This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft File: XvXhpYXEjivEULpy9MMTRoDlKw0.mft (raw, json) Hash identifier: ZZhjkpNDfP50q0Fw3VSUwo96awH41Rv8by0rcjf9sjI= Subject key identifier: F5:6E:9A:E9:47:35:D0:0E:0C:7D:6E:66:1D:91:E3:41:6B:B4:F6:B1 Authority key identifier: 5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D Certificate issuer: /CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft Manifest number: D4 Signing time: Fri 23 Jan 2026 03:55:53 +0000 Manifest this update: Fri 23 Jan 2026 03:55:53 +0000 Manifest next update: Fri 30 Jan 2026 03:55:53 +0000 Files and hashes: 1: XvXhpYXEjivEULpy9MMTRoDlKw0.crl (hash: Xw2ROGGmHIwOjUAPHcM2CQLolrwcCJ8dFqXlh7eykYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 03:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Validity Not Before: Jan 23 03:55:53 2026 GMT Not After : Jan 30 03:55:53 2026 GMT Subject: CN=6972f149-cb31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:e6:f7:52:6a:01:be:40:bb:73:a6:a3:99: 00:01:3b:e6:d4:ff:48:a8:8a:4a:19:5c:d9:8c:8e: 61:89:c3:a0:9c:8e:7a:5a:06:9c:26:1c:ac:81:57: 12:66:16:f3:06:66:ff:2a:ca:8c:58:71:f3:9d:cb: 2c:6b:39:81:ff:74:13:b2:2e:69:cc:0f:9a:a7:f1: ea:7b:63:35:63:e2:26:59:3c:a5:bf:8a:d0:5a:e8: cb:f4:50:cf:96:3b:9c:87:9c:11:26:99:b2:16:b6: f7:ed:11:56:19:4d:2f:5f:c0:0d:34:32:85:d2:5d: 33:4a:bf:00:99:38:f9:bc:28:4d:1b:f3:fb:1f:cb: be:11:a9:c0:8c:d6:97:f3:51:a0:a0:a3:5e:63:25: 96:2e:2a:14:21:86:99:d5:6b:76:b6:8e:8b:22:77: 56:d8:29:41:19:b4:3e:84:86:e8:f7:25:4d:70:8f: bd:a7:b4:f4:89:3b:50:cb:54:32:d5:c2:33:f6:01: 4b:df:47:d0:09:e0:5a:f6:e1:98:00:4c:bf:2f:16: 3b:df:32:c2:5c:cf:30:0b:f1:25:23:56:a1:e2:a0: c1:9e:ae:7f:24:a8:29:54:b4:83:32:69:c5:03:bf: 31:43:6c:91:48:94:b2:49:99:fd:fa:83:9b:c1:60: 0d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6E:9A:E9:47:35:D0:0E:0C:7D:6E:66:1D:91:E3:41:6B:B4:F6:B1 X509v3 Authority Key Identifier: keyid:5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:cc:4d:be:0a:c4:0b:22:08:2b:92:ad:51:05:46:0e:af:0d: d0:b9:ad:32:0e:5e:ee:aa:ab:89:29:b7:aa:2a:cf:4a:c7:8e: bb:8b:ad:13:87:85:7f:fe:57:f4:4b:c9:d5:aa:78:46:29:09: ae:b1:f1:c4:dd:09:58:56:97:86:8a:fc:96:3d:c9:23:4e:93: de:4a:4b:28:36:2d:de:6a:a0:9f:11:da:ed:8a:9a:b2:da:0d: c4:ea:fa:58:7b:a9:95:6a:e9:cf:b8:4f:1b:ab:9c:51:3f:6b: fa:3f:de:51:18:2c:6e:d5:03:e7:cc:75:27:cb:65:d8:46:02: e4:eb:30:f7:06:4b:1e:85:55:95:bd:fe:be:6a:7f:93:1b:e9: 92:97:37:fe:ac:42:49:d5:44:60:ac:b4:4f:33:eb:12:f5:a8: cb:b6:cb:9c:eb:3c:33:73:18:d2:ed:28:db:eb:bc:2a:b7:c5: 4d:61:69:36:76:65:fd:a3:49:11:b8:06:9a:e5:35:49:eb:47: d3:bf:ed:df:68:43:d4:cd:33:72:5c:bc:c8:36:cc:6d:cb:a8: d8:e8:51:60:19:b9:e9:2c:b5:be:76:61:75:49:14:2d:cd:33: 08:c7:44:50:92:12:5c:d0:c5:66:1c:26:a3:4e:c3:e0:1d:44: 3a:4a:47:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NTUxMTAvBgNVBAUTKDVFRjVFMUE1ODVDNDhFMkJDNDUwQkE3MkY0QzMxMzQ2 ODBFNTJCMEQwHhcNMjYwMTIzMDM1NTUzWhcNMjYwMTMwMDM1NTUzWjAYMRYwFAYD VQQDDA02OTcyZjE0OS1jYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LPm91JqAb5Au3Omo5kAATvm1P9IqIpKGVzZjI5hicOgnI56WgacJhysgVcS ZhbzBmb/KsqMWHHzncssazmB/3QTsi5pzA+ap/Hqe2M1Y+ImWTylv4rQWujL9FDP ljuch5wRJpmyFrb37RFWGU0vX8ANNDKF0l0zSr8AmTj5vChNG/P7H8u+EanAjNaX 81GgoKNeYyWWLioUIYaZ1Wt2to6LIndW2ClBGbQ+hIbo9yVNcI+9p7T0iTtQy1Qy 1cIz9gFL30fQCeBa9uGYAEy/LxY73zLCXM8wC/ElI1ah4qDBnq5/JKgpVLSDMmnF A78xQ2yRSJSySZn9+oObwWANSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVumulH NdAODH1uZh2R40FrtPaxMB8GA1UdIwQYMBaAFF714aWFxI4rxFC6cvTDE0aA5SsN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg1NS9FMUFFNTQ3Q0Ix MzgxMUVGOUI1MDMzMTJDNEY5QUUwMi9YdlhocFlYRWppdkVVTHB5OU1NVFJvRGxL dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2WGhwWVhFaml2RVVMcHk5TU1UUm9EbEt3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg1NS9FMUFFNTQ3Q0IxMzgxMUVGOUI1MDMzMTJDNEY5QUUwMi9YdlhocFlYRWpp dkVVTHB5OU1NVFJvRGxLdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjzE2+CsQLIggrkq1RBUYOrw3Qua0yDl7uqquJKbeqKs9Kx467i60T h4V//lf0S8nVqnhGKQmusfHE3QlYVpeGivyWPckjTpPeSksoNi3eaqCfEdrtipqy 2g3E6vpYe6mVaunPuE8bq5xRP2v6P95RGCxu1QPnzHUny2XYRgLk6zD3BksehVWV vf6+an+TG+mSlzf+rEJJ1URgrLRPM+sS9ajLtsuc6zwzcxjS7Sjb67wqt8VNYWk2 dmX9o0kRuAaa5TVJ60fTv+3faEPUzTNyXLzINsxty6jY6FFgGbnpLLW+dmF1SRQt zTMIx0RQkhJc0MVmHCajTsPgHUQ6Skcp -----END CERTIFICATE-----Generated at Sun Jan 25 04:38:45 2026 by rpki-client