This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft File: lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft (raw, json) Hash identifier: sXu4HvlXusJmAXqOfKZ2CK3nqHMTOeuMrYou4n6Y5d4= Subject key identifier: A4:A7:82:4A:78:A1:5E:43:53:C7:A6:51:0A:14:8C:38:03:C2:7B:8A Authority key identifier: 94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13 Certificate issuer: /CN=A91CAA8A/serialNumber=94C643E16D04A7738BC72B5B107E05B161614013 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft Manifest number: 07 Signing time: Sun 25 Jan 2026 07:10:54 +0000 Manifest this update: Sun 25 Jan 2026 07:10:53 +0000 Manifest next update: Sun 01 Feb 2026 07:10:53 +0000 Files and hashes: 1: lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl (hash: HDP28KoLlVPVH4bCFzHj+IHJq67EoFcXeKHE5OJbPBE=) 2: 537A2262F2D211F0BAE73FD33C6F56BC.roa (hash: L8pI+kk5Q/YTRXnKqVRKOin29T/vEZBD6+7QfyjMyHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA8A, serialNumber=94C643E16D04A7738BC72B5B107E05B161614013 Validity Not Before: Jan 25 07:10:53 2026 GMT Not After : Feb 1 07:10:53 2026 GMT Subject: CN=6975c1fe-3738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2b:ab:16:6e:0c:15:88:63:03:a8:06:73:d7: aa:24:42:9c:f7:0c:fa:e4:97:dc:fc:f5:1c:40:d4: 9e:19:5a:31:08:99:bb:1d:58:c6:5f:8c:94:3a:15: 4a:37:cf:60:89:ee:ee:b3:87:b9:76:c4:b8:0e:f9: bd:e1:f8:69:b7:00:99:55:76:c3:a0:ac:8a:c4:4b: 5f:f6:01:39:8f:1a:71:9a:ea:46:28:0b:63:2b:43: b0:53:54:f2:0d:4d:b9:03:75:fc:50:e8:17:b3:48: 14:ff:f5:b8:e7:e2:19:27:db:c1:15:9a:15:f0:19: 90:39:f1:2d:64:59:46:82:95:19:ee:16:b2:87:51: 3a:39:3a:6e:6c:46:a2:50:33:9f:b0:98:62:cc:56: 6c:45:79:70:65:1b:af:da:c8:0b:8e:cb:d6:a9:e7: e6:2f:fd:46:74:de:a3:26:7b:41:b8:ea:9e:b7:9e: 5d:e2:3c:d2:75:5c:f5:aa:82:5d:a1:41:66:81:21: e2:ef:cd:6c:38:68:db:cc:f5:b1:86:f1:c8:33:f4: 52:36:88:a8:d2:31:7d:75:0b:28:de:64:bc:78:03: 5b:a7:79:cc:91:a7:06:ea:fc:32:cf:e9:55:30:76: c1:26:77:37:f5:78:85:d0:c3:95:ab:28:85:de:f5: ce:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A7:82:4A:78:A1:5E:43:53:C7:A6:51:0A:14:8C:38:03:C2:7B:8A X509v3 Authority Key Identifier: keyid:94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:3b:95:33:37:1f:87:ca:4d:3e:46:4a:35:7b:81:65:24:c1: d6:12:27:c8:86:7d:25:04:e5:cd:87:bb:54:fc:69:92:95:38: 52:f5:f4:87:0a:20:83:67:60:ce:27:ec:fe:b8:ea:95:96:56: 5b:0d:94:84:44:78:a3:57:ec:cd:3c:d9:4d:85:b5:63:68:d1: 5f:31:ed:f5:78:82:9e:90:f5:87:cf:e7:f3:d5:0a:d5:f5:0f: 29:3b:84:e4:e6:59:53:e0:92:ee:98:e0:2e:37:db:ee:d8:d7: 2f:04:69:a3:92:fa:3e:69:ec:66:1b:da:c8:ba:06:a7:bd:36: 5f:79:a3:b5:bf:0e:21:0a:e0:5e:a5:0e:cf:c1:e1:51:d5:97: 35:78:37:3f:aa:7c:a0:fe:dc:47:e9:19:35:3d:a8:df:c3:7c: 36:b8:ce:78:65:93:49:e2:f2:ab:50:2a:fd:ff:e3:22:d5:e1: 8b:fb:26:09:8a:ad:85:31:8d:8b:1c:16:a2:00:19:74:67:4a: be:23:14:a9:21:e9:6c:b2:c4:c6:46:57:82:07:ff:02:cb:20: d4:45:5e:eb:2a:fc:77:b4:03:0d:63:35:da:c9:8f:83:b1:ec: e0:dc:08:99:66:23:b4:3c:15:e5:49:2e:5f:7e:fd:10:66:4b: 0c:e4:1c:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFD QUE4QTExMC8GA1UEBRMoOTRDNjQzRTE2RDA0QTc3MzhCQzcyQjVCMTA3RTA1QjE2 MTYxNDAxMzAeFw0yNjAxMjUwNzEwNTNaFw0yNjAyMDEwNzEwNTNaMBgxFjAUBgNV BAMMDTY5NzVjMWZlLTM3MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoK6sWbgwViGMDqAZz16okQpz3DPrkl9z89RxA1J4ZWjEImbsdWMZfjJQ6FUo3 z2CJ7u6zh7l2xLgO+b3h+Gm3AJlVdsOgrIrES1/2ATmPGnGa6kYoC2MrQ7BTVPIN TbkDdfxQ6BezSBT/9bjn4hkn28EVmhXwGZA58S1kWUaClRnuFrKHUTo5Om5sRqJQ M5+wmGLMVmxFeXBlG6/ayAuOy9ap5+Yv/UZ03qMme0G46p63nl3iPNJ1XPWqgl2h QWaBIeLvzWw4aNvM9bGG8cgz9FI2iKjSMX11CyjeZLx4A1unecyRpwbq/DLP6VUw dsEmdzf1eIXQw5WrKIXe9c5JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpKeCSnih XkNTx6ZRChSMOAPCe4owHwYDVR0jBBgwFoAUlMZD4W0Ep3OLxytbEH4FsWFhQBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBQThBLzk2QzJGQjA4RjJE MTExRjA5ODlBRDhDRTNDNkY1NkJDL2xNWkQ0VzBFcDNPTHh5dGJFSDRGc1dGaFFC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbE1aRDRXMEVwM09MeHl0YkVINEZzV0ZoUUJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB QThBLzk2QzJGQjA4RjJEMTExRjA5ODlBRDhDRTNDNkY1NkJDL2xNWkQ0VzBFcDNP THh5dGJFSDRGc1dGaFFCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACM7lTM3H4fKTT5GSjV7gWUkwdYSJ8iGfSUE5c2Hu1T8aZKVOFL19IcK IINnYM4n7P646pWWVlsNlIREeKNX7M082U2FtWNo0V8x7fV4gp6Q9YfP5/PVCtX1 Dyk7hOTmWVPgku6Y4C432+7Y1y8EaaOS+j5p7GYb2si6Bqe9Nl95o7W/DiEK4F6l Ds/B4VHVlzV4Nz+qfKD+3EfpGTU9qN/DfDa4znhlk0ni8qtQKv3/4yLV4Yv7JgmK rYUxjYscFqIAGXRnSr4jFKkh6WyyxMZGV4IH/wLLINRFXusq/He0Aw1jNdrJj4Ox 7ODcCJlmI7Q8FeVJLl9+/RBmSwzkHJA= -----END CERTIFICATE-----Generated at Sun Jan 25 10:06:44 2026 by rpki-client