This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft File: iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft (raw, json) Hash identifier: LUHsfUgfDFoqpVYLCYmAtWuf6TRnMUBJQzBsM1Aqc0w= Subject key identifier: 22:B2:86:CF:15:E8:4F:49:F6:6A:92:E1:0D:B8:CC:3E:DC:E2:BE:57 Authority key identifier: 89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 Certificate issuer: /CN=A91D8185/serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft Manifest number: 4E Signing time: Sun 25 Jan 2026 06:21:02 +0000 Manifest this update: Sun 25 Jan 2026 06:21:02 +0000 Manifest next update: Sun 01 Feb 2026 06:21:02 +0000 Files and hashes: 1: iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl (hash: pdW8xyvcgwa+3E+4uzAPVs27A+7WdCHU9I6hP6wO0Mo=) 2: CC2C3CB684AC11F0B7B8977DC4F9AE02.roa (hash: Iyg31gxgmZNKpKPcyuwxT2WShJvbdC1BGcvDKYneqcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8185, serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Validity Not Before: Jan 25 06:21:02 2026 GMT Not After : Feb 1 06:21:02 2026 GMT Subject: CN=6975b64e-68ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:45:cd:6c:c7:5a:e6:46:a7:c5:55:45:a8: f3:2c:93:9c:bf:07:02:05:c7:06:45:f2:1d:e7:62: 8b:6b:3c:d6:c0:9f:ce:3b:d9:c1:55:98:f8:a8:86: 65:39:65:b8:f2:9d:8b:7d:5a:8c:9b:be:d4:b4:e6: 23:7a:1a:5e:71:2a:d3:0e:8c:b0:72:b7:54:06:dd: 27:02:65:74:e6:c6:fc:28:dc:2f:91:4a:08:b1:73: 83:b3:6b:09:72:4e:5d:41:50:41:0e:df:15:16:21: 44:02:46:88:72:7c:a3:a7:b3:d5:ea:14:4f:db:a0: 42:3d:49:7b:49:94:0d:46:e6:f3:f2:bf:37:1e:83: 07:4a:3a:4c:6d:8c:5f:43:97:9e:b0:36:a1:0c:bb: 4f:07:79:1b:e9:77:22:88:7d:ca:61:70:71:32:47: 0c:0c:c9:99:30:68:ea:61:a7:b5:a0:21:23:8d:cc: 13:b3:33:c7:58:77:26:d8:60:5d:81:e5:a6:cc:ae: 73:36:ee:b7:8e:4d:b4:eb:72:da:68:ce:93:15:62: ba:8e:7c:7e:3b:66:8a:46:63:69:eb:88:57:d8:78: 8e:a4:cb:f1:b2:25:57:35:a2:43:90:8b:dc:82:89: 72:9f:74:64:26:72:6d:70:32:bf:d2:00:cc:f0:25: 56:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B2:86:CF:15:E8:4F:49:F6:6A:92:E1:0D:B8:CC:3E:DC:E2:BE:57 X509v3 Authority Key Identifier: keyid:89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:d1:bb:f2:b2:1f:29:e3:98:59:08:5b:1c:26:e7:7e:44:46: e0:30:15:31:c1:bc:73:38:80:7b:ee:c3:34:93:f0:e6:2a:e2: b2:77:03:72:11:48:08:33:5d:1c:91:ac:fa:f4:6b:56:76:cc: 0d:16:fe:24:c7:12:32:85:bd:9c:a7:ab:68:37:aa:fc:2a:57: c8:56:0e:ac:52:16:95:a4:28:3c:9b:70:fd:eb:91:92:e2:13: d7:ec:41:81:3c:8b:52:a8:07:91:b0:16:c8:c5:34:34:91:20: cb:31:74:31:bc:99:ec:e9:bf:e0:e6:65:69:8e:27:ab:1a:48: 2a:8c:55:86:5e:09:fc:fa:e8:00:db:94:f2:77:98:07:2b:c1: 20:a4:d9:64:5b:59:2b:1e:12:03:ca:42:45:78:5b:fe:33:d5: 69:ab:cb:f8:44:58:b1:8a:fc:cb:40:a9:c5:64:9a:d0:4f:6c: 9a:f1:38:1e:ab:eb:37:a0:f2:18:9b:f6:f8:4c:8b:61:95:c9: e3:3b:71:96:00:33:a7:d5:07:79:6b:c1:5f:9e:51:c2:ad:77: e5:0f:cc:46:73:44:9d:eb:22:c6:a2:eb:61:b0:f0:5c:ff:17: f6:22:2a:5c:3a:70:b9:a5:76:67:54:5d:e3:fb:94:29:a8:6a: 02:9c:e5:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODE4NTExMC8GA1UEBRMoODk3ODRENkQ5MzhCMDVDQzNCN0I2NjZFNUU3QUVFOTIy M0RFNEQ3MDAeFw0yNjAxMjUwNjIxMDJaFw0yNjAyMDEwNjIxMDJaMBgxFjAUBgNV BAMMDTY5NzViNjRlLTY4ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA2kXNbMda5kanxVVFqPMsk5y/BwIFxwZF8h3nYotrPNbAn8472cFVmPiohmU5 ZbjynYt9WoybvtS05iN6Gl5xKtMOjLByt1QG3ScCZXTmxvwo3C+RSgixc4Ozawly Tl1BUEEO3xUWIUQCRohyfKOns9XqFE/boEI9SXtJlA1G5vPyvzcegwdKOkxtjF9D l56wNqEMu08HeRvpdyKIfcphcHEyRwwMyZkwaOphp7WgISONzBOzM8dYdybYYF2B 5abMrnM27reOTbTrctpozpMVYrqOfH47ZopGY2nriFfYeI6ky/GyJVc1okOQi9yC iXKfdGQmcm1wMr/SAMzwJVbdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIrKGzxXo T0n2apLhDbjMPtzivlcwHwYDVR0jBBgwFoAUiXhNbZOLBcw7e2ZuXnrukiPeTXAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTg1Lzg1MDExNTMyODRB QzExRjA4RDNBQjk3OUM0RjlBRTAyL2lYaE5iWk9MQmN3N2UyWnVYbnJ1a2lQZVRY QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVhoTmJaT0xCY3c3ZTJadVhucnVraVBlVFhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MTg1Lzg1MDExNTMyODRBQzExRjA4RDNBQjk3OUM0RjlBRTAyL2lYaE5iWk9MQmN3 N2UyWnVYbnJ1a2lQZVRYQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABHRu/KyHynjmFkIWxwm535ERuAwFTHBvHM4gHvuwzST8OYq4rJ3A3IR SAgzXRyRrPr0a1Z2zA0W/iTHEjKFvZynq2g3qvwqV8hWDqxSFpWkKDybcP3rkZLi E9fsQYE8i1KoB5GwFsjFNDSRIMsxdDG8mezpv+DmZWmOJ6saSCqMVYZeCfz66ADb lPJ3mAcrwSCk2WRbWSseEgPKQkV4W/4z1Wmry/hEWLGK/MtAqcVkmtBPbJrxOB6r 6zeg8hib9vhMi2GVyeM7cZYAM6fVB3lrwV+eUcKtd+UPzEZzRJ3rIsai62Gw8Fz/ F/YiKlw6cLmldmdUXeP7lCmoagKc5YY= -----END CERTIFICATE-----Generated at Sun Jan 25 12:24:52 2026 by rpki-client