This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: o6olkeRqXFy2zLcE+ul+n+gZXLojsA3Fz2TE+L9cQjM= Subject key identifier: BB:94:64:E4:00:03:82:55:8F:18:EF:51:BF:52:C8:07:0F:64:E7:0F Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: 020B Signing time: Sun 11 Jan 2026 01:35:41 +0000 Manifest this update: Sun 11 Jan 2026 01:35:40 +0000 Manifest next update: Sun 18 Jan 2026 01:35:40 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: Q5nOFPyDfopJoV2ReLs+w+Dk1LS+PUPrg32nXp83d0g=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: 2K9kOKHGwBClsOCjMWjBt/lsIDrWFOJQCQhQXvkzECo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 01:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: Jan 11 01:35:40 2026 GMT Not After : Jan 18 01:35:40 2026 GMT Subject: CN=6962fe6c-df7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0e:7b:cc:a3:76:2e:4d:b8:5a:cb:9a:00:25: cf:11:cd:12:c6:46:0a:a1:8b:91:28:f6:2a:95:89: 20:e0:32:69:9f:5d:5a:14:8b:1f:62:f1:9d:f2:0a: 09:1f:68:dd:08:71:a5:d1:f5:75:b1:be:44:8d:aa: 0a:a9:41:91:2e:11:be:14:a3:7c:be:c2:f9:66:55: 7b:2f:bd:59:76:64:84:c4:7a:b6:57:3e:b1:ee:91: 1f:c1:84:cd:2b:46:a7:7a:ef:8c:c2:37:63:d9:b1: d2:43:67:65:61:b0:4f:9a:f0:11:99:6c:34:f8:11: 5a:88:a0:70:58:46:6a:0d:d0:e2:a5:9c:1d:c9:d5: 0d:3b:75:41:9f:c2:bd:4e:2d:e8:ce:0d:85:36:e9: 53:56:08:83:e4:14:a5:ba:f2:06:e5:1f:41:4c:2e: 0e:0f:72:67:eb:74:4f:00:46:a3:80:d4:5f:84:1f: d8:4c:e8:6a:89:82:14:a2:25:f0:f4:8b:c0:3d:65: 76:31:5d:9b:6d:7c:81:36:d6:5e:8b:90:8c:e4:dd: e9:07:66:41:07:dd:9b:97:69:6a:db:a6:33:f7:1d: 64:62:a5:18:91:66:e7:ca:19:36:ca:01:52:83:8f: 64:b1:b2:3c:1f:53:ae:d5:f1:45:5a:37:49:5e:31: 15:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:94:64:E4:00:03:82:55:8F:18:EF:51:BF:52:C8:07:0F:64:E7:0F X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:18:02:4c:81:98:92:cb:c9:18:15:3b:b9:bc:2b:0c:d2:93: 89:26:e9:dc:7e:7f:9a:c5:f4:09:2e:78:ce:c2:79:e1:44:08: 37:25:9a:9f:db:cb:8c:00:9f:6b:b9:37:5f:1e:5c:4a:84:87: 16:eb:78:0a:6c:b8:df:f1:e0:f1:5f:7f:2f:78:d7:3c:2a:16: d8:26:66:a1:03:7b:97:12:b3:bf:cf:fa:bc:0f:92:93:ee:32: 33:64:03:e2:35:d5:de:1a:3d:22:0e:9b:0c:3b:4f:82:6f:ef: 43:51:e6:44:f8:b4:61:29:64:0a:52:02:77:09:3c:ac:40:f3: bf:d0:cd:a8:e8:5e:be:7c:91:70:a9:e3:9f:16:b0:c8:2b:6b: fc:2c:cc:58:29:25:0a:1e:d2:1b:c1:36:b7:2d:1c:01:bd:17: fb:e5:58:83:da:fd:2a:ac:bf:d7:3d:e2:10:23:e5:50:c8:f1: 56:0e:c4:23:23:7b:da:a1:83:fd:38:ea:d2:f5:1b:24:25:3f: 53:d2:eb:50:6b:45:c2:44:8e:e3:96:49:3b:de:67:b6:36:95: be:7b:15:bb:aa:55:30:97:93:d8:3a:3c:62:65:a1:a7:19:e8: ed:58:a1:41:92:f2:d9:b2:60:8d:63:8d:7a:6a:11:4f:24:f1: 7a:4c:c2:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjYwMTExMDEzNTQwWhcNMjYwMTE4MDEzNTQwWjAYMRYwFAYD VQQDDA02OTYyZmU2Yy1kZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyA57zKN2Lk24WsuaACXPEc0SxkYKoYuRKPYqlYkg4DJpn11aFIsfYvGd8goJ H2jdCHGl0fV1sb5EjaoKqUGRLhG+FKN8vsL5ZlV7L71ZdmSExHq2Vz6x7pEfwYTN K0aneu+Mwjdj2bHSQ2dlYbBPmvARmWw0+BFaiKBwWEZqDdDipZwdydUNO3VBn8K9 Ti3ozg2FNulTVgiD5BSluvIG5R9BTC4OD3Jn63RPAEajgNRfhB/YTOhqiYIUoiXw 9IvAPWV2MV2bbXyBNtZei5CM5N3pB2ZBB92bl2lq26Yz9x1kYqUYkWbnyhk2ygFS g49ksbI8H1Ou1fFFWjdJXjEV5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuUZOQA A4JVjxjvUb9SyAcPZOcPMB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxGAJMgZiSy8kYFTu5vCsM0pOJJuncfn+axfQJLnjOwnnhRAg3JZqf 28uMAJ9ruTdfHlxKhIcW63gKbLjf8eDxX38veNc8KhbYJmahA3uXErO/z/q8D5KT 7jIzZAPiNdXeGj0iDpsMO0+Cb+9DUeZE+LRhKWQKUgJ3CTysQPO/0M2o6F6+fJFw qeOfFrDIK2v8LMxYKSUKHtIbwTa3LRwBvRf75ViD2v0qrL/XPeIQI+VQyPFWDsQj I3vaoYP9OOrS9RskJT9T0utQa0XCRI7jlkk73me2NpW+exW7qlUwl5PYOjxiZaGn GejtWKFBkvLZsmCNY416ahFPJPF6TMK6 -----END CERTIFICATE-----Generated at Mon Jan 12 16:05:46 2026 by rpki-client