This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json) Hash identifier: m3BM3/6katL8ddRk+lUYAV6jq6j8Mi+yYRjcTJJ3aWs= Subject key identifier: B0:54:70:75:CA:F2:55:12:13:29:BB:23:EA:AD:00:DC:53:A9:C7:AA Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft Manifest number: 0222 Signing time: Fri 16 Jan 2026 22:31:01 +0000 Manifest this update: Fri 16 Jan 2026 22:31:00 +0000 Manifest next update: Fri 23 Jan 2026 22:31:00 +0000 Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: 1gL7jvF8tFA4WpoqWUZdug2I4YnElNVGVMHx7dzK+PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 22:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Validity Not Before: Jan 16 22:31:00 2026 GMT Not After : Jan 23 22:31:00 2026 GMT Subject: CN=696abc25-34be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5d:fb:3d:af:ac:78:36:9a:9c:e7:1d:d0:f9: 28:e9:88:9e:5c:35:dc:19:87:79:b8:08:50:d4:ee: 9b:62:f4:ee:7d:31:e1:24:7c:6f:71:b7:98:c8:ff: 21:f5:a8:c9:01:d1:ce:30:c4:2d:a1:b3:01:12:68: 57:13:e0:e3:a1:18:89:fd:b4:0b:4d:4e:57:af:28: 03:e0:b5:78:e6:35:7d:39:ad:58:2c:5b:cc:2b:3c: 48:d2:44:59:da:9c:da:62:f7:1f:28:2b:03:e4:4f: 1c:cd:ea:c3:67:5c:5b:bc:cd:4c:db:f8:89:65:33: dd:18:f0:ea:06:f1:be:35:13:11:5d:5d:21:bd:b6: 6f:4d:54:f9:57:02:ce:ae:55:6f:cd:5b:bc:90:0b: 71:71:2f:05:39:2f:c6:da:82:5d:d5:c0:15:d2:13: 94:4b:eb:af:c3:d9:5a:3b:aa:0c:c2:d7:37:32:07: 3e:f5:25:41:3c:70:d0:04:8f:0e:75:41:b1:1b:a4: 8e:f9:89:b4:20:f8:53:2c:40:cf:92:42:e4:14:41: 56:7b:82:19:54:77:c9:90:49:1d:12:ca:e0:3a:0e: 45:5c:84:1a:ea:cd:9d:d9:15:fe:29:e0:db:53:f6: 70:9b:73:09:66:28:51:2e:34:37:9d:39:86:d2:f2: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:54:70:75:CA:F2:55:12:13:29:BB:23:EA:AD:00:DC:53:A9:C7:AA X509v3 Authority Key Identifier: keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:68:68:3b:32:e1:23:4b:b6:b7:02:57:19:b2:4c:2f:57:99: c1:f5:fa:37:2f:0b:c8:6b:cc:77:68:7d:63:67:bd:ce:4c:60: 3f:72:9c:dd:c0:24:04:20:03:db:2c:10:f7:24:29:18:0b:01: 69:71:8a:69:88:7d:60:ca:c6:f4:53:3b:2a:5e:9e:c3:5b:b5: de:8b:cb:4c:79:78:d2:74:52:f1:12:b2:d0:27:90:c2:68:e9: bf:a5:d8:4b:82:61:29:1f:6a:1f:3d:14:10:d8:93:9c:e5:25: a7:9a:f0:43:3b:7a:46:62:8f:8f:15:72:c4:d8:15:af:06:ee: f4:52:e9:0d:c3:b7:75:56:14:f2:30:e6:ea:e3:e4:cb:27:2b: 87:74:85:ba:53:37:99:56:72:08:68:1e:6b:21:dc:b0:31:17: c6:55:98:df:59:7c:f0:78:71:51:81:d3:11:0c:a4:8b:88:5f: 09:78:f8:2d:81:0b:45:1b:d3:d7:48:b8:95:86:f1:24:c1:9c: 48:19:fa:c3:a3:48:8a:fa:87:0e:8f:cb:9b:e8:79:16:c8:dd: 7c:95:74:c5:9e:e3:0f:c9:e7:85:76:37:bf:44:4e:70:03:df: 68:65:a6:cf:38:c7:eb:25:c6:15:df:f8:1d:c8:8a:98:7e:e7: a6:cf:3f:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDMzI3QjRBMjM1QkY4OTBGRDI2OTFGQjAzRTk0QTZG MTZDQkYyM0MwHhcNMjYwMTE2MjIzMTAwWhcNMjYwMTIzMjIzMTAwWjAYMRYwFAYD VQQDDA02OTZhYmMyNS0zNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx137Pa+seDaanOcd0Pko6YieXDXcGYd5uAhQ1O6bYvTufTHhJHxvcbeYyP8h 9ajJAdHOMMQtobMBEmhXE+DjoRiJ/bQLTU5XrygD4LV45jV9Oa1YLFvMKzxI0kRZ 2pzaYvcfKCsD5E8czerDZ1xbvM1M2/iJZTPdGPDqBvG+NRMRXV0hvbZvTVT5VwLO rlVvzVu8kAtxcS8FOS/G2oJd1cAV0hOUS+uvw9laO6oMwtc3Mgc+9SVBPHDQBI8O dUGxG6SO+Ym0IPhTLEDPkkLkFEFWe4IZVHfJkEkdEsrgOg5FXIQa6s2d2RX+KeDb U/Zwm3MJZihRLjQ3nTmG0vIkPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBUcHXK 8lUSEym7I+qtANxTqceqMB8GA1UdIwQYMBaAFFwye0ojW/iQ/SaR+wPpSm8Wy/I8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS83NUIyODZDMkFF OTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1KRDlKcEg3QS1sS2J4Ykw4 ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hESjdTaU5iLUpEOUpwSDdBLWxLYnhiTDhqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS83NUIyODZDMkFFOTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1K RDlKcEg3QS1sS2J4Ykw4ancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXaGg7MuEjS7a3AlcZskwvV5nB9fo3LwvIa8x3aH1jZ73OTGA/cpzd wCQEIAPbLBD3JCkYCwFpcYppiH1gysb0UzsqXp7DW7Xei8tMeXjSdFLxErLQJ5DC aOm/pdhLgmEpH2ofPRQQ2JOc5SWnmvBDO3pGYo+PFXLE2BWvBu70UukNw7d1VhTy MObq4+TLJyuHdIW6UzeZVnIIaB5rIdywMRfGVZjfWXzweHFRgdMRDKSLiF8JePgt gQtFG9PXSLiVhvEkwZxIGfrDo0iK+ocOj8ub6HkWyN18lXTFnuMPyeeFdje/RE5w A99oZabPOMfrJcYV3/gdyIqYfuemzz/Y -----END CERTIFICATE-----Generated at Sun Jan 18 04:35:00 2026 by rpki-client