This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft File: Xb7wLCg84I1tzonzkSoMMKcBkMg.mft (raw, json) Hash identifier: w4wBOV2+GWxsSeb7GLhMvi4Qik0/uhE+o1x6eaEDyo8= Subject key identifier: 9D:34:5D:92:22:64:22:64:38:4E:77:43:06:B9:2E:B3:BA:D6:10:C0 Authority key identifier: 5D:BE:F0:2C:28:3C:E0:8D:6D:CE:89:F3:91:2A:0C:30:A7:01:90:C8 Certificate issuer: /CN=A91E3E8B/serialNumber=5DBEF02C283CE08D6DCE89F3912A0C30A70190C8 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft Manifest number: 28 Signing time: Sun 25 Jan 2026 06:43:58 +0000 Manifest this update: Sun 25 Jan 2026 06:43:57 +0000 Manifest next update: Sun 01 Feb 2026 06:43:57 +0000 Files and hashes: 1: Xb7wLCg84I1tzonzkSoMMKcBkMg.crl (hash: LSJeZCtdF5lCMMcXfCE1hNkfc7QaK9iTK24iKt7lZI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.crl rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E8B, serialNumber=5DBEF02C283CE08D6DCE89F3912A0C30A70190C8 Validity Not Before: Jan 25 06:43:57 2026 GMT Not After : Feb 1 06:43:57 2026 GMT Subject: CN=6975bbae-576c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:62:11:a7:d4:da:5f:94:9d:07:18:cd:81: 92:aa:2f:82:f3:ae:51:33:2c:98:ae:81:2c:a7:de: 62:4f:20:38:e1:4d:c0:2f:d1:99:34:ff:66:a3:3f: 3d:0f:a6:25:20:0e:1a:fe:e6:00:f7:66:23:13:fb: c0:ab:a2:b1:0e:fc:94:ce:b6:3c:cd:36:e8:70:fc: 9d:ef:30:55:da:5b:62:f4:e4:0f:20:3b:14:4a:84: 0c:f8:0d:f6:51:b0:01:ef:70:f5:18:a3:2c:cf:6e: e1:a4:7b:73:08:af:3f:3e:66:ab:58:81:c8:95:f5: 8e:8f:16:3f:ae:5a:86:0d:94:ed:aa:49:2f:57:42: 1a:72:24:f1:ce:ef:03:67:23:16:b5:a3:89:b2:aa: 58:c8:8e:79:1d:cf:2f:bc:f9:f0:19:16:a4:11:19: 3e:a2:7b:10:ce:c9:f2:c6:0d:4d:d9:04:b5:3f:d3: 57:fe:56:5e:72:bd:c4:42:12:f5:9d:93:eb:e9:9c: 59:e5:51:f1:27:cc:4b:b3:83:c7:44:b0:f0:7c:56: fa:f2:65:51:6d:8e:9d:36:b9:53:00:4c:78:9a:17: 0c:35:ff:a7:29:75:cb:2f:15:64:7f:94:55:f9:50: ae:e8:e3:2a:85:64:66:43:f3:bb:76:ca:86:6e:4f: e3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:34:5D:92:22:64:22:64:38:4E:77:43:06:B9:2E:B3:BA:D6:10:C0 X509v3 Authority Key Identifier: keyid:5D:BE:F0:2C:28:3C:E0:8D:6D:CE:89:F3:91:2A:0C:30:A7:01:90:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:22:09:8a:65:6f:c9:7a:d2:46:03:f3:c2:b2:50:82:a4:14: 50:f5:31:b4:ed:90:eb:ef:be:79:59:0f:a0:25:8b:82:16:c6: 