This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.mft File: cLpsN0BJKqpJbOn3BQf-g3072BI.mft (raw, json) Hash identifier: Aebcou9dWbwq993qbTPcxSgU3PHnZbS1HBADRekoqtE= Subject key identifier: 6A:0A:E2:4B:1A:1B:71:3C:C8:7B:7A:32:FF:0B:1E:FC:44:C0:DC:E3 Authority key identifier: 70:BA:6C:37:40:49:2A:AA:49:6C:E9:F7:05:07:FE:83:7D:3B:D8:12 Certificate issuer: /CN=A91CCABB/serialNumber=70BA6C3740492AAA496CE9F70507FE837D3BD812 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLpsN0BJKqpJbOn3BQf-g3072BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.mft Manifest number: 14 Signing time: Fri 23 Jan 2026 07:00:30 +0000 Manifest this update: Fri 23 Jan 2026 07:00:30 +0000 Manifest next update: Fri 30 Jan 2026 07:00:30 +0000 Files and hashes: 1: cLpsN0BJKqpJbOn3BQf-g3072BI.crl (hash: YvlH9YeqRMC3piea2XicmKnkErqra5+TErKjBWloTNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.crl rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLpsN0BJKqpJbOn3BQf-g3072BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCABB, serialNumber=70BA6C3740492AAA496CE9F70507FE837D3BD812 Validity Not Before: Jan 23 07:00:30 2026 GMT Not After : Jan 30 07:00:30 2026 GMT Subject: CN=69731c8e-92b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:52:0b:21:ad:c4:85:e2:2d:3e:4e:f8:97:2d: 53:b9:7a:ed:f0:af:db:61:48:5d:60:b6:21:a4:b0: 47:df:97:78:1a:d4:eb:11:84:9d:f6:d0:78:48:e6: 0d:f3:be:eb:25:2b:15:b6:f7:0a:bb:99:95:db:0a: 5f:a6:a3:60:96:04:d1:c5:2b:70:fa:3c:aa:57:62: 4c:ff:7a:75:17:a0:08:b3:44:02:d8:08:86:0d:bd: 63:d5:5e:b5:e4:95:9b:93:75:93:7f:c0:bf:aa:0c: 4e:31:d4:ec:a0:37:84:d3:e8:99:eb:58:68:4f:4f: 44:cd:4c:ad:11:d9:72:a0:32:d4:25:a8:f0:35:ad: 2b:6f:e0:48:18:9b:13:2b:50:b1:fa:f9:0f:48:a1: 6e:cb:85:29:24:f2:db:4c:11:d2:74:12:a6:aa:c9: 10:1b:2e:e8:a0:54:92:19:b2:bc:5a:e6:4e:33:5c: 4d:5a:2c:d2:47:ce:77:90:dd:57:28:2e:4f:16:3d: 17:b4:fa:be:83:4a:1e:a9:95:8a:6d:7c:54:ae:c9: 5a:e8:93:24:92:a4:57:f6:9a:ba:75:14:c0:be:4b: 3a:6f:02:21:f7:31:c0:01:e8:6e:a0:d8:00:8d:98: 3d:02:26:95:27:dc:14:6a:8e:08:a9:67:ca:9d:6c: 18:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0A:E2:4B:1A:1B:71:3C:C8:7B:7A:32:FF:0B:1E:FC:44:C0:DC:E3 X509v3 Authority Key Identifier: keyid:70:BA:6C:37:40:49:2A:AA:49:6C:E9:F7:05:07:FE:83:7D:3B:D8:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLpsN0BJKqpJbOn3BQf-g3072BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:9f:54:c3:b3:6b:37:95:23:f1:6e:ba:33:04:4e:07:66:64: 