This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: pQEd5gfWhKdEZ9Kc6KBTG9rNEYQDJIST66j1wQ+0ZVM= Subject key identifier: 41:C1:CF:CA:09:7A:FB:87:65:B3:39:24:47:60:0D:EC:01:E7:D1:44 Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 1F93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 1F86 Signing time: Sat 10 Jan 2026 15:49:22 +0000 Manifest this update: Sat 10 Jan 2026 15:49:22 +0000 Manifest next update: Sat 17 Jan 2026 15:49:22 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: IKZ+ebSy/zUulH2n0ukMxlCNOttj7V15mB05jIN5NEQ=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: CYv9JY9hI0P702N3lQBz+p9YJHwSjBcG7pv4fPI19/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 15:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8083 (0x1f93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: Jan 10 15:49:22 2026 GMT Not After : Jan 17 15:49:22 2026 GMT Subject: CN=69627502-64da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:6a:6b:42:7d:d0:56:2c:b3:c3:96:a5:59: b3:2e:09:d3:22:3f:92:32:7a:f6:d0:10:23:ca:ed: 9e:ba:f0:f8:9c:48:32:9c:e2:29:a5:5c:6d:10:b7: 7c:3a:f3:6a:68:3d:c8:fb:0a:b4:5e:aa:4a:6c:88: b3:d8:ef:7b:0d:74:e3:5c:60:6b:fe:23:a0:a5:a2: 01:e4:01:6a:49:d3:ea:a1:93:d5:ae:c1:27:c0:d6: 7f:29:dc:8b:a1:95:fe:65:fd:02:31:8e:33:43:79: 80:12:09:19:a3:d9:8f:5a:34:de:89:44:b2:4c:1e: 78:64:1e:2f:e5:5a:c3:35:81:89:fa:47:97:ed:75: 7a:e4:68:60:d2:8f:0f:81:e8:9c:d0:de:ec:8a:74: fc:71:d0:25:09:8c:18:c1:99:b6:4b:3c:bb:57:8b: 5f:8a:a3:ed:6b:18:79:7d:a6:2d:03:50:ba:2f:0a: 89:0e:e9:02:1a:8e:6b:39:68:8b:00:c4:b3:47:6c: f0:27:79:78:c0:a1:24:1c:60:d3:b7:db:d3:fa:a1: 78:99:e3:3f:d1:0c:0d:3c:f0:ea:2c:b4:6d:b7:64: f8:33:93:dd:13:97:c8:6e:54:98:16:65:49:d0:1c: 1c:4e:3a:11:07:8e:4f:33:f9:68:5b:20:fd:51:15: f4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C1:CF:CA:09:7A:FB:87:65:B3:39:24:47:60:0D:EC:01:E7:D1:44 X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:08:0d:f6:cc:87:56:21:54:77:6d:d4:a5:2f:ee:8f:b2:9b: 9f:9c:9a:85:8d:69:46:de:89:06:e3:06:e2:42:91:7a:55:f9: e8:07:84:88:48:87:77:c7:36:8c:8f:07:bc:b1:51:65:62:c7: fc:0e:db:90:fe:c2:a6:42:d5:9a:40:a3:f4:e9:ac:ff:1f:09: a8:36:c0:db:00:45:c8:7b:7f:e0:a4:76:a3:ae:7d:d4:8b:9c: 0d:a9:56:c8:b8:a7:a8:dd:56:d7:de:0b:f1:01:27:92:ce:66: 06:c8:b6:f4:a3:4c:72:1a:8c:ea:52:24:a1:95:3e:1f:17:5b: 3e:db:1c:bf:d8:c0:ef:cf:a1:98:99:67:31:8a:9a:21:7f:f2: e8:25:5b:39:b2:11:74:5f:9e:7f:89:fc:40:86:21:0b:b4:11: 2b:a1:c1:f6:c0:da:2a:58:ef:2d:25:8a:9b:65:7f:e0:4d:4b: 13:44:e3:b3:a3:7f:2d:37:7c:05:d0:3a:78:36:71:ec:6e:1e: f7:3e:ad:32:70:10:67:53:ee:26:a7:17:2f:7c:5e:fc:d8:3b: 6a:3c:c6:d5:51:f2:76:3f:a9:cb:f1:85:14:0a:46:87:31:20: 64:c2:90:a3:67:2e:e3:23:3d:4c:64:ac:ee:59:63:a9:01:63: 15:5b:b2:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjYwMTEwMTU0OTIyWhcNMjYwMTE3MTU0OTIyWjAYMRYwFAYD VQQDDA02OTYyNzUwMi02NGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwNqa0J90FYss8OWpVmzLgnTIj+SMnr20BAjyu2euvD4nEgynOIppVxtELd8 OvNqaD3I+wq0XqpKbIiz2O97DXTjXGBr/iOgpaIB5AFqSdPqoZPVrsEnwNZ/KdyL oZX+Zf0CMY4zQ3mAEgkZo9mPWjTeiUSyTB54ZB4v5VrDNYGJ+keX7XV65Ghg0o8P geic0N7sinT8cdAlCYwYwZm2Szy7V4tfiqPtaxh5faYtA1C6LwqJDukCGo5rOWiL AMSzR2zwJ3l4wKEkHGDTt9vT+qF4meM/0QwNPPDqLLRtt2T4M5PdE5fIblSYFmVJ 0BwcTjoRB45PM/loWyD9URX0EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHBz8oJ evuHZbM5JEdgDewB59FEMB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFCA32zIdWIVR3bdSlL+6PspufnJqFjWlG3okG4wbiQpF6VfnoB4SI SId3xzaMjwe8sVFlYsf8DtuQ/sKmQtWaQKP06az/HwmoNsDbAEXIe3/gpHajrn3U i5wNqVbIuKeo3VbX3gvxASeSzmYGyLb0o0xyGozqUiShlT4fF1s+2xy/2MDvz6GY mWcxipohf/LoJVs5shF0X55/ifxAhiELtBErocH2wNoqWO8tJYqbZX/gTUsTROOz o38tN3wF0Dp4NnHsbh73Pq0ycBBnU+4mpxcvfF782DtqPMbVUfJ2P6nL8YUUCkaH MSBkwpCjZy7jIz1MZKzuWWOpAWMVW7J/ -----END CERTIFICATE-----Generated at Mon Jan 12 11:00:02 2026 by rpki-client