This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft File: XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft (raw, json) Hash identifier: TEJiLyqKb0aaULc6zqLmSy0pNc6+DlTa9HPfAeW6E+w= Subject key identifier: CC:C1:0F:B1:75:3F:8D:33:1D:59:88:15:AF:F5:BD:DE:07:F9:01:43 Authority key identifier: 5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 Certificate issuer: /CN=A91E9F89/serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Certificate serial: 08E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft Manifest number: 08DD Signing time: Sat 24 Jan 2026 19:48:50 +0000 Manifest this update: Sat 24 Jan 2026 19:48:49 +0000 Manifest next update: Sat 31 Jan 2026 19:48:49 +0000 Files and hashes: 1: XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl (hash: L4ZfnqQYgZ+s24W5CgeGluMxKE+3KGyUidLn3qDcvBU=) 2: 05B67AF8C6A011EAA70D183FC4F9AE02.roa (hash: uyDMO7ckw/0z5jl/cntcgb/65TbIdBVdA1r68qbPTT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2276 (0x8e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F89, serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Validity Not Before: Jan 24 19:48:49 2026 GMT Not After : Jan 31 19:48:49 2026 GMT Subject: CN=69752222-c30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:62:5c:64:1a:8f:6e:b3:66:19:8c:dc:d9:18: f7:8a:86:12:d8:e0:83:25:ec:cb:3e:ef:a0:1b:98: a2:ed:0c:db:51:87:3f:24:ac:d8:5a:3a:9a:b9:c7: 54:f6:6c:ff:16:7d:f6:50:5b:39:c3:c4:e5:97:5f: 88:8a:26:7e:58:1c:90:1d:4a:9c:4a:a4:17:2d:22: 36:3a:0f:34:89:9b:4e:7a:b6:3b:26:43:e4:30:da: 90:fc:69:4c:72:bc:65:14:e0:b8:d0:03:4d:9c:81: ed:e3:60:3d:97:33:c3:d2:1b:d5:9c:03:44:0c:47: 3d:12:f5:b2:c1:8f:62:ae:ec:33:e6:15:da:75:58: c0:53:a3:fe:bc:7e:85:16:59:0e:4b:59:22:60:77: d1:03:0f:40:f9:c3:9e:94:dd:c7:57:a2:d1:79:d7: 62:e0:83:07:dd:86:94:35:4c:65:7c:2c:cf:8e:4d: e1:29:fa:96:0d:1a:47:4d:25:5c:cb:a6:73:4f:b1: d6:f7:47:e4:d5:52:9b:1f:e2:5b:fa:2f:34:5f:a3: e6:fe:37:a7:4a:1d:8f:3e:25:8a:db:fb:a8:aa:fa: 92:b9:0e:63:1f:28:ad:94:98:ce:a1:ff:66:34:9f: 0d:e7:e0:4b:5b:ee:07:87:bf:7c:8a:ca:48:1d:7f: b6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C1:0F:B1:75:3F:8D:33:1D:59:88:15:AF:F5:BD:DE:07:F9:01:43 X509v3 Authority Key Identifier: keyid:5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:26:a3:20:a5:50:ec:35:29:9a:7a:04:46:ad:58:b5:7c:5f: d6:75:b4:eb:5c:64:c3:a7:b0:f1:31:a9:03:e9:47:42:f7:4e: 07:f5:f7:71:3e:de:ee:98:55:31:0e:85:06:0d:98:4d:e0:c8: bb:4e:82:84:6b:4a:59:50:d6:6c:54:7a:bb:69:bb:28:b2:ed: 94:67:38:52:5e:b5:b6:31:94:9e:90:bc:a3:1e:7f:4c:0a:58: 12:05:e3:63:12:41:0d:2f:ab:35:65:a0:ea:40:ad:ea:cc:e3: a0:29:09:53:39:86:3b:74:91:8a:a6:42:c4:bf:2c:6e:43:12: a2:8a:ef:99:78:98:2e:b9:6c:f0:6f:9b:a1:5a:35:cd:8e:38: 2f:c5:a6:ef:11:9f:d0:1e:82:df:f5:ba:18:2f:56:a3:3e:c6: e8:d4:f3:5c:96:71:a0:0f:69:9f:81:d2:9b:b1:72:e6:0f:d9: 06:e5:3d:47:34:a7:09:a1:25:cb:8a:b1:ab:d7:da:96:40:c7: c1:40:f0:0b:32:40:b9:8a:88:39:d5:42:de:71:68:4c:f0:55: b2:7a:c5:60:bb:e8:4f:49:f9:c4:67:60:40:06:f0:41:4b:29: 52:4b:13:f3:53:de:d3:05:da:18:e7:88:90:f1:7b:3b:6e:8e: db:d9:7f:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGODkxMTAvBgNVBAUTKDVGMzA3RTYyNzRBQzM5RTU0RTk5ODY2REFCQjg1QzJD OUVGRDE2QjEwHhcNMjYwMTI0MTk0ODQ5WhcNMjYwMTMxMTk0ODQ5WjAYMRYwFAYD VQQDDA02OTc1MjIyMi1jMzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWJcZBqPbrNmGYzc2Rj3ioYS2OCDJezLPu+gG5ii7QzbUYc/JKzYWjqaucdU 9mz/Fn32UFs5w8Tll1+IiiZ+WByQHUqcSqQXLSI2Og80iZtOerY7JkPkMNqQ/GlM crxlFOC40ANNnIHt42A9lzPD0hvVnANEDEc9EvWywY9iruwz5hXadVjAU6P+vH6F FlkOS1kiYHfRAw9A+cOelN3HV6LReddi4IMH3YaUNUxlfCzPjk3hKfqWDRpHTSVc y6ZzT7HW90fk1VKbH+Jb+i80X6Pm/jenSh2PPiWK2/uoqvqSuQ5jHyitlJjOof9m NJ8N5+BLW+4Hh798ispIHX+2MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzBD7F1 P40zHVmIFa/1vd4H+QFDMB8GA1UdIwQYMBaAFF8wfmJ0rDnlTpmGbau4XCye/Rax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUY4OS81QkU3NDg3OEM2 OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09lVk9tWVp0cTdoY0xKNzlG ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6Qi1ZblNzT2VWT21ZWnRxN2hjTEo3OUZyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUY4OS81QkU3NDg3OEM2OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09l Vk9tWVp0cTdoY0xKNzlGckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/JqMgpVDsNSmaegRGrVi1fF/WdbTrXGTDp7DxMakD6UdC904H9fdx Pt7umFUxDoUGDZhN4Mi7ToKEa0pZUNZsVHq7absosu2UZzhSXrW2MZSekLyjHn9M ClgSBeNjEkENL6s1ZaDqQK3qzOOgKQlTOYY7dJGKpkLEvyxuQxKiiu+ZeJguuWzw b5uhWjXNjjgvxabvEZ/QHoLf9boYL1ajPsbo1PNclnGgD2mfgdKbsXLmD9kG5T1H NKcJoSXLirGr19qWQMfBQPALMkC5iog51ULecWhM8FWyesVgu+hPSfnEZ2BABvBB SylSSxPzU97TBdoY54iQ8Xs7bo7b2X/n -----END CERTIFICATE-----Generated at Sun Jan 25 02:58:57 2026 by rpki-client