This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft File: Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft (raw, json) Hash identifier: 9aZXMYVhnX0R5sw9H6Sca25ZCBuEThjn/rfQwxpQIi0= Subject key identifier: EC:4E:DB:8C:87:1D:74:02:70:76:FD:C5:6B:C3:10:C2:DD:E6:08:58 Authority key identifier: 5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 Certificate issuer: /CN=A91CB6E8/serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft Manifest number: 34 Signing time: Sat 17 Jan 2026 06:35:52 +0000 Manifest this update: Sat 17 Jan 2026 06:35:52 +0000 Manifest next update: Sat 24 Jan 2026 06:35:52 +0000 Files and hashes: 1: Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl (hash: b4I130yVN2mxAtbJ1k9uhQ73cfq/rLcIdmM6KEYOZq0=) 2: 1104D6A2AF1611F0AF70E679C4F9AE02.roa (hash: FWjLvjv3Gipsu55Q7SW82j2fnJS3sRrWxfm+lFFErW0=) 3: 65FAD636AF1411F0BE4BF94FC4F9AE02.roa (hash: C5FWkpg3JA7HokTHMhnJCp3tLDwUp2pk+wUDmviorYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Validity Not Before: Jan 17 06:35:52 2026 GMT Not After : Jan 24 06:35:52 2026 GMT Subject: CN=696b2dc8-11b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c2:d5:de:c2:8b:0a:95:55:75:36:ed:92:0e: d2:e6:9f:a0:a1:7c:fa:56:72:12:df:e6:67:fc:32: 2f:6e:46:95:c7:19:48:5d:79:85:ae:a2:99:dd:c4: 63:49:cc:7f:4e:c3:69:22:5c:1c:c0:2c:03:50:b9: e9:00:c0:26:28:db:af:47:b0:a4:49:d1:21:0a:a9: 93:a3:4b:9d:cc:ad:6d:ed:b4:1d:1c:3b:b1:fc:bb: 9e:66:3e:42:01:2b:ee:ac:b7:5c:95:b8:36:a8:fa: 1f:6d:12:51:ff:02:2c:c5:1f:75:10:ad:ed:16:51: 17:41:81:3c:61:6e:72:49:27:0a:bc:38:6a:a9:41: 76:60:4c:d7:c5:5f:bd:04:17:f5:1d:1d:ab:d9:e9: 7f:47:48:65:54:b9:c3:6e:05:80:2b:fe:ed:4c:b5: 33:46:70:77:44:65:04:a2:c9:64:c6:81:15:fc:76: 91:bf:1c:ab:92:52:95:ea:2e:52:2d:4d:8f:3d:f9: 94:82:a0:30:50:b0:65:de:a3:a9:0a:fd:bf:1a:b7: cd:cb:e9:da:e5:ab:8f:ed:67:cc:4d:d8:67:06:1a: 71:6b:26:74:3c:86:55:9b:7e:f2:b4:2e:a9:70:bb: 04:1a:9c:b7:b8:99:f0:87:1b:ca:58:e8:06:db:56: f5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4E:DB:8C:87:1D:74:02:70:76:FD:C5:6B:C3:10:C2:DD:E6:08:58 X509v3 Authority Key Identifier: keyid:5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:de:6a:f9:1f:ce:e8:83:5a:a4:b8:e4:53:7e:96:bf:92:da: df:25:4d:49:57:3a:a3:75:3f:e5:87:1f:54:35:f4:ae:d2:a2: 19:9b:f1:75:34:d4:49:d8:a2:93:0f:6a:ac:2c:29:bb:bb:0e: 5b:5a:43:8e:27:6d:f2:8f:aa:b5:34:4f:e8:d8:7a:42:d5:ed: 6a:a0:67:e8:cd:49:60:47:0a:ff:99:40:84:04:f3:95:cb:b8: 85:cd:14:53:5f:02:0d:85:e1:7b:1d:0f:6e:d9:fb:f7:48:07: 33:7c:35:ba:d0:0a:27:60:42:57:fa:a3:c7:4c:64:31:31:4b: a9:86:1a:1b:9d:90:d3:58:91:ae:00:9f:f3:04:c6:23:c5:19: 4c:de:cd:84:2c:c8:ff:3b:df:cb:41:dd:4e:aa:47:9d:47:b2: 06:cd:56:fa:a2:14:74:46:64:2d:36:94:fe:ad:3f:8a:97:df: 20:b9:a6:2e:8a:41:e9:88:8c:f7:08:e7:7a:5c:37:75:a4:ee: 44:a7:dc:59:2b:22:fd:74:ec:5f:e0:0c:fe:1a:87:0d:a1:6a: fe:07:26:9e:84:78:b3:a1:09:c0:ff:6a:29:4a:b9:89:2b:b0: 0b:a1:55:4d:55:66:7d:11:59:34:c0:ea:10:e7:03:91:13:d4: e7:39:96:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjZFODExMC8GA1UEBRMoNURERkREMzgzMTU2RkE1QjY1MzQxMTJFOUM4RTE1M0JC MjAwNTdDNjAeFw0yNjAxMTcwNjM1NTJaFw0yNjAxMjQwNjM1NTJaMBgxFjAUBgNV BAMMDTY5NmIyZGM4LTExYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjwtXewosKlVV1Nu2SDtLmn6ChfPpWchLf5mf8Mi9uRpXHGUhdeYWuopndxGNJ zH9Ow2kiXBzALANQuekAwCYo269HsKRJ0SEKqZOjS53MrW3ttB0cO7H8u55mPkIB K+6st1yVuDao+h9tElH/AizFH3UQre0WURdBgTxhbnJJJwq8OGqpQXZgTNfFX70E F/UdHavZ6X9HSGVUucNuBYAr/u1MtTNGcHdEZQSiyWTGgRX8dpG/HKuSUpXqLlIt TY89+ZSCoDBQsGXeo6kK/b8at83L6drlq4/tZ8xN2GcGGnFrJnQ8hlWbfvK0Lqlw uwQanLe4mfCHG8pY6AbbVvURAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7E7bjIcd dAJwdv3Fa8MQwt3mCFgwHwYDVR0jBBgwFoAUXd/dODFW+ltlNBEunI4VO7IAV8Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNkU4L0Y5QjAyODg4QUVG RTExRjA4OEI5OUMyN0M0RjlBRTAyL1hkX2RPREZXLWx0bE5CRXVuSTRWTzdJQVY4 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWGRfZE9ERlctbHRsTkJFdW5JNFZPN0lBVjhZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NkU4L0Y5QjAyODg4QUVGRTExRjA4OEI5OUMyN0M0RjlBRTAyL1hkX2RPREZXLWx0 bE5CRXVuSTRWTzdJQVY4WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIzeavkfzuiDWqS45FN+lr+S2t8lTUlXOqN1P+WHH1Q19K7Sohmb8XU0 1EnYopMPaqwsKbu7DltaQ44nbfKPqrU0T+jYekLV7WqgZ+jNSWBHCv+ZQIQE85XL uIXNFFNfAg2F4XsdD27Z+/dIBzN8NbrQCidgQlf6o8dMZDExS6mGGhudkNNYka4A n/MExiPFGUzezYQsyP8738tB3U6qR51HsgbNVvqiFHRGZC02lP6tP4qX3yC5pi6K QemIjPcI53pcN3Wk7kSn3FkrIv107F/gDP4ahw2hav4HJp6EeLOhCcD/ailKuYkr sAuhVU1VZn0RWTTA6hDnA5ET1Oc5lls= -----END CERTIFICATE-----Generated at Sun Jan 18 03:15:28 2026 by rpki-client