This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft File: mzDlUwzhTILM3z53pTDnP9QQ43c.mft (raw, json) Hash identifier: Pzv8usf50vLQ5MWYvdixq01D09GShCOJmmmgLRsMCuk= Subject key identifier: 07:64:98:7B:C0:3E:69:27:3C:56:F0:15:A2:2A:EC:36:09:77:D3:EC Authority key identifier: 9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77 Certificate issuer: /CN=A91A98E5/serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft Manifest number: 01EA Signing time: Fri 23 Jan 2026 02:09:16 +0000 Manifest this update: Fri 23 Jan 2026 02:09:16 +0000 Manifest next update: Fri 30 Jan 2026 02:09:16 +0000 Files and hashes: 1: mzDlUwzhTILM3z53pTDnP9QQ43c.crl (hash: MMKTD4KXzbsuRGali3Y2rvFOHXmyX8DFDwFFaXBm+pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 02:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A98E5, serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377 Validity Not Before: Jan 23 02:09:16 2026 GMT Not After : Jan 30 02:09:16 2026 GMT Subject: CN=6972d84c-5c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:0b:e5:64:8d:04:ca:cf:22:f6:9b:46:a0: d1:ac:33:d2:13:92:75:0a:26:c8:bb:fd:74:16:d3: 8c:1b:e3:49:c8:5b:29:bd:01:95:3b:be:0a:1a:d5: 09:41:e5:01:e1:99:a1:e4:45:c7:c2:03:b8:34:de: 24:c8:00:01:1b:fc:6d:43:18:80:bf:0d:83:2e:b6: 6e:6a:c3:71:fc:7a:05:b7:ff:ff:ef:c2:0a:df:c3: 1b:46:e4:b4:21:cc:95:1c:3a:d5:b8:06:32:9f:1f: f9:b8:50:74:70:3c:9c:81:6c:22:bd:24:d3:95:97: 4d:70:02:ea:fc:52:6c:77:67:15:f6:e0:7a:31:df: ef:a7:db:5b:3a:2b:e7:bc:65:7c:d4:c2:57:8c:2e: 90:63:6d:91:f3:30:89:ee:be:b5:33:28:e7:2e:52: 01:32:fb:2e:a7:b6:0f:df:3e:15:77:75:d1:42:64: 80:af:1f:7d:4e:91:85:63:c2:33:24:28:da:5f:60: 26:89:e8:d4:3c:25:72:8c:97:64:79:2d:2e:13:97: 4a:6f:b6:77:92:82:44:39:ee:4e:73:9b:44:a5:61: aa:f7:bc:c3:a2:7f:15:28:cf:33:16:e2:d4:a8:0a: 5e:3f:a8:08:a9:90:d6:3b:ee:12:6e:13:fd:60:a3: db:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:64:98:7B:C0:3E:69:27:3C:56:F0:15:A2:2A:EC:36:09:77:D3:EC X509v3 Authority Key Identifier: keyid:9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:89:70:1c:74:bf:66:b1:29:11:df:29:54:04:63:e4:98:62: dc:47:92:e3:a7:22:6b:a9:84:5a:47:8f:75:e0:88:54:ef:64: cd:be:c3:be:01:2c:10:8e:bf:26:11:fc:84:14:f2:25:07:53: a2:30:32:5f:2d:fe:75:9e:1b:03:54:1b:ed:ea:f6:92:c9:6e: b1:52:ad:57:fd:81:16:c3:3b:d9:a0:b3:bc:f0:99:4f:bc:0d: c0:1a:05:04:db:5d:83:09:a6:5b:31:c1:1d:0e:f1:5e:f7:db: 9e:53:ef:d0:4a:8b:3c:a8:ef:c6:21:f1:3c:25:14:98:8a:36: df:ee:45:91:12:4e:2f:0a:22:b3:eb:65:5c:0a:bd:3a:94:ed: 15:45:79:c8:02:1d:10:f1:2d:e2:cb:e0:a0:7a:d8:7d:89:d6: 35:4e:c7:a5:20:04:2e:fa:ee:27:eb:f2:64:02:e3:67:31:a8: 1c:77:d9:74:d9:b2:95:55:4f:26:5a:40:60:9a:07:5f:35:da: 8f:57:3e:22:6b:f1:2d:1f:64:53:8f:b3:2e:35:3a:ce:ec:08: 49:97:48:60:fe:6f:ba:ae:47:a7:3e:f7:05:37:68:21:e4:5f: bb:ff:40:1e:8a:cb:ea:ff:f1:a5:5c:97:9f:89:49:97:75:22: 89:63:87:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk4RTUxMTAvBgNVBAUTKDlCMzBFNTUzMENFMTRDODJDQ0RGM0U3N0E1MzBFNzNG RDQxMEUzNzcwHhcNMjYwMTIzMDIwOTE2WhcNMjYwMTMwMDIwOTE2WjAYMRYwFAYD VQQDDA02OTcyZDg0Yy01YzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxIL5WSNBMrPIvabRqDRrDPSE5J1CibIu/10FtOMG+NJyFspvQGVO74KGtUJ QeUB4Zmh5EXHwgO4NN4kyAABG/xtQxiAvw2DLrZuasNx/HoFt///78IK38MbRuS0 IcyVHDrVuAYynx/5uFB0cDycgWwivSTTlZdNcALq/FJsd2cV9uB6Md/vp9tbOivn vGV81MJXjC6QY22R8zCJ7r61MyjnLlIBMvsup7YP3z4Vd3XRQmSArx99TpGFY8Iz JCjaX2AmiejUPCVyjJdkeS0uE5dKb7Z3koJEOe5Oc5tEpWGq97zDon8VKM8zFuLU qApeP6gIqZDWO+4SbhP9YKPbawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdkmHvA PmknPFbwFaIq7DYJd9PsMB8GA1UdIwQYMBaAFJsw5VMM4UyCzN8+d6Uw5z/UEON3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOThFNS8xNjg0QzA3ODQw NDcxMUVFQUJDMEUyNENDNEY5QUUwMi9tekRsVXd6aFRJTE0zejUzcFREblA5UVE0 M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL216RGxVd3poVElMTTN6NTNwVERuUDlRUTQzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OThFNS8xNjg0QzA3ODQwNDcxMUVFQUJDMEUyNENDNEY5QUUwMi9tekRsVXd6aFRJ TE0zejUzcFREblA5UVE0M2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJiXAcdL9msSkR3ylUBGPkmGLcR5LjpyJrqYRaR4914IhU72TNvsO+ ASwQjr8mEfyEFPIlB1OiMDJfLf51nhsDVBvt6vaSyW6xUq1X/YEWwzvZoLO88JlP vA3AGgUE212DCaZbMcEdDvFe99ueU+/QSos8qO/GIfE8JRSYijbf7kWREk4vCiKz 62VcCr06lO0VRXnIAh0Q8S3iy+Cgeth9idY1TselIAQu+u4n6/JkAuNnMagcd9l0 2bKVVU8mWkBgmgdfNdqPVz4ia/EtH2RTj7MuNTrO7AhJl0hg/m+6rkenPvcFN2gh 5F+7/0Aeisvq//GlXJefiUmXdSKJY4e8 -----END CERTIFICATE-----Generated at Sun Jan 25 02:57:55 2026 by rpki-client