This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft File: U7ksLaLVSegUcEB8yP8MdbjEty0.mft (raw, json) Hash identifier: SHePR68EI10fQalQDs+qsuwsgltOTGccqN61DYPa/cw= Subject key identifier: AE:F5:E7:E6:F0:26:20:31:31:97:BC:7E:A3:3B:48:01:DD:D8:19:AD Authority key identifier: 53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D Certificate issuer: /CN=A91940AE/serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft Manifest number: 08 Signing time: Fri 23 Jan 2026 07:08:09 +0000 Manifest this update: Fri 23 Jan 2026 07:08:09 +0000 Manifest next update: Fri 30 Jan 2026 07:08:09 +0000 Files and hashes: 1: U7ksLaLVSegUcEB8yP8MdbjEty0.crl (hash: M9o7xR6S1Mm3BXC8SjDOGg+Q6/TK1GXz7y9PWS2uIIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 07:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91940AE, serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D Validity Not Before: Jan 23 07:08:09 2026 GMT Not After : Jan 30 07:08:09 2026 GMT Subject: CN=69731e59-2387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d9:11:c5:0a:35:e1:12:16:98:00:92:7e:d2: f0:7c:b7:96:40:e6:6d:b3:a7:b1:20:8b:0d:74:ea: 21:7f:58:8a:37:73:da:a2:b4:ab:9c:a0:b3:1f:bb: b1:c0:6d:cd:6e:1a:34:a5:b7:88:d6:bf:73:9f:0d: 47:1b:ec:3c:37:5f:89:6b:fb:05:e4:72:cd:bd:a9: 82:30:53:8b:f8:3f:97:d7:41:9b:8c:2d:e3:b3:07: 78:e4:6c:e2:66:24:52:7b:25:ba:fb:45:89:e2:91: f0:10:d0:1f:c3:30:2d:1c:c9:55:20:9d:8e:ff:a7: e7:1b:42:a0:d4:98:de:c9:32:ec:c4:65:8c:7c:47: 66:d7:f3:5c:c9:35:c6:df:cb:09:55:a6:33:05:22: ef:3e:79:87:0f:d7:61:16:2f:33:4b:d5:5c:db:ff: 3f:a1:9c:c2:c6:2d:23:cc:d1:24:fc:73:0e:a1:4f: 01:cc:fc:a2:06:0d:fc:9a:17:dc:4b:79:6a:9b:f7: 8c:bd:23:61:30:5f:9c:8e:58:5b:f0:a0:e5:dd:52: 2b:5c:bf:c3:00:b3:12:9a:05:91:d6:68:cd:b6:f8: f3:ed:d2:5d:19:80:22:5e:68:e3:24:f3:b9:b9:00: 7d:b9:43:9b:34:b7:2d:bd:35:9c:4c:64:03:da:e5: 3f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F5:E7:E6:F0:26:20:31:31:97:BC:7E:A3:3B:48:01:DD:D8:19:AD X509v3 Authority Key Identifier: keyid:53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:32:de:19:cb:15:7d:2b:17:f1:5c:cc:a9:f7:99:59:7f:ff: b1:65:1d:6c:1e:b5:21:1b:37:61:f5:f0:4e:c4:08:db:5c:74: 7a:42:91:38:59:92:9b:bc:8e:fc:91:88:90:af:3b:94:08:de: d5:b5:63:7f:35:2e:1f:c5:fa:74:61:fd:63:aa:1d:64:b5:28: 4d:90:88:f1:f8:60:37:ec:e5:a3:5f:43:e3:c9:49:33:8b:97: 13:56:cc:62:27:85:c1:73:68:bc:96:20:08:40:b8:fc:96:ea: dd:26:87:ba:89:04:e9:25:44:6f:6a:be:a3:5f:60:92:ab:4a: 0b:4d:8e:eb:59:59:f2:71:d1:d0:f8:46:26:38:75:14:01:60: 3f:48:98:b4:db:22:cd:c2:92:78:36:1f:2f:a8:60:67:29:71: 91:45:e2:a8:ba:b7:ae:6f:52:b7:07:7e:ff:c9:5d:51:6f:ef: d8:ed:85:76:9a:e7:ea:21:bd:65:1a:a2:94:03:77:43:f6:29: 43:2d:46:f2:06:50:f9:5a:21:6d:4c:7f:1e:ab:da:fd:17:7d: 2a:60:f2:4e:3b:05:d6:49:8f:43:59:2d:52:f8:02:18:ce:44: 00:3d:c5:4f:0a:8a:54:82:4e:68:3d:b7:bb:31:51:ee:86:b5: c5:33:14:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE5 NDBBRTExMC8GA1UEBRMoNTNCOTJDMkRBMkQ1NDlFODE0NzA0MDdDQzhGRjBDNzVC OEM0QjcyRDAeFw0yNjAxMjMwNzA4MDlaFw0yNjAxMzAwNzA4MDlaMBgxFjAUBgNV BAMMDTY5NzMxZTU5LTIzODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCJ2RHFCjXhEhaYAJJ+0vB8t5ZA5m2zp7Egiw106iF/WIo3c9qitKucoLMfu7HA bc1uGjSlt4jWv3OfDUcb7Dw3X4lr+wXkcs29qYIwU4v4P5fXQZuMLeOzB3jkbOJm JFJ7Jbr7RYnikfAQ0B/DMC0cyVUgnY7/p+cbQqDUmN7JMuzEZYx8R2bX81zJNcbf ywlVpjMFIu8+eYcP12EWLzNL1Vzb/z+hnMLGLSPM0ST8cw6hTwHM/KIGDfyaF9xL eWqb94y9I2EwX5yOWFvwoOXdUitcv8MAsxKaBZHWaM22+PPt0l0ZgCJeaOMk87m5 AH25Q5s0ty29NZxMZAPa5T+BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrvXn5vAm IDExl7x+oztIAd3YGa0wHwYDVR0jBBgwFoAUU7ksLaLVSegUcEB8yP8MdbjEty0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0MEFFL0IzOEU1RkQ0RUY5 RDExRjBBMkQ2Qjc3OTY3NkY1NkJDL1U3a3NMYUxWU2VnVWNFQjh5UDhNZGJqRXR5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVTdrc0xhTFZTZWdVY0VCOHlQOE1kYmpFdHkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 MEFFL0IzOEU1RkQ0RUY5RDExRjBBMkQ2Qjc3OTY3NkY1NkJDL1U3a3NMYUxWU2Vn VWNFQjh5UDhNZGJqRXR5MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANAy3hnLFX0rF/FczKn3mVl//7FlHWwetSEbN2H18E7ECNtcdHpCkThZ kpu8jvyRiJCvO5QI3tW1Y381Lh/F+nRh/WOqHWS1KE2QiPH4YDfs5aNfQ+PJSTOL lxNWzGInhcFzaLyWIAhAuPyW6t0mh7qJBOklRG9qvqNfYJKrSgtNjutZWfJx0dD4 RiY4dRQBYD9ImLTbIs3Ckng2Hy+oYGcpcZFF4qi6t65vUrcHfv/JXVFv79jthXaa 5+ohvWUaopQDd0P2KUMtRvIGUPlaIW1Mfx6r2v0XfSpg8k47BdZJj0NZLVL4AhjO RAA9xU8KilSCTmg9t7sxUe6GtcUzFHQ= -----END CERTIFICATE-----Generated at Sun Jan 25 02:48:43 2026 by rpki-client