This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft File: XctT6r5qkI7KhlLekkgHxQnFLTA.mft (raw, json) Hash identifier: 60y2QmAWDAB3X1WGRoPkRLkNe20OMCBMfS3ly4G5uAI= Subject key identifier: C9:13:75:0A:C1:1B:AA:8D:8B:72:BF:BF:D7:BF:2E:5D:D4:CA:A6:14 Authority key identifier: 5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 Certificate issuer: /CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Certificate serial: 0D61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft Manifest number: 0D57 Signing time: Sat 10 Jan 2026 17:38:50 +0000 Manifest this update: Sat 10 Jan 2026 17:38:49 +0000 Manifest next update: Sat 17 Jan 2026 17:38:49 +0000 Files and hashes: 1: XctT6r5qkI7KhlLekkgHxQnFLTA.crl (hash: pMuffFhyNlRV1nyUIcKCsC7oJomedgYSykG4EQpKPjA=) 2: 41A8E738045111EA9C7DF516C4F9AE02.roa (hash: t9j99ouqyAO1DSlTWOraKVE9DSXzBdaScfcUdlzhboc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 17:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3425 (0xd61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918560D, serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Validity Not Before: Jan 10 17:38:49 2026 GMT Not After : Jan 17 17:38:49 2026 GMT Subject: CN=69628ea9-1f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:dd:60:6e:c0:b4:c6:3b:cc:c1:d5:44:35: de:ec:33:16:6d:e0:28:d0:de:8d:12:fb:d3:bf:02: 7a:ae:3d:f5:58:d6:86:be:c8:c4:30:d5:0c:ff:03: cb:c2:23:9f:39:c2:1f:02:01:65:6b:77:0e:dd:d6: ad:9c:f1:2f:c4:c3:87:4a:98:2c:dc:e1:b6:5a:d6: b5:af:6b:1c:15:21:7f:7d:fc:e1:b4:c2:f2:14:dc: cb:65:20:5d:d5:c1:39:1c:ab:80:83:9c:e7:e8:9c: 04:8f:7a:2d:27:62:a1:ef:0e:1a:54:33:98:d3:df: 8e:8c:eb:a3:50:92:b5:dd:38:f5:b1:3a:75:3f:85: b6:ea:5b:99:fa:a4:75:17:76:a1:c4:37:c3:9a:d8: 10:c4:0d:a9:55:01:4f:e9:b7:bb:a0:66:98:84:f0: 5c:2f:45:7b:8a:82:a9:68:aa:dd:6d:63:50:ac:f3: ee:54:dd:53:83:a9:b1:c3:c5:a5:62:96:25:23:c6: 9a:fc:4f:19:e1:aa:b5:d1:43:50:fc:01:8a:aa:2c: d3:d6:3e:ec:fb:9a:d0:f9:76:95:c3:43:39:c8:5e: 48:26:45:b6:0b:95:1f:52:82:d3:ed:b7:c5:aa:58: b2:cc:65:34:67:c5:f5:e4:3d:a0:f3:ce:72:6e:14: 4a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:13:75:0A:C1:1B:AA:8D:8B:72:BF:BF:D7:BF:2E:5D:D4:CA:A6:14 X509v3 Authority Key Identifier: keyid:5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:4e:a4:3d:bc:76:cb:32:98:91:81:5f:a0:05:14:55:c4:0d: e1:be:99:db:13:31:fe:33:04:6f:dd:8e:be:e6:e6:f2:aa:d2: fb:d9:07:e6:20:43:7a:d1:a7:5d:0c:6c:7f:fa:5a:b9:29:13: f0:f9:bb:3c:95:77:50:81:2c:04:24:2e:2d:bf:19:4c:ae:30: fa:cc:67:3a:70:c9:cd:b4:10:43:a6:9e:4c:ae:23:ac:18:70: 86:9e:84:09:78:35:f8:42:fb:5c:06:18:5c:c2:8e:e2:d7:2c: fb:31:9f:c0:ea:29:09:c6:a7:35:69:fb:35:bf:85:a3:39:2e: 4b:30:b3:6d:20:ef:78:9e:dd:36:62:2e:b4:fa:0f:03:cd:ef: 4e:ad:88:48:39:9e:83:6a:2c:8b:91:40:b8:01:6e:a4:0b:0c: 86:4c:b4:ec:db:1e:fc:23:2c:af:24:05:3f:40:65:22:ff:b7: ea:76:97:f2:c7:88:1e:98:40:67:6a:14:db:a5:b9:c5:f6:80: db:76:05:99:e1:01:62:c2:5e:26:0c:34:a5:bc:da:37:99:9a: 52:49:17:04:41:14:ce:1f:0e:a7:c7:28:86:3e:f9:d2:4d:e8: 90:58:0d:ea:e7:e9:5a:92:0b:86:d3:97:d9:36:78:20:d1:c1: bc:73:70:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2MEQxMTAvBgNVBAUTKDVEQ0I1M0VBQkU2QTkwOEVDQTg2NTJERTkyNDgwN0M1 MDlDNTJEMzAwHhcNMjYwMTEwMTczODQ5WhcNMjYwMTE3MTczODQ5WjAYMRYwFAYD VQQDDA02OTYyOGVhOS0xZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLndYG7AtMY7zMHVRDXe7DMWbeAo0N6NEvvTvwJ6rj31WNaGvsjEMNUM/wPL wiOfOcIfAgFla3cO3datnPEvxMOHSpgs3OG2Wta1r2scFSF/ffzhtMLyFNzLZSBd 1cE5HKuAg5zn6JwEj3otJ2Kh7w4aVDOY09+OjOujUJK13Tj1sTp1P4W26luZ+qR1 F3ahxDfDmtgQxA2pVQFP6be7oGaYhPBcL0V7ioKpaKrdbWNQrPPuVN1Tg6mxw8Wl YpYlI8aa/E8Z4aq10UNQ/AGKqizT1j7s+5rQ+XaVw0M5yF5IJkW2C5UfUoLT7bfF qliyzGU0Z8X15D2g885ybhRK7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkTdQrB G6qNi3K/v9e/Ll3UyqYUMB8GA1UdIwQYMBaAFF3LU+q+apCOyoZS3pJIB8UJxS0w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTYwRC9GNURDQTZENEU1 QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJN0tobExla2tnSHhRbkZM VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjdFQ2cjVxa0k3S2hsTGVra2dIeFFuRkxUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTYwRC9GNURDQTZENEU1QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJ N0tobExla2tnSHhRbkZMVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjTqQ9vHbLMpiRgV+gBRRVxA3hvpnbEzH+MwRv3Y6+5ubyqtL72Qfm IEN60addDGx/+lq5KRPw+bs8lXdQgSwEJC4tvxlMrjD6zGc6cMnNtBBDpp5MriOs GHCGnoQJeDX4QvtcBhhcwo7i1yz7MZ/A6ikJxqc1afs1v4WjOS5LMLNtIO94nt02 Yi60+g8Dze9OrYhIOZ6DaiyLkUC4AW6kCwyGTLTs2x78IyyvJAU/QGUi/7fqdpfy x4gemEBnahTbpbnF9oDbdgWZ4QFiwl4mDDSlvNo3mZpSSRcEQRTOHw6nxyiGPvnS TeiQWA3q5+lakguG05fZNngg0cG8c3Az -----END CERTIFICATE-----Generated at Mon Jan 12 09:08:44 2026 by rpki-client