This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: YGgqazPDN9A7eljqAYjeXiZzA7GU+4JJMVF4/DZT5sI= Subject key identifier: A2:B9:55:0E:98:DC:12:75:48:93:63:A3:24:39:F6:E2:16:68:F8:CE Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 03F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 03E8 Signing time: Sat 24 Jan 2026 23:44:08 +0000 Manifest this update: Sat 24 Jan 2026 23:44:08 +0000 Manifest next update: Sat 31 Jan 2026 23:44:08 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: LHBg+1zrhI4VnWtHQ9zM9MtDjdBM/MeuPXZ/7/9DgZE=) 2: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: Q0wzmAGM0ykkEHN1MJvFlbZ7walQQuiBKFZtznnJWt8=) 3: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: VO877qnYV5ysyh8xNP6j/NDwnBYHL9P7OWuoQhCU32U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: Jan 24 23:44:08 2026 GMT Not After : Jan 31 23:44:08 2026 GMT Subject: CN=69755948-f635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:e4:36:d1:9e:4a:d3:b1:b2:ab:e4:6c:59: e3:b8:df:0b:78:f6:36:e3:97:ff:64:2e:ad:17:c7: 31:7f:c4:a4:fa:9f:58:a3:62:17:84:e9:71:44:cb: 91:37:3f:dd:f4:c6:30:45:89:e2:fe:4e:cd:17:df: 8d:85:5e:f8:fe:00:de:c0:94:9a:b8:bc:fd:23:53: 8e:8e:d5:44:7c:5b:d9:7b:78:cc:7d:66:10:0e:7d: 6c:5e:e2:e4:55:4a:e7:fc:4c:af:75:e2:8f:c0:17: 0e:2f:85:8b:c2:05:51:cb:7b:ac:5d:0c:13:67:99: 3c:8e:4c:3c:bb:01:e1:f3:02:db:9a:32:ee:93:10: 73:0f:f0:f1:c3:82:fd:da:c5:95:eb:03:cd:de:4f: 2f:35:1a:9c:2a:be:ac:37:d7:09:f4:6f:73:0c:a3: 5d:88:1f:44:a9:a8:ba:b6:fb:93:c1:19:68:47:0e: fe:62:92:61:c9:18:f9:3f:b5:ec:01:7b:2e:73:f9: 29:86:a2:ce:43:89:e2:14:97:33:9f:92:9a:b1:3d: 32:d6:37:5b:50:25:b3:ec:bb:74:d6:db:2d:9e:03: 87:2f:7c:55:7e:a2:cf:3f:77:3b:ff:15:5b:e6:19: fd:4d:ca:3d:ed:8f:0b:0e:57:ae:6f:a0:d2:84:bc: 6b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B9:55:0E:98:DC:12:75:48:93:63:A3:24:39:F6:E2:16:68:F8:CE X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:58:a6:42:ec:8c:cb:49:18:70:04:73:df:ed:93:e8:6a:7b: 48:5f:b2:71:b4:60:46:66:a2:59:1d:5d:50:19:b0:c6:01:ad: 5e:28:11:e2:e9:2a:07:07:82:bb:95:f0:04:b2:9c:83:3d:86: 82:39:24:cc:6a:47:a3:c1:47:76:61:e8:3c:e1:4d:8b:9c:63: ed:2f:5a:43:b6:9d:a0:56:c7:5c:04:6e:e0:2a:7c:c1:5e:86: c3:4c:77:59:c7:28:45:a5:45:be:12:b3:e5:00:5b:2c:bf:39: 61:91:60:43:b2:8b:bd:2e:17:96:33:de:d0:38:43:81:1a:06: 3a:fd:f5:91:44:a5:69:a9:bf:7a:c1:b3:a0:76:d0:e6:dd:a3: 05:8d:ff:08:17:32:83:2f:13:1a:72:4a:2d:cb:92:8d:db:b2: 4d:b6:e7:8a:16:e1:0d:af:37:13:0e:24:71:83:a9:f8:a4:43: e9:53:c2:af:a2:b2:17:eb:8d:85:71:9f:63:ce:04:52:2b:da: e8:82:89:22:02:ee:40:76:e7:34:6a:19:da:af:5a:92:58:4d: 44:f3:ad:2c:1a:18:bf:95:84:4f:30:1d:ad:27:b7:fa:51:28: a5:bc:be:9f:42:63:04:7a:26:d3:34:79:d8:c0:55:9d:2d:1c: 41:13:8c:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjYwMTI0MjM0NDA4WhcNMjYwMTMxMjM0NDA4WjAYMRYwFAYD VQQDDA02OTc1NTk0OC1mNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRfkNtGeStOxsqvkbFnjuN8LePY245f/ZC6tF8cxf8Sk+p9Yo2IXhOlxRMuR Nz/d9MYwRYni/k7NF9+NhV74/gDewJSauLz9I1OOjtVEfFvZe3jMfWYQDn1sXuLk VUrn/EyvdeKPwBcOL4WLwgVRy3usXQwTZ5k8jkw8uwHh8wLbmjLukxBzD/Dxw4L9 2sWV6wPN3k8vNRqcKr6sN9cJ9G9zDKNdiB9Eqai6tvuTwRloRw7+YpJhyRj5P7Xs AXsuc/kphqLOQ4niFJczn5KasT0y1jdbUCWz7Lt01tstngOHL3xVfqLPP3c7/xVb 5hn9Tco97Y8LDleub6DShLxrdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKK5VQ6Y 3BJ1SJNjoyQ59uIWaPjOMB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4WKZC7IzLSRhwBHPf7ZPoantIX7JxtGBGZqJZHV1QGbDGAa1eKBHi 6SoHB4K7lfAEspyDPYaCOSTMakejwUd2Yeg84U2LnGPtL1pDtp2gVsdcBG7gKnzB XobDTHdZxyhFpUW+ErPlAFssvzlhkWBDsou9LheWM97QOEOBGgY6/fWRRKVpqb96 wbOgdtDm3aMFjf8IFzKDLxMackoty5KN27JNtueKFuENrzcTDiRxg6n4pEPpU8Kv orIX642FcZ9jzgRSK9rogokiAu5Aduc0ahnar1qSWE1E860sGhi/lYRPMB2tJ7f6 USilvL6fQmMEeibTNHnYwFWdLRxBE4xu -----END CERTIFICATE-----Generated at Sun Jan 25 18:27:13 2026 by rpki-client