This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json) Hash identifier: AoDxzav+Mn9EIsPKILlwK4wiS/fhBgve1q3uFtqiTSU= Subject key identifier: CF:D5:41:F2:9D:3F:5B:E6:BB:3B:1C:2C:B9:2F:1D:35:57:CA:30:66 Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Certificate serial: 23D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft Manifest number: 23B8 Signing time: Sat 24 Jan 2026 15:39:31 +0000 Manifest this update: Sat 24 Jan 2026 15:39:30 +0000 Manifest next update: Sat 31 Jan 2026 15:39:30 +0000 Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: sm2dDoWSvdL0HIf+C5bouUx3SLIOXxwb1X/R/ky9U+Y=) 2: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: yQ+XYCupRjpKC1z+KmqRpy0/MHYgLpl3GjcGFImbs1s=) 3: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: c0fUfF2O4q3/3ooNrYKlqBAmFHkp10eQdlPnj3yP614=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9172 (0x23d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Validity Not Before: Jan 24 15:39:30 2026 GMT Not After : Jan 31 15:39:30 2026 GMT Subject: CN=6974e7b3-aa9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ef:c5:16:71:58:7b:92:5c:91:ac:ba:37:18: 8a:52:74:1d:26:32:5d:a4:98:d2:8a:aa:57:6d:02: 6c:47:52:62:0a:06:ea:c5:4f:8e:98:fa:ad:48:56: d4:20:44:80:73:ae:44:0e:01:e6:f0:3a:df:02:c7: aa:75:40:2f:0b:e0:07:ab:3b:8b:ff:00:bc:b4:14: 54:76:77:d2:26:2c:92:28:ca:b6:70:2a:cf:76:37: d5:70:b0:f4:08:05:84:5e:9e:66:42:24:4d:5a:fb: 41:f5:6a:eb:7e:e9:ca:44:1b:2c:40:b9:9e:83:56: ea:34:d9:d4:5d:77:55:b7:9a:e3:2a:75:1d:75:90: d6:45:4e:66:80:5b:da:4f:1e:0f:61:82:a5:00:4c: 86:91:54:fd:4f:89:3e:1b:a4:e3:3d:77:42:fb:ab: 95:d2:99:48:34:88:d8:cb:74:b4:37:f9:20:d9:63: ba:84:df:4e:a0:92:20:3c:a1:29:7c:dc:09:f7:8e: 5e:a0:76:90:38:27:3e:e8:c1:a3:fa:e4:e3:57:df: 24:45:73:1c:bb:f5:23:8e:54:df:90:a6:ae:6c:72: c9:e2:5c:94:f0:5b:b0:ae:0c:ec:4c:c0:1e:52:fc: 3d:fd:07:5b:87:af:8d:8f:77:7c:84:43:40:74:85: 61:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D5:41:F2:9D:3F:5B:E6:BB:3B:1C:2C:B9:2F:1D:35:57:CA:30:66 X509v3 Authority Key Identifier: keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ba:90:f2:33:02:d1:cc:89:b6:29:9e:f4:3d:a6:dc:16:ca: 56:52:66:07:0c:cc:4d:15:75:ce:ee:d3:40:e6:49:a1:0a:62: 44:81:52:c1:bf:72:91:97:24:aa:7c:40:50:99:a2:8f:b8:c1: 64:e0:7b:ba:1d:63:b8:56:69:a2:0d:76:0d:57:66:c7:3b:be: 92:3f:c9:8c:b5:0e:f5:09:8f:1a:e3:ab:19:a5:14:0e:c3:67: d7:a1:ac:e4:85:24:84:8d:16:17:52:82:bf:96:ad:00:78:e1: e2:a0:65:9a:dc:2c:bf:45:90:4e:96:08:5c:72:8e:fa:10:7f: 30:8f:2e:3f:40:7d:20:b3:0f:3d:bb:86:96:51:25:cd:a6:57: 2c:b1:ac:80:a1:cd:09:04:a4:ec:2a:d1:70:e8:8c:22:8c:bf: 42:e7:41:ce:34:0f:78:83:34:b3:4d:13:9f:0e:27:d6:a8:ab: 4d:3b:a2:67:0e:51:24:9f:02:bf:6d:16:92:53:b9:41:dd:6f: e9:e9:45:64:c5:cb:83:96:dd:d3:6d:db:73:98:69:6c:5a:76: 70:cc:ec:55:61:81:ad:ac:c6:e8:2f:9b:47:24:eb:83:1d:88: 15:90:18:0a:42:8d:48:fc:18:2b:d6:e5:c5:8d:08:78:d7:e6: 19:ad:c0:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0 ODE1RjEwQjcwHhcNMjYwMTI0MTUzOTMwWhcNMjYwMTMxMTUzOTMwWjAYMRYwFAYD VQQDDA02OTc0ZTdiMy1hYTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtu/FFnFYe5Jckay6NxiKUnQdJjJdpJjSiqpXbQJsR1JiCgbqxU+OmPqtSFbU IESAc65EDgHm8DrfAseqdUAvC+AHqzuL/wC8tBRUdnfSJiySKMq2cCrPdjfVcLD0 CAWEXp5mQiRNWvtB9WrrfunKRBssQLmeg1bqNNnUXXdVt5rjKnUddZDWRU5mgFva Tx4PYYKlAEyGkVT9T4k+G6TjPXdC+6uV0plINIjYy3S0N/kg2WO6hN9OoJIgPKEp fNwJ945eoHaQOCc+6MGj+uTjV98kRXMcu/UjjlTfkKaubHLJ4lyU8FuwrgzsTMAe Uvw9/Qdbh6+Nj3d8hENAdIVhCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/VQfKd P1vmuzscLLkvHTVXyjBmMB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3 QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44 elRPdXVGTlFzbXBJRmZFTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATupDyMwLRzIm2KZ70PabcFspWUmYHDMxNFXXO7tNA5kmhCmJEgVLB v3KRlySqfEBQmaKPuMFk4Hu6HWO4VmmiDXYNV2bHO76SP8mMtQ71CY8a46sZpRQO w2fXoazkhSSEjRYXUoK/lq0AeOHioGWa3Cy/RZBOlghcco76EH8wjy4/QH0gsw89 u4aWUSXNplcssayAoc0JBKTsKtFw6IwijL9C50HONA94gzSzTROfDifWqKtNO6Jn DlEknwK/bRaSU7lB3W/p6UVkxcuDlt3TbdtzmGlsWnZwzOxVYYGtrMboL5tHJOuD HYgVkBgKQo1I/Bgr1uXFjQh41+YZrcDi -----END CERTIFICATE-----Generated at Sun Jan 25 15:58:21 2026 by rpki-client