This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft File: KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json) Hash identifier: XHn8zkQCh3DQ75V2q5HUM0qkms7GIquqRWp7hFI4R3A= Subject key identifier: 56:3D:31:5D:B3:BE:67:7A:10:E1:04:F5:EF:43:1C:51:17:D4:54:3E Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 Certificate issuer: /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft Manifest number: 90 Signing time: Fri 23 Jan 2026 05:35:48 +0000 Manifest this update: Fri 23 Jan 2026 05:35:47 +0000 Manifest next update: Fri 30 Jan 2026 05:35:47 +0000 Files and hashes: 1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: 2ieSfera/VunEBrLazfJl6/cwH9A6YdMfMq5lHkiP5g=) 2: C028C06E18E211F081A75558C4F9AE02.roa (hash: +HdHyMhgt4vT3DS5nsB5YQiE8tKIuj7aqeWwrUFKUm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 05:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Validity Not Before: Jan 23 05:35:47 2026 GMT Not After : Jan 30 05:35:47 2026 GMT Subject: CN=697308b4-256e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:60:62:a1:b9:e2:d9:4f:41:eb:14:3f:ad:7b: bb:3a:ae:ac:04:a8:ee:9e:b1:74:9f:e1:54:cc:63: 5d:62:9d:f4:d1:e4:19:26:12:99:e4:58:e1:ba:8c: bb:21:6f:52:5c:bf:cf:69:72:6c:20:3b:ab:87:68: ea:38:27:6e:39:8b:17:93:ad:cb:e6:ae:47:1c:6d: d5:1c:fa:c3:a7:29:42:8b:1f:d9:e3:07:34:dc:6e: 21:d9:c4:ca:0f:e9:b1:ad:7e:f6:bc:f9:ac:d9:71: 4f:77:f7:c5:eb:4e:c4:d7:2c:fa:71:b9:cd:74:4a: c5:6c:75:31:c9:2b:c3:1a:4a:8c:2d:2e:42:c0:df: ed:d8:16:33:9a:5c:21:e0:4f:af:82:08:ce:a1:40: cf:90:cd:a0:9e:34:41:13:4e:29:2d:3a:18:dd:59: ea:1c:7e:e5:e2:d4:0e:ee:49:8b:55:65:f1:06:fc: 9c:f6:42:b7:db:15:c5:17:f2:57:d5:57:3a:90:42: 3b:e3:1b:e9:2f:4a:69:12:f9:d2:c2:3b:a3:ac:4d: a2:9e:36:c4:4a:4a:ea:cb:a9:ba:32:69:f8:0e:3c: 15:2a:a2:6d:74:61:06:1d:07:08:78:32:b7:f3:d3: e5:c1:ce:9d:d4:5d:3c:d3:d0:ee:4d:60:d8:3c:47: 80:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3D:31:5D:B3:BE:67:7A:10:E1:04:F5:EF:43:1C:51:17:D4:54:3E X509v3 Authority Key Identifier: keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:e0:84:02:c0:f8:4e:d4:e3:ee:69:19:2a:3a:26:92:79:fb: f3:3b:17:22:b1:c2:f6:8d:50:30:8b:d1:46:0f:71:e2:6e:92: a5:53:68:ca:b6:ef:1b:80:22:b3:6f:65:e5:2a:92:e0:04:17: cd:09:a6:79:16:9b:38:02:a3:75:7d:67:7d:6f:e2:34:76:96: 53:19:b0:53:50:ec:c2:e8:d5:ff:92:e5:82:6b:87:13:83:6e: a6:fb:0f:1e:85:82:85:3c:eb:13:d6:df:5b:d3:28:06:fc:2f: 15:f2:a2:de:fa:c6:59:65:be:bc:a1:a3:3d:2a:4c:57:0b:57: 7d:82:b8:0e:eb:2a:94:0f:8e:97:6d:ab:42:18:d1:9c:2e:16: a2:93:e9:c1:2f:94:8d:f4:51:04:8e:2f:b1:14:ed:7f:39:b5: 9c:bd:6e:f9:64:3d:e4:ca:84:60:f8:f1:83:9a:08:ec:a7:0b: 55:7e:f5:42:33:a0:b3:85:45:df:07:68:36:39:ba:ea:03:55: 36:f4:f7:6f:56:2d:bf:19:e7:ec:f3:57:b0:ce:9d:86:bf:58: 51:c8:47:31:6b:04:b7:b2:4d:f1:04:4f:23:12:af:2c:00:97: fe:9c:45:2c:8b:fa:c2:95:66:04:53:4b:ba:58:64:6c:79:9a: f3:ab:a6:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFM0YxMTAvBgNVBAUTKDI4QkVFNzA0MDRCMjQzMDk2NEMzMDI5MjkwRDNFQTYw NEM5MTBFQjEwHhcNMjYwMTIzMDUzNTQ3WhcNMjYwMTMwMDUzNTQ3WjAYMRYwFAYD VQQDDA02OTczMDhiNC0yNTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mBiobni2U9B6xQ/rXu7Oq6sBKjunrF0n+FUzGNdYp300eQZJhKZ5Fjhuoy7 IW9SXL/PaXJsIDurh2jqOCduOYsXk63L5q5HHG3VHPrDpylCix/Z4wc03G4h2cTK D+mxrX72vPms2XFPd/fF607E1yz6cbnNdErFbHUxySvDGkqMLS5CwN/t2BYzmlwh 4E+vggjOoUDPkM2gnjRBE04pLToY3VnqHH7l4tQO7kmLVWXxBvyc9kK32xXFF/JX 1Vc6kEI74xvpL0ppEvnSwjujrE2injbESkrqy6m6Mmn4DjwVKqJtdGEGHQcIeDK3 89Plwc6d1F0809DuTWDYPEeADwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFY9MV2z vmd6EOEE9e9DHFEX1FQ+MB8GA1UdIwQYMBaAFCi+5wQEskMJZMMCkpDT6mBMkQ6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEUzRi8zQzNFNjIwRTE4 RTIxMUYwOUJFOTk1NTdDNEY5QUUwMi9LTDduQkFTeVF3bGt3d0tTa05QcVlFeVJE ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tMN25CQVN5UXdsa3d3S1NrTlBxWUV5UkRyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEUzRi8zQzNFNjIwRTE4RTIxMUYwOUJFOTk1NTdDNEY5QUUwMi9LTDduQkFTeVF3 bGt3d0tTa05QcVlFeVJEckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE4IQCwPhO1OPuaRkqOiaSefvzOxciscL2jVAwi9FGD3HibpKlU2jK tu8bgCKzb2XlKpLgBBfNCaZ5Fps4AqN1fWd9b+I0dpZTGbBTUOzC6NX/kuWCa4cT g26m+w8ehYKFPOsT1t9b0ygG/C8V8qLe+sZZZb68oaM9KkxXC1d9grgO6yqUD46X batCGNGcLhaik+nBL5SN9FEEji+xFO1/ObWcvW75ZD3kyoRg+PGDmgjspwtVfvVC M6CzhUXfB2g2ObrqA1U29PdvVi2/Gefs81ewzp2Gv1hRyEcxawS3sk3xBE8jEq8s AJf+nEUsi/rClWYEU0u6WGRseZrzq6a+ -----END CERTIFICATE-----Generated at Sun Jan 25 02:57:32 2026 by rpki-client