This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft File: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft (raw, json) Hash identifier: JKpZBYdV9nCzRKGfFuOKsHP64zjFT0VV3YrFNZfuSFA= Subject key identifier: ED:E8:2F:95:E4:DC:16:8A:6B:AD:0A:1D:37:C1:8D:1A:1E:22:41:6D Authority key identifier: 4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 Certificate issuer: /CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Certificate serial: 0CC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft Manifest number: 0CB0 Signing time: Mon 12 Jan 2026 17:59:40 +0000 Manifest this update: Mon 12 Jan 2026 17:59:39 +0000 Manifest next update: Mon 19 Jan 2026 17:59:39 +0000 Files and hashes: 1: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl (hash: Xu3kZDDYb3AJKlh6D0bK0msYYzZuTelipDNRyf6An4A=) 2: 6C3D5766692F11EF9E22F029C4F9AE02.roa (hash: /S+W07A3aVql6ze6kJn+yDdzoX1dXbrV898MDchVnCY=) 3: 6FFF14F0695E11EFAF2AF785C4F9AE02.roa (hash: 0bN6aa9LmlwzevTlnntKDv/hy63nRIyDPNtf4oHkk54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 17:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3268 (0xcc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91834AD, serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Validity Not Before: Jan 12 17:59:39 2026 GMT Not After : Jan 19 17:59:39 2026 GMT Subject: CN=6965368c-cd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:e3:94:38:24:73:f6:fe:42:b1:ce:29:0b: 36:c0:6d:56:51:58:0a:6a:d0:c4:e1:15:9b:65:78: 5b:a2:f7:17:6d:3c:86:05:de:ee:f7:a9:27:bf:de: d6:31:2b:ad:bc:92:7f:37:6f:2f:89:db:67:81:cc: c1:50:34:a3:33:10:8e:59:88:cd:f4:e6:31:8c:b7: 68:e9:87:d4:cb:94:6b:3d:7c:d3:91:2b:82:e8:1d: 43:ee:16:4a:60:fe:6a:8b:23:6f:35:c5:7a:a3:9c: 4a:13:d2:c4:08:e4:1e:8a:20:58:c5:9a:12:ee:9f: 55:f8:48:04:d1:65:14:3d:4e:bc:0f:c9:e7:ed:32: 6f:e9:e7:b2:11:9a:e0:73:0f:33:aa:ae:ac:14:60: 99:65:1b:de:56:81:e3:b9:c0:b5:e6:39:94:f6:df: 3a:f8:44:c9:74:c5:da:8d:b6:73:50:29:26:f4:a6: 0b:13:ac:b2:fd:a9:10:41:e4:6e:0e:3d:8e:f8:cd: 36:10:aa:4d:22:f0:10:4b:16:08:14:58:2b:fb:1e: c1:df:e2:f0:4c:8a:91:36:86:6c:81:55:f7:39:12: 7b:1a:45:e4:9a:a3:ab:3d:f7:26:fb:06:75:a0:ca: 85:88:3a:ed:18:b2:57:30:2c:45:f2:e0:02:14:34: f4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E8:2F:95:E4:DC:16:8A:6B:AD:0A:1D:37:C1:8D:1A:1E:22:41:6D X509v3 Authority Key Identifier: keyid:4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:86:5c:78:11:a1:56:2c:fa:77:62:ac:c7:e6:75:f7:17:49: fa:89:87:86:17:2b:53:95:67:b4:67:3b:56:82:9a:da:76:6f: e0:8c:d3:0a:27:d4:c5:55:80:1b:1e:27:bb:38:de:cb:0f:97: 3b:ab:1f:db:20:ca:30:22:c9:4d:0a:29:a5:f4:b2:fc:85:62: 05:c1:b7:01:fa:94:24:03:7b:4e:03:b9:4f:96:c1:3d:b4:e6: 6f:29:ea:7a:27:fe:4d:85:e4:0a:88:79:86:99:78:f2:23:fc: 1b:a4:d6:f2:b6:b2:36:73:7a:03:e1:48:95:3b:27:20:27:6c: 66:ab:33:1d:af:40:c1:7a:52:5d:e0:76:8d:d1:91:6f:b4:57: 44:c0:51:f2:0e:92:cb:7d:08:80:f1:b1:46:9a:86:fb:2b:5b: f4:e3:1d:93:4a:2c:0f:ef:be:ff:9d:d9:3d:c9:d1:3c:00:77: 8c:86:64:fa:7d:03:43:10:01:18:19:e9:e3:43:d5:c5:2e:d1: 35:d4:b2:c5:1c:b2:35:ca:ac:43:3d:5c:b3:0e:7c:28:1d:03: 6c:58:85:1a:51:a4:66:99:e5:17:04:16:66:ae:5d:10:80:86: 0b:a0:71:3d:1c:01:9d:7d:91:d3:42:c6:bc:55:e2:8a:b8:74: 6e:5c:71:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0QUQxMTAvBgNVBAUTKDRENzZGNzkzRTJCMTI5RjQ2RjhGQzkwRTIxRjlEMEZF QUYxMEQwNDAwHhcNMjYwMTEyMTc1OTM5WhcNMjYwMTE5MTc1OTM5WjAYMRYwFAYD VQQDDA02OTY1MzY4Yy1jZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qTjlDgkc/b+QrHOKQs2wG1WUVgKatDE4RWbZXhbovcXbTyGBd7u96knv97W MSutvJJ/N28vidtngczBUDSjMxCOWYjN9OYxjLdo6YfUy5RrPXzTkSuC6B1D7hZK YP5qiyNvNcV6o5xKE9LECOQeiiBYxZoS7p9V+EgE0WUUPU68D8nn7TJv6eeyEZrg cw8zqq6sFGCZZRveVoHjucC15jmU9t86+ETJdMXajbZzUCkm9KYLE6yy/akQQeRu Dj2O+M02EKpNIvAQSxYIFFgr+x7B3+LwTIqRNoZsgVX3ORJ7GkXkmqOrPfcm+wZ1 oMqFiDrtGLJXMCxF8uACFDT04QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3oL5Xk 3BaKa60KHTfBjRoeIkFtMB8GA1UdIwQYMBaAFE1295PisSn0b4/JDiH50P6vENBA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzRBRC8wREU0QUQwNDA4 RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtmUnZqOGtPSWZuUV9xOFEw RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYYjNrLUt4S2ZSdmo4a09JZm5RX3E4UTBFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzRBRC8wREU0QUQwNDA4RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtm UnZqOGtPSWZuUV9xOFEwRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbhlx4EaFWLPp3YqzH5nX3F0n6iYeGFytTlWe0ZztWgpradm/gjNMK J9TFVYAbHie7ON7LD5c7qx/bIMowIslNCiml9LL8hWIFwbcB+pQkA3tOA7lPlsE9 tOZvKep6J/5NheQKiHmGmXjyI/wbpNbytrI2c3oD4UiVOycgJ2xmqzMdr0DBelJd 4HaN0ZFvtFdEwFHyDpLLfQiA8bFGmob7K1v04x2TSiwP777/ndk9ydE8AHeMhmT6 fQNDEAEYGenjQ9XFLtE11LLFHLI1yqxDPVyzDnwoHQNsWIUaUaRmmeUXBBZmrl0Q gIYLoHE9HAGdfZHTQsa8VeKKuHRuXHGT -----END CERTIFICATE-----Generated at Tue Jan 13 22:11:24 2026 by rpki-client