This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft File: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json) Hash identifier: qL/DH0WOSu4SFDEOnhyv41OiapeWRV0Soc91tK8188o= Subject key identifier: C7:00:FB:D2:49:C5:5D:1C:D4:B0:E9:6F:8E:F8:8F:13:93:3D:2A:CF Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 Certificate issuer: /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft Manifest number: 0141 Signing time: Fri 23 Jan 2026 03:34:08 +0000 Manifest this update: Fri 23 Jan 2026 03:34:08 +0000 Manifest next update: Fri 30 Jan 2026 03:34:08 +0000 Files and hashes: 1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: J0J2jGedRGs+4hmELfNZGo3qrytwTFBGJwbup07ClTM=) 2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: xyAm+OptmLWgEZqD9AH33MZxMqQhEFXVgaoDCMDjmoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 03:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91311BC, serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Validity Not Before: Jan 23 03:34:08 2026 GMT Not After : Jan 30 03:34:08 2026 GMT Subject: CN=6972ec30-f196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:87:0f:cf:e6:25:45:f9:69:06:2c:17:71:2d: 36:a6:70:cc:c6:4b:c9:a8:a8:f1:20:7e:b4:4c:41: af:7d:c5:90:49:ff:d8:3e:1b:94:e3:3e:d6:00:6b: 8c:c0:6f:4f:4f:67:1e:28:dc:e8:91:d1:45:d1:1e: 82:ea:f4:a6:cb:7d:b5:e4:3b:64:86:96:c9:c9:17: 09:1e:a1:24:55:1c:0a:1f:0f:9d:30:91:96:1c:5d: 8a:48:de:4b:25:9b:36:65:50:64:53:4d:a1:4a:74: 50:05:9a:0e:3e:d0:59:92:8c:38:43:7e:c7:4c:54: a8:0f:89:cd:a6:cc:e6:be:85:85:a6:f9:80:0b:91: 85:ef:f1:e4:cb:57:6a:dc:cf:dc:b4:72:37:97:af: 7e:6e:99:ee:77:f5:78:a1:39:d1:d1:7b:ec:20:b0: da:92:cb:6a:c8:69:78:6a:1a:4d:da:80:26:1d:ae: ff:78:3c:a4:0f:2f:67:e0:19:89:f6:d4:a3:9c:aa: b8:17:83:13:25:79:b0:a1:d7:8f:17:09:7e:72:12: 07:55:9e:33:40:e0:25:bc:83:49:bb:cc:ab:6f:e7: a6:a2:00:4e:07:0f:ce:2c:1e:b0:a6:1b:7e:2a:a3: d0:8b:2d:92:72:f4:02:02:88:4b:75:d4:a4:38:62: da:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:00:FB:D2:49:C5:5D:1C:D4:B0:E9:6F:8E:F8:8F:13:93:3D:2A:CF X509v3 Authority Key Identifier: keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:19:0d:de:7f:9c:24:14:1d:e4:2b:b9:c9:bb:17:fd:3a:cf: b7:1f:08:47:ff:f7:c2:e5:58:84:1a:23:15:3e:1f:82:13:c6: 96:70:7a:3a:9c:98:42:4b:97:65:6b:95:72:26:db:98:93:26: c0:74:50:03:16:d9:34:02:8c:5b:83:78:dd:0d:79:0c:4a:2b: 0a:b8:c2:39:64:2f:0a:68:9f:a1:62:3d:9f:ad:85:ae:52:4b: 88:e7:33:77:4a:da:4e:03:7b:26:14:29:0b:8c:c7:ad:2b:63: 05:d0:30:87:e6:35:9e:dd:1b:30:5c:bd:34:54:da:f6:53:d9: d7:6f:b3:89:53:bd:3d:23:54:cb:0c:3a:2c:01:2e:44:49:78: 11:cd:36:86:36:0d:d2:10:f7:96:42:57:22:13:23:34:cd:09: f0:80:bf:1b:14:57:38:f5:e6:d1:69:06:79:27:02:3c:2e:0d: d7:a4:12:70:1b:a6:e1:4f:87:06:27:3d:74:67:bc:91:82:0f: ae:a0:67:f3:b0:5a:6e:05:ef:80:03:1f:41:7f:30:12:86:ca: 10:e1:5b:26:4c:6c:22:35:1c:61:2c:c2:f5:61:fb:89:cc:c4: 8c:29:96:ec:a9:06:77:36:17:9c:c6:36:d4:9d:2a:5f:9b:44: 30:98:b6:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzExQkMxMTAvBgNVBAUTKEQ0QjFERDNFQjFBMDZGQTI2MkFCNkM1RUJGNEFGNTM2 NzFBQ0QyRjQwHhcNMjYwMTIzMDMzNDA4WhcNMjYwMTMwMDMzNDA4WjAYMRYwFAYD VQQDDA02OTcyZWMzMC1mMTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxocPz+YlRflpBiwXcS02pnDMxkvJqKjxIH60TEGvfcWQSf/YPhuU4z7WAGuM wG9PT2ceKNzokdFF0R6C6vSmy3215DtkhpbJyRcJHqEkVRwKHw+dMJGWHF2KSN5L JZs2ZVBkU02hSnRQBZoOPtBZkow4Q37HTFSoD4nNpszmvoWFpvmAC5GF7/Hky1dq 3M/ctHI3l69+bpnud/V4oTnR0XvsILDakstqyGl4ahpN2oAmHa7/eDykDy9n4BmJ 9tSjnKq4F4MTJXmwodePFwl+chIHVZ4zQOAlvINJu8yrb+emogBOBw/OLB6wpht+ KqPQiy2ScvQCAohLddSkOGLaIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcA+9JJ xV0c1LDpb474jxOTPSrPMB8GA1UdIwQYMBaAFNSx3T6xoG+iYqtsXr9K9TZxrNL0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTFCQy8wNUVFQUJGQzBG QTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2SmlxMnhldjByMU5uR3Mw dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMSGRQckdnYjZKaXEyeGV2MHIxTm5HczB2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTFCQy8wNUVFQUJGQzBGQTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2 SmlxMnhldjByMU5uR3MwdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPGQ3ef5wkFB3kK7nJuxf9Os+3HwhH//fC5ViEGiMVPh+CE8aWcHo6 nJhCS5dla5VyJtuYkybAdFADFtk0Aoxbg3jdDXkMSisKuMI5ZC8KaJ+hYj2frYWu UkuI5zN3StpOA3smFCkLjMetK2MF0DCH5jWe3RswXL00VNr2U9nXb7OJU709I1TL DDosAS5ESXgRzTaGNg3SEPeWQlciEyM0zQnwgL8bFFc49ebRaQZ5JwI8Lg3XpBJw G6bhT4cGJz10Z7yRgg+uoGfzsFpuBe+AAx9BfzAShsoQ4VsmTGwiNRxhLML1YfuJ zMSMKZbsqQZ3NhecxjbUnSpfm0QwmLYD -----END CERTIFICATE-----Generated at Sun Jan 25 04:34:42 2026 by rpki-client