This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft File: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft (raw, json) Hash identifier: e9EGemy76IAD0KZoOqw4hen4RQuWLR5jn1/L6sJ0Gpc= Subject key identifier: 16:E8:A7:95:E4:2D:EB:D6:73:2C:86:DE:5E:38:85:D0:5B:0A:86:66 Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Certificate serial: 107E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft Manifest number: 106D Signing time: Sat 24 Jan 2026 17:05:08 +0000 Manifest this update: Sat 24 Jan 2026 17:05:07 +0000 Manifest next update: Sat 31 Jan 2026 17:05:07 +0000 Files and hashes: 1: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl (hash: sW9n9oV8NOWhgi8AQWdbP41ynl8HXh0JRQmE8/1+Kz8=) 2: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (hash: ucL3j8TnFmy+7V5qbIqZDaLy79WcFoXLeH1a5In6i8E=) 3: 2A3D8B5EA97D11EABA31B843C4F9AE02.roa (hash: fPoBgkYnMh4IMhrB/TA39+M1O1OAHZFrtUEJDkMooUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4222 (0x107e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC22, serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Validity Not Before: Jan 24 17:05:07 2026 GMT Not After : Jan 31 17:05:07 2026 GMT Subject: CN=6974fbc3-62b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:47:18:08:85:90:3f:ab:50:4b:ed:4e:6a:af: e6:4f:1c:e9:a0:a1:76:2d:d3:cc:ac:1a:81:da:af: 83:35:dd:dc:14:6b:f2:79:ba:a4:9d:94:62:ea:83: 56:85:8a:0b:ca:9d:15:2c:fe:92:78:d1:09:85:78: e9:5d:2a:e4:dd:e2:d3:dd:a7:b6:6f:e3:34:91:39: 13:ed:1e:00:a3:b0:e5:dc:e2:d5:69:7b:34:3f:24: 8c:60:db:b2:e9:72:d0:bc:12:ea:47:70:21:17:87: 07:6b:f6:25:40:32:c7:df:6d:05:c0:19:a8:f1:17: 30:f8:a4:d2:83:ad:95:fc:b2:9b:ba:0b:2d:54:8d: b2:86:17:dd:c8:99:a5:6c:c3:6e:0a:31:40:82:7a: 59:4a:cf:95:ed:18:af:06:1a:6a:7c:c3:07:3a:80: 1b:ae:91:a6:e1:9a:94:8a:7d:65:78:a9:de:c7:08: ad:0f:d5:26:7c:84:05:68:5b:a8:4d:8b:19:59:0e: 77:d0:1d:2e:06:a2:93:b4:48:86:f3:e1:b1:c5:15: fc:30:20:72:c7:85:aa:6d:98:5b:80:3a:15:0f:bf: e6:d5:e3:ca:bb:84:24:58:7f:c4:38:17:3f:70:ec: f1:c9:d0:4b:f5:5d:63:c2:ac:3d:25:6d:12:17:52: d2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E8:A7:95:E4:2D:EB:D6:73:2C:86:DE:5E:38:85:D0:5B:0A:86:66 X509v3 Authority Key Identifier: keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0c:3c:26:91:12:25:79:75:35:84:59:06:e3:c2:ed:f5:25: 6e:d7:f1:5a:69:31:f4:06:2f:71:46:63:6f:99:70:23:43:01: 97:d8:b3:8b:11:3d:87:94:c9:9f:b5:bd:ff:f8:82:78:5e:b3: 67:cd:81:a4:e0:b3:98:9c:ac:0f:fc:47:7a:6c:57:40:a2:4c: 85:a1:de:4f:1e:c7:32:e1:f2:1a:1f:74:34:91:2a:3f:cd:23: 43:be:52:6f:04:47:d4:c0:ba:04:68:c6:a2:89:81:7b:e2:12: ab:de:19:c7:e5:9c:16:0a:2e:d5:ab:5c:c3:55:ae:fb:75:90: 85:82:be:92:1d:ce:03:68:12:49:10:19:4d:8f:9b:6c:ee:1d: b0:f6:f0:03:8d:2f:f3:42:bc:39:7e:c1:90:2f:88:09:f1:37: 3e:af:c8:35:a2:79:ce:e7:15:39:e4:15:f5:ed:9f:20:9f:11: 75:d4:57:91:b4:61:d5:53:97:9a:2f:da:43:18:2d:e5:29:d0: 07:c6:37:65:e7:72:a2:f3:9d:c4:81:a4:d3:29:0a:19:bf:b8: af:c1:14:78:ea:77:5a:3d:92:e6:74:3e:c0:a8:5e:7d:f5:72: 16:f9:0a:7d:6f:ad:c1:ae:23:43:d4:1f:6a:75:68:5e:a3:b8: 5f:8e:fc:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDMjIxMTAvBgNVBAUTKDI4RjVFNjVENzUwNTk2MURDNTUwQTk0OTI0REJDRUZC QjY3Njk0QkQwHhcNMjYwMTI0MTcwNTA3WhcNMjYwMTMxMTcwNTA3WjAYMRYwFAYD VQQDDA02OTc0ZmJjMy02MmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEcYCIWQP6tQS+1Oaq/mTxzpoKF2LdPMrBqB2q+DNd3cFGvyebqknZRi6oNW hYoLyp0VLP6SeNEJhXjpXSrk3eLT3ae2b+M0kTkT7R4Ao7Dl3OLVaXs0PySMYNuy 6XLQvBLqR3AhF4cHa/YlQDLH320FwBmo8Rcw+KTSg62V/LKbugstVI2yhhfdyJml bMNuCjFAgnpZSs+V7RivBhpqfMMHOoAbrpGm4ZqUin1leKnexwitD9UmfIQFaFuo TYsZWQ530B0uBqKTtEiG8+GxxRX8MCByx4WqbZhbgDoVD7/m1ePKu4QkWH/EOBc/ cOzxydBL9V1jwqw9JW0SF1LSAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbop5Xk LevWcyyG3l44hdBbCoZmMB8GA1UdIwQYMBaAFCj15l11BZYdxVCpSSTbzvu2dpS9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0MyMi82OTA2QzZGQTRD NzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxoM0ZVS2xKSk52Ty03WjJs TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQWG1YWFVGbGgzRlVLbEpKTnZPLTdaMmxMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0MyMi82OTA2QzZGQTRDNzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxo M0ZVS2xKSk52Ty03WjJsTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9DDwmkRIleXU1hFkG48Lt9SVu1/FaaTH0Bi9xRmNvmXAjQwGX2LOL ET2HlMmftb3/+IJ4XrNnzYGk4LOYnKwP/Ed6bFdAokyFod5PHscy4fIaH3Q0kSo/ zSNDvlJvBEfUwLoEaMaiiYF74hKr3hnH5ZwWCi7Vq1zDVa77dZCFgr6SHc4DaBJJ EBlNj5ts7h2w9vADjS/zQrw5fsGQL4gJ8Tc+r8g1onnO5xU55BX17Z8gnxF11FeR tGHVU5eaL9pDGC3lKdAHxjdl53Ki853EgaTTKQoZv7ivwRR46ndaPZLmdD7AqF59 9XIW+Qp9b63BriND1B9qdWheo7hfjvyy -----END CERTIFICATE-----Generated at Sun Jan 25 08:09:45 2026 by rpki-client