This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: S4yaq5Xo8A+rKGVXaaQrMyEN8hvMXfSGtsN+qmeAWX4= Subject key identifier: D1:E0:A7:6C:27:DA:53:23:A0:1F:33:22:4E:7D:F7:E4:E9:C6:39:70 Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: 0169 Signing time: Sun 11 Jan 2026 03:10:51 +0000 Manifest this update: Sun 11 Jan 2026 03:10:50 +0000 Manifest next update: Sun 18 Jan 2026 03:10:50 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: KtydArFGP2uMSIuH0DXPkYKp64Gr+yajmTdiI7UIt4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 03:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: Jan 11 03:10:50 2026 GMT Not After : Jan 18 03:10:50 2026 GMT Subject: CN=696314bb-9633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:fe:9d:fc:5c:b5:ae:ec:30:c8:59:da:c6: eb:65:5e:31:b1:c1:cf:03:c1:26:75:61:0a:0a:bd: f7:88:39:08:18:9d:fa:e5:33:bf:7f:4f:22:c7:d7: 5a:b7:be:1e:12:a3:b0:20:69:22:cf:1b:0d:c0:cb: 85:85:d8:82:6b:ca:c9:8d:51:10:84:8f:ff:ae:1d: ee:2c:86:7a:d1:61:2d:0f:60:91:1e:03:26:37:2c: ec:72:bf:38:67:0e:14:2e:71:19:f5:ce:06:c2:c3: 85:8d:43:19:9f:31:53:d3:23:16:04:88:1d:7c:89: 61:27:8c:b5:c8:4b:72:13:6d:d9:5e:a7:7e:01:8a: 02:8d:55:2e:e3:38:28:76:cf:40:23:f6:14:a9:80: cf:b2:5f:5c:2a:10:84:92:53:ac:57:d5:2b:dc:20: 42:24:fa:83:16:52:4c:c8:4a:85:0c:f2:73:19:30: 5e:2c:66:85:72:41:e2:16:0a:0b:98:a6:2f:c0:c4: c2:a3:d0:95:0f:12:5b:86:d9:0a:45:68:62:f5:5d: c5:e4:d5:90:62:b2:f0:f7:25:e0:8e:8e:a4:cc:29: 7f:f8:ba:00:00:2c:40:34:26:8c:b5:be:b6:33:ed: 8e:44:59:e1:85:08:6d:16:e1:16:8c:99:3f:68:0b: 1e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E0:A7:6C:27:DA:53:23:A0:1F:33:22:4E:7D:F7:E4:E9:C6:39:70 X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:a4:6e:fb:3b:a6:f9:ca:8e:45:41:1b:96:7b:4e:6b:3e:88: 03:ee:98:2b:0b:8a:ce:ad:e0:90:ba:46:09:a5:f8:de:ef:18: 19:39:27:0c:cf:41:d8:b0:d2:a4:97:fd:86:e1:be:87:56:0e: b2:68:01:b1:e5:bb:32:65:3e:0a:ff:2b:57:f2:f6:f8:1a:e2: 59:01:4f:5b:d5:12:32:be:0a:dc:6f:a1:21:b9:95:a5:30:b1: 45:8f:86:6b:1c:df:5a:f7:02:a7:ac:6a:3b:54:65:48:9b:3d: ed:a3:4b:73:f6:cd:3b:63:0a:ab:89:a8:6c:a6:4e:da:e0:be: c0:13:b4:c3:68:32:1f:62:39:ed:5b:83:ce:04:69:06:88:fc: 7c:dd:93:90:c4:e0:0c:37:21:12:c7:43:8c:74:dc:be:c9:84: 59:60:d4:4e:85:99:28:93:38:da:75:e0:e5:c5:8b:a7:d2:c3: 73:de:11:01:93:cc:71:f5:8f:96:41:50:95:8d:0e:66:8e:1c: 8d:9d:20:de:c7:83:6d:41:87:f8:36:53:2d:ff:81:5d:93:ae: 43:90:1e:e0:fb:41:20:02:b8:60:b0:9f:4a:78:78:b2:08:58: 75:4e:db:14:10:17:65:2c:b9:dc:38:9e:74:9d:95:88:1e:ad: a0:87:92:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjYwMTExMDMxMDUwWhcNMjYwMTE4MDMxMDUwWjAYMRYwFAYD VQQDDA02OTYzMTRiYi05NjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8z+nfxcta7sMMhZ2sbrZV4xscHPA8EmdWEKCr33iDkIGJ365TO/f08ix9da t74eEqOwIGkizxsNwMuFhdiCa8rJjVEQhI//rh3uLIZ60WEtD2CRHgMmNyzscr84 Zw4ULnEZ9c4GwsOFjUMZnzFT0yMWBIgdfIlhJ4y1yEtyE23ZXqd+AYoCjVUu4zgo ds9AI/YUqYDPsl9cKhCEklOsV9Ur3CBCJPqDFlJMyEqFDPJzGTBeLGaFckHiFgoL mKYvwMTCo9CVDxJbhtkKRWhi9V3F5NWQYrLw9yXgjo6kzCl/+LoAACxANCaMtb62 M+2ORFnhhQhtFuEWjJk/aAse2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHgp2wn 2lMjoB8zIk599+TpxjlwMB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCppG77O6b5yo5FQRuWe05rPogD7pgrC4rOreCQukYJpfje7xgZOScM z0HYsNKkl/2G4b6HVg6yaAGx5bsyZT4K/ytX8vb4GuJZAU9b1RIyvgrcb6EhuZWl MLFFj4ZrHN9a9wKnrGo7VGVImz3to0tz9s07Ywqriahspk7a4L7AE7TDaDIfYjnt W4POBGkGiPx83ZOQxOAMNyESx0OMdNy+yYRZYNROhZkokzjadeDlxYun0sNz3hEB k8xx9Y+WQVCVjQ5mjhyNnSDex4NtQYf4NlMt/4Fdk65DkB7g+0EgArhgsJ9KeHiy CFh1TtsUEBdlLLncOJ50nZWIHq2gh5I4 -----END CERTIFICATE-----Generated at Sun Jan 11 23:28:09 2026 by rpki-client