This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft File: sxbAG3t1QxTi8Y9zen19iayrfmg.mft (raw, json) Hash identifier: fsTifikyuUehbQQNsR6i5onVvc1/FywkNSLuMkmiHww= Subject key identifier: 80:D7:31:42:95:4C:70:2D:E4:33:99:E1:7A:11:02:E2:C1:00:4A:FA Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68 Certificate issuer: /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft Manifest number: 26 Signing time: Fri 23 Jan 2026 06:51:23 +0000 Manifest this update: Fri 23 Jan 2026 06:51:22 +0000 Manifest next update: Fri 30 Jan 2026 06:51:22 +0000 Files and hashes: 1: sxbAG3t1QxTi8Y9zen19iayrfmg.crl (hash: bhQw4BWrfkxeVlnSkylGoB6923XO6eNIHvyUsrjJeAU=) 2: 2601F1CEEB7111F0839E97F34E6F56BC.roa (hash: I/Y87XRrRQwO7a2UPMEge+E7HPCSkvSS2jWDgsl93I0=) 3: F6921460F58D11F0BCCF7FE5756F56BC.roa (hash: tVrrylSFPXX4f/uBOg5gxYytLtT1vYd/bYgLKIT3L4I=) 4: 8BB48B56CCFB11F0B624EC45C4F9AE02.roa (hash: JXhMVFF9LOX2GddOqFjlhclH4AnOFFWS0nrFu9DCJ0w=) 5: 8C21D58ACCFB11F08C34EC45C4F9AE02.roa (hash: zO3eHRQaLoJDtz5i54a8aGSxd9NadRVjZ+xhsPWeZ+c=) 6: F715DFB6F58D11F0BCCF7FE5756F56BC.roa (hash: ojY/ZS9+ARoYvpueFXHTnfFLZSL99uZEUM+qAvc27fs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68 Validity Not Before: Jan 23 06:51:22 2026 GMT Not After : Jan 30 06:51:22 2026 GMT Subject: CN=69731a6a-57af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:ba:83:65:df:84:7a:10:e5:45:5c:cd:31: a7:e1:54:91:6b:9e:d2:4d:96:ec:24:48:48:c7:e2: 12:f0:ca:a2:ae:9b:16:e5:42:7a:ff:3a:f9:a6:9a: 5b:93:cb:75:c2:83:60:84:8d:ad:63:c0:f8:e4:8e: af:18:9e:5d:db:27:1f:b1:83:de:7c:1c:b8:bd:1a: fc:97:86:43:d8:73:76:6c:a8:cc:6c:f5:47:5f:e3: ac:b8:0a:e2:0e:44:8d:c1:cb:31:af:45:93:01:ee: 23:fe:11:9c:5c:e0:10:e9:8a:3c:67:c8:69:4e:62: bc:1f:cf:01:bc:2a:b2:6c:11:a3:52:4c:80:04:17: 7f:2e:31:c9:86:73:9f:eb:ed:b5:66:2c:8f:c5:c0: c8:48:c3:ac:59:ce:00:72:2a:b5:f7:b6:64:f6:0f: 03:36:eb:1b:32:17:91:d5:02:eb:76:5a:db:3b:4e: 92:3d:3a:dc:c7:7b:b4:c2:59:81:4c:45:94:d4:1e: bf:e4:47:e6:31:a3:8e:bb:2d:f5:94:90:0f:59:64: a0:93:49:da:e7:7d:f3:99:ad:ef:c7:51:16:6d:a5: 5f:90:6f:a2:74:35:c8:6a:ca:00:f8:e1:e1:d6:07: cd:bd:cb:e6:0d:13:f6:86:3d:85:d0:5f:34:8b:f7: 6e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D7:31:42:95:4C:70:2D:E4:33:99:E1:7A:11:02:E2:C1:00:4A:FA X509v3 Authority Key Identifier: keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:85:d7:50:f7:14:c1:9f:c2:3e:43:3c:61:2d:29:56:3b:d6: