This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft File: Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft (raw, json) Hash identifier: tTFpU+LGcOSFjFt9rP51FH52lFG+te5RyhPi9onA6oc= Subject key identifier: 20:45:6D:D8:C0:33:DF:30:65:B5:1C:BB:7B:F2:71:22:67:E0:2A:01 Authority key identifier: 5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 Certificate issuer: /CN=A91CB6E8/serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft Manifest number: 38 Signing time: Sun 25 Jan 2026 06:36:48 +0000 Manifest this update: Sun 25 Jan 2026 06:36:47 +0000 Manifest next update: Sun 01 Feb 2026 06:36:47 +0000 Files and hashes: 1: Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl (hash: HZ4G/WxOf2q1lybL+dDIYd8vppZKXcsc/hh2MJIcDUs=) 2: 65FAD636AF1411F0BE4BF94FC4F9AE02.roa (hash: C5FWkpg3JA7HokTHMhnJCp3tLDwUp2pk+wUDmviorYo=) 3: 1104D6A2AF1611F0AF70E679C4F9AE02.roa (hash: FWjLvjv3Gipsu55Q7SW82j2fnJS3sRrWxfm+lFFErW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Validity Not Before: Jan 25 06:36:47 2026 GMT Not After : Feb 1 06:36:47 2026 GMT Subject: CN=6975ba00-fc82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e7:3d:a5:88:0d:d7:27:2f:29:ea:ef:74:6d: e2:37:97:49:75:6c:59:8a:1b:59:a4:31:c5:9a:98: 81:9d:c0:e0:a5:8b:82:cd:12:66:a7:87:bb:e8:67: 1b:d6:52:28:44:07:9e:42:73:e3:96:ae:44:5d:74: b2:53:82:27:d3:c5:46:d7:89:d8:45:56:91:38:e7: 76:25:4a:ab:71:23:59:c5:6e:69:3d:dc:51:d7:37: 67:ba:3f:b9:3d:3e:26:d7:b1:01:f9:5a:ae:c7:c7: fa:c2:64:45:62:9b:8c:64:1b:bf:99:f9:91:6c:81: aa:00:4d:56:12:b4:01:7f:09:07:7f:0e:68:0f:3c: ef:a0:55:8e:fa:07:8f:3c:a1:a2:6b:11:18:d1:b0: 85:9a:d8:42:60:91:5b:2d:9e:41:a3:6f:c3:43:14: 18:48:45:5a:28:09:35:65:c6:c4:50:5a:89:60:57: 99:3e:23:80:b4:bb:68:d9:83:30:03:a8:35:bf:8f: 8c:9c:56:26:2f:32:d1:22:c1:df:9b:7b:85:8f:2a: e1:22:63:6c:38:28:d1:3e:f0:c4:2a:a8:62:e0:71: 76:db:a0:6a:38:ac:da:83:22:b1:89:2a:68:e9:a9: c9:9b:7c:52:54:cf:4e:cd:10:6d:15:c6:ef:a8:11: 49:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:45:6D:D8:C0:33:DF:30:65:B5:1C:BB:7B:F2:71:22:67:E0:2A:01 X509v3 Authority Key Identifier: keyid:5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d0:fb:e8:ce:1f:5b:33:75:2e:8a:d5:d3:6e:35:b5:df:5e: 27:be:95:d6:6b:d0:a1:e1:4d:b9:2e:fa:7a:a5:ca:68:2e:11: d1:05:84:ad:76:5e:a9:98:a2:74:56:86:d8:6b:bd:49:4e:b4: af:f3:c3:75:a6:55:d6:f8:c1:4c:d5:e1:72:1e:1f:17:29:ab: 64:14:65:48:f4:45:87:be:91:3c:ed:e0:7e:58:f9:2f:0a:b9: d2:9a:1f:da:3c:4b:06:98:f6:7e:b9:9f:f1:41:64:6c:83:04: c3:48:42:79:d3:77:37:07:40:8f:f3:14:6d:2e:1b:95:58:fa: c5:77:70:79:19:03:9c:a3:c0:0e:af:2b:cd:d5:36:49:f0:70: 57:fb:9c:98:d7:c7:84:16:bb:dd:7e:49:0e:f3:06:b1:df:b6: 2f:7f:a9:fc:6a:c9:79:70:78:f0:4a:6b:04:d4:49:ad:f9:88: c3:80:57:4f:73:41:94:84:4e:cf:95:85:20:33:5d:17:63:37: 78:ac:e8:83:b1:e0:06:54:ce:4c:31:ef:8d:a9:8c:28:2b:0e: 1f:9b:b8:3b:d1:f6:34:78:e2:54:aa:6b:42:53:41:36:6c:27: de:4d:6b:f3:b3:e7:49:6f:a9:48:8f:dc:3c:3a:ff:51:40:6e: 37:07:aa:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjZFODExMC8GA1UEBRMoNURERkREMzgzMTU2RkE1QjY1MzQxMTJFOUM4RTE1M0JC MjAwNTdDNjAeFw0yNjAxMjUwNjM2NDdaFw0yNjAyMDEwNjM2NDdaMBgxFjAUBgNV BAMMDTY5NzViYTAwLWZjODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCV5z2liA3XJy8p6u90beI3l0l1bFmKG1mkMcWamIGdwOCli4LNEmanh7voZxvW UihEB55Cc+OWrkRddLJTgifTxUbXidhFVpE453YlSqtxI1nFbmk93FHXN2e6P7k9 PibXsQH5Wq7Hx/rCZEVim4xkG7+Z+ZFsgaoATVYStAF/CQd/DmgPPO+gVY76B488 oaJrERjRsIWa2EJgkVstnkGjb8NDFBhIRVooCTVlxsRQWolgV5k+I4C0u2jZgzAD qDW/j4ycViYvMtEiwd+be4WPKuEiY2w4KNE+8MQqqGLgcXbboGo4rNqDIrGJKmjp qcmbfFJUz07NEG0Vxu+oEUkTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIEVt2MAz 3zBltRy7e/JxImfgKgEwHwYDVR0jBBgwFoAUXd/dODFW+ltlNBEunI4VO7IAV8Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNkU4L0Y5QjAyODg4QUVG RTExRjA4OEI5OUMyN0M0RjlBRTAyL1hkX2RPREZXLWx0bE5CRXVuSTRWTzdJQVY4 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWGRfZE9ERlctbHRsTkJFdW5JNFZPN0lBVjhZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NkU4L0Y5QjAyODg4QUVGRTExRjA4OEI5OUMyN0M0RjlBRTAyL1hkX2RPREZXLWx0 bE5CRXVuSTRWTzdJQVY4WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACTQ++jOH1szdS6K1dNuNbXfXie+ldZr0KHhTbku+nqlymguEdEFhK12 XqmYonRWhthrvUlOtK/zw3WmVdb4wUzV4XIeHxcpq2QUZUj0RYe+kTzt4H5Y+S8K udKaH9o8SwaY9n65n/FBZGyDBMNIQnnTdzcHQI/zFG0uG5VY+sV3cHkZA5yjwA6v K83VNknwcFf7nJjXx4QWu91+SQ7zBrHfti9/qfxqyXlwePBKawTUSa35iMOAV09z QZSETs+VhSAzXRdjN3is6IOx4AZUzkwx742pjCgrDh+buDvR9jR44lSqa0JTQTZs J95Na/Oz50lvqUiP3Dw6/1FAbjcHqpg= -----END CERTIFICATE-----Generated at Sun Jan 25 15:35:09 2026 by rpki-client