This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft File: SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json) Hash identifier: U9LzGvoXOuY/NE1DO2VgwPohfuMouDRUAAryd0m7/6I= Subject key identifier: E2:46:1F:E2:D4:88:3B:6A:B8:5D:D0:A7:C9:0E:09:70:8A:EA:0F:1F Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC Certificate issuer: /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft Manifest number: 1B Signing time: Sat 17 Jan 2026 01:43:23 +0000 Manifest this update: Sat 17 Jan 2026 01:43:22 +0000 Manifest next update: Sat 24 Jan 2026 01:43:22 +0000 Files and hashes: 1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: 7B6d1GDaaoGrsQJfpGmFWW71vSrHXtu3uRUuO/bvtK0=) 2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: 6w+qBhaQP14zy72YyydEIPq0/gA1jmSu65E6u7NcIZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 01:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC Validity Not Before: Jan 17 01:43:22 2026 GMT Not After : Jan 24 01:43:22 2026 GMT Subject: CN=696ae93a-799c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:92:52:92:62:e8:8b:de:d1:7d:b1:d7:86: 76:d1:53:55:68:2a:68:bf:64:99:35:d4:92:43:39: ba:73:91:cf:49:57:e6:25:59:62:f1:f8:33:e3:03: e8:fe:f7:ca:ed:f0:58:40:be:a4:3e:7b:0e:d7:f4: 74:cd:58:99:8f:3f:aa:45:5b:93:28:74:7b:8b:7d: eb:a8:66:8b:16:87:b5:62:45:20:7d:09:89:dc:eb: 7f:c1:5e:e5:03:a7:cc:91:32:2f:75:5a:be:65:f1: d2:bd:e6:0e:5c:35:67:6a:ba:a8:f5:4f:51:8d:aa: 2c:b4:eb:ea:b0:e5:5a:20:79:70:3e:fa:24:4d:db: 28:25:dc:f1:64:6f:f1:55:87:23:99:10:08:e4:aa: 3f:b4:52:f0:62:94:91:db:97:d6:05:5e:03:fd:3c: 84:d5:79:ca:84:22:2a:33:e9:7c:cd:be:60:62:16: 51:14:8f:6b:8d:20:dc:c6:27:a8:8a:02:f4:aa:49: 2c:1e:67:e1:c2:4b:9f:31:dc:a5:27:16:27:eb:d2: 69:87:ec:5f:cb:8f:ea:df:95:a2:2e:f8:ab:0b:65: d9:e3:d0:b4:a2:1a:54:86:29:e0:23:39:e4:fb:57: 9d:5d:8e:05:30:43:1e:ef:6f:72:5f:9e:2b:3a:b9: 10:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:46:1F:E2:D4:88:3B:6A:B8:5D:D0:A7:C9:0E:09:70:8A:EA:0F:1F X509v3 Authority Key Identifier: keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c7:ad:78:0a:a8:11:68:0e:eb:fc:c3:c4:98:06:09:13:c0: 27:a8:58:e3:49:c0:c9:29:98:7c:86:80:4d:be:5e:c6:6e:7f: d6:c4:94:7b:cc:4d:19:6d:ce:8f:73:28:d0:a4:94:8a:71:27: 0f:58:4d:8d:1d:b3:f3:7b:d1:1f:25:cc:04:48:e5:99:7b:45: 41:5e:3a:99:fa:7d:15:f8:61:76:00:95:c5:16:40:e6:5c:65: 2c:28:0c:6c:30:a1:4c:d5:68:93:29:f6:6e:a4:09:7c:6b:ed: bd:f0:28:82:1c:4e:69:ce:21:cd:fe:26:fe:a6:66:70:81:ec: fa:fe:64:fb:48:18:66:a9:f1:01:f2:a6:2e:fb:ef:1b:6f:97: cb:6d:25:ec:85:78:43:d5:b2:8c:b2:07:22:3b:94:0e:1a:03: e8:0b:13:e3:00:0d:41:20:e1:fc:69:58:03:71:cd:47:9e:db: 6e:25:2a:f1:af:c9:13:0d:5c:f4:65:b3:2d:91:a9:4f:44:81: 76:fb:17:b0:c2:d0:0c:0b:b9:89:36:43:3b:97:a8:3f:ab:89: 49:14:28:0e:d2:2b:fb:ad:17:40:f0:bc:1a:f8:3f:04:d6:69: 95:27:5e:7f:d7:52:74:e0:ce:c3:d3:08:3e:77:d9:16:8f:9c: ab:db:61:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkE4RTExMC8GA1UEBRMoNDg4RkIwNjk3QzQ0Njk2MEZGREEyNjQzRTZCQzlCNDRC QTNEMUNBQzAeFw0yNjAxMTcwMTQzMjJaFw0yNjAxMjQwMTQzMjJaMBgxFjAUBgNV BAMMDTY5NmFlOTNhLTc5OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvSZJSkmLoi97RfbHXhnbRU1VoKmi/ZJk11JJDObpzkc9JV+YlWWLx+DPjA+j+ 98rt8FhAvqQ+ew7X9HTNWJmPP6pFW5ModHuLfeuoZosWh7ViRSB9CYnc63/BXuUD p8yRMi91Wr5l8dK95g5cNWdquqj1T1GNqiy06+qw5VogeXA++iRN2ygl3PFkb/FV hyOZEAjkqj+0UvBilJHbl9YFXgP9PITVecqEIioz6XzNvmBiFlEUj2uNINzGJ6iK AvSqSSweZ+HCS58x3KUnFifr0mmH7F/Lj+rflaIu+KsLZdnj0LSiGlSGKeAjOeT7 V51djgUwQx7vb3Jfnis6uRDdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4kYf4tSI O2q4XdCnyQ4JcIrqDx8wHwYDVR0jBBgwFoAUSI+waXxEaWD/2iZD5rybRLo9HKww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQThFLzZCOUEyMzM4Q0U2 RjExRjBBMzIzREY1NUM0RjlBRTAyL1NJLXdhWHhFYVdEXzJpWkQ1cnliUkxvOUhL dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU0ktd2FYeEVhV0RfMmlaRDVyeWJSTG85SEt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QThFLzZCOUEyMzM4Q0U2RjExRjBBMzIzREY1NUM0RjlBRTAyL1NJLXdhWHhFYVdE XzJpWkQ1cnliUkxvOUhLdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH7HrXgKqBFoDuv8w8SYBgkTwCeoWONJwMkpmHyGgE2+XsZuf9bElHvM TRltzo9zKNCklIpxJw9YTY0ds/N70R8lzARI5Zl7RUFeOpn6fRX4YXYAlcUWQOZc ZSwoDGwwoUzVaJMp9m6kCXxr7b3wKIIcTmnOIc3+Jv6mZnCB7Pr+ZPtIGGap8QHy pi777xtvl8ttJeyFeEPVsoyyByI7lA4aA+gLE+MADUEg4fxpWANxzUee224lKvGv yRMNXPRlsy2RqU9EgXb7F7DC0AwLuYk2QzuXqD+riUkUKA7SK/utF0DwvBr4PwTW aZUnXn/XUnTgzsPTCD532RaPnKvbYYI= -----END CERTIFICATE-----Generated at Sun Jan 18 03:16:14 2026 by rpki-client