This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: 8s27lyluK+mBJkT6eTUuCUdJHoly5jr7m8Eu1Q7B+TA= Subject key identifier: C9:32:94:17:99:9A:56:A8:29:3E:E5:16:95:CA:06:53:44:A5:F0:2E Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: 012A Signing time: Sun 25 Jan 2026 03:52:42 +0000 Manifest this update: Sun 25 Jan 2026 03:52:42 +0000 Manifest next update: Sun 01 Feb 2026 03:52:42 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: rJ3Shl6Bp3aIimEeBfDNl5nbeI3QW6Yv0P12LMpN9sY=) 2: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: MWqHxm4EUBLTsZ0EUDg6aYtdnfWY5OwTTnXPxS3oZHM=) 3: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: syHq3DbE7eogaPpFVFVsQfYoWLCn9NostuRXmVIHm9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: Jan 25 03:52:42 2026 GMT Not After : Feb 1 03:52:42 2026 GMT Subject: CN=6975938a-a000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:be:ec:47:db:0e:74:7e:ce:1d:66:dd:1d:4d: 92:0d:f8:12:7b:7f:20:60:7d:65:6a:63:fb:64:ac: b4:f6:2c:8c:ab:e9:12:62:aa:8e:a7:f0:d0:5e:6b: 4a:9f:ef:08:5a:f8:b9:f1:dd:55:4e:22:aa:35:bd: c8:c4:6b:22:ef:4f:dc:73:f6:6d:66:45:c8:89:68: 6f:85:1c:a1:25:65:4b:18:66:f3:99:10:72:d6:9e: 47:41:ed:68:d2:0c:ca:32:e9:ea:53:59:90:c8:34: 55:27:e2:d9:65:0a:a5:9f:94:7a:af:b4:9f:5f:0b: b1:a9:8e:3d:13:99:b0:82:55:6b:88:62:11:75:e3: 14:66:e7:96:28:d4:ad:49:45:1a:cb:a9:19:c4:e7: b3:76:2f:c6:bd:91:ca:82:1b:7a:26:76:2d:ab:de: 3e:0a:96:b6:46:d2:a5:e4:99:3a:e8:dd:19:3d:62: ab:54:1c:4c:15:56:26:51:ba:da:fa:f4:30:6f:7e: c7:17:74:79:37:db:35:f3:6a:82:7d:47:49:80:53: 56:09:3e:ba:ef:1e:e8:64:7f:ee:89:4f:1b:eb:2d: f1:60:14:bd:7a:e6:ca:75:9e:76:b1:aa:08:51:ea: 6d:e9:6d:81:27:09:c8:05:cb:d1:5e:df:87:47:1e: 66:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:32:94:17:99:9A:56:A8:29:3E:E5:16:95:CA:06:53:44:A5:F0:2E X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e6:57:ae:78:a2:57:d6:0e:fc:2c:f3:dd:9b:42:b9:23:06: 6e:f5:24:ab:da:0a:dc:91:55:d2:9f:37:c0:d4:79:b5:e6:f0: 39:e9:6d:ac:98:4c:48:10:f0:58:0c:6b:5e:7f:c3:48:c8:be: b2:af:ed:7b:50:94:8f:b5:99:36:1a:1b:5b:e1:13:42:7f:52: 36:27:35:7f:a1:e3:1d:e5:5d:32:ae:74:ca:46:3f:69:36:fc: a1:fc:03:db:26:b8:99:9c:a4:49:d7:04:f0:19:dd:a5:f2:0b: 9c:fa:e5:29:67:fb:67:a8:e7:1b:13:77:47:d7:62:d3:2f:d3: 1c:ca:2f:6a:7c:07:69:fb:52:39:08:d8:05:ea:08:ad:3e:77: 2a:bd:93:bd:97:0c:cc:d6:d5:03:0e:7e:55:90:ff:ed:4c:7f: 62:00:cb:09:4b:95:9b:4b:e6:2e:99:43:20:14:e3:37:8e:08: 8d:bd:07:ac:10:1e:97:7c:48:ff:b4:bf:76:bc:e1:53:78:87: c4:18:60:2f:e0:fb:1d:85:b8:be:d0:d5:f4:3b:18:d0:d9:26: 4b:a3:84:73:e6:17:e8:b5:ed:34:44:20:13:a2:85:16:82:3a: 74:6c:43:fa:b3:7a:16:4e:46:f6:20:0c:a3:cf:4d:c6:c7:99: e8:0d:79:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjYwMTI1MDM1MjQyWhcNMjYwMjAxMDM1MjQyWjAYMRYwFAYD VQQDDA02OTc1OTM4YS1hMDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz77sR9sOdH7OHWbdHU2SDfgSe38gYH1lamP7ZKy09iyMq+kSYqqOp/DQXmtK n+8IWvi58d1VTiKqNb3IxGsi70/cc/ZtZkXIiWhvhRyhJWVLGGbzmRBy1p5HQe1o 0gzKMunqU1mQyDRVJ+LZZQqln5R6r7SfXwuxqY49E5mwglVriGIRdeMUZueWKNSt SUUay6kZxOezdi/GvZHKght6JnYtq94+Cpa2RtKl5Jk66N0ZPWKrVBxMFVYmUbra +vQwb37HF3R5N9s182qCfUdJgFNWCT667x7oZH/uiU8b6y3xYBS9eubKdZ52saoI Uept6W2BJwnIBcvRXt+HRx5mSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkylBeZ mlaoKT7lFpXKBlNEpfAuMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM5leueKJX1g78LPPdm0K5IwZu9SSr2grckVXSnzfA1Hm15vA56W2s mExIEPBYDGtef8NIyL6yr+17UJSPtZk2Ghtb4RNCf1I2JzV/oeMd5V0yrnTKRj9p Nvyh/APbJriZnKRJ1wTwGd2l8guc+uUpZ/tnqOcbE3dH12LTL9Mcyi9qfAdp+1I5 CNgF6gitPncqvZO9lwzM1tUDDn5VkP/tTH9iAMsJS5WbS+YumUMgFOM3jgiNvQes EB6XfEj/tL92vOFTeIfEGGAv4Psdhbi+0NX0OxjQ2SZLo4Rz5hfote00RCATooUW gjp0bEP6s3oWTkb2IAyjz03Gx5noDXmz -----END CERTIFICATE-----Generated at Sun Jan 25 20:13:08 2026 by rpki-client