This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json) Hash identifier: CuCyBJGFeu5v0Flg1ts6FBpNO2pMww9M3cc+/t+D1xg= Subject key identifier: 14:AC:A7:C0:F4:A1:A0:94:4E:DD:F7:26:87:DE:3C:FB:AC:8C:CB:17 Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Certificate serial: 0736 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft Manifest number: 0727 Signing time: Thu 08 Jan 2026 21:16:31 +0000 Manifest this update: Thu 08 Jan 2026 21:16:31 +0000 Manifest next update: Thu 15 Jan 2026 21:16:31 +0000 Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: yXrWsRbetWVNoTvEKleiV6wUIh+kha++XdETBOaZhIk=) 2: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: ez5zyisrlhzGt4msn6K1G9iNl7wli7TiUZuA1FWHYm8=) 3: 79520888650611EBA9BB2882C4F9AE02.roa (hash: SQlrc6PCUPjaaBm+jKtjnbQxZYJxO/Vi8PJnTLD4+DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Jan 2026 21:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1846 (0x736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Validity Not Before: Jan 8 21:16:31 2026 GMT Not After : Jan 15 21:16:31 2026 GMT Subject: CN=69601eaf-41a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:37:53:b0:12:b7:86:c0:93:49:51:81:66:ee: d8:65:d8:60:94:79:6c:c7:44:3e:64:71:5c:e6:bc: 68:82:15:aa:d1:a2:f7:3c:6c:dd:10:8d:06:3a:ad: 05:ec:5e:1d:02:cd:2f:9f:82:77:73:02:03:e3:a1: a2:5b:02:e8:60:a5:d2:ba:23:b8:b5:06:61:71:85: 23:45:ab:c2:03:d5:73:27:38:eb:8d:39:ff:23:73: 51:07:42:e8:5b:05:d9:1c:46:1d:1b:72:ba:c2:03: ee:fe:5b:14:26:d3:44:45:b1:3a:28:85:df:c2:c6: 33:94:a4:ef:07:90:22:19:28:81:13:d4:1b:76:eb: c1:10:ee:b0:c5:9e:7d:dd:d5:0a:f5:c4:0e:0c:6f: d8:1e:07:5a:63:51:66:a2:8a:fc:80:20:6b:87:69: 7b:a9:c8:43:25:1e:54:58:18:c3:c5:17:3f:1d:27: 17:64:c5:5d:f0:6c:9d:f0:3f:f2:82:5a:05:a9:33: 2d:25:dd:6b:cf:2b:d7:0d:d5:74:53:cb:4f:34:0a: e8:50:c3:8e:c3:83:a7:f0:62:df:b8:1a:8f:81:7a: 7e:df:e0:b2:fb:79:18:a3:5d:b8:13:7b:28:e9:65: 72:5d:08:56:bb:de:98:27:95:a4:9d:30:ed:ba:92: e5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AC:A7:C0:F4:A1:A0:94:4E:DD:F7:26:87:DE:3C:FB:AC:8C:CB:17 X509v3 Authority Key Identifier: keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b5:28:2c:6c:92:eb:e9:77:76:8d:8d:4d:af:19:a9:95:41: e0:92:7f:4d:aa:0c:78:ec:f2:1d:1a:fd:48:93:6c:70:b6:bc: 71:a9:cf:d2:4d:58:5f:b0:9c:ff:6f:60:65:8b:c1:c2:d6:01: f7:b9:5d:75:1b:2a:dd:5f:98:c8:a8:3e:0c:9a:c1:99:b4:d9: 18:dd:5c:0a:ec:a1:e3:5f:e2:89:9d:b9:68:6b:ab:d5:1f:2f: 3f:58:e1:80:a8:f1:a3:87:4e:b4:c7:19:5f:00:6a:05:39:87: f1:4e:9d:09:b1:99:4d:b4:6a:0b:b5:f7:f0:83:ed:aa:10:2f: 59:50:69:75:c7:58:ca:cb:95:ff:1a:32:82:21:f4:50:61:3c: 52:36:d5:b6:1c:71:9e:fa:8f:de:24:5f:df:23:d9:ff:b1:02: e8:bd:2b:76:4f:f7:80:d6:dc:65:e2:19:f6:47:81:d8:77:22: 76:b5:60:13:bc:55:0f:0f:3e:69:77:8a:df:27:ff:c0:7c:88: a1:cd:8a:35:37:ef:a8:40:98:56:af:3c:7f:20:bd:75:20:eb: 5d:5b:04:99:d9:c9:ff:4f:6a:53:ed:1c:ff:b6:de:68:9e:ed: 70:d4:ad:00:68:ff:8c:e6:c1:03:29:25:b6:d7:da:0a:ce:25: f0:e5:0c:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx NUY3MDA2ODQwHhcNMjYwMTA4MjExNjMxWhcNMjYwMTE1MjExNjMxWjAYMRYwFAYD VQQDDA02OTYwMWVhZi00MWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTdTsBK3hsCTSVGBZu7YZdhglHlsx0Q+ZHFc5rxoghWq0aL3PGzdEI0GOq0F 7F4dAs0vn4J3cwID46GiWwLoYKXSuiO4tQZhcYUjRavCA9VzJzjrjTn/I3NRB0Lo WwXZHEYdG3K6wgPu/lsUJtNERbE6KIXfwsYzlKTvB5AiGSiBE9QbduvBEO6wxZ59 3dUK9cQODG/YHgdaY1Fmoor8gCBrh2l7qchDJR5UWBjDxRc/HScXZMVd8Gyd8D/y gloFqTMtJd1rzyvXDdV0U8tPNAroUMOOw4On8GLfuBqPgXp+3+Cy+3kYo124E3so 6WVyXQhWu96YJ5WknTDtupLlFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSsp8D0 oaCUTt33JofePPusjMsXMB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1 MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhFNC8xMzBBMUNCMDY1MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5 WDZPV2hCdTNjOW9WOXdCb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBftSgsbJLr6Xd2jY1NrxmplUHgkn9Nqgx47PIdGv1Ik2xwtrxxqc/S TVhfsJz/b2Bli8HC1gH3uV11GyrdX5jIqD4MmsGZtNkY3VwK7KHjX+KJnbloa6vV Hy8/WOGAqPGjh060xxlfAGoFOYfxTp0JsZlNtGoLtffwg+2qEC9ZUGl1x1jKy5X/ GjKCIfRQYTxSNtW2HHGe+o/eJF/fI9n/sQLovSt2T/eA1txl4hn2R4HYdyJ2tWAT vFUPDz5pd4rfJ//AfIihzYo1N++oQJhWrzx/IL11IOtdWwSZ2cn/T2pT7Rz/tt5o nu1w1K0AaP+M5sEDKSW219oKziXw5Qza -----END CERTIFICATE-----Generated at Fri Jan 9 16:00:47 2026 by rpki-client