This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft File: l0ZNOjIvAGf4rOO3dak6_rn8iew.mft (raw, json) Hash identifier: bOa0OY1SloLiZLtGVRDgsBi+E7h9dM7b5CPraGZjIJ8= Subject key identifier: 87:16:67:58:A7:67:03:65:43:F7:CB:65:E2:D3:BF:24:A2:4F:E0:82 Authority key identifier: 97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC Certificate issuer: /CN=A91A9E58/serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft Manifest number: 18 Signing time: Sun 25 Jan 2026 06:57:51 +0000 Manifest this update: Sun 25 Jan 2026 06:57:50 +0000 Manifest next update: Sun 01 Feb 2026 06:57:50 +0000 Files and hashes: 1: l0ZNOjIvAGf4rOO3dak6_rn8iew.crl (hash: 0qo83e7L1fV/3NrkjGTiGraqUxjal1X+ZWqVIEWwKfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E58, serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC Validity Not Before: Jan 25 06:57:50 2026 GMT Not After : Feb 1 06:57:50 2026 GMT Subject: CN=6975beef-550e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:af:e9:1e:1a:94:97:65:96:87:03:bb:91: 29:51:73:7f:fc:65:8d:dd:bb:fd:5e:c0:da:02:1e: 1c:1f:fd:fd:e8:55:8a:67:a7:d8:1c:18:9b:c3:f8: f8:cb:de:07:eb:0f:4f:62:1f:7b:c4:48:50:b2:ca: cd:af:7b:c1:66:9f:db:56:ad:f3:34:70:27:fe:71: 56:4d:9f:83:4c:33:45:1d:8c:ee:d5:7c:b9:33:15: 58:3b:f9:96:81:68:0a:8d:a9:c4:a4:60:a0:00:4b: 79:60:0f:a9:e1:a2:d0:56:fa:07:61:19:47:5d:18: 19:e8:4b:f0:a9:3e:f5:9d:cd:5e:86:b7:0a:28:79: 6c:a2:5d:c6:bb:93:3b:84:fa:f4:c5:8b:76:1b:07: fd:c5:da:00:89:18:34:6b:d3:51:f1:c5:74:d6:c3: e5:6b:f5:19:fd:9a:51:6d:67:b0:de:de:b7:ab:b0: 79:1c:94:f6:8d:00:c8:87:3b:bb:4c:84:d6:4e:3b: d1:a3:8a:e0:4f:5f:d3:0f:84:ad:04:de:e9:64:f7: b7:db:1e:8d:46:ce:e3:26:15:c0:75:b9:5c:6e:d5: 87:bf:32:66:e8:4f:4d:cf:b7:2c:4a:72:ad:2f:bd: d2:af:6d:93:4c:fd:c2:3d:37:b2:d3:c1:81:84:95: a8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:16:67:58:A7:67:03:65:43:F7:CB:65:E2:D3:BF:24:A2:4F:E0:82 X509v3 Authority Key Identifier: keyid:97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:e2:4c:23:e2:23:a5:9b:31:9d:36:f2:65:bd:e3:07:46:90: d6:cc:5b:1b:a9:43:86:28:51:82:4b:15:be:48:c3:ec:3a:c1: ad:0f:8d:3f:a9:12:ba:b2:4e:55:a9:42:f6:57:06:ab:5b:29: ed:34:e3:e4:34:31:74:ee:6b:85:00:df:ff:42:85:3b:15:b2: bf:ec:95:b6:aa:6d:54:58:b9:d4:de:18:a0:61:9d:04:7e:1c: 32:7b:dd:92:2e:67:4b:bd:63:61:cd:b2:2b:17:94:f1:af:d2: 3a:22:3b:f4:d6:a4:63:f4:2e:c8:2a:47:ce:37:73:89:82:5b: 15:cb:16:9a:71:3d:c1:fb:50:37:c8:bd:88:90:62:0e:79:38: 8a:9b:87:e9:d5:00:a8:9d:56:9a:e1:f5:be:2e:ee:ab:e9:b1: 2f:8b:ea:88:e1:70:2a:8a:df:0b:0f:36:77:ea:80:5d:1d:87: 13:1d:60:13:f8:74:c7:ee:ec:0c:3f:d6:ab:7b:e8:1e:0c:b5: 00:43:37:47:a5:18:f2:eb:33:30:61:8e:a9:c6:0c:ab:c2:69: 66:9c:a1:36:b6:38:b7:e8:66:0d:ab:6f:ea:9b:24:a0:de:2f: 82:7c:0c:38:37:77:5a:bc:6a:01:83:27:f9:4e:0d:a4:44:5b: 2d:51:7d:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUU1ODExMC8GA1UEBRMoOTc0NjREM0EzMjJGMDA2N0Y4QUNFM0I3NzVBOTNBRkVC OUZDODlFQzAeFw0yNjAxMjUwNjU3NTBaFw0yNjAyMDEwNjU3NTBaMBgxFjAUBgNV BAMMDTY5NzViZWVmLTU1MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/bK/pHhqUl2WWhwO7kSlRc3/8ZY3du/1ewNoCHhwf/f3oVYpnp9gcGJvD+PjL 3gfrD09iH3vESFCyys2ve8Fmn9tWrfM0cCf+cVZNn4NMM0UdjO7VfLkzFVg7+ZaB aAqNqcSkYKAAS3lgD6nhotBW+gdhGUddGBnoS/CpPvWdzV6GtwooeWyiXca7kzuE +vTFi3YbB/3F2gCJGDRr01HxxXTWw+Vr9Rn9mlFtZ7De3rersHkclPaNAMiHO7tM hNZOO9GjiuBPX9MPhK0E3ulk97fbHo1GzuMmFcB1uVxu1Ye/MmboT03PtyxKcq0v vdKvbZNM/cI9N7LTwYGElag5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhxZnWKdn A2VD98tl4tO/JKJP4IIwHwYDVR0jBBgwFoAUl0ZNOjIvAGf4rOO3dak6/rn8ieww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5RTU4L0Y0NDhDOTc0RDY4 OTExRjBCOUE4MzcwMzZDRDM2NDFEL2wwWk5Pakl2QUdmNHJPTzNkYWs2X3JuOGll dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDBaTk9qSXZBR2Y0ck9PM2RhazZfcm44aWV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 RTU4L0Y0NDhDOTc0RDY4OTExRjBCOUE4MzcwMzZDRDM2NDFEL2wwWk5Pakl2QUdm NHJPTzNkYWs2X3JuOGlldy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJPiTCPiI6WbMZ028mW94wdGkNbMWxupQ4YoUYJLFb5Iw+w6wa0PjT+p ErqyTlWpQvZXBqtbKe004+Q0MXTua4UA3/9ChTsVsr/slbaqbVRYudTeGKBhnQR+ HDJ73ZIuZ0u9Y2HNsisXlPGv0joiO/TWpGP0LsgqR843c4mCWxXLFppxPcH7UDfI vYiQYg55OIqbh+nVAKidVprh9b4u7qvpsS+L6ojhcCqK3wsPNnfqgF0dhxMdYBP4 dMfu7Aw/1qt76B4MtQBDN0elGPLrMzBhjqnGDKvCaWacoTa2OLfoZg2rb+qbJKDe L4J8DDg3d1q8agGDJ/lODaREWy1RfRc= -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:57 2026 by rpki-client