This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft File: xwv3nojjEZrpa7dhopO7UaSGFzw.mft (raw, json) Hash identifier: gOxU1J/NBFvjM9Z6qDE0x8qJIkDPSZOfS6XD6oq7eGM= Subject key identifier: B7:37:68:1C:26:04:3E:46:47:68:7C:DB:7F:41:29:56:D4:AA:C9:28 Authority key identifier: C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C Certificate issuer: /CN=A9170ADF/serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C Certificate serial: 079D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft Manifest number: 0791 Signing time: Fri 02 Jan 2026 20:54:28 +0000 Manifest this update: Fri 02 Jan 2026 20:54:27 +0000 Manifest next update: Fri 09 Jan 2026 20:54:27 +0000 Files and hashes: 1: xwv3nojjEZrpa7dhopO7UaSGFzw.crl (hash: AVcIeYlYsnCnUSaptoA3NKWvd0hgv2Ie0cWu6bJlvgM=) 2: AC53A55C7B3611EBB7C5F122C4F9AE02.roa (hash: Xmj6Hu3XamtN1TfoLFF4zTOGMT8EY6KW6APUipxbG/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Jan 2026 19:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170ADF, serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C Validity Not Before: Jan 2 20:54:27 2026 GMT Not After : Jan 9 20:54:27 2026 GMT Subject: CN=69583084-a794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:df:78:48:64:56:6b:84:b6:ac:9d:23:81: f1:04:ae:84:cd:e2:ec:3f:e2:10:a6:d3:2b:1b:55: af:c0:d9:e0:37:5f:3a:2e:e6:0a:6a:0c:24:04:e7: bd:9d:52:d7:ce:b8:4f:55:c5:a8:a7:d7:93:0e:03: 50:81:34:cd:b2:90:38:9b:12:56:61:73:53:7f:0b: 48:ba:1b:08:a5:d0:88:44:84:8e:25:a3:22:fc:4c: 9a:0f:16:b7:2a:c3:05:09:3c:8b:66:f6:f6:46:90: 86:38:7f:fd:09:79:e6:7e:d1:1e:b3:92:41:fa:58: e0:3a:b8:2e:19:51:4c:00:f2:e2:84:b3:29:80:24: cd:f8:c5:aa:81:d4:01:ac:84:37:5f:a7:e6:15:a0: 2e:a6:9c:e8:1c:fa:da:8e:07:cf:f5:c1:bf:a2:5a: ee:b8:4c:89:d1:16:91:68:db:20:2e:23:75:8a:59: dd:d4:d8:e5:79:0d:c8:60:a6:69:cf:7f:c6:7d:e5: 08:39:aa:e3:cf:9a:78:aa:b7:25:37:1c:b7:b1:42: 03:d6:af:8b:eb:10:c8:b4:b1:26:38:c8:c3:e1:38: 73:77:24:cf:db:ff:00:1f:b0:d0:4b:ae:7b:e9:7e: 38:15:bf:cf:69:6d:d1:2a:6f:44:af:77:3f:2c:9c: 73:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:37:68:1C:26:04:3E:46:47:68:7C:DB:7F:41:29:56:D4:AA:C9:28 X509v3 Authority Key Identifier: keyid:C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:b5:29:ba:15:67:0c:1d:11:46:2a:95:70:a9:ba:bd:ce:6a: 25:75:a2:50:20:5b:31:b7:31:a1:ff:13:b7:db:12:d8:91:e3: 43:50:3a:e8:f7:ce:0a:2a:8e:e2:3d:d7:7b:96:78:2b:0b:ad: 26:63:0c:1b:8e:7e:d6:76:5e:84:97:ef:54:89:2c:fa:73:e7: 3d:bd:0b:4d:c8:4b:91:00:14:ed:37:09:63:99:dc:8b:e9:e5: d5:1b:1d:e9:46:fc:9e:20:c9:96:da:42:1a:62:85:a2:bd:6e: 3a:ec:67:2e:88:b8:3d:96:f8:66:c1:6a:21:53:6f:ad:57:15: bf:ec:4b:35:96:45:18:6c:2c:a6:2c:16:83:22:6d:15:10:c3: df:a9:47:db:cb:4f:ab:93:a2:d1:64:02:fd:c1:58:4b:1a:61: 39:16:58:71:4e:70:f1:92:a3:06:25:37:16:fb:97:62:3b:24: f4:5d:2d:be:2a:a7:8f:83:6b:74:77:32:5f:d9:61:58:c1:ba: 7f:c9:46:99:00:d6:b4:ea:2f:a4:a3:09:4f:a2:e6:a5:16:0b: dd:4b:97:96:fc:2d:82:a8:78:8b:2c:1d:c8:3a:07:b8:ae:31: 57:b2:53:b5:25:79:fc:0e:f7:94:6f:bd:68:ca:e8:56:6c:59: e3:99:50:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBBREYxMTAvBgNVBAUTKEM3MEJGNzlFODhFMzExOUFFOTZCQjc2MUEyOTNCQjUx QTQ4NjE3M0MwHhcNMjYwMTAyMjA1NDI3WhcNMjYwMTA5MjA1NDI3WjAYMRYwFAYD VQQDDA02OTU4MzA4NC1hNzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMjfeEhkVmuEtqydI4HxBK6EzeLsP+IQptMrG1WvwNngN186LuYKagwkBOe9 nVLXzrhPVcWop9eTDgNQgTTNspA4mxJWYXNTfwtIuhsIpdCIRISOJaMi/EyaDxa3 KsMFCTyLZvb2RpCGOH/9CXnmftEes5JB+ljgOrguGVFMAPLihLMpgCTN+MWqgdQB rIQ3X6fmFaAuppzoHPrajgfP9cG/olruuEyJ0RaRaNsgLiN1ilnd1NjleQ3IYKZp z3/GfeUIOarjz5p4qrclNxy3sUID1q+L6xDItLEmOMjD4ThzdyTP2/8AH7DQS657 6X44Fb/PaW3RKm9Er3c/LJxz2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLc3aBwm BD5GR2h8239BKVbUqskoMB8GA1UdIwQYMBaAFMcL956I4xGa6Wu3YaKTu1Gkhhc8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFERi9CODVGMEU4QzNB Q0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVacnBhN2Rob3BPN1VhU0dG encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3djNub2pqRVpycGE3ZGhvcE83VWFTR0Z6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEFERi9CODVGMEU4QzNBQ0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVa cnBhN2Rob3BPN1VhU0dGencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChtSm6FWcMHRFGKpVwqbq9zmoldaJQIFsxtzGh/xO32xLYkeNDUDro 984KKo7iPdd7lngrC60mYwwbjn7Wdl6El+9UiSz6c+c9vQtNyEuRABTtNwljmdyL 6eXVGx3pRvyeIMmW2kIaYoWivW467GcuiLg9lvhmwWohU2+tVxW/7Es1lkUYbCym LBaDIm0VEMPfqUfby0+rk6LRZAL9wVhLGmE5FlhxTnDxkqMGJTcW+5diOyT0XS2+ KqePg2t0dzJf2WFYwbp/yUaZANa06i+kowlPoualFgvdS5eW/C2CqHiLLB3IOge4 rjFXslO1JXn8DveUb71oyuhWbFnjmVA3 -----END CERTIFICATE-----Generated at Fri Jan 2 23:26:50 2026 by rpki-client