5b:62:19:dc:bd:3b:81:ff:9f:21:8f:d5:ea:e3:9d:de:98:ff: 92:cf:2f:c0:6f:fc:79:39:80:01:36:ac:8b:3b:dc:37:b0:53: 2f:cb:5d:17:3c:b3:a9:40:5e:8a:d6:34:97:c8:6a:e0:7c:36: dc:70:7f:6a:d0:1d:74:a2:01:a8:5c:6e:3e:66:b2:de:d9:b3: 3b:92:c7:ab:8d:a3:59:bc:17:f0:bf:42:ea:5d:2d:50:d8:87: 45:0f:8b:7a:e6:ff:94:46:da:ff:a2:cb:47:c8:e7:88:64:da: 59:75:4e:db:eb:e5:e2:54:6b:b3:eb:ca:25:91:b0:bb:ac:4e: 98:38:b6:94:6e:e1:f3:86:8a:23:8d:e2:69:cf:31:87:5f:fa: c3:69:b1:52:69:32:19:ef:ee:3d:6a:bf:81:f8:b1:e0:ce:eb: 9b:e2:65:4e:5f:3c:f6:93:85:2a:37:60:23:16:4f:af:e6:04: 44:75:0b:a9:43:d0:07:20:a9:42:66:b6:3f:b4:33:58:c5:d1: 8c:16:c6:26:b6:ea:0e:60:a9:d5:cf:29:c1:3d:fc:77:6f:96: 7e:60:ee:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0U4QjExMC8GA1UEBRMoNURCRUYwMkMyODNDRTA4RDZEQ0U4OUYzOTEyQTBDMzBB NzAxOTBDODAeFw0yNjAxMjUwNjQzNTdaFw0yNjAyMDEwNjQzNTdaMBgxFjAUBgNV BAMMDTY5NzViYmFlLTU3NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIr2IRp9TaX5SdBxjNgZKqL4LzrlEzLJiugSyn3mJPIDjhTcAv0Zk0/2ajPz0P piUgDhr+5gD3ZiMT+8CrorEO/JTOtjzNNuhw/J3vMFXaW2L05A8gOxRKhAz4DfZR sAHvcPUYoyzPbuGke3MIrz8+ZqtYgciV9Y6PFj+uWoYNlO2qSS9XQhpyJPHO7wNn Ixa1o4myqljIjnkdzy+8+fAZFqQRGT6iexDOyfLGDU3ZBLU/01f+Vl5yvcRCEvWd k+vpnFnlUfEnzEuzg8dEsPB8VvryZVFtjp02uVMATHiaFww1/6cpdcsvFWR/lFX5 UK7o4yqFZGZD87t2yoZuT+ObAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnTRdkiJk ImQ4TndDBrkus7rWEMAwHwYDVR0jBBgwFoAUXb7wLCg84I1tzonzkSoMMKcBkMgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRThCLzA0REUyQjkyQkUy MjExRjBCMzhEQjUxOUM0RjlBRTAyL1hiN3dMQ2c4NEkxdHpvbnprU29NTUtjQmtN Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGI3d0xDZzg0STF0em9uemtTb01NS2NCa01nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RThCLzA0REUyQjkyQkUyMjExRjBCMzhEQjUxOUM0RjlBRTAyL1hiN3dMQ2c4NEkx dHpvbnprU29NTUtjQmtNZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAgiCYplb8l60kYD88KyUIKkFFD1MbTtkOvvvnlZD6Ali4IWxltiGdy9 O4H/nyGP1erjnd6Y/5LPL8Bv/Hk5gAE2rIs73DewUy/LXRc8s6lAXorWNJfIauB8 Ntxwf2rQHXSiAahcbj5mst7ZszuSx6uNo1m8F/C/QupdLVDYh0UPi3rm/5RG2v+i y0fI54hk2ll1Ttvr5eJUa7PryiWRsLusTpg4tpRu4fOGiiON4mnPMYdf+sNpsVJp Mhnv7j1qv4H4seDO65viZU5fPPaThSo3YCMWT6/mBER1C6lD0AcgqUJmtj+0M1jF 0YwWxia26g5gqdXPKcE9/Hdvln5g7u4= -----END CERTIFICATE-----Generated at Sun Jan 25 11:18:12 2026 by rpki-client