This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json) Hash identifier: ytxR1SKbATft0o9KnZCq7QrjIAbxxGkylFnkbTaGTLA= Subject key identifier: 1A:B1:20:66:E9:EA:D3:18:B8:F6:5B:71:02:9B:AE:E5:16:AA:2F:4C Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft Manifest number: A8 Signing time: Sun 25 Jan 2026 05:25:51 +0000 Manifest this update: Sun 25 Jan 2026 05:25:51 +0000 Manifest next update: Sun 01 Feb 2026 05:25:51 +0000 Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: ZyV760bavS7BhV9Jkdy98f+TVNLYa7CxdxxZwjQQPvs=) 2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: dZ19lJ/LmfvsUh9I1/K0IKSV94UgWGsaBqWt/Z2oGKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Validity Not Before: Jan 25 05:25:51 2026 GMT Not After : Feb 1 05:25:51 2026 GMT Subject: CN=6975a95f-491c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2c:78:ca:1e:d7:42:2c:83:af:cf:ed:f7:34: 19:ae:71:29:07:e9:29:45:36:ed:c8:fb:61:cd:31: c8:f4:2a:b2:9f:12:67:22:4c:6a:fb:3f:76:3d:fc: d9:fb:42:cc:b0:3f:16:a4:9a:f9:65:64:50:9a:f5: 1c:ab:a8:a7:7c:7d:f7:9f:de:8e:98:1c:1c:8b:a0: 8a:b7:72:f4:e0:47:0f:a7:b2:87:69:1e:36:16:62: c6:d1:3e:88:c1:2a:cc:5d:24:4e:e1:7b:04:11:e4: 25:03:60:9c:4d:e6:c1:8c:c0:0a:16:02:48:00:3b: 34:fb:fe:f2:63:9b:8f:14:f4:da:6d:c6:72:8e:cd: b7:47:86:1f:e5:bd:3b:59:3a:a2:16:e6:d8:c5:09: 09:a7:c3:da:99:2f:6b:5f:d8:86:83:f0:12:3d:a9: 4f:2e:81:1f:7b:90:3c:af:a2:0d:fd:c7:eb:3c:88: 83:87:14:4d:bc:64:e5:ef:4f:05:07:98:cd:f8:c3: c6:02:f5:30:38:62:4c:b7:fa:24:0e:41:32:0c:60: 0e:1b:da:ad:5e:de:0c:f1:b1:ea:e9:b5:fa:8f:cc: e6:d2:3f:4d:1f:fa:43:27:7d:3b:86:c9:24:93:7e: c7:a7:98:f6:6e:46:4d:23:3f:3e:fa:2d:8d:ef:3d: c1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B1:20:66:E9:EA:D3:18:B8:F6:5B:71:02:9B:AE:E5:16:AA:2F:4C X509v3 Authority Key Identifier: keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:75:a3:55:9a:c2:18:4d:f2:ce:94:a3:df:4a:37:c0:3a:46: 5d:86:9f:aa:fe:93:a8:c6:46:ff:f1:26:31:fc:3b:59:a4:d2: 98:bc:a2:64:a7:7d:52:24:38:04:d6:ae:2b:19:88:f5:78:b3: b7:2f:95:0d:51:e9:ea:48:a2:0a:9c:cc:67:8d:cb:1b:77:68: 94:9f:70:6e:87:2f:55:e3:fd:c5:1a:8c:38:0b:48:93:9b:c2: f7:ae:2d:93:68:9d:0b:1d:05:da:d5:3a:db:be:12:34:81:b9: e7:6c:ee:fe:ac:67:3c:f9:18:a1:20:b7:f4:29:4c:76:92:c8: 52:82:5d:db:76:6c:66:a0:89:f4:61:f4:74:35:30:c4:60:0a: 42:a5:1f:3d:65:fb:0a:d7:84:5d:c8:0c:c9:c6:d6:1d:2c:2f: f8:28:5e:62:3b:cb:6c:8b:0f:40:db:3a:6b:94:c0:4e:1f:22: f9:4f:8a:7d:1d:3f:eb:82:41:5e:1a:b9:02:8e:e8:fa:97:b3: 6f:36:d8:31:d5:72:e8:b8:46:8d:89:3e:4d:8a:88:ad:ab:c7: 6b:b2:40:a8:a5:cb:72:2e:44:5d:d0:78:08:dc:f8:f7:b4:b4: 4b:6c:e7:a0:f4:85:c3:a4:78:17:76:c9:65:1b:f4:b1:e0:c2: f5:f9:28:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NzQxMTAvBgNVBAUTKDkwQjJGMTJCRTdBNTg2NjNCRjE1REM3MTdFN0Q0MEIz MDI0MUI4RUEwHhcNMjYwMTI1MDUyNTUxWhcNMjYwMjAxMDUyNTUxWjAYMRYwFAYD VQQDDA02OTc1YTk1Zi00OTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzix4yh7XQiyDr8/t9zQZrnEpB+kpRTbtyPthzTHI9CqynxJnIkxq+z92PfzZ +0LMsD8WpJr5ZWRQmvUcq6infH33n96OmBwci6CKt3L04EcPp7KHaR42FmLG0T6I wSrMXSRO4XsEEeQlA2CcTebBjMAKFgJIADs0+/7yY5uPFPTabcZyjs23R4Yf5b07 WTqiFubYxQkJp8PamS9rX9iGg/ASPalPLoEfe5A8r6IN/cfrPIiDhxRNvGTl708F B5jN+MPGAvUwOGJMt/okDkEyDGAOG9qtXt4M8bHq6bX6j8zm0j9NH/pDJ307hskk k37Hp5j2bkZNIz8++i2N7z3B+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqxIGbp 6tMYuPZbcQKbruUWqi9MMB8GA1UdIwQYMBaAFJCy8SvnpYZjvxXccX59QLMCQbjq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk3NC9FNEU4OTAwRUZC NjUxMUVGOUJCQUVFNDlDNEY5QUUwMi9rTEx4Sy1lbGhtT19GZHh4Zm4xQXN3SkJ1 T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMTHhLLWVsaG1PX0ZkeHhmbjFBc3dKQnVPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk3NC9FNEU4OTAwRUZCNjUxMUVGOUJCQUVFNDlDNEY5QUUwMi9rTEx4Sy1lbGht T19GZHh4Zm4xQXN3SkJ1T28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwdaNVmsIYTfLOlKPfSjfAOkZdhp+q/pOoxkb/8SYx/DtZpNKYvKJk p31SJDgE1q4rGYj1eLO3L5UNUenqSKIKnMxnjcsbd2iUn3Buhy9V4/3FGow4C0iT m8L3ri2TaJ0LHQXa1TrbvhI0gbnnbO7+rGc8+RihILf0KUx2kshSgl3bdmxmoIn0 YfR0NTDEYApCpR89ZfsK14RdyAzJxtYdLC/4KF5iO8tsiw9A2zprlMBOHyL5T4p9 HT/rgkFeGrkCjuj6l7NvNtgx1XLouEaNiT5Nioitq8drskCopctyLkRd0HgI3Pj3 tLRLbOeg9IXDpHgXdsllG/Sx4ML1+ShJ -----END CERTIFICATE-----Generated at Sun Jan 25 09:54:33 2026 by rpki-client