This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft File: L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json) Hash identifier: E/LMobVVKLjN3v2pGxpp8UdQSVu7vkHXqvYwBm3wpKI= Subject key identifier: A4:BD:5D:47:F7:37:C2:69:43:3C:5B:15:B7:59:6E:6A:A8:89:80:1A Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Certificate serial: 032F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft Manifest number: 0323 Signing time: Sun 25 Jan 2026 00:16:38 +0000 Manifest this update: Sun 25 Jan 2026 00:16:38 +0000 Manifest next update: Sun 01 Feb 2026 00:16:38 +0000 Files and hashes: 1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: HdHCERYAD2Nzp7Wxt9a/OLrIaOseTJlOsU++6gcHCJc=) 2: CC1ACE7A6BC711F098C3B76CC4F9AE02.roa (hash: l12GGHb5zU8WFaP5yfw8CrXUTcEdQRcdzqYPOrrqqtY=) 3: 5E616E44841711F0B7A8C63CC4F9AE02.roa (hash: I75VXJWFaD1GwhF1O0TXZ8SEa9d38CWsNr1ZhVLKJs0=) 4: 36B29DDC841711F0AB46F416C4F9AE02.roa (hash: mBez32ljXmIU/FGdNqv/QIBBd8Jpz2uUA0e46aOruT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 815 (0x32f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Validity Not Before: Jan 25 00:16:38 2026 GMT Not After : Feb 1 00:16:38 2026 GMT Subject: CN=697560e6-7375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:e2:d5:2e:a9:78:45:a3:3d:43:e9:a8:36: bc:57:f1:d2:e3:0c:06:74:a9:9b:9f:3b:9d:d5:e6: 49:99:4b:a8:d0:c3:4c:54:d5:0f:f3:68:31:dc:7d: e8:ee:c8:6d:55:dd:e8:a3:d4:0b:7a:ef:77:3c:c1: 53:71:3e:a1:3f:4c:e5:04:d8:64:82:d2:eb:60:4a: 9b:80:f9:4a:6d:c0:72:3b:a1:e4:e9:55:39:eb:8c: de:d2:c5:17:e1:5b:8d:e7:d7:b0:82:b2:5f:99:30: 36:7c:34:9d:92:bb:9f:16:10:4d:d6:53:a1:f2:40: 29:7a:e3:71:52:fc:74:a6:6f:ce:9c:d4:e1:74:c7: 8c:04:32:b8:ef:ae:1a:d7:12:dd:96:75:76:ea:e3: 35:1c:f0:97:cb:0f:73:fe:e8:7c:16:a2:ca:55:1e: 77:de:8f:1b:ad:68:c0:0c:50:1a:49:2a:81:66:89: 17:e8:1e:03:4f:0f:a5:1a:5d:c7:92:52:f1:96:d8: fa:6e:b6:f8:d6:4d:d5:e9:ce:e2:7e:78:91:a0:72: c9:5e:19:ac:e5:1c:56:cd:52:e0:37:14:fc:d8:24: fd:51:6e:21:74:11:f8:92:a5:0c:d8:11:19:a0:f9: cc:67:31:9c:ff:e8:c2:ac:99:d7:3c:04:87:1f:fa: 1e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BD:5D:47:F7:37:C2:69:43:3C:5B:15:B7:59:6E:6A:A8:89:80:1A X509v3 Authority Key Identifier: keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:53:a6:8a:1a:73:0a:88:59:2a:a3:ca:b5:39:1d:a4:b3:db: 4d:81:e8:71:46:1a:a2:37:36:c1:af:bb:ac:43:a8:18:2f:bc: 31:47:93:e8:5c:14:b2:65:fb:72:12:c3:bf:47:20:ae:60:20: 76:a7:37:09:0a:22:1a:af:03:51:39:c6:0a:8a:a7:3a:1d:7d: d4:ae:16:cd:e1:f9:e1:d3:ab:d1:74:2b:ef:81:b4:ba:e1:23: 77:e8:1b:cd:ce:15:23:34:53:42:e9:b1:d4:4b:50:16:ce:e9: 76:34:2f:95:d0:10:94:b8:3d:b5:37:15:a8:18:e1:e6:7b:ac: 9e:6f:78:ec:ee:35:d7:d5:e6:b9:c3:fb:88:98:3d:e0:76:1a: 8d:f8:99:d2:8f:36:1c:70:42:ba:9d:c4:cc:07:da:82:8f:c5: e3:b2:e5:98:05:2d:53:ba:e6:92:92:73:bc:b0:2c:42:f9:35: e0:f0:3d:a6:08:e5:3d:b7:15:7d:20:d0:09:e8:88:98:9c:76: 74:57:22:69:68:0f:8e:72:42:a7:08:8f:13:3a:57:a0:85:25: 1c:43:3e:4e:24:55:21:76:1b:2d:83:41:e0:92:9d:3a:26:cd: 9f:14:d7:fb:61:de:c6:20:64:17:7b:a5:7d:89:23:c2:f2:a3: db:96:aa:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QTMxMTAvBgNVBAUTKDJGQzQzMEYxRTIxNUNCRDdFMDhGMjY0Mzg4MzcwMzUw MDJERTMxQTkwHhcNMjYwMTI1MDAxNjM4WhcNMjYwMjAxMDAxNjM4WjAYMRYwFAYD VQQDDA02OTc1NjBlNi03Mzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dTi1S6peEWjPUPpqDa8V/HS4wwGdKmbnzud1eZJmUuo0MNMVNUP82gx3H3o 7shtVd3oo9QLeu93PMFTcT6hP0zlBNhkgtLrYEqbgPlKbcByO6Hk6VU564ze0sUX 4VuN59ewgrJfmTA2fDSdkrufFhBN1lOh8kApeuNxUvx0pm/OnNThdMeMBDK4764a 1xLdlnV26uM1HPCXyw9z/uh8FqLKVR533o8brWjADFAaSSqBZokX6B4DTw+lGl3H klLxltj6brb41k3V6c7ifniRoHLJXhms5RxWzVLgNxT82CT9UW4hdBH4kqUM2BEZ oPnMZzGc/+jCrJnXPASHH/oeawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKS9XUf3 N8JpQzxbFbdZbmqoiYAaMB8GA1UdIwQYMBaAFC/EMPHiFcvX4I8mQ4g3A1AC3jGp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhBMy85NjY1MEYzOEZE MTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5ZmdqeVpEaURjRFVBTGVN YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UXc4ZUlWeTlmZ2p5WkRpRGNEVUFMZU1hay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhBMy85NjY1MEYzOEZEMTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5 ZmdqeVpEaURjRFVBTGVNYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkU6aKGnMKiFkqo8q1OR2ks9tNgehxRhqiNzbBr7usQ6gYL7wxR5Po XBSyZftyEsO/RyCuYCB2pzcJCiIarwNROcYKiqc6HX3UrhbN4fnh06vRdCvvgbS6 4SN36BvNzhUjNFNC6bHUS1AWzul2NC+V0BCUuD21NxWoGOHme6yeb3js7jXX1ea5 w/uImD3gdhqN+JnSjzYccEK6ncTMB9qCj8XjsuWYBS1TuuaSknO8sCxC+TXg8D2m COU9txV9INAJ6IiYnHZ0VyJpaA+OckKnCI8TOleghSUcQz5OJFUhdhstg0Hgkp06 Js2fFNf7Yd7GIGQXe6V9iSPC8qPblqoS -----END CERTIFICATE-----Generated at Sun Jan 25 09:25:43 2026 by rpki-client