This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft File: sxbAG3t1QxTi8Y9zen19iayrfmg.mft (raw, json) Hash identifier: vKzNSFKBCo1xqUam8Q/m6YR3VgwjlWsPQ9BA09ObGWc= Subject key identifier: 4C:60:4D:B1:4F:B5:68:47:24:BA:A7:BC:9D:EE:99:4B:88:F1:D3:42 Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68 Certificate issuer: /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft Manifest number: 2C Signing time: Tue 03 Feb 2026 07:30:08 +0000 Manifest this update: Tue 03 Feb 2026 07:30:08 +0000 Manifest next update: Tue 10 Feb 2026 07:30:08 +0000 Files and hashes: 1: sxbAG3t1QxTi8Y9zen19iayrfmg.crl (hash: ZAkBunR/PuKtL2ZPCqZLASNmdd3sJEaUcR87Z4Jf+B4=) 2: 8C21D58ACCFB11F08C34EC45C4F9AE02.roa (hash: zO3eHRQaLoJDtz5i54a8aGSxd9NadRVjZ+xhsPWeZ+c=) 3: F6921460F58D11F0BCCF7FE5756F56BC.roa (hash: tVrrylSFPXX4f/uBOg5gxYytLtT1vYd/bYgLKIT3L4I=) 4: 8BB48B56CCFB11F0B624EC45C4F9AE02.roa (hash: JXhMVFF9LOX2GddOqFjlhclH4AnOFFWS0nrFu9DCJ0w=) 5: 2601F1CEEB7111F0839E97F34E6F56BC.roa (hash: I/Y87XRrRQwO7a2UPMEge+E7HPCSkvSS2jWDgsl93I0=) 6: F715DFB6F58D11F0BCCF7FE5756F56BC.roa (hash: ojY/ZS9+ARoYvpueFXHTnfFLZSL99uZEUM+qAvc27fs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Feb 2026 07:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68 Validity Not Before: Feb 3 07:30:08 2026 GMT Not After : Feb 10 07:30:08 2026 GMT Subject: CN=6981a400-587e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f2:04:19:58:3c:57:66:6d:6a:2e:01:8b:26: a8:b9:ad:01:c3:ef:83:3e:9c:ee:87:e2:8d:d1:64: af:2a:8c:d6:6d:bb:78:ae:40:b9:83:c4:df:a8:f1: 52:2a:57:d1:88:fb:f9:f4:dc:70:e6:17:b4:41:8f: 43:56:b9:e3:ee:84:c1:43:7c:46:8d:d5:b1:7d:d5: 77:82:d9:44:b3:a4:55:f2:e4:96:2d:c5:62:40:42: f7:64:d7:45:17:90:3c:4e:fb:fa:ab:fa:c9:32:3e: 3e:3b:51:45:59:50:a7:a1:39:d3:5c:74:43:75:ff: 68:50:cd:ec:3e:2c:5f:e3:1b:56:d1:83:f5:cd:e8: 40:0a:2f:d8:a2:28:aa:e5:ea:4d:0b:b9:13:fa:c9: 65:9f:05:fa:de:1b:f1:82:b7:a3:a3:04:90:06:63: fc:d4:37:2c:59:c9:83:4c:89:59:69:5d:92:14:21: e0:24:03:8e:91:61:8e:35:19:b4:fc:7a:5d:dc:f8: ec:1f:7f:29:d4:e1:ec:b3:db:4e:c7:48:97:75:6e: 1f:21:0c:01:60:4b:ce:c2:63:eb:10:b9:d8:a8:51: f5:6f:a8:5f:59:10:d3:be:28:ea:84:9a:92:ff:3f: bd:2d:6b:c0:e4:dd:01:4c:0d:72:f0:49:1e:a2:63: 8c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:60:4D:B1:4F:B5:68:47:24:BA:A7:BC:9D:EE:99:4B:88:F1:D3:42 X509v3 Authority Key Identifier: keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c7:13:1c:e5:b6:8d:b5:38:89:a5:e4:e1:ca:04:91:c6:2d: b0:41:7c:64:8a:d8:d1:7d:f3:27:44:fe:a8:97:65:3a:82:83: 98:00:f0:0e:fa:53:a8:c3:fd:d0:df:c5:80:f6:2f:e1:33:a3: 06:a3:86:e7:bb:27:3f:39:e4:7b:32:dc:40:f8:cc:dc:93:45: fb:40:a2:91:61:2d:a3:25:21:b3:43:8c:71:c0:c4:e9:dd:0e: b6:86:01:fe:7a:05:b2:0d:12:c9:93:d5:46:8c:d4:6e:e5:9a: 7c:df:59:1e:1e:1c:26:00:87:e8:38:d0:96:4f:32:dc:81:74: 56:d6:97:58:14:c4:fb:15:77:98:f2:59:66:74:2d:11:0d:47: fc:02:a5:55:6e:91:38:af:1e:d8:55:45:0d:8f:48:ca:bd:66: 31:1b:a4:56:3f:7d:ed:bd:6e:6d:1f:3d:03:22:bb:84:4a:37: de:ec:ef:78:81:a0:c3:ec:81:59:92:99:e2:a8:d4:9f:fd:bf: 89:97:e6:76:0a:92:0b:36:3a:e5:5a:00:be:03:72:85:0c:c2: cd:3c:f8:47:8b:31:c5:3e:24:5e:6f:f6:26:0d:36:c6:a4:71: 84:43:3d:ed:b1:9d:5f:57:7e:7b:8d:86:be:95:52:d2:4d:ee: 0d:26:2c:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE OTgzQjExMC8GA1UEBRMoQjMxNkMwMUI3Qjc1NDMxNEUyRjE4RjczN0E3RDdEODlB Q0FCN0U2ODAeFw0yNjAyMDMwNzMwMDhaFw0yNjAyMTAwNzMwMDhaMBgxFjAUBgNV BAMMDTY5ODFhNDAwLTU4N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCa8gQZWDxXZm1qLgGLJqi5rQHD74M+nO6H4o3RZK8qjNZtu3iuQLmDxN+o8VIq V9GI+/n03HDmF7RBj0NWuePuhMFDfEaN1bF91XeC2USzpFXy5JYtxWJAQvdk10UX kDxO+/qr+skyPj47UUVZUKehOdNcdEN1/2hQzew+LF/jG1bRg/XN6EAKL9iiKKrl 6k0LuRP6yWWfBfreG/GCt6OjBJAGY/zUNyxZyYNMiVlpXZIUIeAkA46RYY41GbT8 el3c+OwffynU4eyz207HSJd1bh8hDAFgS87CY+sQudioUfVvqF9ZENO+KOqEmpL/ P70ta8Dk3QFMDXLwSR6iY4zPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTGBNsU+1 aEckuqe8ne6ZS4jx00IwHwYDVR0jBBgwFoAUsxbAG3t1QxTi8Y9zen19iayrfmgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5ODNCL0RGQUY5OTkyQ0Mw MzExRjBCMUUyNUI0MUM0RjlBRTAyL3N4YkFHM3QxUXhUaThZOXplbjE5aWF5cmZt Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3hiQUczdDFReFRpOFk5emVuMTlpYXlyZm1nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 ODNCL0RGQUY5OTkyQ0MwMzExRjBCMUUyNUI0MUM0RjlBRTAyL3N4YkFHM3QxUXhU aThZOXplbjE5aWF5cmZtZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJvHExzlto21OIml5OHKBJHGLbBBfGSK2NF98ydE/qiXZTqCg5gA8A76 U6jD/dDfxYD2L+Ezowajhue7Jz855Hsy3ED4zNyTRftAopFhLaMlIbNDjHHAxOnd DraGAf56BbINEsmT1UaM1G7lmnzfWR4eHCYAh+g40JZPMtyBdFbWl1gUxPsVd5jy WWZ0LRENR/wCpVVukTivHthVRQ2PSMq9ZjEbpFY/fe29bm0fPQMiu4RKN97s73iB oMPsgVmSmeKo1J/9v4mX5nYKkgs2OuVaAL4DcoUMws08+EeLMcU+JF5v9iYNNsak cYRDPe2xnV9XfnuNhr6VUtJN7g0mLBk= -----END CERTIFICATE-----Generated at Thu Feb 5 10:50:36 2026 by rpki-client