This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: 53HVtYIzWv8lSUouIcIL9JFqWwoV9UFpH/1nG8ESZBI= Subject key identifier: 32:B9:62:0D:38:49:88:4D:46:15:78:85:15:E9:37:57:92:68:F8:5D Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 0465 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 042B Signing time: Sat 24 Jan 2026 23:42:15 +0000 Manifest this update: Sat 24 Jan 2026 23:42:14 +0000 Manifest next update: Sat 31 Jan 2026 23:42:14 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: 1c3AWhtyu+F+90VauGL4g1sYL+01KkWYzgXzIox0w+U=) 2: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: fj+edjI2ywGwwcvvr9BPZUhUZb21shpN5m0uYErV5r8=) 3: 0735D9BEEC5611F09B1B681B4A6F56BC.roa (hash: F+zbsaeqSNKR3R4phxdSEksOeJTEmYc/IGzbhxYMyUA=) 4: 5C153EA0EC5811F0941546AF4A6F56BC.roa (hash: xD009+EKXuUCYTRbhZCA0670hZYrCHS2OfXRZns0vvY=) 5: 366FD216EC5611F0B67F861C4A6F56BC.roa (hash: HmUOxsr+DXTp7/0WPq6upTZpD6L3HkM+fxihxuJeSWQ=) 6: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: 2zsEA3yDI1cCdtbUgMxFXhTvbjlM5hAGTHb5uzRp4IY=) 7: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: 3NAVJz0Igy7uXB0vNJLe+B3+peDllbfVzAqxJB4rTPY=) 8: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: BRWciTjjQt32cnZj7/+sUh4AwLIx4UTsIsBMzlf1y2U=) 9: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: uKH93ZRreEKwtoUhXqaPKV81tL9TswdJHpgjfNg1v4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1125 (0x465) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Jan 24 23:42:14 2026 GMT Not After : Jan 31 23:42:14 2026 GMT Subject: CN=697558d6-dcd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3a:f4:43:76:bf:58:68:95:30:ad:48:12:12: bb:08:3c:de:ef:47:5b:9f:19:22:6b:c9:86:d9:14: f8:94:ed:87:0d:d9:be:3c:50:48:77:32:3d:05:16: 6b:0d:6b:2d:fa:c8:b8:a3:cc:2f:07:33:53:6e:05: d6:62:a0:4a:77:ee:d5:a9:a4:e8:5d:c2:d7:aa:75: 81:f8:6e:45:ff:ee:03:62:96:22:63:dc:91:4b:7b: 66:e3:32:92:5b:65:8b:13:ff:7c:01:be:69:44:7d: 07:cf:5a:45:10:20:2b:45:8c:af:da:c6:82:7b:fc: 55:50:d7:38:e4:ab:8e:06:27:ee:7b:a8:ca:ec:c5: 22:a4:39:d4:83:69:5e:ec:b6:21:b0:c0:22:70:c5: d8:1b:57:d5:3b:bb:ca:b6:71:99:81:36:25:1b:d4: 32:f4:d0:8e:4c:4b:83:5e:a1:c6:5a:cc:48:ae:b0: d1:64:35:68:8f:51:cc:13:c9:5c:c1:22:2e:0d:d7: 21:6a:7f:cf:5b:ce:f4:ef:38:f4:3e:58:18:fa:89: 3f:8f:fc:17:35:b7:cc:da:57:fa:d8:03:e0:03:cb: 47:68:0f:7e:b5:e0:f2:1c:e3:64:ac:0c:48:b6:51: ea:2b:0c:89:52:5a:65:22:3f:2e:80:82:8c:6b:4f: e7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B9:62:0D:38:49:88:4D:46:15:78:85:15:E9:37:57:92:68:F8:5D X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:4a:3a:80:7d:ab:8a:0e:e3:91:78:c9:15:26:08:cd:78:eb: 8d:86:c4:88:c7:5d:18:53:01:9c:dd:d6:0d:b8:46:d0:49:31: de:5b:5d:b9:86:bc:98:b1:a2:19:7f:ca:2c:c5:e6:7b:45:7b: 35:90:99:24:0f:12:86:33:21:0e:6b:73:ea:3b:e1:da:ec:61: d9:59:e8:e6:48:fe:84:90:09:c7:2f:58:36:e7:5d:61:1c:3a: af:31:fe:9c:52:f5:f6:7b:29:3d:b5:20:fd:8c:d7:6d:ed:cd: 19:3c:80:17:5a:f3:9e:aa:91:93:a5:38:98:5c:f7:ff:0e:b6: 42:04:15:3d:d7:d1:40:2e:38:b5:1e:33:c8:df:cd:6a:2a:34: 75:5d:25:63:e9:77:42:2c:47:4a:78:b3:3f:fa:77:79:27:58: 1b:c4:8b:c0:59:93:6f:c5:f1:80:3a:02:84:17:ca:cb:7d:11: 01:2b:e0:3f:81:06:89:d6:f7:bb:86:89:b1:b0:ee:a6:ae:5c: 9c:f7:81:26:84:ef:8e:1f:62:8d:3e:6d:c8:66:ab:50:ae:2c: 56:02:57:d0:19:0e:6a:98:69:55:cb:83:99:c3:57:26:a4:b6: 05:35:30:22:e5:51:1d:06:7f:26:1e:88:79:48:3f:e2:e8:ce: 0a:16:29:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjYwMTI0MjM0MjE0WhcNMjYwMTMxMjM0MjE0WjAYMRYwFAYD VQQDDA02OTc1NThkNi1kY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzr0Q3a/WGiVMK1IEhK7CDze70dbnxkia8mG2RT4lO2HDdm+PFBIdzI9BRZr DWst+si4o8wvBzNTbgXWYqBKd+7VqaToXcLXqnWB+G5F/+4DYpYiY9yRS3tm4zKS W2WLE/98Ab5pRH0Hz1pFECArRYyv2saCe/xVUNc45KuOBifue6jK7MUipDnUg2le 7LYhsMAicMXYG1fVO7vKtnGZgTYlG9Qy9NCOTEuDXqHGWsxIrrDRZDVoj1HME8lc wSIuDdchan/PW8707zj0PlgY+ok/j/wXNbfM2lf62APgA8tHaA9+teDyHONkrAxI tlHqKwyJUlplIj8ugIKMa0/n9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK5Yg04 SYhNRhV4hRXpN1eSaPhdMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGSjqAfauKDuOReMkVJgjNeOuNhsSIx10YUwGc3dYNuEbQSTHeW125 hryYsaIZf8osxeZ7RXs1kJkkDxKGMyEOa3PqO+Ha7GHZWejmSP6EkAnHL1g2511h HDqvMf6cUvX2eyk9tSD9jNdt7c0ZPIAXWvOeqpGTpTiYXPf/DrZCBBU919FALji1 HjPI381qKjR1XSVj6XdCLEdKeLM/+nd5J1gbxIvAWZNvxfGAOgKEF8rLfREBK+A/ gQaJ1ve7homxsO6mrlyc94EmhO+OH2KNPm3IZqtQrixWAlfQGQ5qmGlVy4OZw1cm pLYFNTAi5VEdBn8mHoh5SD/i6M4KFikR -----END CERTIFICATE-----Generated at Sun Jan 25 10:43:39 2026 by rpki-client