This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json) Hash identifier: lDJphBvyAl1YmqjsCqzta78Hf1uQalyBQFfH870uqCo= Subject key identifier: C4:EB:F8:0E:C6:94:6F:8E:76:51:96:2C:1F:4B:D6:F2:B3:A7:B7:11 Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Certificate serial: 34F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft Manifest number: 34F0 Signing time: Tue 06 Jan 2026 15:02:48 +0000 Manifest this update: Tue 06 Jan 2026 15:02:47 +0000 Manifest next update: Tue 13 Jan 2026 15:02:47 +0000 Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: cHjBfsJf+YFQS5hAKOTTNDNOlrsEZ+txLDDgzEOBu/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 15:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13554 (0x34f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Validity Not Before: Jan 6 15:02:47 2026 GMT Not After : Jan 13 15:02:47 2026 GMT Subject: CN=695d2418-2ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:80:00:c8:2c:51:09:ef:09:3d:7d:4d:16: 85:d3:8f:5d:32:59:aa:e6:24:da:7e:33:63:0b:48: 92:32:b7:79:a6:4c:76:1a:b2:61:c6:e7:3e:1c:61: f0:74:01:ab:69:ae:95:16:f0:df:79:70:a4:f0:fb: c2:3a:74:cf:85:6a:85:16:ef:8e:14:d1:63:9a:6a: a6:53:1f:23:2c:5a:a8:5e:0c:4d:1b:3d:29:f1:f4: 23:5d:28:3d:cd:42:f7:98:76:04:d6:ac:3f:b2:2a: 9c:a6:af:3f:28:1e:ca:98:8a:70:18:67:e7:c8:da: 67:4a:f9:ad:04:92:78:c0:37:7b:0c:7b:3f:18:b1: 75:c7:6f:4e:e9:3b:99:83:1d:0e:50:43:4a:d3:49: ee:19:b7:25:98:a7:a7:b4:d4:ec:55:cc:16:0c:0c: ba:60:47:de:d0:9e:89:86:dc:a4:fd:f9:e0:f4:79: 07:0f:1c:a0:13:d8:2c:fd:b4:f9:4e:36:6a:86:a0: d3:43:b5:de:14:1a:7c:76:63:a0:ca:4c:50:28:07: f3:56:5a:0b:3a:27:b5:43:6f:e6:e2:ef:59:b0:a8: f5:34:54:dd:02:36:0e:90:94:9a:63:8f:fc:fc:66: a4:52:22:1f:ea:e0:42:88:6d:69:08:eb:1b:d9:bc: d0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EB:F8:0E:C6:94:6F:8E:76:51:96:2C:1F:4B:D6:F2:B3:A7:B7:11 X509v3 Authority Key Identifier: keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:6e:9c:8c:cf:0c:89:74:72:69:a2:71:af:4b:5b:e1:8e:a9: 14:9c:92:05:51:a2:17:9f:dc:ab:89:d7:32:a2:55:aa:82:94: 7b:c5:51:31:f8:28:d2:ef:0a:44:e1:33:ff:a5:20:bf:72:96: 92:fd:1b:28:89:50:60:a2:83:5b:9c:5f:07:8c:58:b1:2a:e2: e3:c2:e8:d1:13:05:b4:45:0d:b8:0d:65:43:39:39:61:30:a1: bc:0d:98:c8:ee:17:1a:79:90:cd:2d:31:6f:a5:e9:2b:be:cd: 9b:cf:fe:a5:52:8b:10:e5:76:37:e9:e2:cf:ce:f1:02:89:99: 0a:24:a6:d0:2f:0f:d3:33:a8:ca:22:07:4f:89:35:dc:a9:3c: 49:1d:b5:13:f9:58:9b:2f:9f:ac:e3:2f:cc:33:27:48:8f:44: 4e:ae:ca:7f:f6:c1:78:29:0b:fc:25:a1:d0:6c:92:ff:23:d1: 70:8a:e1:6f:85:3f:a5:06:6c:da:81:0a:d7:24:52:c5:37:e3: 64:76:74:0b:09:d2:21:44:af:92:c5:39:d9:99:bf:a2:3e:19: 89:af:b9:44:38:67:c1:8d:0d:08:ad:01:2d:c1:a2:c0:04:e3: de:5d:57:9d:97:33:fb:03:73:80:01:39:76:74:c1:f5:7c:50: c7:e0:77:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFNDExMTAvBgNVBAUTKEM1MEEzREQ1ODIxNjk5RUM1QTA5MkZFRkU1NUU0MDdE NUJEMENCQTUwHhcNMjYwMTA2MTUwMjQ3WhcNMjYwMTEzMTUwMjQ3WjAYMRYwFAYD VQQDDA02OTVkMjQxOC0yYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoOAAMgsUQnvCT19TRaF049dMlmq5iTafjNjC0iSMrd5pkx2GrJhxuc+HGHw dAGraa6VFvDfeXCk8PvCOnTPhWqFFu+OFNFjmmqmUx8jLFqoXgxNGz0p8fQjXSg9 zUL3mHYE1qw/siqcpq8/KB7KmIpwGGfnyNpnSvmtBJJ4wDd7DHs/GLF1x29O6TuZ gx0OUENK00nuGbclmKentNTsVcwWDAy6YEfe0J6Jhtyk/fng9HkHDxygE9gs/bT5 TjZqhqDTQ7XeFBp8dmOgykxQKAfzVloLOie1Q2/m4u9ZsKj1NFTdAjYOkJSaY4/8 /GakUiIf6uBCiG1pCOsb2bzQHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTr+A7G lG+OdlGWLB9L1vKzp7cRMB8GA1UdIwQYMBaAFMUKPdWCFpnsWgkv7+VeQH1b0Mul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU0MS84NzU3NTE4RTFE QTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21leGFDU192NVY1QWZWdlF5 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRbzkxWUlXbWV4YUNTX3Y1VjVBZlZ2UXk2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU0MS84NzU3NTE4RTFEQTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21l eGFDU192NVY1QWZWdlF5NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBubpyMzwyJdHJponGvS1vhjqkUnJIFUaIXn9yridcyolWqgpR7xVEx +CjS7wpE4TP/pSC/cpaS/RsoiVBgooNbnF8HjFixKuLjwujREwW0RQ24DWVDOTlh MKG8DZjI7hcaeZDNLTFvpekrvs2bz/6lUosQ5XY36eLPzvECiZkKJKbQLw/TM6jK IgdPiTXcqTxJHbUT+VibL5+s4y/MMydIj0ROrsp/9sF4KQv8JaHQbJL/I9FwiuFv hT+lBmzagQrXJFLFN+NkdnQLCdIhRK+SxTnZmb+iPhmJr7lEOGfBjQ0IrQEtwaLA BOPeXVedlzP7A3OAATl2dMH1fFDH4HfP -----END CERTIFICATE-----Generated at Wed Jan 7 02:37:17 2026 by rpki-client