UwfPhxTG+3ieb43QWDGSX7o VyCU+JQcfd2cGIBcYhOl6U8PBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2U0GSK hv5hnW23WdxwLtuLxO6KMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGasEwM22hoJkESMjff83b+UC645JybPWlkeCx0UJCWBvhRt2RvTt8 8p1VVN3IkbMrqgtl2lwrrT51IqVlf7lVT6LScfzTU0euo2rV5eneD4nJekVn7lPR bDW/nW6JQ82W/2CfKILd9yvsZDXxXgnkDZq7Md3DJ+MTw1FoxAj1P5jzWRP6ccSB G+DSlSjeBT1/w0eTbMOdsdqmz1DNRQwbSEzp2LHBdbz+133/XcKAvqvWBuLej6+J w0oyLTdiEQJYk6Nbs3VREl2ut2B+u/5wGY5d8W8T+nBPZWSGf3WEna8+qnlji380 y02lAZOl4M5FBwLmnLT8/2KCkSL4+x64 -----END CERTIFICATE-----Generated at Sun Jan 25 12:54:41 2026 by rpki-client