c3:c9:81:6f:51:fd:c0:f3:e3:9b:c3:62:8b:72:dd:20:2d:62: e7:ed:6f:33:87:e3:15:3e:d5:0d:30:eb:bd:fe:cc:f6:24:92: c3:4e:40:05:35:bc:be:e0:18:a0:ef:19:17:33:2c:7c:7d:78: 66:7c:c6:11:85:9d:52:3c:34:85:69:cd:e8:81:ef:2d:e7:94: a9:3c:b2:8e:47:a0:73:69:55:ac:ba:c3:46:a7:5c:36:d1:c5: db:f0:4b:62:ea:91:bb:57:1b:04:f6:07:9f:5c:c5:00:65:58: 32:30:53:c5:16:e1:23:06:5c:79:fa:96:d3:28:d9:a2:b2:3b: a9:95:5d:cf:27:8a:ca:1d:44:c9:47:a7:11:bf:9c:30:50:db: 7b:15:60:4a:56:b6:2d:1e:ed:86:2c:91:fd:d8:75:41:24:87: c3:2c:e1:ba:4b:07:27:98:25:1c:e0:30:28:e8:fa:ea:f9:cc: da:dd:7c:9f:e4:13:14:e0:fd:b9:b8:b9:84:30:fb:43:e1:fb: c0:32:d8:45:b1:e8:69:c4:fd:5e:25:53:0b:45:b9:73:58:ce: fa:96:65:a1:d2:4a:f1:7f:0d:1f:da:0d:33:fe:4a:46:63:81: 0f:42:4d:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE OTgzQjExMC8GA1UEBRMoQjMxNkMwMUI3Qjc1NDMxNEUyRjE4RjczN0E3RDdEODlB Q0FCN0U2ODAeFw0yNjAxMjMwNjUxMjJaFw0yNjAxMzAwNjUxMjJaMBgxFjAUBgNV BAMMDTY5NzMxYTZhLTU3YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4B7qDZd+EehDlRVzNMafhVJFrntJNluwkSEjH4hLwyqKumxblQnr/OvmmmluT y3XCg2CEja1jwPjkjq8Ynl3bJx+xg958HLi9GvyXhkPYc3ZsqMxs9Udf46y4CuIO RI3ByzGvRZMB7iP+EZxc4BDpijxnyGlOYrwfzwG8KrJsEaNSTIAEF38uMcmGc5/r 7bVmLI/FwMhIw6xZzgByKrX3tmT2DwM26xsyF5HVAut2Wts7TpI9OtzHe7TCWYFM RZTUHr/kR+Yxo467LfWUkA9ZZKCTSdrnffOZre/HURZtpV+Qb6J0NchqygD44eHW B829y+YNE/aGPYXQXzSL927dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgNcxQpVM cC3kM5nhehEC4sEASvowHwYDVR0jBBgwFoAUsxbAG3t1QxTi8Y9zen19iayrfmgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5ODNCL0RGQUY5OTkyQ0Mw MzExRjBCMUUyNUI0MUM0RjlBRTAyL3N4YkFHM3QxUXhUaThZOXplbjE5aWF5cmZt Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3hiQUczdDFReFRpOFk5emVuMTlpYXlyZm1nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 ODNCL0RGQUY5OTkyQ0MwMzExRjBCMUUyNUI0MUM0RjlBRTAyL3N4YkFHM3QxUXhU aThZOXplbjE5aWF5cmZtZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEaF11D3FMGfwj5DPGEtKVY71sPJgW9R/cDz45vDYoty3SAtYuftbzOH 4xU+1Q0w673+zPYkksNOQAU1vL7gGKDvGRczLHx9eGZ8xhGFnVI8NIVpzeiB7y3n lKk8so5HoHNpVay6w0anXDbRxdvwS2LqkbtXGwT2B59cxQBlWDIwU8UW4SMGXHn6 ltMo2aKyO6mVXc8nisodRMlHpxG/nDBQ23sVYEpWti0e7YYskf3YdUEkh8Ms4bpL ByeYJRzgMCjo+ur5zNrdfJ/kExTg/bm4uYQw+0Ph+8Ay2EWx6GnE/V4lUwtFuXNY zvqWZaHSSvF/DR/aDTP+SkZjgQ9CTQ4= -----END CERTIFICATE-----Generated at Sun Jan 25 03:02:33 2026 by rpki-client