This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: aFJfQ1B+a2PTMC06BwWNsKt+idJm8YbNFXosuU+DFBQ= Subject key identifier: 4D:A6:2E:D6:4B:65:11:5E:CD:2B:48:2B:36:5C:2B:B3:40:E3:3B:2F Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 1F9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 1F8D Signing time: Sat 24 Jan 2026 15:49:04 +0000 Manifest this update: Sat 24 Jan 2026 15:49:03 +0000 Manifest next update: Sat 31 Jan 2026 15:49:03 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: qOwMTSaiiHuWastljWCgzqqU78gSrDGO3NCsaCIi0CE=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: CYv9JY9hI0P702N3lQBz+p9YJHwSjBcG7pv4fPI19/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8090 (0x1f9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: Jan 24 15:49:03 2026 GMT Not After : Jan 31 15:49:03 2026 GMT Subject: CN=6974e9f0-58e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b9:0c:8d:ed:45:51:86:25:00:e8:60:95:db: a7:26:4a:57:a9:60:08:7b:c7:96:d1:26:b6:40:31: d2:c3:e5:dc:b2:3f:10:55:46:84:83:e2:d8:0d:07: b9:81:24:ce:dc:9f:d8:e9:23:77:57:d5:d5:ac:f9: 83:a3:ad:4e:e8:67:ce:17:a0:2c:44:c5:50:39:7a: 84:5c:6b:55:d1:01:3e:72:ad:f7:ac:df:ea:0f:7a: 65:e8:1b:c6:d2:d3:11:94:18:81:f1:c0:90:ba:79: 00:85:e8:57:ea:83:31:3c:1b:c0:d4:37:83:69:2a: 43:a4:72:67:72:e4:51:15:86:58:87:54:a7:29:7a: a4:36:ad:54:60:d8:73:51:7c:44:ef:96:d5:44:92: 93:0b:87:e6:43:b6:cd:9f:ea:f8:ce:09:b3:81:f5: c0:ec:58:ce:de:26:c6:ca:da:c5:91:fb:d2:c4:fe: c0:02:bb:7c:0c:94:4c:12:95:27:ad:e4:91:55:6f: 9f:67:ec:4b:97:16:f9:03:a0:03:50:72:e5:fe:bc: f8:37:87:fc:74:24:eb:1d:ea:ca:7b:72:59:34:76: be:1b:6e:61:e0:63:0a:f9:bf:d1:da:7d:f5:3d:52: f9:05:3c:d5:89:8e:fa:18:5b:df:bd:93:ef:49:d7: 8f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A6:2E:D6:4B:65:11:5E:CD:2B:48:2B:36:5C:2B:B3:40:E3:3B:2F X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:03:95:40:24:ac:8a:5d:c3:04:b1:62:37:f0:e9:8c:61:56: db:68:4f:b5:6d:1e:c5:a8:47:bf:3c:5e:44:9e:cf:65:54:7a: 68:0a:2b:7d:de:6f:63:8f:d4:b7:11:50:ec:f4:8e:8d:cb:37: 59:f4:9b:c6:15:4d:92:c7:ab:0c:fd:d9:db:06:6c:43:09:4b: 83:bb:3d:02:2d:5e:5f:4c:22:2a:cd:cd:55:bb:c1:1d:87:f9: c2:02:8b:0b:8f:d2:0e:cf:69:57:65:48:49:e5:7a:db:ad:ed: fb:18:fc:ea:22:8c:13:2d:fa:f8:e6:bb:24:50:e0:5e:51:de: c3:ca:c4:4f:57:eb:be:0d:43:b4:99:16:3a:52:e2:22:b0:cb: 4b:a0:73:65:fe:fe:d3:7c:89:97:fb:1a:d0:94:15:34:61:53: fa:c5:83:f5:1d:7b:fb:01:54:ba:a3:99:02:75:7f:7f:c3:a6: 6f:60:ec:4a:42:08:c2:fc:75:aa:ee:8c:84:3e:cb:e4:05:48: f6:8a:4c:0b:68:6b:f1:0f:d3:26:29:0e:30:5f:8c:88:b2:53: fc:41:cb:94:1a:1b:85:2c:b2:6b:65:b8:97:cf:fe:7d:1a:ce: ba:35:dc:f2:6e:00:db:95:57:63:be:6d:af:1d:3d:58:40:17: 48:00:c1:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjYwMTI0MTU0OTAzWhcNMjYwMTMxMTU0OTAzWjAYMRYwFAYD VQQDDA02OTc0ZTlmMC01OGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7kMje1FUYYlAOhgldunJkpXqWAIe8eW0Sa2QDHSw+Xcsj8QVUaEg+LYDQe5 gSTO3J/Y6SN3V9XVrPmDo61O6GfOF6AsRMVQOXqEXGtV0QE+cq33rN/qD3pl6BvG 0tMRlBiB8cCQunkAhehX6oMxPBvA1DeDaSpDpHJncuRRFYZYh1SnKXqkNq1UYNhz UXxE75bVRJKTC4fmQ7bNn+r4zgmzgfXA7FjO3ibGytrFkfvSxP7AArt8DJRMEpUn reSRVW+fZ+xLlxb5A6ADUHLl/rz4N4f8dCTrHerKe3JZNHa+G25h4GMK+b/R2n31 PVL5BTzViY76GFvfvZPvSdePiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2mLtZL ZRFezStIKzZcK7NA4zsvMB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwA5VAJKyKXcMEsWI38OmMYVbbaE+1bR7FqEe/PF5Ens9lVHpoCit9 3m9jj9S3EVDs9I6NyzdZ9JvGFU2Sx6sM/dnbBmxDCUuDuz0CLV5fTCIqzc1Vu8Ed h/nCAosLj9IOz2lXZUhJ5Xrbre37GPzqIowTLfr45rskUOBeUd7DysRPV+u+DUO0 mRY6UuIisMtLoHNl/v7TfImX+xrQlBU0YVP6xYP1HXv7AVS6o5kCdX9/w6ZvYOxK QgjC/HWq7oyEPsvkBUj2ikwLaGvxD9MmKQ4wX4yIslP8QcuUGhuFLLJrZbiXz/59 Gs66NdzybgDblVdjvm2vHT1YQBdIAMG+ -----END CERTIFICATE-----Generated at Sun Jan 25 08:15:06 2026 by rpki-client