This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft File: XerjhTD4FfvwubP472N1B4bIrAo.mft (raw, json) Hash identifier: /4zp5WhHedrYidwLPEJwRjYlIsZzDQhvJ430CL2vOnA= Subject key identifier: 1D:D2:75:C7:2D:5B:42:DA:F3:44:21:7D:03:8B:E7:C9:D8:3F:05:3F Authority key identifier: 5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A Certificate issuer: /CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft Manifest number: 013F Signing time: Sun 11 Jan 2026 03:37:34 +0000 Manifest this update: Sun 11 Jan 2026 03:37:33 +0000 Manifest next update: Sun 18 Jan 2026 03:37:33 +0000 Files and hashes: 1: XerjhTD4FfvwubP472N1B4bIrAo.crl (hash: 3cHvZwbTZPCxoIAPc69rcmyprJxSUaDT79jv9xHEXTc=) 2: 5B08B12602C211EF9A1E4567C4F9AE02.roa (hash: K+g6F2DggfqAEcFUFS+CObch7aX7JFtpiO+kkOJ8Xy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 03:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4481, serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A Validity Not Before: Jan 11 03:37:33 2026 GMT Not After : Jan 18 03:37:33 2026 GMT Subject: CN=69631afe-3456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:6b:1f:ab:26:2a:7e:4f:e7:36:d6:1c:68: d5:06:35:5e:11:6d:72:7d:c8:22:5f:e4:78:38:97: 32:0d:fe:70:a0:c6:32:ba:d1:56:f9:3c:e5:46:f1: 26:14:db:f7:f5:61:e3:55:f1:72:2b:e1:b6:72:b5: eb:93:28:60:0c:92:0b:2e:c5:ef:74:c0:44:74:93: 8b:04:a8:59:9c:ed:e2:08:f3:b3:7c:92:7e:f2:f3: db:e8:ed:02:71:13:e6:a3:ee:74:d9:d9:d9:1e:b3: 27:ce:74:5f:e9:b3:f4:71:23:c0:a7:a2:82:7e:5c: 47:4d:bb:9d:fd:93:4f:d1:71:0a:68:c0:2d:fa:03: 2d:23:51:b7:c9:0f:63:6e:06:f0:a6:95:20:2e:0c: 35:d6:6f:8e:5f:ac:29:7e:01:f1:ca:aa:d9:fd:83: 94:13:0a:0d:8a:d6:ca:7b:64:0d:5a:89:9d:9b:88: 6f:da:1c:0f:0d:da:e9:ab:02:e9:ae:13:90:01:eb: 40:1b:24:00:96:d4:6a:36:79:13:8b:75:46:bc:6d: 99:61:a1:50:bc:29:fd:40:0b:d2:7a:5b:d4:f9:25: cf:09:15:58:ce:72:3b:62:0c:4c:0a:96:65:26:f6: dc:51:0b:c4:e3:ca:8b:a2:c0:17:6d:c7:e5:18:fc: fa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D2:75:C7:2D:5B:42:DA:F3:44:21:7D:03:8B:E7:C9:D8:3F:05:3F X509v3 Authority Key Identifier: keyid:5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:d0:52:38:4f:c6:29:93:b1:4c:8e:50:4c:e8:4f:4f:04:d6: 21:ad:09:7e:cf:8c:db:f6:2a:4a:5b:49:00:12:91:c8:f1:45: 25:70:5a:c6:e4:fa:3f:a3:45:7e:6d:2b:a8:31:15:82:92:68: f3:64:82:2a:31:5d:8d:6c:a7:76:3e:25:97:28:3c:52:1d:09: e8:2d:dd:af:e0:b4:24:12:74:95:23:b9:b6:d6:da:16:90:b9: a4:0f:49:20:c0:45:b3:96:91:30:03:59:49:6a:65:61:6c:a4: 0c:71:08:50:22:9f:9e:a5:fa:b5:ce:5a:72:05:63:07:6f:6c: f2:05:8a:9f:dc:ba:e1:0f:1c:0d:13:a0:49:29:82:20:9b:f0: 74:c6:21:c6:84:71:1b:7e:15:a0:8c:7a:5c:e7:02:e1:ea:40: cf:6c:d2:44:65:ec:fa:3e:f9:25:38:03:d7:55:b0:7f:64:28: f3:da:4c:84:8f:7a:7f:70:d1:a0:4c:8e:9d:a1:de:61:94:9a: d2:53:6d:01:93:a1:c3:76:47:f0:ed:96:e9:e3:c7:d8:7b:77: da:c2:02:a8:0b:44:00:3e:18:39:51:c6:a0:8e:89:8c:48:82: 1d:a7:02:9c:6a:5e:d7:e7:5e:b8:3e:f2:d6:b5:00:9e:84:54: cb:ff:3b:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0ODExMTAvBgNVBAUTKDVERUFFMzg1MzBGODE1RkJGMEI5QjNGOEVGNjM3NTA3 ODZDOEFDMEEwHhcNMjYwMTExMDMzNzMzWhcNMjYwMTE4MDMzNzMzWjAYMRYwFAYD VQQDDA02OTYzMWFmZS0zNDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvb1rH6smKn5P5zbWHGjVBjVeEW1yfcgiX+R4OJcyDf5woMYyutFW+TzlRvEm FNv39WHjVfFyK+G2crXrkyhgDJILLsXvdMBEdJOLBKhZnO3iCPOzfJJ+8vPb6O0C cRPmo+502dnZHrMnznRf6bP0cSPAp6KCflxHTbud/ZNP0XEKaMAt+gMtI1G3yQ9j bgbwppUgLgw11m+OX6wpfgHxyqrZ/YOUEwoNitbKe2QNWomdm4hv2hwPDdrpqwLp rhOQAetAGyQAltRqNnkTi3VGvG2ZYaFQvCn9QAvSelvU+SXPCRVYznI7YgxMCpZl JvbcUQvE48qLosAXbcflGPz6MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3Sdcct W0La80QhfQOL58nYPwU/MB8GA1UdIwQYMBaAFF3q44Uw+BX78Lmz+O9jdQeGyKwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ4MS9CQzg0MEY0NjAy QzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZmdnd1YlA0NzJOMUI0Ykly QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hlcmpoVEQ0RmZ2d3ViUDQ3Mk4xQjRiSXJBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ4MS9CQzg0MEY0NjAyQzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZm dnd1YlA0NzJOMUI0YklyQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS0FI4T8Ypk7FMjlBM6E9PBNYhrQl+z4zb9ipKW0kAEpHI8UUlcFrG 5Po/o0V+bSuoMRWCkmjzZIIqMV2NbKd2PiWXKDxSHQnoLd2v4LQkEnSVI7m21toW kLmkD0kgwEWzlpEwA1lJamVhbKQMcQhQIp+epfq1zlpyBWMHb2zyBYqf3LrhDxwN E6BJKYIgm/B0xiHGhHEbfhWgjHpc5wLh6kDPbNJEZez6PvklOAPXVbB/ZCjz2kyE j3p/cNGgTI6dod5hlJrSU20Bk6HDdkfw7Zbp48fYe3fawgKoC0QAPhg5UcagjomM SIIdpwKcal7X5164PvLWtQCehFTL/zsF -----END CERTIFICATE-----Generated at Sun Jan 11 11:26:00 2026 by rpki-client