This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft File: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft (raw, json) Hash identifier: BTMR8dPoJkLkfiqhR0/Jq3a+2+Am30lBaQfIhhtiuHE= Subject key identifier: 9E:C8:C8:8B:78:20:CE:9F:54:60:E1:3F:2D:C6:8D:7D:60:1C:00:11 Authority key identifier: 93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97 Certificate issuer: /CN=A91B5F33/serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497 Certificate serial: 058D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft Manifest number: 0581 Signing time: Sat 24 Jan 2026 22:31:50 +0000 Manifest this update: Sat 24 Jan 2026 22:31:50 +0000 Manifest next update: Sat 31 Jan 2026 22:31:50 +0000 Files and hashes: 1: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl (hash: pbQsupbk5FW1Vy1u18u9xppPvRbwoOI+h/gaC0Ihk38=) 2: 720FAF9A0BEF11ECAEF3EA5DC4F9AE02.roa (hash: So00zJ1AKw4WG3WlOWEkw0uPB14Z1y1sOqNnyZb7Bn8=) 3: 7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa (hash: YuwAjf0VpmVoTjcP53b2MZy/33jsOggpPYKkc+Tnm7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1421 (0x58d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5F33, serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497 Validity Not Before: Jan 24 22:31:50 2026 GMT Not After : Jan 31 22:31:50 2026 GMT Subject: CN=69754856-6e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:04:9a:77:0b:1a:43:c5:96:45:36:9b:ee:45: 24:33:de:3b:f3:ee:91:32:39:d2:89:e4:b5:ac:da: 0e:61:30:dc:03:48:1c:21:b7:d8:d9:a5:98:15:c2: a8:4c:92:83:9e:d9:f3:7f:89:c7:83:96:a0:8f:0f: 5c:53:cc:1b:00:30:59:92:c5:86:85:ca:a8:c2:12: 60:9b:3f:6f:90:7e:00:a5:b9:37:59:e7:61:a3:24: 3f:87:3d:d6:da:89:dd:75:b4:32:11:5d:d0:3a:08: 25:cf:71:93:19:95:9f:8f:e5:75:23:55:21:a7:6f: 0c:ec:6b:2e:22:6c:2c:2e:92:83:fc:b7:03:13:ac: 37:ac:e0:ea:e5:ed:42:eb:b5:ec:94:2a:95:16:15: 72:87:90:cf:00:92:5e:5a:3f:33:b3:c8:98:d4:f4: 82:8a:c4:10:a5:56:e7:45:f1:44:44:65:70:7b:e4: e3:e7:ab:48:1b:86:9a:83:fc:91:15:de:d6:b6:96: ff:44:6c:9e:e4:2d:e2:86:0e:8d:a6:d7:f6:ce:ae: 01:50:8a:43:1d:5d:d7:14:69:80:cc:78:45:40:bc: 4b:5d:07:89:69:ea:00:57:ce:76:d8:f6:92:03:4f: a5:fe:7f:a8:aa:60:ba:57:18:6c:cb:0e:91:39:73: 14:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C8:C8:8B:78:20:CE:9F:54:60:E1:3F:2D:C6:8D:7D:60:1C:00:11 X509v3 Authority Key Identifier: keyid:93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:65:52:f2:5f:d4:b2:6c:2d:c9:31:a0:b2:66:97:a2:6d:8e: c0:0a:ac:44:12:cb:48:aa:7a:df:54:3a:4d:10:01:18:89:bf: 35:d8:19:0b:0b:80:c8:dc:ac:f6:ad:cc:1d:b5:1e:5f:58:a2: e0:bd:12:04:1c:c5:06:d1:8d:ef:bb:70:77:95:c0:b8:26:8d: 42:8f:a3:e1:71:2e:18:ff:86:28:f3:65:0f:c1:f3:a5:1a:6b: cf:78:e1:65:f1:1a:0c:e8:6b:dc:7e:74:a9:36:7b:3e:a2:c6: d1:9c:eb:31:d0:c8:a3:35:cf:89:05:b3:93:0c:f8:5a:7d:dc: 71:03:d6:d9:64:98:96:41:be:9b:c5:02:a5:44:a0:ef:e7:d8: 89:a7:dc:94:bc:f0:49:7f:22:6d:22:6b:df:80:f2:35:37:dd: b5:26:82:e9:b0:50:e5:85:99:52:ca:b7:4e:50:2c:8f:d0:e3: bb:01:e0:8b:b7:5a:a7:59:38:26:66:5f:d4:f8:db:94:1f:30: 7f:bb:b7:70:99:71:c2:a6:dd:4f:c2:7c:98:3b:b9:27:25:70: a0:55:98:02:7e:c9:6c:47:38:cb:9a:a4:ec:31:7a:30:27:ee: 25:10:2f:5d:08:54:9c:d2:99:ff:68:69:35:d8:46:3c:17:12: 59:32:8a:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVGMzMxMTAvBgNVBAUTKDkzMTdCQjE5RkY5MDdGNDcxODExRUI1NjEwMEFBMEJD OTJDRjE0OTcwHhcNMjYwMTI0MjIzMTUwWhcNMjYwMTMxMjIzMTUwWjAYMRYwFAYD VQQDDA02OTc1NDg1Ni02ZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QSadwsaQ8WWRTab7kUkM9478+6RMjnSieS1rNoOYTDcA0gcIbfY2aWYFcKo TJKDntnzf4nHg5agjw9cU8wbADBZksWGhcqowhJgmz9vkH4Apbk3WedhoyQ/hz3W 2onddbQyEV3QOgglz3GTGZWfj+V1I1Uhp28M7GsuImwsLpKD/LcDE6w3rODq5e1C 67XslCqVFhVyh5DPAJJeWj8zs8iY1PSCisQQpVbnRfFERGVwe+Tj56tIG4aag/yR Fd7Wtpb/RGye5C3ihg6Nptf2zq4BUIpDHV3XFGmAzHhFQLxLXQeJaeoAV8522PaS A0+l/n+oqmC6Vxhsyw6ROXMUhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7IyIt4 IM6fVGDhPy3GjX1gHAARMB8GA1UdIwQYMBaAFJMXuxn/kH9HGBHrVhAKoLySzxSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUYzMy8yRjZBQzEzQzBC RUMxMUVDOTIxMzBENUFDNEY5QUUwMi9reGU3R2YtUWYwY1lFZXRXRUFxZ3ZKTFBG SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t4ZTdHZi1RZjBjWUVldFdFQXFndkpMUEZKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUYzMy8yRjZBQzEzQzBCRUMxMUVDOTIxMzBENUFDNEY5QUUwMi9reGU3R2YtUWYw Y1lFZXRXRUFxZ3ZKTFBGSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWZVLyX9SybC3JMaCyZpeibY7ACqxEEstIqnrfVDpNEAEYib812BkL C4DI3Kz2rcwdtR5fWKLgvRIEHMUG0Y3vu3B3lcC4Jo1Cj6PhcS4Y/4Yo82UPwfOl GmvPeOFl8RoM6GvcfnSpNns+osbRnOsx0MijNc+JBbOTDPhafdxxA9bZZJiWQb6b xQKlRKDv59iJp9yUvPBJfyJtImvfgPI1N921JoLpsFDlhZlSyrdOUCyP0OO7AeCL t1qnWTgmZl/U+NuUHzB/u7dwmXHCpt1PwnyYO7knJXCgVZgCfslsRzjLmqTsMXow J+4lEC9dCFSc0pn/aGk12EY8FxJZMoqh -----END CERTIFICATE-----Generated at Sun Jan 25 09:23:45 2026 by rpki-client