This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft File: SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json) Hash identifier: dwiHtOJ2mTvf8BAF5JGehV5vJ3XmofsLsYs1mrHlYCs= Subject key identifier: A0:E6:23:05:74:33:CD:E9:3C:F1:7E:A3:75:22:73:41:F3:79:96:01 Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA Certificate issuer: /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft Manifest number: 4E Signing time: Sun 11 Jan 2026 06:23:21 +0000 Manifest this update: Sun 11 Jan 2026 06:23:21 +0000 Manifest next update: Sun 18 Jan 2026 06:23:21 +0000 Files and hashes: 1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: aHBs4rkmUARbJorFAdM4TU+CnuPJa9SKSOD8ATtH1Ls=) 2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: eUyFtijE7ulYYeR6FE4HWasF4D8cnPdrEPGMIUGgb2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 03:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Validity Not Before: Jan 11 06:23:21 2026 GMT Not After : Jan 18 06:23:21 2026 GMT Subject: CN=696341d9-f741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:41:f5:ef:56:ce:26:8e:85:a8:f1:20:a6:50: be:d3:14:b3:38:35:26:a7:42:9b:98:ec:70:9e:a6: 7c:53:25:83:f9:d5:94:80:ef:11:96:ee:26:15:db: 87:71:d4:e1:83:7f:d4:c8:19:08:2c:67:c3:12:36: 42:fa:e8:de:d0:88:c4:db:4c:31:c1:8b:56:4e:dd: c9:df:5d:4b:c2:08:57:63:a8:b4:7f:46:98:bc:dc: ae:43:e2:a4:e0:7e:9d:41:12:ef:4c:67:ef:49:c3: 5e:31:89:7a:74:74:7b:33:f7:b7:c2:b4:0f:04:d7: 80:1a:b8:1a:82:93:54:9a:1a:8e:17:d8:7f:fc:ee: c6:52:5d:5a:d0:1e:ca:a3:67:93:49:02:51:7b:4b: e2:f1:d3:65:73:7c:e7:03:72:16:ea:e2:29:59:79: 8c:19:69:c9:00:7a:1f:49:84:18:5b:60:68:72:35: 77:20:3e:03:8f:fc:47:9f:f3:13:6f:f7:9f:38:94: 77:a2:a4:aa:64:3e:e9:39:ae:cd:fe:85:c5:25:f2: bc:fe:02:d0:23:39:14:56:a8:cb:0e:5b:2a:fd:1c: 7e:53:62:cf:c4:e6:eb:38:40:29:db:9f:e1:ac:cb: cd:06:a5:17:65:6a:0f:c9:f3:50:f8:20:97:9a:fd: 63:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E6:23:05:74:33:CD:E9:3C:F1:7E:A3:75:22:73:41:F3:79:96:01 X509v3 Authority Key Identifier: keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:7a:3c:f2:9c:76:fa:86:7c:d7:a6:68:19:bc:00:f3:9a:ee: f7:d2:44:72:05:63:d8:d4:d1:c4:be:92:35:b2:7d:e0:fc:06: 15:1c:50:b0:f4:b5:23:84:64:9f:c6:8b:b9:ec:4f:fc:91:3f: 53:88:06:a2:83:de:f8:41:e2:88:15:60:a0:82:46:ab:67:0c: bd:ff:94:01:c9:02:5d:aa:ca:90:a2:17:a8:5d:74:a9:65:04: 4e:f0:cc:d6:1e:24:20:f6:a5:53:7d:bc:0e:df:d3:49:af:61: dd:b1:cc:10:8e:bd:25:de:ae:b5:56:81:a6:39:1d:db:55:a6: e8:b7:34:99:05:a5:3c:65:4f:c7:1a:9a:e6:96:4c:da:ee:9c: 51:e7:47:7d:c1:45:12:c1:d1:f7:2b:c8:a4:28:8f:e5:c3:88: 3d:5b:a9:62:fd:49:19:f2:a6:6f:fb:6d:a0:49:e4:b0:60:a5: 1d:d4:44:3c:21:ed:bf:9b:b6:73:81:0c:43:3e:88:68:b9:68: 4a:de:f4:75:67:d8:d8:5d:34:59:de:bc:22:0e:5f:56:3f:fb: 3c:01:52:46:24:7c:df:f4:56:30:9e:48:50:ce:d7:cc:5e:2c: 00:ae:22:f9:89:7d:c7:50:3d:ae:f9:bc:85:b6:7b:78:fe:ee: ff:26:7b:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzA1OTExMC8GA1UEBRMoNDk3QkI3MjcxODI3OURCQ0M5ODVEQkE2RDM5QjM2NTY3 RjQ0RTdBQTAeFw0yNjAxMTEwNjIzMjFaFw0yNjAxMTgwNjIzMjFaMBgxFjAUBgNV BAMMDTY5NjM0MWQ5LWY3NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7QfXvVs4mjoWo8SCmUL7TFLM4NSanQpuY7HCepnxTJYP51ZSA7xGW7iYV24dx 1OGDf9TIGQgsZ8MSNkL66N7QiMTbTDHBi1ZO3cnfXUvCCFdjqLR/Rpi83K5D4qTg fp1BEu9MZ+9Jw14xiXp0dHsz97fCtA8E14AauBqCk1SaGo4X2H/87sZSXVrQHsqj Z5NJAlF7S+Lx02VzfOcDchbq4ilZeYwZackAeh9JhBhbYGhyNXcgPgOP/Eef8xNv 9584lHeipKpkPuk5rs3+hcUl8rz+AtAjORRWqMsOWyr9HH5TYs/E5us4QCnbn+Gs y80GpRdlag/J81D4IJea/WPzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoOYjBXQz zek88X6jdSJzQfN5lgEwHwYDVR0jBBgwFoAUSXu3JxgnnbzJhdum05s2Vn9E56ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMDU5L0IyQ0VBN0Y2NzlG NjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6SmhkdW0wNXMyVm45RTU2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1h1M0p4Z25uYnpKaGR1bTA1czJWbjlFNTZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MDU5L0IyQ0VBN0Y2NzlGNjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6 SmhkdW0wNXMyVm45RTU2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACR6PPKcdvqGfNemaBm8APOa7vfSRHIFY9jU0cS+kjWyfeD8BhUcULD0 tSOEZJ/Gi7nsT/yRP1OIBqKD3vhB4ogVYKCCRqtnDL3/lAHJAl2qypCiF6hddKll BE7wzNYeJCD2pVN9vA7f00mvYd2xzBCOvSXerrVWgaY5HdtVpui3NJkFpTxlT8ca muaWTNrunFHnR33BRRLB0fcryKQoj+XDiD1bqWL9SRnypm/7baBJ5LBgpR3URDwh 7b+btnOBDEM+iGi5aEre9HVn2NhdNFnevCIOX1Y/+zwBUkYkfN/0VjCeSFDO18xe LACuIvmJfcdQPa75vIW2e3j+7v8me7Y= -----END CERTIFICATE-----Generated at Sun Jan 11 08:39:47 2026 by rpki-client