This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json) Hash identifier: 07cKWV+m2S3jjSKf3ZFl3x17tFdhNREfduyOV/55LU0= Subject key identifier: 0F:C9:DB:1C:B5:60:4A:2D:29:24:24:4D:7B:99:B4:B2:F0:A0:20:8C Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 0A85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft Manifest number: 0A4F Signing time: Sat 24 Jan 2026 19:12:25 +0000 Manifest this update: Sat 24 Jan 2026 19:12:25 +0000 Manifest next update: Sat 31 Jan 2026 19:12:25 +0000 Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: YrZinF8k7aQQng5bzzpADd1t1L4eVoXnt5VDJfPQYZQ=) 2: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Fh5T2BpUHXj8z7zvCSIDzf9GCkAnUEieH5BE04K3ZeI=) 3: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: fT5I6I+PgWW4dacN3a4Ms0RKDB8N3MNCREMj8FDesrg=) 4: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: eb8Dxmgs1pJ56B+p/g4fWelI2bfJeXR9VvaW0O1EVCY=) 5: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: NOfiYVkjVgVKJdndF7rjEsZWLBXmxcXaA+rDg1JFfcI=) 6: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 2Dd7cd8I4OSARGKZ0mccoyZW6iVZIc9ObRTGe4O/Dcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2693 (0xa85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: Jan 24 19:12:25 2026 GMT Not After : Jan 31 19:12:25 2026 GMT Subject: CN=69751999-f882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ff:c9:e9:15:51:94:7c:c4:67:b6:2a:9a:a4: 85:00:bf:a3:43:bd:7d:eb:38:c5:28:69:30:b5:94: 8a:31:99:88:dd:f1:4a:92:e6:17:40:db:35:2d:b2: fc:be:61:7e:f7:b7:90:c3:65:c8:c0:93:27:5b:c7: 84:31:d6:07:c9:30:8b:a9:fe:02:8a:3a:50:a0:a8: 09:eb:f4:f3:8b:b9:22:88:4b:f9:aa:a3:c6:4e:c0: 8a:23:4a:43:18:ff:7c:a1:f4:da:69:1f:0b:81:03: f3:b5:9e:ca:bf:43:e7:40:47:93:d3:c5:2d:88:75: b6:22:09:10:f3:ca:dc:73:7b:04:42:4d:21:26:f0: 47:dd:13:15:e8:7a:a7:d6:cb:e4:e4:67:97:8e:d9: ed:23:7a:bb:25:b4:3d:70:f4:0a:3f:62:f2:3b:92: 77:cd:94:8d:fd:24:4d:2a:6c:58:7a:2a:ae:94:d9: 47:ae:35:8d:e0:fe:7f:14:4d:a9:59:c7:c6:18:95: 88:f4:6b:93:da:a3:b5:be:cb:29:a6:da:70:d5:05: fe:c8:80:4c:e4:c7:da:2b:62:b6:25:f1:86:d1:1b: cb:e7:07:f9:a7:10:cc:86:d0:9b:43:4d:b3:c0:72: 36:97:cc:d2:5b:c9:76:ea:26:1f:2b:04:5f:67:36: 83:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C9:DB:1C:B5:60:4A:2D:29:24:24:4D:7B:99:B4:B2:F0:A0:20:8C X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8b:80:59:5c:1b:c0:a7:48:8a:e1:95:db:55:3c:93:0a:2a: f4:59:00:f4:fb:a5:5f:44:d6:a6:ff:1a:43:b9:52:5f:bf:17: 6e:00:9c:39:39:46:09:54:fd:47:ea:96:60:db:a2:bb:e8:a6: 86:40:40:1e:14:bb:51:5e:80:f0:d2:4f:c6:6c:b3:25:fd:cd: df:73:53:d7:d7:4f:47:4e:0b:ea:26:85:00:27:a8:aa:be:4a: 72:f6:a9:25:7d:ed:cf:92:40:d1:f7:06:82:58:47:1d:20:08: e6:e9:ff:8d:f0:1d:d0:a1:ea:f3:fd:ef:4a:5e:1a:8d:6f:eb: 45:d2:58:ac:b2:72:f2:93:ba:e5:72:8b:bd:3a:a7:19:a9:9a: 72:73:81:b1:c3:81:db:72:b3:12:d3:5d:ee:74:17:c6:e9:76: 9d:25:8f:e8:1c:79:2e:a6:cf:c6:c8:b8:7e:2a:ce:04:5c:c1: 7e:62:f3:c9:50:d0:85:8e:5c:4a:b5:18:01:cc:dc:18:ce:53: 44:06:68:9e:9a:88:e6:a3:14:ce:f6:4a:ab:22:55:9b:53:78: e1:43:1c:96:a1:c9:00:f9:5b:ec:a2:e1:d4:30:5b:08:09:c0: 71:e3:eb:5a:af:99:72:8c:1a:04:9b:b1:98:2f:b6:10:20:6d: ff:47:2c:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjYwMTI0MTkxMjI1WhcNMjYwMTMxMTkxMjI1WjAYMRYwFAYD VQQDDA02OTc1MTk5OS1mODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7f/J6RVRlHzEZ7YqmqSFAL+jQ7196zjFKGkwtZSKMZmI3fFKkuYXQNs1LbL8 vmF+97eQw2XIwJMnW8eEMdYHyTCLqf4CijpQoKgJ6/Tzi7kiiEv5qqPGTsCKI0pD GP98ofTaaR8LgQPztZ7Kv0PnQEeT08UtiHW2IgkQ88rcc3sEQk0hJvBH3RMV6Hqn 1svk5GeXjtntI3q7JbQ9cPQKP2LyO5J3zZSN/SRNKmxYeiqulNlHrjWN4P5/FE2p WcfGGJWI9GuT2qO1vsspptpw1QX+yIBM5MfaK2K2JfGG0RvL5wf5pxDMhtCbQ02z wHI2l8zSW8l26iYfKwRfZzaDsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/J2xy1 YEotKSQkTXuZtLLwoCCMMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U0NS8wNkM4NTYzQzgzRDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdF M3drbHpfd1dIR2NDZ0hvQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOi4BZXBvAp0iK4ZXbVTyTCir0WQD0+6VfRNam/xpDuVJfvxduAJw5 OUYJVP1H6pZg26K76KaGQEAeFLtRXoDw0k/GbLMl/c3fc1PX109HTgvqJoUAJ6iq vkpy9qklfe3PkkDR9waCWEcdIAjm6f+N8B3Qoerz/e9KXhqNb+tF0lissnLyk7rl cou9OqcZqZpyc4Gxw4HbcrMS013udBfG6XadJY/oHHkups/GyLh+Ks4EXMF+YvPJ UNCFjlxKtRgBzNwYzlNEBmiemojmoxTO9kqrIlWbU3jhQxyWockA+VvsouHUMFsI CcBx4+tar5lyjBoEm7GYL7YQIG3/Rywn -----END CERTIFICATE-----Generated at Sun Jan 25 13:40:38 2026 by rpki-client