This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft File: _XxIEch8Vm71Xtqw50P_BmufqGY.mft (raw, json) Hash identifier: fxNaer1jAtOkNT22/7mgsRJLVhA0tpNr02fvcDBA4Nc= Subject key identifier: C2:CB:C7:A0:D7:A9:3C:63:66:1F:B9:C4:2E:0D:EB:65:C8:EA:A2:39 Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 Certificate issuer: /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Certificate serial: 1715 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft Manifest number: 1708 Signing time: Sat 24 Jan 2026 16:23:18 +0000 Manifest this update: Sat 24 Jan 2026 16:23:18 +0000 Manifest next update: Sat 31 Jan 2026 16:23:18 +0000 Files and hashes: 1: _XxIEch8Vm71Xtqw50P_BmufqGY.crl (hash: yeOStyPZL/xDurNm26Se/0hGBlzwZyLMKyRaiLg0O9c=) 2: 01B2AC1E064111E8A62EF586C4F9AE02.roa (hash: gDuc8ZWgCrliQXLxnNcUvIObZ9Jrt4XfymfNcicc4pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5909 (0x1715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91935EA, serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Validity Not Before: Jan 24 16:23:18 2026 GMT Not After : Jan 31 16:23:18 2026 GMT Subject: CN=6974f1f6-e7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d3:46:f1:2b:e3:19:fc:52:c9:d3:98:56:34: 60:b1:06:de:01:58:62:b5:3e:df:b7:0a:05:3f:7a: 12:3a:4c:ad:32:d1:1c:52:34:e5:89:12:e1:f3:82: 80:c6:dd:45:c9:51:5c:43:b6:21:f4:38:6b:2d:c0: 17:e2:b5:a0:05:68:b4:17:d6:67:36:95:1b:1d:ea: 01:00:d0:af:9e:45:9d:10:06:8d:ef:a9:52:10:64: f4:a8:6e:7b:56:34:c2:b4:4b:ea:4f:98:05:d4:0b: 6d:30:0a:49:1c:8a:fa:88:b7:e7:08:f9:29:3d:11: 07:90:02:79:ee:46:08:ad:5b:22:a0:07:a2:72:91: 2c:77:f7:1e:e8:6b:f0:45:c5:71:52:c1:da:2f:6f: 9a:d5:e1:9d:3c:8a:f1:44:5d:ad:34:d9:c6:05:2c: a5:e1:71:ad:15:35:a7:2c:a5:af:f5:73:27:a2:f4: b0:77:ab:91:b6:a0:35:34:81:d2:d8:88:f8:ae:32: da:23:2e:70:e3:ad:a5:f3:bd:ef:25:d3:21:30:d4: 2e:ee:d6:7c:80:c7:b2:4a:cb:8f:5c:7b:be:9e:62: d8:eb:75:4e:09:fa:2d:08:4f:11:10:25:7d:f6:22: ab:da:d0:53:3c:22:10:b4:4a:59:99:f8:d6:67:8d: 44:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CB:C7:A0:D7:A9:3C:63:66:1F:B9:C4:2E:0D:EB:65:C8:EA:A2:39 X509v3 Authority Key Identifier: keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e7:e0:8c:3e:d6:e7:f5:dc:8a:0d:9d:f6:8c:4f:5b:55:d6: 99:db:a2:bf:c4:b8:86:22:08:73:4a:2f:68:02:d9:e6:b0:ff: ad:91:35:d3:bd:52:db:21:d2:54:b0:62:61:90:89:af:01:19: ff:57:e1:56:74:bb:8d:d8:2d:81:f5:4e:ab:9d:aa:c4:0a:3f: e8:cd:15:af:43:8c:30:d8:4c:40:1c:a4:e4:2c:a4:48:ed:ac: 2e:41:51:15:bc:e6:2b:0b:ba:72:a7:9a:91:f6:45:bf:21:53: 15:55:98:f0:30:82:2f:5c:1f:a7:80:18:ad:c5:e5:8c:1c:0d: 1f:0f:28:7c:62:96:62:b2:98:0b:5c:69:fc:b2:c7:a0:50:82: b9:76:22:14:53:d2:e0:87:a5:6d:be:98:69:c0:4c:81:ea:de: 97:8d:ca:ba:89:a9:a4:7a:22:10:0f:9c:7e:b1:35:c1:e8:c8: f8:51:d6:7c:09:f4:10:1d:ea:cf:41:0c:0e:be:f1:18:77:ac: 0f:08:08:7e:37:e8:75:63:3b:09:21:9c:87:d4:76:8f:59:00: f6:45:e9:36:ff:6b:a6:c8:8c:a7:2b:3f:37:f2:81:2d:d8:7a: ac:52:5a:44:0e:c3:44:87:1d:32:c5:97:8f:59:c6:b5:ab:e7: f1:41:2f:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM1RUExMTAvBgNVBAUTKEZEN0M0ODExQzg3QzU2NkVGNTVFREFCMEU3NDNGRjA2 NkI5RkE4NjYwHhcNMjYwMTI0MTYyMzE4WhcNMjYwMTMxMTYyMzE4WjAYMRYwFAYD VQQDDA02OTc0ZjFmNi1lN2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhNNG8SvjGfxSydOYVjRgsQbeAVhitT7ftwoFP3oSOkytMtEcUjTliRLh84KA xt1FyVFcQ7Yh9DhrLcAX4rWgBWi0F9ZnNpUbHeoBANCvnkWdEAaN76lSEGT0qG57 VjTCtEvqT5gF1AttMApJHIr6iLfnCPkpPREHkAJ57kYIrVsioAeicpEsd/ce6Gvw RcVxUsHaL2+a1eGdPIrxRF2tNNnGBSyl4XGtFTWnLKWv9XMnovSwd6uRtqA1NIHS 2Ij4rjLaIy5w462l873vJdMhMNQu7tZ8gMeySsuPXHu+nmLY63VOCfotCE8RECV9 9iKr2tBTPCIQtEpZmfjWZ41E3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLLx6DX qTxjZh+5xC4N62XI6qI5MB8GA1UdIwQYMBaAFP18SBHIfFZu9V7asOdD/wZrn6hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzVFQS8xOURENDY3MDAw QUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZtNzFYdHF3NTBQX0JtdWZx R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YeElFY2g4Vm03MVh0cXc1MFBfQm11ZnFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzVFQS8xOURENDY3MDAwQUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZt NzFYdHF3NTBQX0JtdWZxR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb5+CMPtbn9dyKDZ32jE9bVdaZ26K/xLiGIghzSi9oAtnmsP+tkTXT vVLbIdJUsGJhkImvARn/V+FWdLuN2C2B9U6rnarECj/ozRWvQ4ww2ExAHKTkLKRI 7awuQVEVvOYrC7pyp5qR9kW/IVMVVZjwMIIvXB+ngBitxeWMHA0fDyh8YpZispgL XGn8ssegUIK5diIUU9Lgh6VtvphpwEyB6t6Xjcq6iamkeiIQD5x+sTXB6Mj4UdZ8 CfQQHerPQQwOvvEYd6wPCAh+N+h1YzsJIZyH1HaPWQD2Rek2/2umyIynKz838oEt 2HqsUlpEDsNEhx0yxZePWca1q+fxQS8s -----END CERTIFICATE-----Generated at Sun Jan 25 17:05:54 2026 by rpki-client