This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json) Hash identifier: zqAj0D8bvwu0pfJa3RT1raC9xE7RUEd3xEQjs8x3obw= Subject key identifier: 70:EE:E8:1B:75:E9:C4:42:9B:BE:90:DC:FD:CE:62:67:23:AA:74:E5 Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft Manifest number: 4A Signing time: Sun 25 Jan 2026 06:22:01 +0000 Manifest this update: Sun 25 Jan 2026 06:22:01 +0000 Manifest next update: Sun 01 Feb 2026 06:22:01 +0000 Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: r180yrmSzehffAOk5RQkzOJOyR9jcfUhMHwS3v84xDY=) 2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: vMZkY4LJvSskuTqDy/+VGXHXuUJS0EC4VIR/FgkiiB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: Jan 25 06:22:01 2026 GMT Not After : Feb 1 06:22:01 2026 GMT Subject: CN=6975b689-e3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e9:d9:c6:36:a7:25:b0:2e:0c:6d:1c:46:3e: e7:76:c3:2e:ee:0d:0c:95:98:dc:b1:db:15:9d:45: 87:61:d6:da:0a:62:b1:df:ea:30:bb:15:bc:fd:0e: 27:98:e3:e1:4b:64:f6:73:ab:b0:17:98:dd:dc:98: 08:80:db:99:d3:b6:ed:29:bb:12:53:4c:63:d8:a5: 81:e8:17:82:e7:b6:e6:21:1f:ea:03:ab:c4:c4:a2: fc:01:08:2b:f7:57:0b:28:d5:82:60:3c:c1:62:d5: 62:bf:e8:0b:f5:59:f6:47:1f:4c:8d:d0:09:d6:6b: 00:15:fb:66:f0:65:d6:9c:a8:3b:cd:b7:95:7d:18: 9f:cb:42:20:ff:d8:b3:a4:b6:d9:7a:16:3f:5e:f6: d5:a8:a5:03:12:ac:cd:5f:8c:b8:8d:1e:a2:97:44: 93:20:f6:3f:74:5b:ac:31:d9:e0:52:2d:ee:05:f8: 57:77:d9:86:e6:24:9b:f0:6c:59:83:2e:8f:40:dd: 0b:98:b2:29:0f:ca:52:86:2d:53:b6:b7:71:ad:b1: 58:52:46:58:09:35:5b:3e:52:7b:39:df:89:56:2d: 0e:e0:13:33:39:32:16:62:2b:01:4a:29:2b:45:d4: fc:ae:6a:37:b6:49:c4:b3:c7:89:21:7c:a7:c0:20: 7c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EE:E8:1B:75:E9:C4:42:9B:BE:90:DC:FD:CE:62:67:23:AA:74:E5 X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:74:d5:7c:05:eb:44:ba:ce:b5:0a:3a:bc:76:e0:68:d5:ee: 1b:ab:13:db:49:c3:8c:78:3e:c1:e9:bd:8e:4f:57:35:57:29: 04:59:a1:4f:15:19:39:03:86:ab:f7:6b:6a:cc:f3:11:3a:85: 6f:73:6c:b1:0c:38:be:36:b4:9c:1c:7c:b7:bb:ef:3b:37:d9: a2:8a:c4:c2:76:74:4f:d0:75:bf:d1:8a:d2:a9:ee:ae:9f:19: ad:81:80:7b:4b:94:2c:52:c2:af:95:5c:78:d0:bf:b5:0b:06: 06:69:d0:fc:3e:4a:02:1f:4f:8a:8f:26:7d:fd:76:18:9e:6d: 5e:6f:c4:7b:a4:c0:e9:78:87:e4:32:3c:69:97:ed:65:58:c4: c6:ae:d0:64:b6:84:d6:78:53:92:92:39:6a:c8:4a:2f:eb:41: d0:29:2e:f0:ed:4e:16:eb:07:d9:3f:25:57:96:fd:22:98:e8: 3e:f6:df:10:c1:75:a9:04:df:ff:68:7f:a7:9c:8f:ea:3d:62: ae:09:1c:d0:c0:69:3d:50:7c:ea:45:77:01:38:59:5f:c7:50: 1c:06:7f:09:b6:7f:f5:d0:03:86:a6:eb:51:d8:a8:09:2e:d3: a6:0a:37:e7:b0:af:6e:39:87:ec:6d:09:49:e1:81:55:bc:1e: ab:be:5f:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFQzExMC8GA1UEBRMoMDgxMkEwOTY2MkYwQjNFMzRGMkI1QTUxQzMzRThFOTI3 MDNFNDM2OTAeFw0yNjAxMjUwNjIyMDFaFw0yNjAyMDEwNjIyMDFaMBgxFjAUBgNV BAMMDTY5NzViNjg5LWUzYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCc6dnGNqclsC4MbRxGPud2wy7uDQyVmNyx2xWdRYdh1toKYrHf6jC7Fbz9DieY 4+FLZPZzq7AXmN3cmAiA25nTtu0puxJTTGPYpYHoF4LntuYhH+oDq8TEovwBCCv3 Vwso1YJgPMFi1WK/6Av1WfZHH0yN0AnWawAV+2bwZdacqDvNt5V9GJ/LQiD/2LOk ttl6Fj9e9tWopQMSrM1fjLiNHqKXRJMg9j90W6wx2eBSLe4F+Fd32YbmJJvwbFmD Lo9A3QuYsikPylKGLVO2t3GtsVhSRlgJNVs+Uns534lWLQ7gEzM5MhZiKwFKKStF 1Pyuaje2ScSzx4khfKfAIHy1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcO7oG3Xp xEKbvpDc/c5iZyOqdOUwHwYDVR0jBBgwFoAUCBKglmLws+NPK1pRwz6OknA+Q2kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0VDLzI1NjM1N0M4ODdE RDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEy ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0JLZ2xtTHdzLU5QSzFwUnd6Nk9rbkEtUTJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0VDLzI1NjM1N0M4ODdERDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1O UEsxcFJ3ejZPa25BLVEyay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGt01XwF60S6zrUKOrx24GjV7hurE9tJw4x4PsHpvY5PVzVXKQRZoU8V GTkDhqv3a2rM8xE6hW9zbLEMOL42tJwcfLe77zs32aKKxMJ2dE/Qdb/RitKp7q6f Ga2BgHtLlCxSwq+VXHjQv7ULBgZp0Pw+SgIfT4qPJn39dhiebV5vxHukwOl4h+Qy PGmX7WVYxMau0GS2hNZ4U5KSOWrISi/rQdApLvDtThbrB9k/JVeW/SKY6D723xDB dakE3/9of6ecj+o9Yq4JHNDAaT1QfOpFdwE4WV/HUBwGfwm2f/XQA4am61HYqAku 06YKN+ewr245h+xtCUnhgVW8Hqu+Xyc= -----END CERTIFICATE-----Generated at Sun Jan 25 11:52:31 2026 by rpki-client