This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft File: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft (raw, json) Hash identifier: jxq1LXDKAnZViYxbE8id/8F0IVBl76IaEEtmwHzbf24= Subject key identifier: 9D:57:A8:16:DA:CE:36:6F:22:68:5C:56:69:37:DB:4D:50:AD:CA:B9 Authority key identifier: D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 Certificate issuer: /CN=A91BB629/serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft Manifest number: 011D Signing time: Sun 25 Jan 2026 04:01:28 +0000 Manifest this update: Sun 25 Jan 2026 04:01:28 +0000 Manifest next update: Sun 01 Feb 2026 04:01:28 +0000 Files and hashes: 1: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl (hash: GKicni044efCRWx3kQp+7gO1FvLdzVJCrNt96GbN/EU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB629, serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Validity Not Before: Jan 25 04:01:28 2026 GMT Not After : Feb 1 04:01:28 2026 GMT Subject: CN=69759598-55e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3b:a9:07:c7:c4:b4:c5:75:30:2d:c2:4e:a7: 90:a5:8e:d6:d7:1b:2d:bb:c3:e7:51:3a:fa:3a:26: e0:a1:a0:4b:75:60:9b:e9:04:c9:2c:47:e3:e6:0a: b6:ba:36:e6:28:41:d1:e2:0b:0e:8b:e4:e7:6d:80: c1:c8:ad:a2:00:1b:17:e5:06:00:2d:b5:a3:b7:3d: b5:45:94:db:d8:4c:41:62:ee:ce:5c:13:06:1a:a9: 64:8e:d2:0f:44:4b:71:e7:b6:57:63:c6:1f:85:3a: 4b:ae:bc:a4:2b:c8:c0:bf:0b:de:36:28:64:65:f1: 29:ca:fb:d0:89:84:b8:54:df:ca:51:0e:e4:74:ed: 79:d5:5b:d1:77:9d:1f:af:5c:c5:f4:be:b9:d2:e5: e5:32:f6:07:5a:dc:47:f5:7e:8c:bd:24:f0:f4:4a: d8:9e:96:35:e5:cf:a2:43:98:f7:f1:01:5a:eb:a1: 6e:b1:aa:8a:37:b4:23:1f:36:17:f7:07:9b:cf:09: 41:00:b9:a5:df:67:d1:80:ac:2b:1a:37:38:f2:8e: 1b:f5:75:d9:26:7b:be:b6:b2:d3:cc:11:ca:91:d6: 88:b0:0a:e3:83:ac:2e:3c:bb:e0:95:8c:fd:6d:bc: 53:e8:21:45:97:25:8e:35:d2:5b:72:cd:07:67:f1: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:57:A8:16:DA:CE:36:6F:22:68:5C:56:69:37:DB:4D:50:AD:CA:B9 X509v3 Authority Key Identifier: keyid:D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:b0:12:76:e4:30:d4:54:e0:c4:73:57:92:50:93:06:75:44: 8c:8e:0d:a2:58:bc:b0:fc:44:79:83:98:0b:ba:6a:c4:30:74: c4:0a:68:9d:88:6b:12:3a:f1:c7:3a:a7:74:bf:14:b9:68:d2: 08:f4:89:d6:37:38:01:5f:93:72:d2:67:29:a0:f7:d2:14:6b: 28:ba:0f:1d:ee:4e:b6:e5:13:08:4b:6e:21:bf:b1:86:86:e6: 8f:1a:41:8e:58:e3:db:97:c1:f3:08:50:e4:81:dd:36:e8:4f: a8:2b:91:1d:d7:55:dc:65:83:01:6f:f2:42:22:04:24:9f:b6: c9:04:8b:ed:9e:6d:68:6f:a8:87:39:d2:82:b0:1b:4e:b3:5b: 01:27:3e:f2:49:4e:e9:fd:a7:cf:f0:85:2d:8f:87:81:28:6a: f6:bb:5a:61:28:7d:cd:ed:34:27:d6:ee:f6:b2:ab:b3:75:e9: 5c:87:fb:2e:77:64:bf:b0:50:98:57:64:21:56:64:f6:44:31: c9:30:96:8c:fb:63:94:e7:56:be:5d:e1:20:2a:fc:72:23:20: 2b:10:6e:2f:77:13:0d:35:d6:ec:1d:85:06:ff:61:7b:a7:3a: 0f:c7:28:0d:30:6e:70:65:d6:8d:04:00:ae:7e:83:e4:72:89: b8:3d:a1:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QkI2MjkxMTAvBgNVBAUTKEQ2NjExQTM0MkUwNUU2RENEQzE5MjQzQkQ1MkY4OEQw MkIwNzg3RDIwHhcNMjYwMTI1MDQwMTI4WhcNMjYwMjAxMDQwMTI4WjAYMRYwFAYD VQQDDA02OTc1OTU5OC01NWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlTupB8fEtMV1MC3CTqeQpY7W1xstu8PnUTr6OibgoaBLdWCb6QTJLEfj5gq2 ujbmKEHR4gsOi+TnbYDByK2iABsX5QYALbWjtz21RZTb2ExBYu7OXBMGGqlkjtIP REtx57ZXY8YfhTpLrrykK8jAvwveNihkZfEpyvvQiYS4VN/KUQ7kdO151VvRd50f r1zF9L650uXlMvYHWtxH9X6MvSTw9ErYnpY15c+iQ5j38QFa66FusaqKN7QjHzYX 9webzwlBALml32fRgKwrGjc48o4b9XXZJnu+trLTzBHKkdaIsArjg6wuPLvglYz9 bbxT6CFFlyWONdJbcs0HZ/E/7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1XqBba zjZvImhcVmk3201Qrcq5MB8GA1UdIwQYMBaAFNZhGjQuBebc3BkkO9UviNArB4fS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjYyOS9FQUZCQjU1MDQ1 QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0emNHU1E3MVMtSTBDc0ho OUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtRWFOQzRGNXR6Y0dTUTcxUy1JMENzSGg5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjYyOS9FQUZCQjU1MDQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0 emNHU1E3MVMtSTBDc0hoOUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCsBJ25DDUVODEc1eSUJMGdUSMjg2iWLyw/ER5g5gLumrEMHTECmid iGsSOvHHOqd0vxS5aNII9InWNzgBX5Ny0mcpoPfSFGsoug8d7k625RMIS24hv7GG huaPGkGOWOPbl8HzCFDkgd026E+oK5Ed11XcZYMBb/JCIgQkn7bJBIvtnm1ob6iH OdKCsBtOs1sBJz7ySU7p/afP8IUtj4eBKGr2u1phKH3N7TQn1u72squzdelch/su d2S/sFCYV2QhVmT2RDHJMJaM+2OU51a+XeEgKvxyIyArEG4vdxMNNdbsHYUG/2F7 pzoPxygNMG5wZdaNBACufoPkcom4PaHU -----END CERTIFICATE-----Generated at Sun Jan 25 06:11:01 2026 by rpki-client