This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft File: Xx7oK_cJomzAAJlbR0geVPbzgG4.mft (raw, json) Hash identifier: htTC5WlhH+XtOCrv5BIC4gbjvWirdZhGPPWheimzWko= Subject key identifier: 44:3F:4B:D4:C7:FE:32:C3:95:67:49:0A:BA:D7:F1:D3:C6:43:C5:84 Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E Certificate issuer: /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft Manifest number: 0125 Signing time: Sat 17 Jan 2026 03:54:46 +0000 Manifest this update: Sat 17 Jan 2026 03:54:45 +0000 Manifest next update: Sat 24 Jan 2026 03:54:45 +0000 Files and hashes: 1: Xx7oK_cJomzAAJlbR0geVPbzgG4.crl (hash: P6nRq3SJZ/KU9oYwfTw4NjABfUntKROyEhUUP2Vhd7k=) 2: 9F4A37143EA511EF882FE276C4F9AE02.roa (hash: n1rSG6+YrBdrpyC7jAy4PT81hFwvfJMiF3pinZ5UvAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 03:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A, serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E Validity Not Before: Jan 17 03:54:45 2026 GMT Not After : Jan 24 03:54:45 2026 GMT Subject: CN=696b0806-c813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:55:a2:5c:5a:00:1e:6e:4b:0f:82:b2:14:b9: cf:94:f7:ce:01:e2:f3:5a:ea:09:36:af:87:cd:9c: 74:da:a1:3d:20:35:95:2b:be:6c:c8:de:cd:d0:f3: 76:f5:9e:0c:4d:10:98:7a:e1:57:54:ad:9e:c5:85: dc:7c:f9:8d:cd:ae:14:f0:48:3a:4e:af:21:3e:02: 2b:a3:71:0c:65:1e:10:a8:d9:74:d9:35:d6:11:b8: 86:42:97:99:a8:3c:10:c8:bb:49:ab:c3:fc:fb:0b: 85:b1:17:26:e4:8d:13:9a:e2:e0:5e:f1:95:bc:ec: b3:9a:15:3b:b0:0d:41:06:31:1e:61:4e:e9:23:56: a2:6d:2f:83:38:1f:4a:27:6d:af:95:87:dd:8e:23: d3:f2:dd:d3:37:10:6c:67:c3:18:05:07:b0:cc:7f: a6:ba:e6:8d:53:b5:a6:51:9b:90:f2:d0:3e:43:d7: b3:b2:fc:e7:d0:56:b6:f7:da:bc:ca:b3:b0:d6:40: 34:79:fc:0a:21:f8:ea:a7:68:42:68:db:b1:db:66: a5:96:07:73:42:9b:02:29:19:fa:c1:ec:84:d5:0e: 8f:49:df:96:a4:0a:4d:6f:a5:a1:9c:c4:53:f0:b9: 42:65:1d:ce:b7:32:9b:ce:ed:a6:92:dd:c3:6a:2f: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3F:4B:D4:C7:FE:32:C3:95:67:49:0A:BA:D7:F1:D3:C6:43:C5:84 X509v3 Authority Key Identifier: keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:ed:92:08:02:cd:03:92:dc:11:db:8d:64:be:e6:9e:5a:11: 2f:67:bb:8b:7e:56:ed:f9:83:21:55:2b:36:76:25:b2:40:52: c4:d6:c1:e6:f9:fa:c5:12:1a:b0:14:de:5e:ba:f6:94:76:b6: c3:16:06:44:62:7e:d2:a0:cf:13:69:1d:5f:4a:e8:cf:a8:7a: 9e:be:64:b7:ee:5f:a7:4a:d5:ef:89:1a:80:5b:41:45:3a:88: 96:1a:79:91:8e:3b:79:a8:0b:1b:c0:72:82:10:44:79:cc:54: b0:a0:26:88:3a:c1:b9:c5:c9:37:3f:55:0b:e9:f5:7e:d0:15: d5:cb:78:cf:c5:09:36:a7:c9:46:57:b7:27:3d:9f:ef:12:32: a4:61:a7:22:de:9f:0c:c5:9e:4d:1f:3e:15:be:4c:2e:be:09: e8:34:a1:6c:c6:48:7d:27:69:34:02:78:5c:2f:14:75:ca:0a: 7e:fb:c1:18:8e:fb:84:33:f3:26:ea:0c:11:1f:cd:b6:5d:80: 1a:5c:e2:d9:f8:b5:c3:58:3e:30:1a:e1:f8:50:79:ea:d9:d6: 3f:29:09:d8:a2:c4:d6:15:31:d1:52:24:f4:4a:c1:2b:46:de: 10:8c:8c:50:d2:72:93:5f:8d:9f:f5:8a:80:fe:c6:5e:ad:d2: 2a:fc:a5:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFMEExMTAvBgNVBAUTKDVGMUVFODJCRjcwOUEyNkNDMDAwOTk1QjQ3NDgxRTU0 RjZGMzgwNkUwHhcNMjYwMTE3MDM1NDQ1WhcNMjYwMTI0MDM1NDQ1WjAYMRYwFAYD VQQDDA02OTZiMDgwNi1jODEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkFWiXFoAHm5LD4KyFLnPlPfOAeLzWuoJNq+HzZx02qE9IDWVK75syN7N0PN2 9Z4MTRCYeuFXVK2exYXcfPmNza4U8Eg6Tq8hPgIro3EMZR4QqNl02TXWEbiGQpeZ qDwQyLtJq8P8+wuFsRcm5I0TmuLgXvGVvOyzmhU7sA1BBjEeYU7pI1aibS+DOB9K J22vlYfdjiPT8t3TNxBsZ8MYBQewzH+muuaNU7WmUZuQ8tA+Q9ezsvzn0Fa299q8 yrOw1kA0efwKIfjqp2hCaNux22allgdzQpsCKRn6weyE1Q6PSd+WpApNb6WhnMRT 8LlCZR3OtzKbzu2mkt3Dai8UPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQ/S9TH /jLDlWdJCrrX8dPGQ8WEMB8GA1UdIwQYMBaAFF8e6Cv3CaJswACZW0dIHlT284Bu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wM0IwNTJENDNF NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9YeDdvS19jSm9tekFBSmxiUjBnZVZQYnpn RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1h4N29LX2NKb216QUFKbGJSMGdlVlBiemdHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUUwQS8wM0IwNTJENDNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9YeDdvS19jSm9t ekFBSmxiUjBnZVZQYnpnRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU7ZIIAs0DktwR241kvuaeWhEvZ7uLflbt+YMhVSs2diWyQFLE1sHm +frFEhqwFN5euvaUdrbDFgZEYn7SoM8TaR1fSujPqHqevmS37l+nStXviRqAW0FF OoiWGnmRjjt5qAsbwHKCEER5zFSwoCaIOsG5xck3P1UL6fV+0BXVy3jPxQk2p8lG V7cnPZ/vEjKkYaci3p8MxZ5NHz4VvkwuvgnoNKFsxkh9J2k0AnhcLxR1ygp++8EY jvuEM/Mm6gwRH822XYAaXOLZ+LXDWD4wGuH4UHnq2dY/KQnYosTWFTHRUiT0SsEr Rt4QjIxQ0nKTX42f9YqA/sZerdIq/KWz -----END CERTIFICATE-----Generated at Sun Jan 18 03:17:31 2026 by rpki-client