This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft File: -nL57HMUa01gWMiKYGr6AzMOA1E.mft (raw, json) Hash identifier: txv9Zyl6AhScHBWAef2719UGtPYSEh7AFoQm8hHaWt8= Subject key identifier: 4E:A2:80:1E:9B:4D:9D:44:E8:43:BD:A7:8A:D8:C2:66:3C:A3:7C:8B Authority key identifier: FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51 Certificate issuer: /CN=A91B2D56/serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft Manifest number: 23 Signing time: Sun 25 Jan 2026 06:47:07 +0000 Manifest this update: Sun 25 Jan 2026 06:47:06 +0000 Manifest next update: Sun 01 Feb 2026 06:47:06 +0000 Files and hashes: 1: -nL57HMUa01gWMiKYGr6AzMOA1E.crl (hash: vYIjRAWzLfrSlVhNZ5nMeplQrZM54Cplh+Y0+BYJdLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351 Validity Not Before: Jan 25 06:47:06 2026 GMT Not After : Feb 1 06:47:06 2026 GMT Subject: CN=6975bc6b-c1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:a1:cf:26:71:5b:09:2d:61:ca:dd:ae:f5: 88:ed:ea:db:af:d7:2e:7e:c7:1b:42:fa:5a:a4:81: 5f:c7:8b:c8:31:73:f6:f6:68:30:2c:10:18:a0:f1: cb:c5:91:bc:04:71:dc:51:14:f0:60:9f:2c:ef:30: ec:81:09:c8:df:5f:47:fa:34:5e:e9:4f:e6:49:a5: e8:15:b8:c9:dd:b7:c6:f4:60:d4:73:a1:c5:39:b9: 48:57:0c:ea:ad:9b:01:f2:ab:08:a4:47:20:41:03: 19:02:90:99:f9:5c:c1:65:f8:6d:da:54:c4:e8:9b: 7d:97:5e:66:0c:5d:87:87:0c:8d:74:0c:c6:90:b3: f1:51:66:12:13:25:e5:d4:a9:68:84:16:a5:22:97: 0a:ce:79:08:75:56:d9:5c:8e:21:de:57:50:d5:06: 20:c4:87:2c:06:ed:03:ac:9b:35:32:66:33:85:9d: a5:d3:64:6d:25:da:3b:8e:7d:b3:aa:92:6c:1a:43: 08:a6:ad:ea:78:30:cd:39:55:d3:a8:d6:85:99:9e: d2:cd:51:63:8c:b8:26:40:13:41:c1:11:0b:4f:62: 12:85:12:65:79:46:f1:28:df:c1:56:a9:5a:e8:6c: 9c:79:80:12:ea:a2:07:12:8b:c5:93:42:1e:e3:4e: 17:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A2:80:1E:9B:4D:9D:44:E8:43:BD:A7:8A:D8:C2:66:3C:A3:7C:8B X509v3 Authority Key Identifier: keyid:FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:89:43:c1:84:f3:0b:b5:a6:32:00:2b:3c:a3:0c:c4:a6:56: 74:72:0a:7d:c6:8f:c1:cd:94:aa:9e:64:08:d5:3c:49:e0:c5: 20:72:f9:d2:92:78:fd:27:de:f0:fd:24:5e:88:b6:fa:da:b2: fa:67:b3:ce:b3:46:96:f7:6c:24:62:d5:bb:3c:dc:a7:be:8d: 6b:72:89:fd:3e:a5:b4:23:73:95:e9:8b:a5:8c:d6:08:d1:25: 55:ed:23:1c:a6:2f:2c:87:86:b3:ea:19:6b:90:7a:6f:79:ed: 54:dd:44:0e:0a:12:05:b7:65:06:a7:07:0c:ca:65:10:2f:53: fe:7b:d7:fe:88:11:b2:2b:1f:c4:5b:96:44:ea:84:7b:b2:23: fc:59:24:01:30:72:28:2b:93:87:b8:d6:2d:e8:07:ad:20:5e: f4:c6:39:cb:b6:a0:d1:ba:60:d9:d8:dc:dd:25:ad:d5:48:04: 7d:b7:16:cd:2e:63:a0:d4:5d:9e:36:b5:7b:f0:80:ee:eb:4e: e8:8b:c8:43:7b:d8:99:14:1f:d2:bd:69:e2:da:d0:3c:d9:68: 8a:61:93:7f:3e:20:0f:f2:84:ee:fc:69:a5:ac:23:49:6d:3e: 20:a1:26:7b:d0:50:3c:6c:31:43:4f:03:97:13:60:db:0e:4e: 0c:36:71:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkQ1NjExMC8GA1UEBRMoRkE3MkY5RUM3MzE0NkI0RDYwNThDODhBNjA2QUZBMDMz MzBFMDM1MTAeFw0yNjAxMjUwNjQ3MDZaFw0yNjAyMDEwNjQ3MDZaMBgxFjAUBgNV BAMMDTY5NzViYzZiLWMxZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHdaHPJnFbCS1hyt2u9Yjt6tuv1y5+xxtC+lqkgV/Hi8gxc/b2aDAsEBig8cvF kbwEcdxRFPBgnyzvMOyBCcjfX0f6NF7pT+ZJpegVuMndt8b0YNRzocU5uUhXDOqt mwHyqwikRyBBAxkCkJn5XMFl+G3aVMTom32XXmYMXYeHDI10DMaQs/FRZhITJeXU qWiEFqUilwrOeQh1VtlcjiHeV1DVBiDEhywG7QOsmzUyZjOFnaXTZG0l2juOfbOq kmwaQwimrep4MM05VdOo1oWZntLNUWOMuCZAE0HBEQtPYhKFEmV5RvEo38FWqVro bJx5gBLqogcSi8WTQh7jThfpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTqKAHptN nUToQ72nitjCZjyjfIswHwYDVR0jBBgwFoAU+nL57HMUa01gWMiKYGr6AzMOA1Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDU2L0Y2OTIzNjdBQzUy MjExRjA5NUQxQjIxN0M0RjlBRTAyLy1uTDU3SE1VYTAxZ1dNaUtZR3I2QXpNT0Ex RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLW5MNTdITVVhMDFnV01pS1lHcjZBek1PQTFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RDU2L0Y2OTIzNjdBQzUyMjExRjA5NUQxQjIxN0M0RjlBRTAyLy1uTDU3SE1VYTAx Z1dNaUtZR3I2QXpNT0ExRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIKJQ8GE8wu1pjIAKzyjDMSmVnRyCn3Gj8HNlKqeZAjVPEngxSBy+dKS eP0n3vD9JF6Itvrasvpns86zRpb3bCRi1bs83Ke+jWtyif0+pbQjc5Xpi6WM1gjR JVXtIxymLyyHhrPqGWuQem957VTdRA4KEgW3ZQanBwzKZRAvU/571/6IEbIrH8Rb lkTqhHuyI/xZJAEwcigrk4e41i3oB60gXvTGOcu2oNG6YNnY3N0lrdVIBH23Fs0u Y6DUXZ42tXvwgO7rTuiLyEN72JkUH9K9aeLa0DzZaIphk38+IA/yhO78aaWsI0lt PiChJnvQUDxsMUNPA5cTYNsOTgw2cYc= -----END CERTIFICATE-----Generated at Sun Jan 25 10:47:10 2026 by rpki-client