This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: vAglYnAnt735ugKgMQUZ3BvQE30XhF5Bdx5pryFpr00= Subject key identifier: EB:C9:84:FE:A4:F9:9E:C9:C7:F5:1A:BA:B7:9A:2D:21:66:04:AC:67 Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 018E Signing time: Sun 11 Jan 2026 03:23:15 +0000 Manifest this update: Sun 11 Jan 2026 03:23:14 +0000 Manifest next update: Sun 18 Jan 2026 03:23:14 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: Av3oISMAIg4iPpY2Mw94Uk4y2cVeaHycwQOxn3t7Zhg=) 2: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: +4AW806nYQQldZTlXaAUhGx5mMXdQVdMZ5gscLzr3Uc=) 3: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: ZB9eAMVWfBK9MN4S24RR8d1yaBGavhdyzDSgtXBT9U4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 03:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: Jan 11 03:23:14 2026 GMT Not After : Jan 18 03:23:14 2026 GMT Subject: CN=696317a2-9884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:7c:f6:cd:ad:8c:b5:80:74:cf:67:b8:2d:81: 28:22:b3:33:c6:13:41:4e:ed:d4:c5:45:8d:53:46: 74:55:ab:e5:e8:45:8b:a2:0d:0f:25:eb:ab:cc:9d: 7b:de:ea:08:de:6f:cd:73:25:78:82:ea:5d:e7:06: 51:c3:03:07:7a:48:32:d5:da:8f:62:29:fe:82:99: 5d:58:03:e7:a5:1e:06:2a:40:1e:60:c6:b8:d8:ab: ac:79:be:04:31:69:61:05:82:cb:35:c4:4b:02:3e: 4f:67:9e:b3:ec:a9:e0:ea:9c:ee:d4:1b:81:c8:11: b1:b4:fa:ab:91:60:41:c3:ba:9d:c8:a1:03:40:f5: 49:86:2f:2d:0f:fe:d1:fa:2e:0a:f2:0a:f9:61:f4: 91:81:59:ea:3d:4e:77:8a:10:d6:07:02:3b:6e:a4: 27:e4:ae:fb:8a:4e:ab:63:0b:f1:d1:d5:c0:40:81: fe:76:a6:15:65:b0:6e:5e:28:cb:d2:8d:99:d4:11: dd:52:1a:5b:f3:9f:9e:14:d7:83:80:fe:54:73:cf: 2b:e1:fa:83:94:b4:37:5a:13:5f:d5:56:3c:62:72: 5f:c5:86:4c:af:af:cf:ba:5a:25:43:cb:cf:f1:09: 34:19:77:18:ee:25:c7:3c:e2:4e:51:4b:64:73:ff: ae:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C9:84:FE:A4:F9:9E:C9:C7:F5:1A:BA:B7:9A:2D:21:66:04:AC:67 X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:38:9f:54:75:3f:e9:c6:48:7d:46:85:6a:c2:9e:8a:f3:72: b9:68:3a:04:80:ea:a3:ca:8d:c0:4e:32:24:4f:ca:51:3f:fb: 75:f5:b3:89:8d:2d:19:96:ac:fe:6c:3c:8e:32:d4:3d:0e:78: 9b:6e:69:4d:d4:06:fa:97:d8:df:69:4c:9f:16:0d:b6:c7:12: 0f:58:b2:46:fa:5d:f3:31:05:d8:07:cd:67:db:3d:fd:7f:01: 44:49:57:48:5d:ee:e1:a0:68:16:64:e6:2b:87:57:71:51:60: a7:8b:3f:d5:a8:1e:95:7e:47:91:ae:97:ef:0d:0d:62:78:3c: d9:a0:c2:0e:66:55:ff:43:cf:d3:9e:e7:67:bc:8b:4c:6e:6f: 89:42:15:3d:77:7a:2c:f5:1f:7b:2a:68:a0:86:91:9e:a5:fa: e5:32:3c:21:2c:22:d5:21:22:fc:87:52:44:f2:c0:5c:7f:f0: 8a:66:db:22:91:a3:d6:97:24:a8:df:0e:14:3d:6c:ea:95:9e: b4:14:52:a6:4a:11:72:70:be:5b:12:9c:0f:e5:4b:95:11:a6: 2c:9c:72:d6:4d:ef:08:ad:b8:4b:2e:83:1f:e3:ad:dd:26:15: e6:3a:37:ef:39:e7:2c:f6:8d:08:09:4b:f8:e2:24:11:63:26: 53:c2:ac:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjYwMTExMDMyMzE0WhcNMjYwMTE4MDMyMzE0WjAYMRYwFAYD VQQDDA02OTYzMTdhMi05ODg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Hz2za2MtYB0z2e4LYEoIrMzxhNBTu3UxUWNU0Z0Vavl6EWLog0PJeurzJ17 3uoI3m/NcyV4gupd5wZRwwMHekgy1dqPYin+gpldWAPnpR4GKkAeYMa42Kuseb4E MWlhBYLLNcRLAj5PZ56z7Kng6pzu1BuByBGxtPqrkWBBw7qdyKEDQPVJhi8tD/7R +i4K8gr5YfSRgVnqPU53ihDWBwI7bqQn5K77ik6rYwvx0dXAQIH+dqYVZbBuXijL 0o2Z1BHdUhpb85+eFNeDgP5Uc88r4fqDlLQ3WhNf1VY8YnJfxYZMr6/PulolQ8vP 8Qk0GXcY7iXHPOJOUUtkc/+uPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvJhP6k +Z7Jx/UaureaLSFmBKxnMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmOJ9UdT/pxkh9RoVqwp6K83K5aDoEgOqjyo3ATjIkT8pRP/t19bOJ jS0Zlqz+bDyOMtQ9DnibbmlN1Ab6l9jfaUyfFg22xxIPWLJG+l3zMQXYB81n2z39 fwFESVdIXe7hoGgWZOYrh1dxUWCniz/VqB6VfkeRrpfvDQ1ieDzZoMIOZlX/Q8/T nudnvItMbm+JQhU9d3os9R97KmighpGepfrlMjwhLCLVISL8h1JE8sBcf/CKZtsi kaPWlySo3w4UPWzqlZ60FFKmShFycL5bEpwP5UuVEaYsnHLWTe8IrbhLLoMf463d JhXmOjfvOecs9o0ICUv44iQRYyZTwqyD -----END CERTIFICATE-----Generated at Mon Jan 12 23:33:03 2026 by rpki-client