This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json) Hash identifier: qxvrxPCY+w9EOC6Uaub2mzTVSe0XDK6/GyGmniuZfTo= Subject key identifier: 5A:AB:4D:BA:46:52:99:BB:52:9A:08:F7:A4:D6:39:27:26:75:A7:EA Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0CF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft Manifest number: 0CC8 Signing time: Sat 10 Jan 2026 18:00:53 +0000 Manifest this update: Sat 10 Jan 2026 18:00:52 +0000 Manifest next update: Sat 17 Jan 2026 18:00:52 +0000 Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: AcVurClZvlM+49pxsABi2x8MnM5CrfWSow5alhPXqKM=) 2: C13356C0921511F089DDCF39C4F9AE02.roa (hash: GIRtzwnKS+hvb6bEPI5Irt7NyfjR/9n068VTfKa3GPU=) 3: F0202A84B36311F082F02072C4F9AE02.roa (hash: BPqEGs/kp4/YORti6uUMV8XFvZq0a3v1h7gImxJAxZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3316 (0xcf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Jan 10 18:00:52 2026 GMT Not After : Jan 17 18:00:52 2026 GMT Subject: CN=696293d5-78c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:cf:4d:56:ae:3a:38:33:51:41:e7:d8:bc: d7:bc:a4:fa:5c:21:21:fd:02:c0:48:b5:fb:bb:d1: 56:61:05:87:35:5d:c8:f5:c3:3d:4c:15:0a:e7:fa: 38:7e:d8:00:55:cd:60:59:6a:31:fb:ff:7b:ad:8e: ef:55:f3:65:d8:ad:e4:d8:6a:a7:fe:a5:6e:cf:38: 51:f2:19:8b:b7:52:fa:b3:b8:28:b0:ca:85:b8:3d: 55:67:bc:6e:a2:f3:2c:21:da:65:d6:a3:8c:a4:df: bb:e0:6f:53:3a:5a:ed:c8:b0:79:57:32:dc:10:10: 23:db:f7:d2:b5:43:2a:b0:3f:72:f9:48:20:ca:77: 47:34:68:ee:1d:d4:41:7d:20:b1:f1:2a:b4:93:72: 0b:af:52:ef:25:f4:7e:66:60:f3:e8:36:30:af:71: 19:a9:42:97:43:72:eb:76:df:26:04:3e:6c:03:11: 97:4e:59:cd:67:80:17:42:c5:80:0b:c0:25:84:0b: 5a:46:72:d5:9a:f6:a9:ee:fc:34:bf:92:e4:ff:59: fc:fd:42:b3:db:9f:71:5f:4a:b4:50:7e:80:de:f5: ed:74:78:c6:43:1b:a9:af:af:15:6a:44:78:6b:80: e2:0b:5c:1d:5e:9d:30:b6:93:53:14:cc:23:16:93: be:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AB:4D:BA:46:52:99:BB:52:9A:08:F7:A4:D6:39:27:26:75:A7:EA X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0f:05:12:fa:59:05:3f:89:8f:0c:74:b6:78:00:02:7c:2a: 87:cf:6b:89:bd:f6:dc:7b:27:92:a3:43:b0:7a:3a:5e:99:0b: 47:bc:9c:c5:21:b5:56:ce:47:a3:87:50:64:59:00:bf:2f:b2: 0f:7f:12:b4:f8:4f:11:19:6e:a2:bc:3a:f0:5d:65:80:82:2c: d9:28:20:ec:d7:f5:59:7e:15:9a:60:39:95:f0:30:fb:2d:bf: d9:08:76:2b:fd:c3:e1:83:78:ab:b6:6e:38:f1:90:0d:bc:d9: 89:15:1e:4e:25:81:a3:13:d3:9c:2e:c9:f9:c7:c9:74:c0:71: 66:58:ce:7b:0c:29:8e:67:92:7f:f6:8f:66:79:7f:78:bb:5f: 7d:5f:15:c2:8e:b9:7c:28:01:a1:14:61:cd:af:14:90:b2:fc: 6b:09:b2:dc:47:c3:51:b3:71:2e:fd:3b:2f:52:83:7d:ce:fc: 09:70:b9:a1:74:a7:43:53:c4:1a:a8:23:91:51:9a:d2:94:f1: 13:77:32:ca:95:ac:6e:08:9e:fd:bb:77:2f:c5:de:ab:68:26: e6:9e:ad:6f:70:41:37:35:17:d3:72:0c:48:42:b4:70:b5:bd: 4c:b5:fb:30:18:e2:b7:df:30:04:67:c9:43:f4:03:c3:0b:84: a2:50:3a:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjYwMTEwMTgwMDUyWhcNMjYwMTE3MTgwMDUyWjAYMRYwFAYD VQQDDA02OTYyOTNkNS03OGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGXPTVauOjgzUUHn2LzXvKT6XCEh/QLASLX7u9FWYQWHNV3I9cM9TBUK5/o4 ftgAVc1gWWox+/97rY7vVfNl2K3k2Gqn/qVuzzhR8hmLt1L6s7gosMqFuD1VZ7xu ovMsIdpl1qOMpN+74G9TOlrtyLB5VzLcEBAj2/fStUMqsD9y+UggyndHNGjuHdRB fSCx8Sq0k3ILr1LvJfR+ZmDz6DYwr3EZqUKXQ3Lrdt8mBD5sAxGXTlnNZ4AXQsWA C8AlhAtaRnLVmvap7vw0v5Lk/1n8/UKz259xX0q0UH6A3vXtdHjGQxupr68VakR4 a4DiC1wdXp0wtpNTFMwjFpO+TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqrTbpG Upm7UpoI96TWOScmdafqMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzNCRS85NDdCMzUwNjA5MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lh Y0h0ZC04NnJvRlRCa0ZJNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsDwUS+lkFP4mPDHS2eAACfCqHz2uJvfbceyeSo0OwejpemQtHvJzF IbVWzkejh1BkWQC/L7IPfxK0+E8RGW6ivDrwXWWAgizZKCDs1/VZfhWaYDmV8DD7 Lb/ZCHYr/cPhg3irtm448ZANvNmJFR5OJYGjE9OcLsn5x8l0wHFmWM57DCmOZ5J/ 9o9meX94u199XxXCjrl8KAGhFGHNrxSQsvxrCbLcR8NRs3Eu/TsvUoN9zvwJcLmh dKdDU8QaqCORUZrSlPETdzLKlaxuCJ79u3cvxd6raCbmnq1vcEE3NRfTcgxIQrRw tb1MtfswGOK33zAEZ8lD9APDC4SiUDqI -----END CERTIFICATE-----Generated at Mon Jan 12 07:38:21 2026 by rpki-client