This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft File: KxuyStzbFPbix7uy2Iq62x3diY0.mft (raw, json) Hash identifier: eXSkKiqE5Qs70LDra77UzdbW59OrfqHYz+OMFd/lRaA= Subject key identifier: EF:94:0C:B7:F7:E8:D2:81:AB:A3:6B:B7:2F:33:B3:C3:1C:6F:A1:A3 Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D Certificate issuer: /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D Certificate serial: 0378 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft Manifest number: 0372 Signing time: Sun 25 Jan 2026 00:03:25 +0000 Manifest this update: Sun 25 Jan 2026 00:03:25 +0000 Manifest next update: Sun 01 Feb 2026 00:03:25 +0000 Files and hashes: 1: KxuyStzbFPbix7uy2Iq62x3diY0.crl (hash: OtN09ylbkP2MeY5s/jF9Js3V2ZbgaGmhiTZMmnC01Tg=) 2: 95CA439CDAE211ECA14A8254C4F9AE02.roa (hash: 16TIMxSDuDuwbvd9GQ+m4o06d2DMg8lDV7WSYdSxPbs=) 3: 3486D47412D511EFB1EF161DC4F9AE02.roa (hash: Crj6EQEsFsVZ7Rl37tD7+KlB9qlhMrOAHvL0KyIGgkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888 (0x378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D Validity Not Before: Jan 25 00:03:25 2026 GMT Not After : Feb 1 00:03:25 2026 GMT Subject: CN=69755dcd-9a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:22:61:28:83:f3:c8:88:5b:0c:62:a5:cf: 76:6e:e7:13:f3:13:aa:fd:c4:36:9f:a7:92:2f:22: c9:a1:3a:23:d2:e9:8c:fb:a7:31:f7:c3:00:66:9a: e3:34:6a:ce:9e:62:e9:9d:e2:fb:83:11:a1:5f:76: 3e:0b:19:99:e4:77:84:a6:11:1a:fb:6d:1a:da:ff: 94:8f:a4:4d:80:9b:98:b9:32:d1:ad:e4:1d:37:79: 5c:6b:23:8d:dd:ad:6a:75:94:7b:c8:36:1f:2f:97: d4:10:d1:8a:25:03:eb:81:07:39:df:f0:d8:5c:a3: e4:76:18:9a:7e:a8:b5:b2:6b:e3:39:ab:55:9b:4d: c6:73:dd:50:7a:43:91:29:62:02:41:d6:45:40:b6: 0a:35:f7:0b:b7:6a:23:c1:41:7c:83:72:bd:6a:d3: b9:ff:01:b2:0e:bb:90:1b:43:7f:a3:95:ab:0f:e2: 17:81:63:ea:13:26:98:36:d6:7e:04:1a:08:9b:71: b3:28:aa:0b:c3:14:9a:57:91:5b:ec:9a:dd:73:8b: 1c:80:b0:55:aa:c0:9f:fb:6e:94:96:3a:b5:cc:95: d4:51:3f:6f:99:2a:9a:62:33:30:f7:88:38:cb:04: e0:be:7c:9d:04:a0:71:e0:b3:cf:82:eb:49:a4:52: 52:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:94:0C:B7:F7:E8:D2:81:AB:A3:6B:B7:2F:33:B3:C3:1C:6F:A1:A3 X509v3 Authority Key Identifier: keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d2:02:41:23:29:a6:52:c9:ae:08:4d:b6:7e:7a:17:4e:97: 04:4c:1c:ec:5a:65:8c:d8:0d:d8:d2:38:1b:ab:cd:aa:00:2f: 4e:95:57:dc:42:e6:a9:d7:aa:3e:ec:d9:fb:21:a5:d3:c0:14: 99:6c:2b:64:52:03:0a:fe:95:03:ee:51:df:00:7c:9c:aa:59: e7:a1:f5:20:2a:d0:ff:7f:83:da:a6:b6:d8:84:19:6d:e1:05: 17:4d:2a:23:59:5b:0c:f0:05:21:de:7b:44:fc:21:ee:52:f1: e3:83:1c:a2:0e:a9:54:f5:8a:f1:46:c2:b2:ee:be:be:d3:91: db:97:94:c1:17:66:5c:29:b6:ec:38:b3:22:1b:d0:f3:6c:48: b1:92:69:b7:7d:43:05:fc:c3:46:5b:ca:f6:45:a7:56:7f:ab: f1:dd:0a:a0:2c:2e:f0:9a:3f:5f:29:ed:44:e5:8c:63:85:57: 71:1c:d3:50:e1:ea:a1:60:53:8b:20:ab:4e:9f:28:50:ba:71: a5:ec:69:e5:62:68:9f:4d:2c:2c:9c:c7:40:80:15:b5:ee:db: 02:90:af:76:71:e6:ef:0b:9c:1f:fb:cf:48:9a:fe:2f:41:a9: cc:0c:90:9c:d8:8d:5e:5c:b0:64:e5:2a:02:72:2e:af:97:52: f3:9a:45:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRDIxMTAvBgNVBAUTKDJCMUJCMjRBRENEQjE0RjZFMkM3QkJCMkQ4OEFCQURC MURERDg5OEQwHhcNMjYwMTI1MDAwMzI1WhcNMjYwMjAxMDAwMzI1WjAYMRYwFAYD VQQDDA02OTc1NWRjZC05YTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArz4iYSiD88iIWwxipc92bucT8xOq/cQ2n6eSLyLJoToj0umM+6cx98MAZprj NGrOnmLpneL7gxGhX3Y+CxmZ5HeEphEa+20a2v+Uj6RNgJuYuTLRreQdN3lcayON 3a1qdZR7yDYfL5fUENGKJQPrgQc53/DYXKPkdhiafqi1smvjOatVm03Gc91QekOR KWICQdZFQLYKNfcLt2ojwUF8g3K9atO5/wGyDruQG0N/o5WrD+IXgWPqEyaYNtZ+ BBoIm3GzKKoLwxSaV5Fb7Jrdc4scgLBVqsCf+26Uljq1zJXUUT9vmSqaYjMw94g4 ywTgvnydBKBx4LPPgutJpFJSNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+UDLf3 6NKBq6Nrty8zs8Mcb6GjMB8GA1UdIwQYMBaAFCsbskrc2xT24se7stiKutsd3YmN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBEMi9ENDI4RDBDNkRB REUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQYml4N3V5MklxNjJ4M2Rp WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4dXlTdHpiRlBiaXg3dXkySXE2MngzZGlZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBEMi9ENDI4RDBDNkRBREUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQ Yml4N3V5MklxNjJ4M2RpWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG0gJBIymmUsmuCE22fnoXTpcETBzsWmWM2A3Y0jgbq82qAC9OlVfc Quap16o+7Nn7IaXTwBSZbCtkUgMK/pUD7lHfAHycqlnnofUgKtD/f4PaprbYhBlt 4QUXTSojWVsM8AUh3ntE/CHuUvHjgxyiDqlU9YrxRsKy7r6+05Hbl5TBF2ZcKbbs OLMiG9DzbEixkmm3fUMF/MNGW8r2RadWf6vx3QqgLC7wmj9fKe1E5YxjhVdxHNNQ 4eqhYFOLIKtOnyhQunGl7GnlYmifTSwsnMdAgBW17tsCkK92cebvC5wf+89Imv4v QanMDJCc2I1eXLBk5SoCci6vl1LzmkX3 -----END CERTIFICATE-----Generated at Sun Jan 25 17:05:29 2026 by rpki-client