This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft File: XozcAfwJtFN0mgHuUjmzXt4kvmw.mft (raw, json) Hash identifier: ra5kRgpoO7lAAhAvr0suBmj0aQVvMoLiF9lGETNTEL0= Subject key identifier: 82:DF:96:AE:CF:E8:2F:7A:D3:96:02:A8:E2:00:D3:C0:31:F7:59:04 Authority key identifier: 5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C Certificate issuer: /CN=A91F4CFA/serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C Certificate serial: 07AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft Manifest number: 07A5 Signing time: Sat 10 Jan 2026 20:48:55 +0000 Manifest this update: Sat 10 Jan 2026 20:48:55 +0000 Manifest next update: Sat 17 Jan 2026 20:48:55 +0000 Files and hashes: 1: XozcAfwJtFN0mgHuUjmzXt4kvmw.crl (hash: +KbTioeT3YmmeJSIcDRx9URVK+um+u+UG1fACTGioyg=) 2: A5D573E4305A11EB921D6332C4F9AE02.roa (hash: YBEc7X7y2zLa5OdEGOrRlwoEuxYs7fU2wrxzm81YklQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 20:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1963 (0x7ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4CFA, serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C Validity Not Before: Jan 10 20:48:55 2026 GMT Not After : Jan 17 20:48:55 2026 GMT Subject: CN=6962bb37-84b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:20:30:ff:6b:c0:a8:c6:0c:c1:9f:f9:b2:d7: 1e:1d:f2:9c:f7:9f:91:7d:08:91:f6:16:9d:87:bb: 8f:4b:cf:67:89:40:e2:ec:5e:27:f8:f9:77:52:d1: 3f:93:69:6b:89:ac:c7:dc:b8:12:97:54:12:4f:ca: c0:3f:bc:b4:45:2e:f8:6d:ff:e3:3b:ae:09:7a:a5: 00:a7:af:7a:ae:24:09:71:a2:5b:1f:6c:d7:fe:cb: 51:f3:35:34:f5:51:84:92:d8:0e:5f:f8:a1:d8:89: 58:75:ed:6c:48:5c:9d:1c:19:89:86:13:9a:42:aa: a2:28:e6:20:7c:15:87:ed:01:97:c9:1c:8b:7f:99: 02:72:fc:9f:f3:12:36:d4:45:28:aa:42:65:e5:46: f0:6f:83:fb:9f:b7:c7:d1:cc:ea:06:b9:f7:06:29: e4:c5:12:a2:ee:d9:1c:77:f8:e3:f8:66:cf:1e:db: fc:45:1e:8d:a0:9a:5e:6c:76:b2:5e:a0:71:90:a3: c4:37:f0:4b:31:25:60:27:8b:7f:dc:2f:df:59:cc: 91:f4:3c:df:9e:29:da:f3:d5:3f:20:e5:29:be:c5: 84:e8:cf:f8:f2:e7:5e:66:d7:aa:56:a0:85:a2:f7: c4:ad:db:55:57:9c:e7:8e:11:b9:b0:35:0f:0c:0b: 47:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DF:96:AE:CF:E8:2F:7A:D3:96:02:A8:E2:00:D3:C0:31:F7:59:04 X509v3 Authority Key Identifier: keyid:5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:c9:bb:67:8b:ca:93:cc:ed:fa:61:38:2c:54:10:f5:12:aa: d9:73:72:e2:92:87:0b:df:10:49:62:98:ee:c9:44:4e:dd:e9: 88:06:0c:da:19:0f:bd:d5:0a:a1:be:85:e1:5b:88:07:5d:7f: c3:d1:03:0a:74:6c:07:c1:05:af:5e:42:a9:7f:60:06:0a:9e: 47:70:14:ef:c8:b1:c5:37:c4:5c:4b:ca:51:47:ed:54:9e:16: a4:13:6d:9a:83:10:4e:28:82:30:ad:f9:72:56:b7:8d:18:03: f6:5d:5e:a0:1f:c9:c2:56:e5:d5:e8:03:41:7e:f8:13:14:7c: 9b:1f:dc:3e:7d:7a:02:9c:eb:a9:e3:b2:6d:70:38:13:b5:7d: bd:7e:fd:80:52:18:ba:39:be:c7:33:d6:ca:e3:72:68:32:c8: c4:94:1d:0f:f1:2d:f3:3a:e8:a4:6a:4e:9c:3c:a9:a1:6b:d9: 44:a5:67:cf:44:10:5d:5d:5a:a7:32:28:e9:82:96:5d:fe:5a: c5:82:45:5d:79:e4:2d:7e:cd:82:73:40:1b:38:37:56:18:30: ac:10:c5:16:df:c5:20:92:e5:25:71:ad:cf:5a:91:36:62:9f: 23:86:31:65:ed:a3:0e:a8:95:09:73:5a:4a:21:98:d9:a0:de: 3a:cc:10:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRDRkExMTAvBgNVBAUTKDVFOENEQzAxRkMwOUI0NTM3NDlBMDFFRTUyMzlCMzVF REUyNEJFNkMwHhcNMjYwMTEwMjA0ODU1WhcNMjYwMTE3MjA0ODU1WjAYMRYwFAYD VQQDDA02OTYyYmIzNy04NGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SAw/2vAqMYMwZ/5stceHfKc95+RfQiR9hadh7uPS89niUDi7F4n+Pl3UtE/ k2lriazH3LgSl1QST8rAP7y0RS74bf/jO64JeqUAp696riQJcaJbH2zX/stR8zU0 9VGEktgOX/ih2IlYde1sSFydHBmJhhOaQqqiKOYgfBWH7QGXyRyLf5kCcvyf8xI2 1EUoqkJl5Ubwb4P7n7fH0czqBrn3BinkxRKi7tkcd/jj+GbPHtv8RR6NoJpebHay XqBxkKPEN/BLMSVgJ4t/3C/fWcyR9Dzfnina89U/IOUpvsWE6M/48udeZteqVqCF ovfErdtVV5znjhG5sDUPDAtHswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILflq7P 6C9605YCqOIA08Ax91kEMB8GA1UdIwQYMBaAFF6M3AH8CbRTdJoB7lI5s17eJL5s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNENGQS8xQzJGQUIyRTMw NTkxMUVCQjgzNUMxMzBDNEY5QUUwMi9Yb3pjQWZ3SnRGTjBtZ0h1VWptelh0NGt2 bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvemNBZndKdEZOMG1nSHVVam16WHQ0a3Ztdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NENGQS8xQzJGQUIyRTMwNTkxMUVCQjgzNUMxMzBDNEY5QUUwMi9Yb3pjQWZ3SnRG TjBtZ0h1VWptelh0NGt2bXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzybtni8qTzO36YTgsVBD1EqrZc3LikocL3xBJYpjuyURO3emIBgza GQ+91QqhvoXhW4gHXX/D0QMKdGwHwQWvXkKpf2AGCp5HcBTvyLHFN8RcS8pRR+1U nhakE22agxBOKIIwrflyVreNGAP2XV6gH8nCVuXV6ANBfvgTFHybH9w+fXoCnOup 47JtcDgTtX29fv2AUhi6Ob7HM9bK43JoMsjElB0P8S3zOuikak6cPKmha9lEpWfP RBBdXVqnMijpgpZd/lrFgkVdeeQtfs2Cc0AbODdWGDCsEMUW38UgkuUlca3PWpE2 Yp8jhjFl7aMOqJUJc1pKIZjZoN46zBCv -----END CERTIFICATE-----Generated at Mon Jan 12 05:59:33 2026 by rpki-client