This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft File: XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft (raw, json) Hash identifier: +3HAtCxPCvAriSuWLGVMKTdLDrIvyOdN8qgIh2v7ITQ= Subject key identifier: BB:02:4A:9B:7C:7F:DC:F7:99:66:5F:58:FE:AD:12:A5:67:32:82:F8 Authority key identifier: 5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 Certificate issuer: /CN=A91E9F89/serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Certificate serial: 08DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft Manifest number: 08D6 Signing time: Sat 10 Jan 2026 19:49:23 +0000 Manifest this update: Sat 10 Jan 2026 19:49:23 +0000 Manifest next update: Sat 17 Jan 2026 19:49:23 +0000 Files and hashes: 1: XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl (hash: lxpRJdiNwpqkIcoezqFNgFGWedyhvdv91yJswsrXnOA=) 2: 05B67AF8C6A011EAA70D183FC4F9AE02.roa (hash: uyDMO7ckw/0z5jl/cntcgb/65TbIdBVdA1r68qbPTT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 19:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2269 (0x8dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F89, serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Validity Not Before: Jan 10 19:49:23 2026 GMT Not After : Jan 17 19:49:23 2026 GMT Subject: CN=6962ad43-0a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:98:b5:2b:93:fe:6d:b4:b9:7a:34:4c:b7:2a: 95:2c:0b:bd:9d:a1:66:52:18:c9:b1:97:11:30:92: 23:12:8c:6c:26:95:a5:59:91:1e:67:7d:d2:57:21: eb:05:90:41:c3:23:86:05:1f:89:43:da:e5:0d:c8: 72:aa:22:b4:0e:64:2c:df:dd:73:4e:47:4f:7d:80: e6:e2:62:e5:e7:be:49:c0:a9:be:06:79:88:87:0f: 2e:2f:db:7f:c9:a4:18:da:6f:56:df:70:0c:cd:15: 44:3d:d7:02:72:03:81:d1:48:41:ca:14:d1:14:68: 41:d6:d6:88:67:a1:04:06:74:50:cc:24:bc:b6:65: d0:70:9d:0c:82:d9:6d:ea:9f:e6:26:7c:1c:a3:4b: cc:92:f7:f0:99:64:06:22:eb:18:3f:50:b3:09:55: 00:12:a5:6d:2a:24:3f:45:e8:ce:5d:20:b3:9a:4d: b0:1d:00:c5:77:00:20:48:79:3b:aa:1f:43:f8:1d: 2d:bd:31:18:d5:19:b7:17:f0:10:5d:a7:a2:79:62: 53:fd:17:93:60:bf:51:a1:27:86:3c:0b:b5:2b:94: d7:12:ce:d9:82:b8:ea:40:fe:64:b7:2d:0e:e8:a8: 4d:27:d6:4d:fa:f1:5d:41:06:62:02:ac:56:f4:72: 57:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:02:4A:9B:7C:7F:DC:F7:99:66:5F:58:FE:AD:12:A5:67:32:82:F8 X509v3 Authority Key Identifier: keyid:5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:31:68:d8:a1:6c:d4:07:42:d6:02:64:6d:e8:4b:f1:de:9f: b5:eb:36:e2:ab:6c:3e:cd:85:dd:43:df:d2:df:5b:83:01:97: bf:8f:24:d2:93:78:f0:74:60:9d:fa:e1:c3:21:7a:60:39:6e: ba:4a:e1:86:5c:f2:2b:cb:db:5d:96:0b:3f:1a:c2:a5:20:e6: b2:69:44:ad:86:d0:12:16:10:48:31:fe:ce:87:34:c5:4b:21: 48:0b:66:22:e7:57:01:54:a9:b1:95:9f:fb:38:d8:ac:e1:cf: 1b:ab:53:79:7b:73:a0:14:62:4b:13:9a:b4:93:fc:58:86:2d: 78:ec:92:6f:b8:97:27:f4:5d:4b:12:8a:ff:cf:a7:c2:98:dc: 57:39:08:ae:f4:04:50:51:34:f7:bd:71:71:56:14:1b:9c:6a: 4f:15:06:4d:70:b7:e6:03:09:7c:2e:88:27:45:63:36:2c:17: 9c:10:53:7b:42:59:3b:f8:85:14:70:c6:4d:6a:42:3e:6f:27: 3d:62:7e:b2:fd:59:f1:f7:8d:9a:51:60:86:23:bf:e5:30:03: 3c:75:38:fc:60:90:c0:a4:6a:45:97:4f:95:4d:90:8e:0f:b3: 0f:90:72:fe:50:4c:21:5c:ee:48:5a:26:64:bb:a9:52:71:3a: c2:4e:92:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGODkxMTAvBgNVBAUTKDVGMzA3RTYyNzRBQzM5RTU0RTk5ODY2REFCQjg1QzJD OUVGRDE2QjEwHhcNMjYwMTEwMTk0OTIzWhcNMjYwMTE3MTk0OTIzWjAYMRYwFAYD VQQDDA02OTYyYWQ0My0wYTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkJi1K5P+bbS5ejRMtyqVLAu9naFmUhjJsZcRMJIjEoxsJpWlWZEeZ33SVyHr BZBBwyOGBR+JQ9rlDchyqiK0DmQs391zTkdPfYDm4mLl575JwKm+BnmIhw8uL9t/ yaQY2m9W33AMzRVEPdcCcgOB0UhByhTRFGhB1taIZ6EEBnRQzCS8tmXQcJ0Mgtlt 6p/mJnwco0vMkvfwmWQGIusYP1CzCVUAEqVtKiQ/RejOXSCzmk2wHQDFdwAgSHk7 qh9D+B0tvTEY1Rm3F/AQXaeieWJT/ReTYL9RoSeGPAu1K5TXEs7ZgrjqQP5kty0O 6KhNJ9ZN+vFdQQZiAqxW9HJXUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsCSpt8 f9z3mWZfWP6tEqVnMoL4MB8GA1UdIwQYMBaAFF8wfmJ0rDnlTpmGbau4XCye/Rax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUY4OS81QkU3NDg3OEM2 OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09lVk9tWVp0cTdoY0xKNzlG ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6Qi1ZblNzT2VWT21ZWnRxN2hjTEo3OUZyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUY4OS81QkU3NDg3OEM2OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09l Vk9tWVp0cTdoY0xKNzlGckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUMWjYoWzUB0LWAmRt6Evx3p+16zbiq2w+zYXdQ9/S31uDAZe/jyTS k3jwdGCd+uHDIXpgOW66SuGGXPIry9tdlgs/GsKlIOayaUSthtASFhBIMf7OhzTF SyFIC2Yi51cBVKmxlZ/7ONis4c8bq1N5e3OgFGJLE5q0k/xYhi147JJvuJcn9F1L Eor/z6fCmNxXOQiu9ARQUTT3vXFxVhQbnGpPFQZNcLfmAwl8LognRWM2LBecEFN7 Qlk7+IUUcMZNakI+byc9Yn6y/Vnx942aUWCGI7/lMAM8dTj8YJDApGpFl0+VTZCO D7MPkHL+UEwhXO5IWiZku6lScTrCTpJp -----END CERTIFICATE-----Generated at Mon Jan 12 16:20:22 2026 by rpki-client