This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json) Hash identifier: 6yq7+OFunmn9x8s8xNNVsrb+yWD05/J1zb+cC4ax8ac= Subject key identifier: CD:EC:A1:BA:7E:21:B1:B4:C8:F9:53:1D:52:EA:8D:03:F6:AE:49:0A Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft Manifest number: 78 Signing time: Wed 07 Jan 2026 05:58:41 +0000 Manifest this update: Wed 07 Jan 2026 05:58:41 +0000 Manifest next update: Wed 14 Jan 2026 05:58:41 +0000 Files and hashes: 1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: 0fiSaRC9RZ5EbgQO+okmx6ZW5oz0V9tcSbgyUY0qwm0=) 2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: lmR9ugrjbQmDnUx1UBy+nG9XOBElNu6bjT8wakrFaOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Jan 2026 05:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Validity Not Before: Jan 7 05:58:41 2026 GMT Not After : Jan 14 05:58:41 2026 GMT Subject: CN=695df611-ed7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ca:2a:3a:8e:8e:5d:0f:9b:b9:46:32:56:03: d7:db:38:2d:ba:a8:aa:20:e9:51:33:2b:15:a3:b6: 3d:2f:5b:97:0c:c5:3d:74:73:7a:ab:b5:3e:45:f7: 48:a4:09:d7:e9:4d:d3:97:dc:e3:bc:09:be:60:8c: 4e:5b:59:48:f7:eb:ff:fa:dc:9a:90:87:ea:7d:1a: 60:b6:12:d0:67:dd:3b:c3:a4:fa:9e:1d:4c:69:6e: 7e:1e:57:f5:53:95:54:43:7e:08:b7:6d:5d:07:36: cc:6a:4d:61:1f:1f:d1:b2:6d:d3:94:0a:fb:10:0e: cb:6e:58:ef:7c:c9:dc:f1:75:39:e3:c0:4a:10:29: ee:d5:d1:ac:77:bd:3f:da:39:6a:d2:7b:bf:3f:6a: ad:7d:58:80:5b:60:c1:d0:a4:4b:08:b4:d0:5b:55: 28:87:59:2b:68:74:ba:b7:d6:60:8d:ac:d2:6b:34: ff:28:a8:04:67:5e:f7:f3:a9:2a:32:e3:41:3b:92: 5b:c3:a8:46:7d:a9:72:a9:7f:1f:23:06:82:14:0e: ff:6d:1c:c0:1a:a2:a6:cc:99:68:91:93:00:cf:39: 3b:73:44:f5:17:e6:2c:92:45:40:1a:8e:01:c0:d3: b1:55:9d:b6:3f:b1:db:a1:95:81:27:ed:90:62:82: 8c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EC:A1:BA:7E:21:B1:B4:C8:F9:53:1D:52:EA:8D:03:F6:AE:49:0A X509v3 Authority Key Identifier: keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b3:fc:73:ba:0e:4c:a4:76:b5:1b:d2:e2:2d:4a:13:4c:53: c0:b6:fc:66:9e:b4:03:16:f1:a9:2e:91:af:df:50:94:1d:84: ab:93:9d:4e:a3:5d:69:97:50:1d:65:b4:1e:6b:f0:00:b5:87: 6a:5d:f8:f8:cd:df:9e:73:c4:9f:08:3c:7b:83:12:8e:7f:cf: 7b:48:bd:0d:61:55:1c:ca:a0:95:56:1b:57:0c:6f:53:41:a2: ba:1d:a8:ee:ec:20:34:83:08:08:01:c5:62:78:a2:71:75:e3: 7a:eb:6a:a4:c4:24:0c:74:55:8a:6d:e9:6c:01:23:40:4f:48: 64:34:9f:09:b1:98:10:6c:f8:5d:da:e8:ad:de:da:30:53:51: 37:c8:9b:1c:f6:88:d9:ad:4f:5b:ea:ba:6a:b7:03:7a:12:b2: 0a:ac:6d:0d:7a:f8:9c:ee:1a:4b:68:f4:1a:f2:49:76:ed:c2: a7:05:e9:6e:cb:a3:a2:0d:86:0c:69:3b:cb:58:25:d5:77:bb: 83:c6:47:74:08:b8:cf:92:c6:36:2b:af:d2:a8:35:a4:5a:70: a4:ab:b6:ad:4d:28:a2:b3:c4:59:57:57:6f:a6:8b:cd:ac:e4: 4e:e2:9b:8f:84:a0:f5:ab:78:57:f2:6a:a0:01:e9:a8:e5:4b: 57:d1:81:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTg1NzExMC8GA1UEBRMoQzQyNkQ0MjY0MDA2NzY1NTU5NzNERkVERTRFQjI2NDRC RUVEMjg3MzAeFw0yNjAxMDcwNTU4NDFaFw0yNjAxMTQwNTU4NDFaMBgxFjAUBgNV BAMMDTY5NWRmNjExLWVkN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7yio6jo5dD5u5RjJWA9fbOC26qKog6VEzKxWjtj0vW5cMxT10c3qrtT5F90ik CdfpTdOX3OO8Cb5gjE5bWUj36//63JqQh+p9GmC2EtBn3TvDpPqeHUxpbn4eV/VT lVRDfgi3bV0HNsxqTWEfH9GybdOUCvsQDstuWO98ydzxdTnjwEoQKe7V0ax3vT/a OWrSe78/aq19WIBbYMHQpEsItNBbVSiHWStodLq31mCNrNJrNP8oqARnXvfzqSoy 40E7klvDqEZ9qXKpfx8jBoIUDv9tHMAaoqbMmWiRkwDPOTtzRPUX5iySRUAajgHA 07FVnbY/sduhlYEn7ZBigozdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzeyhun4h sbTI+VMdUuqNA/auSQowHwYDVR0jBBgwFoAUxCbUJkAGdlVZc9/t5OsmRL7tKHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxODU3L0MxRjczMDcyM0M5 ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxWWmM5X3Q1T3NtUkw3dEtI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveENiVUprQUdkbFZaYzlfdDVPc21STDd0S0hNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx ODU3L0MxRjczMDcyM0M5ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxW WmM5X3Q1T3NtUkw3dEtITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHuz/HO6DkykdrUb0uItShNMU8C2/GaetAMW8akuka/fUJQdhKuTnU6j XWmXUB1ltB5r8AC1h2pd+PjN355zxJ8IPHuDEo5/z3tIvQ1hVRzKoJVWG1cMb1NB orodqO7sIDSDCAgBxWJ4onF143rraqTEJAx0VYpt6WwBI0BPSGQ0nwmxmBBs+F3a 6K3e2jBTUTfImxz2iNmtT1vqumq3A3oSsgqsbQ16+JzuGkto9BrySXbtwqcF6W7L o6INhgxpO8tYJdV3u4PGR3QIuM+SxjYrr9KoNaRacKSrtq1NKKKzxFlXV2+mi82s 5E7im4+EoPWreFfyaqAB6ajlS1fRgZU= -----END CERTIFICATE-----Generated at Wed Jan 7 10:47:20 2026 by rpki-client