This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json) Hash identifier: fQ2BbbulhCFNSTryCKhlEcBlpqYNntCbY792HoxWO9U= Subject key identifier: EC:4A:BA:DD:0F:1F:DE:51:7A:93:D8:23:25:A8:A1:9E:66:37:8D:0F Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft Manifest number: 0167 Signing time: Sun 11 Jan 2026 01:44:02 +0000 Manifest this update: Sun 11 Jan 2026 01:44:02 +0000 Manifest next update: Sun 18 Jan 2026 01:44:02 +0000 Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: xJ/wCjwRzHcdxGCpaX6HOZZfTMQSikkQ9o2wn6LTSIU=) 2: 6DAC44BAA91E11F0B822717EC4F9AE02.roa (hash: rMIYciZYzQpQ3or6eVOdlG8b1B7jrOe8q89C97qwQ6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 01:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Validity Not Before: Jan 11 01:44:02 2026 GMT Not After : Jan 18 01:44:02 2026 GMT Subject: CN=69630062-80b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bc:93:87:70:a9:0b:70:ec:ae:a9:4b:e2:0c: 07:06:5d:c9:5b:f5:86:bb:a1:bd:c2:a8:9a:6e:14: 0a:9c:08:95:98:eb:51:04:a7:37:cf:2b:fb:01:42: c2:98:f6:46:c2:69:13:a6:7f:57:4b:2c:8a:6d:e8: b1:41:e7:0d:e8:5c:5c:92:15:6c:7b:a8:8c:ca:bd: d0:b5:ef:4f:16:ff:86:47:73:7c:cd:50:bd:33:97: 87:6b:e7:32:80:5e:75:14:f9:b2:bc:e1:8d:18:a6: 2a:ea:c2:a0:3f:44:ae:1b:42:50:1d:d2:d9:d0:66: 0d:24:c6:86:0c:c7:6d:04:19:a6:c6:b4:87:54:1b: 36:7e:f3:b0:89:92:1e:a2:56:d0:21:fa:cb:02:5a: cc:a4:8c:df:4d:3a:27:f9:18:c5:64:0e:fd:30:63: 6e:58:de:6a:9e:d8:b1:b9:aa:ad:3e:c4:ca:0e:79: 26:ad:7e:e8:bb:82:09:21:7f:fd:49:3f:eb:9b:ae: ca:ea:5d:74:fe:2c:85:60:f3:13:03:2a:5a:31:94: 8f:ba:0f:a3:3c:74:e0:9d:a3:87:28:83:80:df:81: e6:64:11:64:3a:54:bb:a5:c0:d2:5b:cf:32:02:bc: 19:38:fb:b9:10:de:00:a0:4e:9c:2b:8f:ab:79:4d: fb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4A:BA:DD:0F:1F:DE:51:7A:93:D8:23:25:A8:A1:9E:66:37:8D:0F X509v3 Authority Key Identifier: keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:e7:52:61:c8:4a:07:ff:8a:8f:b4:73:fa:19:9a:9e:ad:af: 6b:e3:31:ab:ac:3f:73:70:1d:2a:26:98:2e:0e:2a:f0:af:0a: 45:a6:e6:da:16:b6:b9:0f:a7:8b:35:e5:c4:a4:35:e2:c8:80: 61:52:9e:f4:8f:6b:e2:2a:a2:c7:c1:44:fe:25:f0:9c:58:0b: ca:56:5b:87:93:80:43:a2:ae:98:f9:fa:97:59:ca:9e:5f:f6: 3e:f9:81:b8:e4:fb:b1:9e:92:ef:1b:ee:04:31:89:5a:f1:48: c9:80:4e:cd:be:c0:88:fd:a0:96:fa:2d:61:6e:2b:a3:1c:4b: 2b:a0:9c:db:5b:47:60:03:f4:b1:a1:52:fd:b2:b7:bd:cb:52: 24:cc:87:20:12:b0:6f:ac:2e:ac:50:51:bd:b6:b5:83:b3:cc: be:cb:38:8f:b5:2c:dc:6f:af:03:63:94:60:68:2c:21:d8:0f: db:b2:8d:ea:3a:c7:d8:86:4b:f2:e5:5f:1e:37:15:bb:1f:ea: f0:f8:b9:a8:a0:07:5e:72:04:dc:9a:cb:12:55:08:00:9a:52: 4c:d0:8e:81:12:e5:27:a8:d4:77:c5:ed:d0:cd:d6:e8:71:df: a8:fa:e9:fe:0f:c6:5a:b0:07:83:f0:05:b8:1c:aa:ba:c5:d8: ca:c6:59:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE MjRCQ0JBMTQwHhcNMjYwMTExMDE0NDAyWhcNMjYwMTE4MDE0NDAyWjAYMRYwFAYD VQQDDA02OTYzMDA2Mi04MGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbyTh3CpC3DsrqlL4gwHBl3JW/WGu6G9wqiabhQKnAiVmOtRBKc3zyv7AULC mPZGwmkTpn9XSyyKbeixQecN6FxckhVse6iMyr3Qte9PFv+GR3N8zVC9M5eHa+cy gF51FPmyvOGNGKYq6sKgP0SuG0JQHdLZ0GYNJMaGDMdtBBmmxrSHVBs2fvOwiZIe olbQIfrLAlrMpIzfTTon+RjFZA79MGNuWN5qntixuaqtPsTKDnkmrX7ou4IJIX/9 ST/rm67K6l10/iyFYPMTAypaMZSPug+jPHTgnaOHKIOA34HmZBFkOlS7pcDSW88y ArwZOPu5EN4AoE6cK4+reU37/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxKut0P H95RepPYIyWooZ5mN40PMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1 RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N NEU3VXhiajBpcHpTUzh1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz51JhyEoH/4qPtHP6GZqera9r4zGrrD9zcB0qJpguDirwrwpFpuba Fra5D6eLNeXEpDXiyIBhUp70j2viKqLHwUT+JfCcWAvKVluHk4BDoq6Y+fqXWcqe X/Y++YG45PuxnpLvG+4EMYla8UjJgE7NvsCI/aCW+i1hbiujHEsroJzbW0dgA/Sx oVL9sre9y1IkzIcgErBvrC6sUFG9trWDs8y+yziPtSzcb68DY5RgaCwh2A/bso3q OsfYhkvy5V8eNxW7H+rw+LmooAdecgTcmssSVQgAmlJM0I6BEuUnqNR3xe3Qzdbo cd+o+un+D8ZasAeD8AW4HKq6xdjKxlnp -----END CERTIFICATE-----Generated at Sun Jan 11 23:24:21 2026 by rpki-client