This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft File: MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft (raw, json) Hash identifier: wIkW/WV0PcvVVk5oixlpCUwoIXJMXqOzpiELnl0Q/eg= Subject key identifier: 82:DD:26:32:FE:7A:85:4A:90:0F:33:56:AD:1D:8F:67:EC:D2:F4:F4 Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 Certificate issuer: /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft Manifest number: 21 Signing time: Fri 23 Jan 2026 06:48:18 +0000 Manifest this update: Fri 23 Jan 2026 06:48:18 +0000 Manifest next update: Fri 30 Jan 2026 06:48:18 +0000 Files and hashes: 1: MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl (hash: 2SqTjG2euHj3XpBppgepVJN9IbS+VyHdDaad3xGJ1UQ=) 2: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (hash: ibYzYu8RH8C02kfa+CuxIWX8fTb9oHtMSxPb31nALF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Validity Not Before: Jan 23 06:48:18 2026 GMT Not After : Jan 30 06:48:18 2026 GMT Subject: CN=697319b2-9e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:23:a0:1c:fc:98:fd:35:98:19:20:2a:4a:b6: 28:aa:7b:3d:e0:ea:44:6c:0b:9b:f1:42:f6:c9:9f: 96:21:d5:a7:43:9e:43:a8:8f:24:2f:67:21:da:28: 66:95:82:54:cc:b5:3b:c4:95:04:a2:7a:68:ff:27: 66:75:9f:d7:59:66:bc:d5:2d:c3:b3:d4:aa:dd:ac: 02:45:cb:bc:27:37:6c:d9:aa:61:4b:c0:2a:6b:2b: 10:b9:a4:96:89:0b:dd:7a:97:eb:a4:39:93:fb:dd: 46:d7:90:a8:88:71:0a:c4:5b:74:3f:f6:76:46:72: 34:13:30:00:63:54:b4:11:5e:27:60:26:8f:74:ef: f6:bd:8a:36:36:e1:45:31:3a:72:18:d9:fc:2b:75: 9b:bf:03:1a:3b:b2:0c:a9:12:3b:85:7b:7c:08:1c: f8:73:4c:cc:f6:a4:75:07:18:40:53:bc:a7:a6:19: 77:ab:6b:9d:5c:9f:b2:c8:01:ae:10:49:41:6d:e2: 47:c3:f3:a1:29:f3:9c:43:88:3b:16:39:e5:2c:57: 3a:72:8d:95:cf:cc:a5:2f:65:fa:e6:79:93:37:63: 9b:6b:75:b4:b1:23:92:28:26:20:7a:f5:95:66:41: 48:91:cd:98:6e:77:72:ca:1f:35:1c:20:18:46:ff: 12:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DD:26:32:FE:7A:85:4A:90:0F:33:56:AD:1D:8F:67:EC:D2:F4:F4 X509v3 Authority Key Identifier: keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5f:c9:b3:a3:fa:11:6c:ac:1b:26:ac:b8:22:1c:a2:4d:50: 4c:44:d7:d3:43:42:90:cd:c5:cf:cf:f3:4e:a3:31:b2:2a:91: 89:28:1f:97:fb:be:b4:b4:bb:47:74:04:ee:74:6a:2b:8a:fd: 01:d2:bc:a6:c5:93:1f:76:b0:de:5e:b9:e0:2d:6b:b5:bd:26: c3:c1:83:3e:75:ae:6d:7d:a7:97:db:cb:19:14:95:99:52:b8: 76:29:c8:f3:d8:42:ef:be:0d:ce:28:95:5e:71:05:50:f2:7e: 08:85:62:7c:d2:08:25:99:4d:49:9b:bb:3d:ac:c8:95:f9:f9: 64:86:cf:0a:74:c0:47:f0:53:89:99:37:c5:f7:2a:8b:bb:9e: b9:da:2c:ca:8a:ee:01:ef:54:31:18:28:cd:da:3f:6b:1a:86: 32:f8:e1:1d:5b:4a:b5:2e:60:5b:98:4c:fa:e4:bd:55:f2:d3: 79:d5:a2:f7:6f:2b:53:f1:e1:cf:9d:9b:3e:8c:ca:12:01:cc: c9:6a:86:3f:a8:fa:c6:25:86:64:5c:03:fa:a8:25:86:82:1c: d3:b6:c5:91:03:16:d4:60:42:f3:c7:9d:05:64:43:f3:ae:b2: 5a:cb:c4:80:28:36:89:78:3d:15:9b:c3:32:dc:bd:03:17:f9: 68:a5:c6:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODg2RjExMC8GA1UEBRMoMzI1MzIxOUNCNjBDN0Q5Q0ZBNkU2MzNEQkI0Q0E5NEQ2 ODM5OTJFMDAeFw0yNjAxMjMwNjQ4MThaFw0yNjAxMzAwNjQ4MThaMBgxFjAUBgNV BAMMDTY5NzMxOWIyLTllMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfI6Ac/Jj9NZgZICpKtiiqez3g6kRsC5vxQvbJn5Yh1adDnkOojyQvZyHaKGaV glTMtTvElQSiemj/J2Z1n9dZZrzVLcOz1KrdrAJFy7wnN2zZqmFLwCprKxC5pJaJ C916l+ukOZP73UbXkKiIcQrEW3Q/9nZGcjQTMABjVLQRXidgJo907/a9ijY24UUx OnIY2fwrdZu/Axo7sgypEjuFe3wIHPhzTMz2pHUHGEBTvKemGXera51cn7LIAa4Q SUFt4kfD86Ep85xDiDsWOeUsVzpyjZXPzKUvZfrmeZM3Y5trdbSxI5IoJiB69ZVm QUiRzZhud3LKHzUcIBhG/xK9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgt0mMv56 hUqQDzNWrR2PZ+zS9PQwHwYDVR0jBBgwFoAUMlMhnLYMfZz6bmM9u0ypTWg5kuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODZGL0YxRjU2N0QwQzhF ODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6NmJtTTl1MHlwVFdnNWt1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWxNaG5MWU1mWno2Ym1NOXUweXBUV2c1a3VBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 ODZGL0YxRjU2N0QwQzhFODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6 NmJtTTl1MHlwVFdnNWt1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA1fybOj+hFsrBsmrLgiHKJNUExE19NDQpDNxc/P806jMbIqkYkoH5f7 vrS0u0d0BO50aiuK/QHSvKbFkx92sN5eueAta7W9JsPBgz51rm19p5fbyxkUlZlS uHYpyPPYQu++Dc4olV5xBVDyfgiFYnzSCCWZTUmbuz2syJX5+WSGzwp0wEfwU4mZ N8X3Kou7nrnaLMqK7gHvVDEYKM3aP2sahjL44R1bSrUuYFuYTPrkvVXy03nVovdv K1Px4c+dmz6MyhIBzMlqhj+o+sYlhmRcA/qoJYaCHNO2xZEDFtRgQvPHnQVkQ/Ou slrLxIAoNol4PRWbwzLcvQMX+WilxpU= -----END CERTIFICATE-----Generated at Sun Jan 25 04:35:28 2026 by rpki-client