This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json) Hash identifier: V9oUVmnWwJYXfnFH7LaLyp4hWgt0Mm4Yvz9hSVpFtmE= Subject key identifier: 53:21:B8:6A:DD:0F:21:9B:B9:5F:6E:14:A1:F4:3F:E3:7C:68:63:9D Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 03B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft Manifest number: 0390 Signing time: Sat 24 Jan 2026 23:59:35 +0000 Manifest this update: Sat 24 Jan 2026 23:59:34 +0000 Manifest next update: Sat 31 Jan 2026 23:59:34 +0000 Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: L/1gNjXZE5GGATZ3pFrKtFOoVdvhDWksRSWcV5JDndI=) 2: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: eS0SkthbbyWxVM1PH+Y2UO1xSi4Vr2C2N13i593TCX4=) 3: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: QV4TEx4o0H+S1ztXPsRaHI/PqCLYaPoZZrkBgaPymwI=) 4: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: uEFMEysaJCpfT6acgeEaH657dOYiucYQFMSducsR5+M=) 5: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: RP0USEP4cmm5/rPyavYfSImz5bM19LFBMACm4cna7sk=) 6: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: 1zywqVEPzRbdKjUH9lfurYX548Q8woU0JCmn0L04HiU=) 7: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: ugSG0jqem3rs4xTGOWUqAAlzlasFYzS5jXjJfZyh3NM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 946 (0x3b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: Jan 24 23:59:34 2026 GMT Not After : Jan 31 23:59:34 2026 GMT Subject: CN=69755ce7-a6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a8:21:6a:af:f8:66:65:bc:19:94:cf:fa:9c: 50:5d:03:67:f9:9d:88:e8:b7:e8:3d:a4:36:1b:58: b7:25:a2:49:89:a1:0c:c7:ee:74:6a:af:03:75:c2: 04:61:ab:7b:69:d5:71:a2:2c:f0:6c:2b:da:15:56: 0d:d5:b0:91:18:aa:72:f1:eb:64:2d:44:aa:f1:f8: a6:af:f4:c6:67:ca:d9:ef:17:47:22:74:cb:8c:4f: 4e:d8:73:28:78:2b:b6:d7:0f:55:46:fe:66:c2:6a: 3b:df:d2:e7:4e:09:bb:80:44:b5:61:b9:bc:b6:ec: 16:19:e2:eb:9a:df:81:60:66:8d:d6:b8:9a:89:03: d4:d4:a7:52:da:e0:ae:fa:cc:8c:ed:51:a5:f6:48: f4:c5:d4:c8:e9:76:2e:f1:91:df:13:1e:b4:c8:29: d4:14:8c:da:05:23:99:83:d3:18:65:54:1a:56:5f: d0:e5:cc:ce:47:8a:69:fc:3b:a4:4a:de:32:26:7c: 7e:63:92:9c:a2:92:ec:d5:cf:58:40:a4:d9:c6:44: cb:9a:bb:ab:ec:fe:76:5c:8a:7e:4a:31:0d:cc:d5: df:1e:50:92:09:8c:e7:c4:da:14:2d:78:e2:f3:a2: 10:63:91:e3:4f:5b:eb:f8:16:1c:0c:b6:ee:c7:79: 3d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:21:B8:6A:DD:0F:21:9B:B9:5F:6E:14:A1:F4:3F:E3:7C:68:63:9D X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:bb:79:53:80:6e:dd:2e:c2:c5:1f:27:ef:cd:82:6b:08:3c: 13:57:07:9f:5b:40:79:65:0c:db:cf:3a:f6:e6:c6:e6:4f:63: a3:c7:03:fc:e0:6e:61:39:b3:b0:b6:71:61:91:ae:8b:a9:6e: c5:4d:e9:c1:1a:21:9f:c7:da:b2:8f:f5:29:93:67:6a:c8:db: 0b:54:c1:3e:a1:be:08:89:1b:76:aa:7b:c4:8c:dc:d4:d1:0a: b8:09:5f:20:2f:ce:de:29:26:74:c3:27:a8:58:b9:0c:2b:20: 7f:78:aa:82:c3:b9:2f:7b:9c:2f:56:c1:ff:9d:b5:ca:3a:4c: d6:f9:f0:fa:bf:13:14:f3:b4:b6:c2:65:28:a5:c2:f0:98:38: bd:a2:b5:9b:ba:67:0f:ba:91:b2:a2:2c:83:67:ac:c8:a1:dd: f0:ab:91:55:02:db:46:f5:62:0b:5f:26:68:a8:7a:17:3f:8c: 10:e6:fc:f3:68:be:90:e0:72:d5:b1:c5:25:19:d5:92:c4:36: 36:ff:38:db:c8:a8:37:8d:d1:26:55:7e:ff:7c:c8:f8:e2:31: e1:90:b2:c2:85:71:73:84:dc:ee:b7:25:bb:65:83:ec:04:2b: c7:76:54:c4:36:15:62:8d:d9:43:cb:e8:0d:7a:86:a2:3e:70: 80:45:19:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjYwMTI0MjM1OTM0WhcNMjYwMTMxMjM1OTM0WjAYMRYwFAYD VQQDDA02OTc1NWNlNy1hNmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0aghaq/4ZmW8GZTP+pxQXQNn+Z2I6LfoPaQ2G1i3JaJJiaEMx+50aq8DdcIE Yat7adVxoizwbCvaFVYN1bCRGKpy8etkLUSq8fimr/TGZ8rZ7xdHInTLjE9O2HMo eCu21w9VRv5mwmo739LnTgm7gES1Ybm8tuwWGeLrmt+BYGaN1riaiQPU1KdS2uCu +syM7VGl9kj0xdTI6XYu8ZHfEx60yCnUFIzaBSOZg9MYZVQaVl/Q5czOR4pp/Duk St4yJnx+Y5KcopLs1c9YQKTZxkTLmrur7P52XIp+SjENzNXfHlCSCYznxNoULXji 86IQY5HjT1vr+BYcDLbux3k9cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMhuGrd DyGbuV9uFKH0P+N8aGOdMB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDZCMS85QTBFQ0UxMEQwRjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZP TVhUR2NBcmdTQ1RpOEZ3akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSu3lTgG7dLsLFHyfvzYJrCDwTVwefW0B5ZQzbzzr25sbmT2OjxwP8 4G5hObOwtnFhka6LqW7FTenBGiGfx9qyj/Upk2dqyNsLVME+ob4IiRt2qnvEjNzU 0Qq4CV8gL87eKSZ0wyeoWLkMKyB/eKqCw7kve5wvVsH/nbXKOkzW+fD6vxMU87S2 wmUopcLwmDi9orWbumcPupGyoiyDZ6zIod3wq5FVAttG9WILXyZoqHoXP4wQ5vzz aL6Q4HLVscUlGdWSxDY2/zjbyKg3jdEmVX7/fMj44jHhkLLChXFzhNzutyW7ZYPs BCvHdlTENhVijdlDy+gNeoaiPnCARRkJ -----END CERTIFICATE-----Generated at Sun Jan 25 07:47:46 2026 by rpki-client