This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft File: -XNJLtZGko7R8Q3oRmLlUj9VzI0.mft (raw, json) Hash identifier: /9Favzdv7ZeLsjr7SQQUbWWqCe5DP5cbMtdErpjCztc= Subject key identifier: FC:35:1D:C7:35:11:D7:58:63:93:8A:97:AC:EC:62:99:4E:62:3E:7A Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Certificate serial: 0B52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft Manifest number: 0B2C Signing time: Sat 24 Jan 2026 18:51:32 +0000 Manifest this update: Sat 24 Jan 2026 18:51:31 +0000 Manifest next update: Sat 31 Jan 2026 18:51:31 +0000 Files and hashes: 1: -XNJLtZGko7R8Q3oRmLlUj9VzI0.crl (hash: N4pOBtmcK/+PaVosDe8p2Htel5VJKHXSCEAO7w23nxY=) 2: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (hash: 9vhYDzl42dspDXwVKnxh739DiVyQvgiliwEtZbzC2G8=) 3: 33CFE442C07511EE980AEC0CC4F9AE02.roa (hash: 66vEtVsOZgkHbfKKZep1to2E133VnAUxFeLa9d7Wa3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2898 (0xb52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0875, serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Validity Not Before: Jan 24 18:51:31 2026 GMT Not After : Jan 31 18:51:31 2026 GMT Subject: CN=697514b4-f2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:85:c0:b1:30:fa:70:f4:70:c4:77:21:66: d2:4a:a3:62:d8:3d:75:38:c1:9b:20:2c:72:e9:6d: 71:9f:51:0a:10:7f:8c:66:7b:8f:7f:3a:3b:03:79: 5a:a9:7a:0d:6c:b0:d2:6d:d5:57:9a:4c:a3:ba:8a: 3b:9b:45:b8:6c:20:81:6d:41:ae:a1:9c:0c:70:1a: b5:10:fc:c5:13:35:da:32:b7:46:33:2f:2a:17:44: ce:33:7c:65:ed:7b:b8:bb:1b:15:c8:f0:f5:8b:06: fb:3a:bf:a2:10:e8:37:9c:6b:a5:07:19:2e:90:82: 70:e7:ec:b4:22:a5:dc:58:81:41:c3:fe:f8:5c:3b: bc:75:ae:3d:f5:8a:32:a3:8b:5d:b2:5d:75:2f:76: 29:62:b2:e5:a4:c7:d0:45:e7:ba:a8:35:60:19:c0: d0:45:c4:f8:3f:2c:94:15:40:d2:8f:a9:46:c1:5a: a0:05:fd:ef:f6:ff:e9:72:4b:ba:fd:14:67:64:68: b3:65:5d:c3:2a:45:07:f5:3e:fa:61:f7:6a:6e:df: 26:f8:06:57:e0:07:6d:7f:1e:22:e1:aa:3f:5c:64: c6:3a:06:76:ba:a8:1b:d8:29:20:a5:e4:cc:96:03: 8e:05:a3:38:f7:85:a3:ef:06:6e:f9:e1:97:4c:d3: 42:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:35:1D:C7:35:11:D7:58:63:93:8A:97:AC:EC:62:99:4E:62:3E:7A X509v3 Authority Key Identifier: keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:da:b6:6f:a3:d6:61:cc:84:64:08:0f:3b:42:e5:33:5b:da: 09:fe:20:64:9a:58:bc:fc:63:b8:5c:dd:e9:ab:e0:b5:6d:ce: 81:ac:ea:2a:9f:9c:a6:30:1a:19:a8:08:10:93:96:15:2c:37: 5a:ef:0c:d4:15:8f:c2:be:b3:e7:78:54:8a:47:6e:55:f9:c2: 54:c1:14:a5:25:38:98:e5:d3:43:51:88:c8:43:73:9f:84:cc: c5:6f:83:5a:24:0f:b3:f9:38:3e:bf:f7:26:2f:06:12:b9:b5: 8f:6f:4c:47:a5:76:3e:43:e6:ad:5a:48:55:37:7b:16:ae:71: 68:7c:a1:3f:6f:94:e2:89:63:09:0f:ab:7d:9e:39:3f:d9:21: 04:65:bf:56:fe:eb:71:c8:b0:af:52:52:2a:59:d9:ed:94:a6: af:35:06:5d:df:71:f1:66:bc:bb:c6:d1:54:9f:d7:10:e7:47: f4:41:55:ff:cd:b1:7f:57:f3:ab:35:72:1a:1f:cd:76:21:be: db:06:54:e1:59:42:b7:10:b0:3b:3e:4d:73:be:fa:0c:19:3b: 3c:d1:5a:c1:5a:83:a9:31:4f:6f:96:ba:e3:e0:e7:40:39:0a: 12:9e:6d:31:12:2a:c8:04:5b:79:bb:ce:9b:75:0d:6e:4f:b2: 5c:7d:fa:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy M0Y1NUNDOEQwHhcNMjYwMTI0MTg1MTMxWhcNMjYwMTMxMTg1MTMxWjAYMRYwFAYD VQQDDA02OTc1MTRiNC1mMmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDKFwLEw+nD0cMR3IWbSSqNi2D11OMGbICxy6W1xn1EKEH+MZnuPfzo7A3la qXoNbLDSbdVXmkyjuoo7m0W4bCCBbUGuoZwMcBq1EPzFEzXaMrdGMy8qF0TOM3xl 7Xu4uxsVyPD1iwb7Or+iEOg3nGulBxkukIJw5+y0IqXcWIFBw/74XDu8da499Yoy o4tdsl11L3YpYrLlpMfQRee6qDVgGcDQRcT4PyyUFUDSj6lGwVqgBf3v9v/pcku6 /RRnZGizZV3DKkUH9T76Yfdqbt8m+AZX4Adtfx4i4ao/XGTGOgZ2uqgb2CkgpeTM lgOOBaM494Wj7wZu+eGXTNNCcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw1Hcc1 EddYY5OKl6zsYplOYj56MB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5 MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg3NS82RDkxQUFCQzU5MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tv N1I4UTNvUm1MbFVqOVZ6STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN2rZvo9ZhzIRkCA87QuUzW9oJ/iBkmli8/GO4XN3pq+C1bc6BrOoq n5ymMBoZqAgQk5YVLDda7wzUFY/CvrPneFSKR25V+cJUwRSlJTiY5dNDUYjIQ3Of hMzFb4NaJA+z+Tg+v/cmLwYSubWPb0xHpXY+Q+atWkhVN3sWrnFofKE/b5TiiWMJ D6t9njk/2SEEZb9W/utxyLCvUlIqWdntlKavNQZd33HxZry7xtFUn9cQ50f0QVX/ zbF/V/OrNXIaH812Ib7bBlThWUK3ELA7Pk1zvvoMGTs80VrBWoOpMU9vlrrj4OdA OQoSnm0xEirIBFt5u86bdQ1uT7JcffqO -----END CERTIFICATE-----Generated at Sun Jan 25 06:11:54 2026 by rpki-client