This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: ejJZ5U6yqU08MQR43eyBADbcnSIHGHJq4GlJFX71x+8= Subject key identifier: AA:6A:2A:F7:CF:51:A3:DE:46:79:01:59:69:36:33:84:48:B6:0D:B3 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 1220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 11EB Signing time: Sat 24 Jan 2026 16:54:07 +0000 Manifest this update: Sat 24 Jan 2026 16:54:07 +0000 Manifest next update: Sat 31 Jan 2026 16:54:07 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: 317s8nSOsH5ufRdfdgdxSAj0UStpcxpQ9ddRs+5E27k=) 2: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: 0Ni5FHtxPqtRB1YXZ5zRXDqJAM/35OEWFhDuPTdXe6o=) 3: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: IlX871gTVlMjHgxawx+1RHJJOHvxDDWwU+dINDtj5G0=) 4: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: C3b1kJVj/ZgKAe5Ws86NLC+2MF3aglPyf/qxRhLS+ZQ=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: NhCnhSZSfkDREQa5IgZy4tILaVnRqHkxPBLk2fQgkMU=) 6: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: jot76CXrAz3dE65zS5eFuiF7pvf8X1MVAGSlp7hXRdo=) 7: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: L9KTvljF01QWUS68uL1ITUuZceQQf452UdFJmG0kCrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4640 (0x1220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Jan 24 16:54:07 2026 GMT Not After : Jan 31 16:54:07 2026 GMT Subject: CN=6974f92f-e32b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2e:19:7e:f8:c3:b8:81:86:d0:35:ed:7b:13: b8:a3:11:bb:b0:fd:41:15:5c:c5:3c:04:d6:51:42: 8d:23:31:b7:ea:8b:bb:ba:d9:36:0a:1c:2f:7f:72: 3f:f9:9e:49:ae:f6:fd:af:f7:b9:5c:a9:b9:c5:76: 0c:6b:6d:26:6c:f7:57:56:c3:0f:41:14:0d:0f:67: 1a:9f:6b:37:26:29:61:a0:35:6f:6f:10:17:d2:e1: 60:2c:7f:11:0c:6d:4f:fb:e8:f0:19:7e:50:0c:55: cb:1e:50:25:24:78:29:c5:62:58:6c:59:0c:40:80: 0e:1d:91:d9:27:61:1f:cf:c5:2f:2d:8f:e9:2d:42: dd:9b:f7:fa:e1:1a:ed:ca:f9:e2:89:2d:ac:73:5d: 88:7c:95:98:6d:ef:ee:22:0b:de:ff:a9:21:d3:49: fe:59:0b:3a:92:8c:69:e0:6c:65:c3:5d:02:a5:b2: c7:58:90:99:8a:59:9e:88:fc:a7:9d:45:c5:f3:9f: 30:87:70:b0:1c:bf:b7:e6:da:67:7a:f2:da:fd:b1: 6f:81:67:3a:38:40:d1:4c:ca:56:a8:fb:97:43:b7: 1d:ee:16:f0:12:69:8d:0c:ec:ae:4d:cf:cd:fb:5c: da:52:f0:ff:1e:cb:0f:85:23:07:d0:7a:ab:9c:90: f2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6A:2A:F7:CF:51:A3:DE:46:79:01:59:69:36:33:84:48:B6:0D:B3 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:24:6b:66:86:36:f7:d2:f1:b9:48:e3:69:1e:7e:16:d9:1e: 37:74:5b:ed:1f:5c:e7:79:77:54:15:6d:18:7d:73:28:80:ab: 30:f0:a0:77:11:cc:21:31:04:81:e1:b7:90:0a:56:65:45:ac: b1:6d:51:66:79:47:1d:b9:f0:0f:d8:e5:b7:74:20:53:d1:ee: 3d:01:73:46:57:0b:46:9c:b8:96:0b:58:d4:dc:87:d6:54:6e: e1:f4:53:bf:2d:ec:8b:45:a8:f1:3c:8e:70:c0:56:d5:9b:cf: 8e:2f:ce:5a:0f:22:86:7b:86:67:b6:63:1a:dd:ec:8e:f8:f8: 39:fc:7a:34:94:64:33:95:9b:8a:ec:16:df:7a:ee:16:44:0a: 59:f9:76:8e:54:04:bc:a6:8b:85:4e:cb:93:70:2f:62:22:56: 64:cd:8c:31:ec:48:5b:4e:e5:21:77:dd:95:1a:70:26:78:2e: d7:2e:bf:78:5c:82:d1:db:65:2e:46:1a:e8:40:c2:50:48:3d: 3f:12:49:cb:0a:1d:8f:6f:f2:41:78:d3:84:6a:6b:b9:e0:3e: b4:b8:24:26:74:f4:97:7c:c5:f5:c4:cc:0d:4a:54:f4:20:41: c3:45:a5:a6:f4:e9:29:4b:f6:e6:61:c4:01:0d:3b:27:06:c0: ea:ff:65:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjYwMTI0MTY1NDA3WhcNMjYwMTMxMTY1NDA3WjAYMRYwFAYD VQQDDA02OTc0ZjkyZi1lMzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjS4ZfvjDuIGG0DXtexO4oxG7sP1BFVzFPATWUUKNIzG36ou7utk2Chwvf3I/ +Z5Jrvb9r/e5XKm5xXYMa20mbPdXVsMPQRQND2can2s3JilhoDVvbxAX0uFgLH8R DG1P++jwGX5QDFXLHlAlJHgpxWJYbFkMQIAOHZHZJ2Efz8UvLY/pLULdm/f64Rrt yvniiS2sc12IfJWYbe/uIgve/6kh00n+WQs6koxp4Gxlw10CpbLHWJCZilmeiPyn nUXF858wh3CwHL+35tpnevLa/bFvgWc6OEDRTMpWqPuXQ7cd7hbwEmmNDOyuTc/N +1zaUvD/HssPhSMH0HqrnJDypQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpqKvfP UaPeRnkBWWk2M4RItg2zMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvJGtmhjb30vG5SONpHn4W2R43dFvtH1zneXdUFW0YfXMogKsw8KB3 EcwhMQSB4beQClZlRayxbVFmeUcdufAP2OW3dCBT0e49AXNGVwtGnLiWC1jU3IfW VG7h9FO/LeyLRajxPI5wwFbVm8+OL85aDyKGe4ZntmMa3eyO+Pg5/Ho0lGQzlZuK 7Bbfeu4WRApZ+XaOVAS8pouFTsuTcC9iIlZkzYwx7EhbTuUhd92VGnAmeC7XLr94 XILR22UuRhroQMJQSD0/EknLCh2Pb/JBeNOEamu54D60uCQmdPSXfMX1xMwNSlT0 IEHDRaWm9OkpS/bmYcQBDTsnBsDq/2VQ -----END CERTIFICATE-----Generated at Sun Jan 25 06:12:33 2026 by rpki-client