This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft File: XaSteg0ZJFUV5aLYSgxnRwCkP80.mft (raw, json) Hash identifier: D22K9QjRHPOjXMZqdzLYcrg1govp3AVNx+EvoYVjN5A= Subject key identifier: D1:50:98:0A:21:E5:4E:62:D3:6D:6C:71:96:62:8D:85:AA:E8:04:82 Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD Certificate issuer: /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft Manifest number: 01CD Signing time: Sun 25 Jan 2026 02:12:19 +0000 Manifest this update: Sun 25 Jan 2026 02:12:18 +0000 Manifest next update: Sun 01 Feb 2026 02:12:18 +0000 Files and hashes: 1: XaSteg0ZJFUV5aLYSgxnRwCkP80.crl (hash: Q60KF2zqSfzzJadFF6VhxLAMjo42luy6go4CB73555E=) 2: 9062BB863C3F11EE8DA7781AC4F9AE02.roa (hash: Ko2wZOucS0J/Gzb2C9yks7gKzQf0Lz0Srb4aABcYNMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192BCF, serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Validity Not Before: Jan 25 02:12:18 2026 GMT Not After : Feb 1 02:12:18 2026 GMT Subject: CN=69757c03-cc6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:36:43:cc:29:7a:4c:34:4b:69:34:d8:c8:07: a7:56:14:f1:39:e4:71:2c:d7:3b:37:ca:2f:66:c6: 80:1e:8a:fd:8b:6d:e1:08:f9:2a:d0:b8:1d:a5:39: 23:40:7b:33:c7:9e:9b:dd:63:ea:42:1b:1d:d5:e7: 10:dd:6f:87:03:d5:e2:c6:9f:ee:cb:4d:c7:97:7a: 91:fa:7a:40:aa:4f:78:0f:12:e0:c5:e4:a9:02:b0: 4b:bf:22:53:11:42:d9:25:82:5a:6b:6d:f0:d5:f1: 4c:1d:1d:2c:be:0f:33:0e:fc:88:b7:8b:34:69:d5: bb:89:29:ce:32:f4:e5:a8:93:2a:3f:e4:1f:c4:73: ff:7b:da:66:e7:e1:7e:9c:30:38:74:b4:68:c4:56: b0:94:8f:ac:5e:5d:c5:e1:ee:0e:9f:aa:df:00:c8: 39:24:da:5e:aa:3b:4d:ec:ba:97:ae:a7:e5:70:04: 50:fb:bf:84:ed:7f:96:8e:94:1a:a9:8c:d4:64:b8: 8a:a7:32:4b:32:9a:20:af:e3:b6:9d:52:21:d3:22: 99:57:87:b6:9d:fa:f3:a9:bb:b0:9c:ce:71:c2:2d: 1a:ea:0c:f6:57:fc:26:72:6b:d7:a9:b9:82:4e:d4: 12:7c:fc:af:b7:da:14:6f:c6:03:a3:d1:24:d0:ab: e4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:50:98:0A:21:E5:4E:62:D3:6D:6C:71:96:62:8D:85:AA:E8:04:82 X509v3 Authority Key Identifier: keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7a:7e:55:75:1c:7d:75:58:70:01:d7:71:71:8a:98:e1:19: 6d:ee:6a:b5:f3:de:33:39:53:db:3d:0f:92:94:d1:c0:08:51: fb:e5:6e:4a:5a:89:94:eb:bc:8a:b3:de:39:84:0e:c0:05:71: a0:b1:86:78:4a:b9:21:99:b2:2f:18:30:60:b9:f5:a9:4f:db: ad:ac:ad:3f:6d:db:d2:ad:4f:bc:d9:08:02:35:54:54:4e:2e: 1f:29:57:e9:d1:b5:29:00:f5:25:7c:4c:20:80:15:50:a5:f7: c4:88:19:d7:4f:8e:cb:56:0e:0b:03:ee:14:ed:4a:85:ad:97: 8e:37:c4:5c:e8:ed:9b:0f:01:06:a5:f8:b6:24:87:f5:4f:d6: 27:10:ce:85:f1:0c:ae:8b:b7:cc:9b:78:1c:33:77:67:ab:92: be:65:49:65:87:d0:7f:41:38:bb:b8:b4:bf:f9:de:39:bc:df: a5:23:13:36:52:14:cc:86:7e:74:2a:bc:7e:0f:3d:e2:16:ba: 28:bd:6b:1c:09:04:74:f6:a2:8a:fd:34:26:24:16:d7:c7:92: 42:e8:c0:ff:fd:0b:49:15:92:37:ec:c6:a7:9c:8c:75:e6:14: d8:93:17:e0:2c:a8:63:a3:9e:0a:75:3e:c5:83:be:c7:01:b8: 90:fd:24:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCQ0YxMTAvBgNVBAUTKDVEQTRBRDdBMEQxOTI0NTUxNUU1QTJEODRBMEM2NzQ3 MDBBNDNGQ0QwHhcNMjYwMTI1MDIxMjE4WhcNMjYwMjAxMDIxMjE4WjAYMRYwFAYD VQQDDA02OTc1N2MwMy1jYzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTZDzCl6TDRLaTTYyAenVhTxOeRxLNc7N8ovZsaAHor9i23hCPkq0LgdpTkj QHszx56b3WPqQhsd1ecQ3W+HA9Xixp/uy03Hl3qR+npAqk94DxLgxeSpArBLvyJT EULZJYJaa23w1fFMHR0svg8zDvyIt4s0adW7iSnOMvTlqJMqP+QfxHP/e9pm5+F+ nDA4dLRoxFawlI+sXl3F4e4On6rfAMg5JNpeqjtN7LqXrqflcARQ+7+E7X+WjpQa qYzUZLiKpzJLMpogr+O2nVIh0yKZV4e2nfrzqbuwnM5xwi0a6gz2V/wmcmvXqbmC TtQSfPyvt9oUb8YDo9Ek0Kvk1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFQmAoh 5U5i021scZZijYWq6ASCMB8GA1UdIwQYMBaAFF2krXoNGSRVFeWi2EoMZ0cApD/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkJDRi8zMDUyQ0NBNjNC NEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpGVVY1YUxZU2d4blJ3Q2tQ ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hhU3RlZzBaSkZVVjVhTFlTZ3huUndDa1A4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkJDRi8zMDUyQ0NBNjNCNEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpG VVY1YUxZU2d4blJ3Q2tQODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOen5VdRx9dVhwAddxcYqY4Rlt7mq1894zOVPbPQ+SlNHACFH75W5K WomU67yKs945hA7ABXGgsYZ4SrkhmbIvGDBgufWpT9utrK0/bdvSrU+82QgCNVRU Ti4fKVfp0bUpAPUlfEwggBVQpffEiBnXT47LVg4LA+4U7UqFrZeON8Rc6O2bDwEG pfi2JIf1T9YnEM6F8Qyui7fMm3gcM3dnq5K+ZUllh9B/QTi7uLS/+d45vN+lIxM2 UhTMhn50Krx+Dz3iFroovWscCQR09qKK/TQmJBbXx5JC6MD//QtJFZI37MannIx1 5hTYkxfgLKhjo54KdT7Fg77HAbiQ/ST0 -----END CERTIFICATE-----Generated at Sun Jan 25 18:56:23 2026 by rpki-client