This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft File: XucUYNY3KKxeq5GKVB0NcFFXfU0.mft (raw, json) Hash identifier: N5SotUMRxeDXTrQ5r6+v1jej5qncEBd5W1mtR4ahvAs= Subject key identifier: 56:D2:0B:5B:22:7B:C8:11:BD:C5:D5:50:80:9E:DC:A1:4E:3F:6F:CB Authority key identifier: 5E:E7:14:60:D6:37:28:AC:5E:AB:91:8A:54:1D:0D:70:51:57:7D:4D Certificate issuer: /CN=A91B758E/serialNumber=5EE71460D63728AC5EAB918A541D0D7051577D4D Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XucUYNY3KKxeq5GKVB0NcFFXfU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft Manifest number: 0163 Signing time: Sun 25 Jan 2026 03:16:04 +0000 Manifest this update: Sun 25 Jan 2026 03:16:03 +0000 Manifest next update: Sun 01 Feb 2026 03:16:03 +0000 Files and hashes: 1: XucUYNY3KKxeq5GKVB0NcFFXfU0.crl (hash: 98ZYqzxQsI7z0PgxA54X/zpQRdiGhDgGb9kzGnND0us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.crl rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XucUYNY3KKxeq5GKVB0NcFFXfU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B758E, serialNumber=5EE71460D63728AC5EAB918A541D0D7051577D4D Validity Not Before: Jan 25 03:16:03 2026 GMT Not After : Feb 1 03:16:03 2026 GMT Subject: CN=69758af4-e907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:08:4e:88:8c:eb:51:81:4c:f8:d4:65:6a:2e: 89:dd:d4:91:27:71:a1:a4:af:f8:b6:fb:2a:59:db: 38:5b:c0:27:a6:ed:ee:73:a4:bd:28:29:73:c2:ee: 05:54:79:e6:70:5e:79:72:bd:17:80:6a:71:f3:35: 35:6d:ca:68:46:fb:1d:eb:2c:f8:c4:81:13:23:2a: a9:9b:7e:d4:84:0f:4b:d5:ee:e3:02:0e:2e:2f:17: 57:52:db:02:ad:e2:e0:25:d7:6c:f2:68:79:ee:d2: 6f:7f:08:25:e9:fd:69:87:1f:9f:c6:a1:7d:dc:b0: 4f:2e:93:d6:56:b1:5a:6c:7f:75:77:ce:38:00:52: b6:c8:05:91:bd:a4:1f:34:b2:7b:2e:3b:a1:26:ec: c3:9e:67:28:66:7f:63:78:8e:28:84:2c:82:ba:85: a4:f3:88:f0:cc:50:7e:a2:96:b6:db:4a:dd:62:95: 46:e3:4e:87:5b:bf:da:f6:08:4b:ee:f1:53:44:1e: 0b:fd:7a:b1:69:90:ed:7f:99:68:2b:55:b1:c2:c8: 49:f7:62:2a:70:f0:d4:b1:29:87:47:99:b9:5b:fc: ce:3b:dc:b2:60:4f:52:50:91:f7:43:bd:4a:77:d0: cf:c8:70:15:cb:05:7b:9c:0f:62:7f:7a:19:20:3f: 01:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D2:0B:5B:22:7B:C8:11:BD:C5:D5:50:80:9E:DC:A1:4E:3F:6F:CB X509v3 Authority Key Identifier: keyid:5E:E7:14:60:D6:37:28:AC:5E:AB:91:8A:54:1D:0D:70:51:57:7D:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XucUYNY3KKxeq5GKVB0NcFFXfU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:a8:71:51:57:9d:46:85:72:47:84:5e:c8:65:e0:b7:11:a5: