This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json) Hash identifier: zNYD0DgOszr5FBDbuTIlMgKciNBUVYhuRf5p6epFYsI= Subject key identifier: 94:7A:36:7F:BE:3A:0C:14:7A:86:DF:7F:25:B1:F3:74:F1:67:19:F6 Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Certificate serial: 10D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft Manifest number: 10CE Signing time: Sat 24 Jan 2026 17:01:01 +0000 Manifest this update: Sat 24 Jan 2026 17:01:01 +0000 Manifest next update: Sat 31 Jan 2026 17:01:01 +0000 Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: zhLOEsZ0zCEOVMtg/KrCbszflnMaFTHKuwxh3Yul6Q4=) 2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: XAfo1PZPIVH3Y+cfsdpgLhiwJGHrd3PGIzfnpG6VlMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4310 (0x10d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Validity Not Before: Jan 24 17:01:01 2026 GMT Not After : Jan 31 17:01:01 2026 GMT Subject: CN=6974facd-3a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f2:eb:58:98:dd:c5:52:38:51:71:63:29:67: 9a:1c:a6:cc:e2:59:e2:88:30:6f:c0:df:79:ec:fd: f9:34:b3:61:16:bc:77:2a:4a:ee:dd:22:7a:ed:78: 7b:bb:f6:0e:63:ba:3c:6c:09:ac:29:7c:9e:55:6d: b9:dc:03:e9:f2:e9:82:58:71:5b:eb:bc:1c:74:e5: 35:ee:54:ee:99:62:d1:0e:90:bb:9c:d0:77:3a:91: 22:da:a1:e4:b1:bb:e3:5a:76:51:31:99:63:b9:8a: 1f:5b:b7:11:88:fe:ea:13:33:50:7e:54:5a:a7:a8: 4c:a0:9a:e0:3c:c7:a4:d7:25:fb:bf:0f:4e:a4:63: 2e:5d:a0:c7:3d:17:78:fd:54:04:6d:df:b3:9b:5d: 43:a0:51:25:7b:ac:c2:56:81:a5:87:48:d6:37:c7: 8c:2d:f4:cd:65:23:93:1d:b6:12:52:bd:2b:1f:4d: 70:5b:c0:18:93:ec:ba:be:e2:84:a7:8a:34:8b:02: 80:79:bf:f0:da:65:47:97:b6:55:16:bf:f2:17:04: 07:11:a3:24:86:93:77:7b:d2:17:4c:e3:c7:04:df: 87:f3:04:f7:31:7c:8e:b9:77:a7:a7:f4:04:c9:a1: af:82:ed:37:3d:a3:8c:a9:7e:e5:b0:c4:55:82:fb: f6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7A:36:7F:BE:3A:0C:14:7A:86:DF:7F:25:B1:F3:74:F1:67:19:F6 X509v3 Authority Key Identifier: keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:42:ad:a6:b1:02:61:9e:c6:3d:be:de:ae:97:6b:47:fc:8e: 1a:0e:13:c0:0c:85:65:e0:fa:e1:1a:5e:dc:8d:fb:9b:ca:c2: cd:0a:0b:06:d6:2a:13:ee:00:e9:f3:02:67:b5:3d:57:6e:35: fb:07:16:4c:2f:4d:ba:e1:9c:34:89:4b:16:7c:2d:b2:06:fd: d8:34:ed:d6:e5:3a:24:b8:c7:0f:11:45:44:5d:84:65:b3:a4: 90:8f:6f:7e:2c:2c:84:f6:2c:bf:14:ed:10:83:d0:cd:eb:d0: bc:ff:52:48:7a:0b:10:e0:9c:66:2d:79:cb:a2:37:2e:c8:4a: 92:a5:85:e5:61:8f:d5:07:2d:bf:86:08:fa:61:8d:8d:9c:36: c8:19:43:96:c3:85:3e:d6:e2:2a:96:02:51:c4:03:b8:07:0b: de:80:b7:ba:34:ef:58:d1:6f:51:d8:58:f9:90:0b:05:f1:5b: 57:18:e4:a5:0f:16:eb:ed:4d:bb:cd:10:10:0b:95:f0:04:0b: fb:c6:e9:0c:0f:1c:dc:3e:c1:22:1a:f6:7c:f3:26:06:b6:2c: 13:b7:be:3b:5f:3a:67:46:88:43:82:fa:6a:3c:60:e5:d7:f6: fe:7b:34:54:58:5a:8b:18:0a:70:ce:26:d9:72:e4:dd:7b:df: 7c:57:43:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxQ0UxMTAvBgNVBAUTKDkxRjJERTY3QzhFNjVCQjUzM0VEOEYzQzY0RjMyREY5 QzY5NUMwNTcwHhcNMjYwMTI0MTcwMTAxWhcNMjYwMTMxMTcwMTAxWjAYMRYwFAYD VQQDDA02OTc0ZmFjZC0zYTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvLrWJjdxVI4UXFjKWeaHKbM4lniiDBvwN957P35NLNhFrx3Kkru3SJ67Xh7 u/YOY7o8bAmsKXyeVW253APp8umCWHFb67wcdOU17lTumWLRDpC7nNB3OpEi2qHk sbvjWnZRMZljuYofW7cRiP7qEzNQflRap6hMoJrgPMek1yX7vw9OpGMuXaDHPRd4 /VQEbd+zm11DoFEle6zCVoGlh0jWN8eMLfTNZSOTHbYSUr0rH01wW8AYk+y6vuKE p4o0iwKAeb/w2mVHl7ZVFr/yFwQHEaMkhpN3e9IXTOPHBN+H8wT3MXyOuXenp/QE yaGvgu03PaOMqX7lsMRVgvv2sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJR6Nn++ OgwUeobffyWx83TxZxn2MB8GA1UdIwQYMBaAFJHy3mfI5lu1M+2PPGTzLfnGlcBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzFDRS8yNEZBNjBFNDM3 RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3VXo3WTg4WlBNdC1jYVZ3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmTGVaOGptVzdVejdZODhaUE10LWNhVndGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzFDRS8yNEZBNjBFNDM3RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3 VXo3WTg4WlBNdC1jYVZ3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZQq2msQJhnsY9vt6ul2tH/I4aDhPADIVl4PrhGl7cjfubysLNCgsG 1ioT7gDp8wJntT1XbjX7BxZML0264Zw0iUsWfC2yBv3YNO3W5TokuMcPEUVEXYRl s6SQj29+LCyE9iy/FO0Qg9DN69C8/1JIegsQ4JxmLXnLojcuyEqSpYXlYY/VBy2/ hgj6YY2NnDbIGUOWw4U+1uIqlgJRxAO4BwvegLe6NO9Y0W9R2Fj5kAsF8VtXGOSl Dxbr7U27zRAQC5XwBAv7xukMDxzcPsEiGvZ88yYGtiwTt747XzpnRohDgvpqPGDl 1/b+ezRUWFqLGApwzibZcuTde998V0M2 -----END CERTIFICATE-----Generated at Sun Jan 25 17:05:29 2026 by rpki-client