31:b4:d9:47:1c:e1:02:0e:3d:f5:d1:ae:81:5b:68:c7:4c:70: d3:f3:20:81:91:1a:46:55:4f:01:03:b8:9d:14:55:fd:b6:a0: ec:50:ba:d1:f8:1f:3d:84:fa:ac:a8:f4:3f:88:eb:8d:36:fd: cc:4f:14:05:9d:bc:76:b8:6c:e3:5b:bb:bb:40:c2:2a:3d:64: 49:17:31:27:be:25:06:c7:90:4d:d0:40:f5:cc:88:4d:e9:45: 6c:34:c0:f4:e0:07:0f:25:b1:9a:a7:96:27:ab:b7:76:e8:58: 67:b5:ae:77:ee:9b:51:84:0f:c4:09:1a:46:66:a5:20:d1:fd: 20:01:14:d5:11:f9:58:5f:d5:82:76:60:39:09:c3:c9:f6:de: fc:d2:20:37:85:d9:57:5e:1e:77:1a:15:50:f6:db:38:6b:0f: c2:11:f7:ea:29:a7:e8:aa:af:16:ca:dc:bb:70:4c:e5:57:eb: 12:54:e4:0e:50:90:ff:56:1b:de:d8:49:ec:7d:9a:ed:a6:87: 7c:2b:28:ed:25:69:02:af:f8:01:34:e6:8c:65:8e:05:72:67: 23:7f:42:73:38:eb:e7:b2:31:a4:1d:fb:7f:62:b7:56:0e:6e: 6c:a0:d2:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFD Q0FCQjExMC8GA1UEBRMoNzBCQTZDMzc0MDQ5MkFBQTQ5NkNFOUY3MDUwN0ZFODM3 RDNCRDgxMjAeFw0yNjAxMjMwNzAwMzBaFw0yNjAxMzAwNzAwMzBaMBgxFjAUBgNV BAMMDTY5NzMxYzhlLTkyYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsUgshrcSF4i0+TviXLVO5eu3wr9thSF1gtiGksEffl3ga1OsRhJ320HhI5g3z vuslKxW29wq7mZXbCl+mo2CWBNHFK3D6PKpXYkz/enUXoAizRALYCIYNvWPVXrXk lZuTdZN/wL+qDE4x1OygN4TT6JnrWGhPT0TNTK0R2XKgMtQlqPA1rStv4EgYmxMr ULH6+Q9IoW7LhSkk8ttMEdJ0EqaqyRAbLuigVJIZsrxa5k4zXE1aLNJHzneQ3Vco Lk8WPRe0+r6DSh6plYptfFSuyVrokySSpFf2mrp1FMC+SzpvAiH3McAB6G6g2ACN mD0CJpUn3BRqjgipZ8qdbBibAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUagriSxob cTzIe3oy/wse/ETA3OMwHwYDVR0jBBgwFoAUcLpsN0BJKqpJbOn3BQf+g3072BIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUJCLzQ4RTY4RTQwREQ3 ODExRjBBNTg2QjEyODM4NkY1NkJDL2NMcHNOMEJKS3FwSmJPbjNCUWYtZzMwNzJC SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY0xwc04wQkpLcXBKYk9uM0JRZi1nMzA3MkJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QUJCLzQ4RTY4RTQwREQ3ODExRjBBNTg2QjEyODM4NkY1NkJDL2NMcHNOMEJKS3Fw SmJPbjNCUWYtZzMwNzJCSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMefVMOzazeVI/FuujMETgdmZDG02Ucc4QIOPfXRroFbaMdMcNPzIIGR GkZVTwEDuJ0UVf22oOxQutH4Hz2E+qyo9D+I6402/cxPFAWdvHa4bONbu7tAwio9 ZEkXMSe+JQbHkE3QQPXMiE3pRWw0wPTgBw8lsZqnliert3boWGe1rnfum1GED8QJ GkZmpSDR/SABFNUR+Vhf1YJ2YDkJw8n23vzSIDeF2VdeHncaFVD22zhrD8IR9+op p+iqrxbK3LtwTOVX6xJU5A5QkP9WG97YSex9mu2mh3wrKO0laQKv+AE05oxljgVy ZyN/QnM46+eyMaQd+39it1YObmyg0jU= -----END CERTIFICATE-----Generated at Sun Jan 25 02:48:24 2026 by rpki-client