fc:5d:c1:e8:c6:e9:f9:90:9a:8a:0d:ba:e0:77:4b:08:6f:e9: bc:25:c7:c2:90:17:c2:46:41:04:61:0c:35:9d:85:58:db:83: f7:3d:e0:92:20:95:85:bf:fe:1f:79:50:ee:9b:cf:71:fa:89: e9:7b:1e:8a:5b:08:b0:bf:47:6f:99:ab:4f:ee:d4:95:40:29: 44:a6:8a:d9:dd:82:aa:bc:c6:60:c3:42:89:b4:e1:2d:7c:f2: 57:1f:e4:d7:15:52:e4:b2:92:5f:af:66:88:c9:3e:6e:08:50: fb:b5:52:5b:ef:3c:29:1f:7f:aa:2a:64:4a:26:74:63:4d:ab: 42:b8:02:3e:70:b2:55:69:be:69:44:87:0e:07:42:4d:c1:d5: 8e:e1:75:f9:b5:59:61:34:82:bd:80:2e:47:df:24:a6:5a:73: db:87:35:ad:49:3c:a3:b9:81:a8:6f:1e:58:b4:76:f8:54:d1: 90:b3:9d:83:9f:4e:6f:54:6d:f5:d8:92:76:e2:7e:ab:23:81: fe:7b:be:cc:a2:cc:15:ae:f9:3e:5a:0d:b0:10:41:5c:d3:d8: c8:cc:07:cb:2b:f4:07:86:21:01:ae:89:dc:05:45:c5:64:ed: 94:1d:a2:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc1OEUxMTAvBgNVBAUTKDVFRTcxNDYwRDYzNzI4QUM1RUFCOTE4QTU0MUQwRDcw NTE1NzdENEQwHhcNMjYwMTI1MDMxNjAzWhcNMjYwMjAxMDMxNjAzWjAYMRYwFAYD VQQDDA02OTc1OGFmNC1lOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2whOiIzrUYFM+NRlai6J3dSRJ3GhpK/4tvsqWds4W8Anpu3uc6S9KClzwu4F VHnmcF55cr0XgGpx8zU1bcpoRvsd6yz4xIETIyqpm37UhA9L1e7jAg4uLxdXUtsC reLgJdds8mh57tJvfwgl6f1phx+fxqF93LBPLpPWVrFabH91d844AFK2yAWRvaQf NLJ7LjuhJuzDnmcoZn9jeI4ohCyCuoWk84jwzFB+opa220rdYpVG406HW7/a9ghL 7vFTRB4L/XqxaZDtf5loK1WxwshJ92IqcPDUsSmHR5m5W/zOO9yyYE9SUJH3Q71K d9DPyHAVywV7nA9if3oZID8BzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbSC1si e8gRvcXVUICe3KFOP2/LMB8GA1UdIwQYMBaAFF7nFGDWNyisXquRilQdDXBRV31N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzU4RS9FNzk5RjkyMkQ1 M0QxMUVFOEYxRThBODVDNEY5QUUwMi9YdWNVWU5ZM0tLeGVxNUdLVkIwTmNGRlhm VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h1Y1VZTlkzS0t4ZXE1R0tWQjBOY0ZGWGZVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzU4RS9FNzk5RjkyMkQ1M0QxMUVFOEYxRThBODVDNEY5QUUwMi9YdWNVWU5ZM0tL eGVxNUdLVkIwTmNGRlhmVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2qHFRV51GhXJHhF7IZeC3EaX8XcHoxun5kJqKDbrgd0sIb+m8JcfC kBfCRkEEYQw1nYVY24P3PeCSIJWFv/4feVDum89x+onpex6KWwiwv0dvmatP7tSV QClEporZ3YKqvMZgw0KJtOEtfPJXH+TXFVLkspJfr2aIyT5uCFD7tVJb7zwpH3+q KmRKJnRjTatCuAI+cLJVab5pRIcOB0JNwdWO4XX5tVlhNIK9gC5H3ySmWnPbhzWt STyjuYGobx5YtHb4VNGQs52Dn05vVG312JJ24n6rI4H+e77MoswVrvk+Wg2wEEFc 09jIzAfLK/QHhiEBroncBUXFZO2UHaJN -----END CERTIFICATE-----Generated at Sun Jan 25 12:21:19 2026 by rpki-client