This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json) Hash identifier: 4epuvB/ezprfVa+2jpD+NPNtiXv1OpXdtHTDmhbGxqc= Subject key identifier: 0B:64:7F:41:D5:08:BD:36:50:C3:74:F8:4F:7E:47:27:39:30:F8:7E Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft Manifest number: 7D Signing time: Sat 17 Jan 2026 05:52:01 +0000 Manifest this update: Sat 17 Jan 2026 05:52:00 +0000 Manifest next update: Sat 24 Jan 2026 05:52:00 +0000 Files and hashes: 1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: kA3CbGm6el3+yDOyXJ9qCUhkynmt3zlRTl79sHgyz2Q=) 2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: lmR9ugrjbQmDnUx1UBy+nG9XOBElNu6bjT8wakrFaOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 05:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Validity Not Before: Jan 17 05:52:00 2026 GMT Not After : Jan 24 05:52:00 2026 GMT Subject: CN=696b2381-e648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:62:6f:cc:d1:ec:69:1e:09:d0:b9:eb:8f:b4: 88:71:4d:ac:a5:94:4c:52:c6:8f:8c:a9:eb:51:d1: 0c:df:a7:cb:19:22:c6:13:d4:02:5c:57:a1:89:07: 26:34:89:2f:12:2b:82:87:d5:8f:17:64:61:91:bc: b0:c6:5e:1e:bc:64:ab:c4:f2:8c:91:83:5f:6a:d9: c9:0a:4b:c7:ca:f5:89:d6:54:76:7f:c0:0c:38:ae: 1d:62:6a:32:8d:65:8f:a5:18:47:6d:8b:65:0e:00: a3:93:05:fe:e9:62:36:59:cf:f0:7d:d0:ee:7d:59: 56:42:74:f4:47:5b:20:c2:a9:7a:43:7e:ba:8d:ec: ea:1e:e0:3b:96:c6:cb:b3:e5:20:fd:6b:6c:b2:a2: 78:a6:1c:8d:d0:f3:42:ed:48:56:b5:88:d7:ef:8e: a1:9a:e8:ac:a0:44:35:84:08:f7:af:d9:37:c4:80: 65:6d:6c:3f:f4:74:a0:40:bf:d2:25:a0:22:ab:8b: 19:43:79:be:93:d1:1c:ea:91:66:35:d3:38:bf:9d: fa:61:b5:7d:e8:76:b9:94:f5:d4:81:46:ac:33:d9: f4:f0:8a:34:6c:ec:43:47:82:8f:f9:ce:b2:5c:e1: 76:54:03:70:cb:09:e9:a0:fa:d2:41:46:d2:70:1c: 93:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:64:7F:41:D5:08:BD:36:50:C3:74:F8:4F:7E:47:27:39:30:F8:7E X509v3 Authority Key Identifier: keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:36:5c:4b:e6:54:b0:7d:cb:02:9a:69:a6:92:bb:90:27:08: 09:45:87:e0:c6:69:ab:54:17:1f:96:36:54:09:b4:30:31:43: de:1a:2f:c6:c8:da:fd:c4:41:89:c0:b4:79:24:4b:5f:da:27: 6d:70:8e:69:41:01:f9:98:f2:f9:36:3f:38:54:1a:fa:7f:96: d5:2d:b6:09:63:28:35:3d:30:80:90:fa:60:07:fb:52:8a:ca: 7f:9b:bf:02:e2:be:df:5f:0f:44:6f:64:fd:ff:1f:5f:3a:d5: f8:de:5c:70:5f:b2:23:86:dd:93:72:12:d2:0f:9d:ff:9b:fa: 14:4e:33:dc:c4:7e:7f:d8:87:ec:08:88:3e:40:fc:0f:cd:3c: 96:e7:f2:55:5d:5c:4f:1c:32:ac:6b:d7:00:36:35:b1:ba:3f: a0:ed:bb:c8:7b:e5:cb:22:73:c3:7c:76:05:72:6d:e3:71:a1: 28:5d:e5:bc:87:9e:ae:f9:50:a1:6e:4d:5c:19:86:f8:43:3f: 6b:07:61:b4:f5:7b:6e:5d:34:7d:f8:21:f7:f7:68:3b:05:c7: ad:64:87:50:94:03:6b:13:f3:39:f2:cc:ef:30:e5:c2:4c:0f: 87:c5:7a:b8:d5:e9:61:46:fc:02:f4:78:ff:18:d0:2d:87:ae: 78:ff:72:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTg1NzExMC8GA1UEBRMoQzQyNkQ0MjY0MDA2NzY1NTU5NzNERkVERTRFQjI2NDRC RUVEMjg3MzAeFw0yNjAxMTcwNTUyMDBaFw0yNjAxMjQwNTUyMDBaMBgxFjAUBgNV BAMMDTY5NmIyMzgxLWU2NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoYm/M0expHgnQueuPtIhxTayllExSxo+MqetR0Qzfp8sZIsYT1AJcV6GJByY0 iS8SK4KH1Y8XZGGRvLDGXh68ZKvE8oyRg19q2ckKS8fK9YnWVHZ/wAw4rh1iajKN ZY+lGEdti2UOAKOTBf7pYjZZz/B90O59WVZCdPRHWyDCqXpDfrqN7Ooe4DuWxsuz 5SD9a2yyonimHI3Q80LtSFa1iNfvjqGa6KygRDWECPev2TfEgGVtbD/0dKBAv9Il oCKrixlDeb6T0RzqkWY10zi/nfphtX3odrmU9dSBRqwz2fTwijRs7ENHgo/5zrJc 4XZUA3DLCemg+tJBRtJwHJO7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC2R/QdUI vTZQw3T4T35HJzkw+H4wHwYDVR0jBBgwFoAUxCbUJkAGdlVZc9/t5OsmRL7tKHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxODU3L0MxRjczMDcyM0M5 ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxWWmM5X3Q1T3NtUkw3dEtI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveENiVUprQUdkbFZaYzlfdDVPc21STDd0S0hNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx ODU3L0MxRjczMDcyM0M5ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxW WmM5X3Q1T3NtUkw3dEtITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB02XEvmVLB9ywKaaaaSu5AnCAlFh+DGaatUFx+WNlQJtDAxQ94aL8bI 2v3EQYnAtHkkS1/aJ21wjmlBAfmY8vk2PzhUGvp/ltUttgljKDU9MICQ+mAH+1KK yn+bvwLivt9fD0RvZP3/H1861fjeXHBfsiOG3ZNyEtIPnf+b+hROM9zEfn/Yh+wI iD5A/A/NPJbn8lVdXE8cMqxr1wA2NbG6P6Dtu8h75csic8N8dgVybeNxoShd5byH nq75UKFuTVwZhvhDP2sHYbT1e25dNH34Iff3aDsFx61kh1CUA2sT8znyzO8w5cJM D4fFerjV6WFG/AL0eP8Y0C2Hrnj/cio= -----END CERTIFICATE-----Generated at Sun Jan 18 03:16:28 2026 by rpki-client