This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft File: xq-SXz6kP06O56MUIYIWk7Gt9qE.mft (raw, json) Hash identifier: xjm1GY1TIMaZapz4tHTxstlW+eRSSy15WVqGS8M4Y6E= Subject key identifier: 09:57:61:C0:2E:CC:64:AD:69:B2:84:DB:38:09:4E:F7:0C:E3:20:F0 Authority key identifier: C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1 Certificate issuer: /CN=A911E807/serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1 Certificate serial: 06F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft Manifest number: 06E9 Signing time: Mon 12 Jan 2026 21:16:42 +0000 Manifest this update: Mon 12 Jan 2026 21:16:42 +0000 Manifest next update: Mon 19 Jan 2026 21:16:42 +0000 Files and hashes: 1: xq-SXz6kP06O56MUIYIWk7Gt9qE.crl (hash: RpKiJMRjOZRk897Wfhou9Pb6HydN5um50APyj//A0M0=) 2: 1A20AAF27BD311EBA6617987C4F9AE02.roa (hash: ayNr4tR/Sfu0YrCAQZrJZu7BfQ9IzQFCs/VABD0dmLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 21:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1778 (0x6f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E807, serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1 Validity Not Before: Jan 12 21:16:42 2026 GMT Not After : Jan 19 21:16:42 2026 GMT Subject: CN=696564ba-f77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:41:ec:15:50:9c:f8:f6:62:c6:10:af:ad:75: 7b:04:df:3b:76:8b:4d:4d:6a:56:f7:c6:20:1f:cd: 2a:86:98:64:0e:2b:b2:c8:10:b8:39:60:0c:e4:f1: af:4b:88:21:ff:ae:4f:e5:3e:65:07:90:4e:8d:e2: 50:02:04:6c:c8:4d:53:0b:aa:95:d8:29:36:57:49: fa:19:2b:a9:96:22:91:df:6e:cb:b4:a6:84:9f:7d: 73:e5:b9:56:45:fb:95:b8:7f:47:1f:f1:22:b6:78: bb:ce:e8:c3:6e:c6:c3:aa:d7:76:91:3a:50:ab:14: 29:67:92:3f:8b:e0:20:cd:b3:20:1b:2d:a4:3c:a5: 27:a1:90:88:a6:43:4c:50:86:f4:af:9c:51:c8:78: 93:ac:d9:c7:59:f9:43:10:4e:e4:eb:03:1b:8f:a3: 6b:d4:97:41:bb:5b:18:a4:d0:d2:dc:e4:18:90:b6: a2:f5:b5:50:d5:96:a1:67:14:35:9f:fc:72:98:15: f0:c3:eb:76:f2:53:a8:7b:6f:7e:9a:95:fd:d2:51: 03:ef:29:d2:ea:30:51:20:e2:cd:42:a0:1f:81:fd: 91:2e:63:9e:39:6d:82:9a:51:37:b9:65:73:36:f7: 55:d5:ea:cd:ab:1c:12:5b:36:93:14:9a:45:86:24: 15:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:57:61:C0:2E:CC:64:AD:69:B2:84:DB:38:09:4E:F7:0C:E3:20:F0 X509v3 Authority Key Identifier: keyid:C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:bf:a7:e1:81:92:3c:05:d9:33:16:d4:78:b1:6e:70:11:ae: 21:d6:92:b8:57:2c:79:16:e0:61:37:1b:e1:32:11:b6:49:98: 97:ff:1d:12:b4:6b:a0:9f:cc:98:c8:80:07:78:a2:9b:2e:8a: fd:b2:37:99:b4:28:8c:07:04:cc:0a:52:e9:39:3b:96:ca:39: d6:4a:ed:c2:fb:32:91:35:52:93:00:aa:f8:d5:d0:3a:cf:b7: a3:42:ec:29:75:df:03:c3:e1:e6:6f:66:5a:a0:f4:d8:fc:8e: 42:be:21:14:d5:5d:b7:c5:c0:b1:2f:2a:d8:dc:1c:13:f8:26: e6:e1:b6:46:78:59:3f:f4:a7:b3:98:91:a9:f1:de:c4:f9:22: fc:6e:65:58:c5:13:32:eb:ed:ce:d6:e6:81:02:23:8e:e0:f8: 91:b4:5d:6b:35:19:11:88:24:06:6a:d4:a1:68:e2:7c:ea:67: 6c:a0:f7:7d:23:82:aa:93:0a:80:2e:f5:93:78:1d:76:9a:a3: 4d:2f:b2:15:6a:6a:a1:bd:9b:26:05:29:91:66:79:36:34:56: bc:9b:72:43:05:cf:99:e0:77:25:df:ba:0d:b0:64:68:d3:c6: df:f4:44:7e:70:c5:f8:5f:04:0c:9d:83:93:cd:17:5c:43:dc: 89:5d:95:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU4MDcxMTAvBgNVBAUTKEM2QUY5MjVGM0VBNDNGNEU4RUU3QTMxNDIxODIxNjkz QjFBREY2QTEwHhcNMjYwMTEyMjExNjQyWhcNMjYwMTE5MjExNjQyWjAYMRYwFAYD VQQDDA02OTY1NjRiYS1mNzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUHsFVCc+PZixhCvrXV7BN87dotNTWpW98YgH80qhphkDiuyyBC4OWAM5PGv S4gh/65P5T5lB5BOjeJQAgRsyE1TC6qV2Ck2V0n6GSupliKR327LtKaEn31z5blW RfuVuH9HH/Eitni7zujDbsbDqtd2kTpQqxQpZ5I/i+AgzbMgGy2kPKUnoZCIpkNM UIb0r5xRyHiTrNnHWflDEE7k6wMbj6Nr1JdBu1sYpNDS3OQYkLai9bVQ1ZahZxQ1 n/xymBXww+t28lOoe29+mpX90lED7ynS6jBRIOLNQqAfgf2RLmOeOW2CmlE3uWVz NvdV1erNqxwSWzaTFJpFhiQV3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlXYcAu zGStabKE2zgJTvcM4yDwMB8GA1UdIwQYMBaAFMavkl8+pD9OjuejFCGCFpOxrfah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTgwNy8yNjk2RjZDNjdC MzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1AwNk81Nk1VSVlJV2s3R3Q5 cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxLVNYejZrUDA2TzU2TVVJWUlXazdHdDlxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTgwNy8yNjk2RjZDNjdCMzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1Aw Nk81Nk1VSVlJV2s3R3Q5cUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2v6fhgZI8BdkzFtR4sW5wEa4h1pK4Vyx5FuBhNxvhMhG2SZiX/x0S tGugn8yYyIAHeKKbLor9sjeZtCiMBwTMClLpOTuWyjnWSu3C+zKRNVKTAKr41dA6 z7ejQuwpdd8Dw+Hmb2ZaoPTY/I5CviEU1V23xcCxLyrY3BwT+Cbm4bZGeFk/9Kez mJGp8d7E+SL8bmVYxRMy6+3O1uaBAiOO4PiRtF1rNRkRiCQGatShaOJ86mdsoPd9 I4KqkwqALvWTeB12mqNNL7IVamqhvZsmBSmRZnk2NFa8m3JDBc+Z4Hcl37oNsGRo 08bf9ER+cMX4XwQMnYOTzRdcQ9yJXZXs -----END CERTIFICATE-----Generated at Tue Jan 13 23:14:22 2026 by rpki-client