This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft File: sXSj1LqbR24rMeR8cqKY0ETZh4U.mft (raw, json) Hash identifier: MZ6iZ0moZJ4Amg96OAqOI+QQYsGmclIjUrQB80gNA2c= Subject key identifier: 52:F0:87:D1:0E:1F:F2:8A:C1:71:BC:04:58:2D:27:E8:65:C1:8E:8E Authority key identifier: B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85 Certificate issuer: /CN=A91FBC89/serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft Manifest number: B4 Signing time: Thu 01 Jan 2026 05:50:27 +0000 Manifest this update: Thu 01 Jan 2026 05:50:26 +0000 Manifest next update: Thu 08 Jan 2026 05:50:26 +0000 Files and hashes: 1: sXSj1LqbR24rMeR8cqKY0ETZh4U.crl (hash: bPlGu2+vp2VapPZe7aU0PADir7fU6dR4OZOWQHaSGKo=) 2: 000A7CE25A5911F0948C6D20C4F9AE02.roa (hash: GWfp52D5q+ZWDIE0kYIw+TpLPvEGwRDdK6mh7QUL+8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 05:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBC89, serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785 Validity Not Before: Jan 1 05:50:26 2026 GMT Not After : Jan 8 05:50:26 2026 GMT Subject: CN=69560b23-5ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:32:a7:2d:99:96:b0:9e:7b:ea:bf:77:f6: 17:4e:ea:74:12:58:99:a2:86:44:c9:29:c0:71:0d: 4a:09:5e:45:65:d7:2c:12:fc:5e:27:fb:62:ca:5f: 27:21:5e:42:1c:2e:ef:67:44:98:1c:12:3a:23:df: 3c:f4:34:5a:9f:d7:06:f7:0f:5f:53:32:ba:81:62: c5:84:c6:8f:0c:54:60:38:3f:29:0a:10:94:df:87: 6e:e6:1a:14:3c:f2:c8:f7:f7:21:6c:87:4c:d9:8c: 3a:6f:11:af:0f:75:43:ce:0d:43:58:a2:bb:1a:cd: b5:f9:0c:4d:8a:09:3e:a7:3c:cc:e0:6a:5b:60:a3: b4:04:2c:76:0e:e4:e1:6c:f2:fc:db:71:b1:f7:43: de:15:c0:05:b4:1e:93:02:b6:ba:81:82:98:2f:c6: 01:07:04:d0:31:62:e2:6f:de:0c:86:1e:9c:88:a5: 9f:44:59:03:fd:e0:4e:dd:82:5b:6c:f1:bc:22:6f: 56:93:2b:47:93:a1:d7:c2:f5:15:5d:9d:91:5b:0a: 2a:bc:ca:ac:ec:c8:69:5a:38:1b:a2:9e:e9:13:cd: 25:be:d7:f6:24:2e:03:b3:da:11:ff:2f:d3:61:28: d5:12:f2:48:95:62:ee:e4:fa:66:fd:58:e2:e9:27: 73:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F0:87:D1:0E:1F:F2:8A:C1:71:BC:04:58:2D:27:E8:65:C1:8E:8E X509v3 Authority Key Identifier: keyid:B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:81:bc:12:f1:7f:a7:13:93:07:ae:7e:8d:72:fe:36:12:0b: 96:ac:41:c0:1d:c3:96:6b:59:18:e3:30:62:1b:84:3e:ef:c5: 88:40:29:11:2e:66:7f:cd:90:b3:1e:00:5d:aa:96:e0:ed:2b: 54:29:78:18:98:8e:f5:0e:bd:cd:97:2a:f9:a1:78:f1:21:9d: b2:52:85:91:99:c1:51:ea:91:a6:db:67:4f:47:cd:13:bc:1d: 71:3c:7f:ec:38:17:79:bf:4d:b4:79:cd:e6:cb:5d:e3:94:a3: 78:12:96:6a:76:c7:b3:01:3b:27:61:6d:3b:4c:76:0a:42:9f: 54:46:c3:aa:dd:61:6f:96:44:31:50:78:a3:3f:59:75:ef:0b: ee:b2:5c:90:10:f9:b8:be:c1:4e:ed:41:7c:82:b8:92:d7:a0: 60:45:b2:f7:70:d3:02:23:f3:05:5c:7a:db:1f:73:dd:ee:31: 0d:67:6f:00:0c:6b:b8:50:cd:70:c6:a6:c0:dd:5f:f0:84:32: 91:ee:c0:ef:db:b7:db:17:ec:e0:88:05:16:f5:0b:f9:af:f0: 08:6d:b5:09:2e:08:4f:3e:7e:47:3a:9f:2c:20:b0:0a:53:68: c6:45:8c:62:1f:36:87:07:e4:3c:ac:6e:96:0f:5f:86:eb:f6: bc:f6:6e:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJDODkxMTAvBgNVBAUTKEIxNzRBM0Q0QkE5QjQ3NkUyQjMxRTQ3QzcyQTI5OEQw NDREOTg3ODUwHhcNMjYwMTAxMDU1MDI2WhcNMjYwMTA4MDU1MDI2WjAYMRYwFAYD VQQDDA02OTU2MGIyMy01ZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7Iypy2ZlrCee+q/d/YXTup0EliZooZEySnAcQ1KCV5FZdcsEvxeJ/tiyl8n IV5CHC7vZ0SYHBI6I9889DRan9cG9w9fUzK6gWLFhMaPDFRgOD8pChCU34du5hoU PPLI9/chbIdM2Yw6bxGvD3VDzg1DWKK7Gs21+QxNigk+pzzM4GpbYKO0BCx2DuTh bPL823Gx90PeFcAFtB6TAra6gYKYL8YBBwTQMWLib94Mhh6ciKWfRFkD/eBO3YJb bPG8Im9WkytHk6HXwvUVXZ2RWwoqvMqs7MhpWjgbop7pE80lvtf2JC4Ds9oR/y/T YSjVEvJIlWLu5Ppm/Vji6SdzTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLwh9EO H/KKwXG8BFgtJ+hlwY6OMB8GA1UdIwQYMBaAFLF0o9S6m0duKzHkfHKimNBE2YeF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkM4OS85RTcyNjJCRUVG Q0UxMUVGODkzRkY3MEVDNEY5QUUwMi9zWFNqMUxxYlIyNHJNZVI4Y3FLWTBFVFpo NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NYU2oxTHFiUjI0ck1lUjhjcUtZMEVUWmg0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkM4OS85RTcyNjJCRUVGQ0UxMUVGODkzRkY3MEVDNEY5QUUwMi9zWFNqMUxxYlIy NHJNZVI4Y3FLWTBFVFpoNFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRgbwS8X+nE5MHrn6Ncv42EguWrEHAHcOWa1kY4zBiG4Q+78WIQCkR LmZ/zZCzHgBdqpbg7StUKXgYmI71Dr3Nlyr5oXjxIZ2yUoWRmcFR6pGm22dPR80T vB1xPH/sOBd5v020ec3my13jlKN4EpZqdsezATsnYW07THYKQp9URsOq3WFvlkQx UHijP1l17wvuslyQEPm4vsFO7UF8griS16BgRbL3cNMCI/MFXHrbH3Pd7jENZ28A DGu4UM1wxqbA3V/whDKR7sDv27fbF+zgiAUW9Qv5r/AIbbUJLghPPn5HOp8sILAK U2jGRYxiHzaHB+Q8rG6WD1+G6/a89m7j -----END CERTIFICATE-----Generated at Thu Jan 1 12:31:31 2026 by rpki-client