This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: q6HnEq5cEZPY3YGFxTF1pi9C45/5AsSApvBcBcqTR2s= Subject key identifier: 46:B9:12:53:E9:52:58:E1:12:80:7D:C5:41:8C:8B:E1:68:F2:A5:F3 Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 01E5 Signing time: Sun 25 Jan 2026 02:04:35 +0000 Manifest this update: Sun 25 Jan 2026 02:04:34 +0000 Manifest next update: Sun 01 Feb 2026 02:04:34 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: qIspBC4CWUBxm9k8fGphKdWzeEuT27yYnjSHiGNwJkM=) 2: 36333AA6928111F0AA95D96AC4F9AE02.roa (hash: VniQg/Q8eQO09WHTg5jdvrFHg394rGunw1V45oxGtZA=) 3: 6810784CC56F11F0836DEB12C4F9AE02.roa (hash: l/6jwLwhHlaq4DjFtJkbAl5/YqlAnf4TjESkfZ2vJwg=) 4: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: 0HLdia6d694d6rIqd0yRB5FR0PZ3pegZtpnN857kKGw=) 5: 94FF257E8F5F11F0A46A7259C4F9AE02.roa (hash: XI2MRT3apixej+c7Uuh5Oy/DdOkTdTWC2j0oX0vYoiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: Jan 25 02:04:34 2026 GMT Not After : Feb 1 02:04:34 2026 GMT Subject: CN=69757a32-cbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d0:30:4e:f9:48:85:32:e6:28:55:9b:0d:e6: fe:10:72:35:2c:30:c7:06:44:3b:14:89:0e:9f:46: 68:cb:c0:8c:04:89:23:a8:69:e5:83:27:b9:62:9d: 1f:4b:9e:8e:1d:e7:84:eb:85:a3:65:92:a2:f5:07: c9:21:1f:4d:bb:e2:37:a1:27:12:81:48:a3:26:a0: 88:6b:83:33:b1:c4:91:e3:d4:4b:46:b1:11:60:47: 3f:73:61:a6:81:3a:a6:6f:a7:eb:53:61:e3:f4:68: 42:c6:1c:37:a8:b3:40:c8:18:09:fd:ab:d8:1c:93: e0:79:62:48:d6:d6:f7:11:8c:38:39:15:dd:a5:f4: 12:df:e4:70:13:94:ac:db:97:15:56:c0:de:af:00: 86:b7:e7:d6:f3:53:ee:85:44:93:b6:9d:e0:76:bb: b3:31:a4:dd:d6:f1:ec:6c:7b:3a:df:3d:cc:f5:7b: dd:2d:17:58:14:6f:41:6d:fd:70:6a:27:3c:6f:1b: fb:86:31:4c:e4:0a:bc:5c:7c:2f:1b:1a:0d:51:6b: ab:b9:ce:0e:c5:1c:f6:13:0a:45:31:86:54:60:e8: 0f:94:fc:0c:e0:e4:42:d2:96:12:53:aa:7f:8f:7e: 99:ef:62:59:71:43:be:13:2b:f3:e6:0f:35:cd:26: 57:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B9:12:53:E9:52:58:E1:12:80:7D:C5:41:8C:8B:E1:68:F2:A5:F3 X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:c5:3b:35:e3:14:31:60:1d:28:82:cc:02:f3:eb:26:a4:d8: d9:96:42:8c:54:00:a9:2e:83:61:08:31:cb:92:26:e6:2e:c2: ab:38:95:3c:50:8c:30:95:55:8d:87:44:fb:e6:e2:33:17:77: fb:f7:3c:4d:b8:ee:d1:e5:af:01:a1:f4:a9:49:c8:fb:04:62: dd:e9:6c:c0:e8:af:14:8d:aa:46:b6:18:ae:0d:e2:87:4e:c0: af:cc:bd:10:16:b4:7f:0e:d7:35:0c:1d:89:70:de:68:61:f6: 4f:59:f0:e3:3f:aa:05:0d:af:aa:f3:8a:f8:d7:b0:6e:0b:2c: e1:66:71:c7:61:af:91:be:e9:fa:39:52:ee:bd:6a:57:82:1a: d9:2c:78:4a:e5:d2:e2:13:fb:2c:d8:31:17:73:53:ca:ea:f1: c2:c5:3e:d7:fb:8e:73:a8:7b:68:0a:22:23:b2:1e:f7:2b:c1: 7d:20:d5:08:0a:a2:9b:4c:8f:21:f3:e9:db:00:6d:77:22:24: 9b:ad:02:6e:24:b3:fe:7c:c3:83:e0:38:6e:85:02:ac:16:bc: ef:cc:c4:f6:4d:e1:8b:dd:f1:ac:6d:3e:08:d8:3c:78:24:30: 82:0d:2a:b2:f6:96:4f:72:bd:58:7f:bc:fa:04:5f:3d:14:ee: b4:61:04:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjYwMTI1MDIwNDM0WhcNMjYwMjAxMDIwNDM0WjAYMRYwFAYD VQQDDA02OTc1N2EzMi1jYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3tAwTvlIhTLmKFWbDeb+EHI1LDDHBkQ7FIkOn0Zoy8CMBIkjqGnlgye5Yp0f S56OHeeE64WjZZKi9QfJIR9Nu+I3oScSgUijJqCIa4MzscSR49RLRrERYEc/c2Gm gTqmb6frU2Hj9GhCxhw3qLNAyBgJ/avYHJPgeWJI1tb3EYw4ORXdpfQS3+RwE5Ss 25cVVsDerwCGt+fW81PuhUSTtp3gdruzMaTd1vHsbHs63z3M9XvdLRdYFG9Bbf1w aic8bxv7hjFM5Aq8XHwvGxoNUWuruc4OxRz2EwpFMYZUYOgPlPwM4ORC0pYSU6p/ j36Z72JZcUO+Eyvz5g81zSZXkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEa5ElPp UljhEoB9xUGMi+Fo8qXzMB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHxTs14xQxYB0ogswC8+smpNjZlkKMVACpLoNhCDHLkibmLsKrOJU8 UIwwlVWNh0T75uIzF3f79zxNuO7R5a8BofSpScj7BGLd6WzA6K8UjapGthiuDeKH TsCvzL0QFrR/Dtc1DB2JcN5oYfZPWfDjP6oFDa+q84r417BuCyzhZnHHYa+Rvun6 OVLuvWpXghrZLHhK5dLiE/ss2DEXc1PK6vHCxT7X+45zqHtoCiIjsh73K8F9INUI CqKbTI8h8+nbAG13IiSbrQJuJLP+fMOD4DhuhQKsFrzvzMT2TeGL3fGsbT4I2Dx4 JDCCDSqy9pZPcr1Yf7z6BF89FO60YQTM -----END CERTIFICATE-----Generated at Sun Jan 25 07:51:21 2026 by rpki-client