This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft File: MAKFsSjLjblfHkH_vS68Io1FPvw.mft (raw, json) Hash identifier: GtO+Wxmq4to1rLhxaH6GrOWX53Zfg/DtCtnKJvmu6gY= Subject key identifier: FA:EB:7F:75:22:69:84:13:19:95:98:55:9B:B9:16:FE:7A:BB:9E:B0 Authority key identifier: 30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC Certificate issuer: /CN=A91CD39D/serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC Certificate serial: 04DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft Manifest number: 04DD Signing time: Sat 24 Jan 2026 23:00:42 +0000 Manifest this update: Sat 24 Jan 2026 23:00:42 +0000 Manifest next update: Sat 31 Jan 2026 23:00:42 +0000 Files and hashes: 1: MAKFsSjLjblfHkH_vS68Io1FPvw.crl (hash: ovUponBHrnjzyv6mjnuGdmvraSiduDM840Zi+ZwD7bc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1245 (0x4dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC Validity Not Before: Jan 24 23:00:42 2026 GMT Not After : Jan 31 23:00:42 2026 GMT Subject: CN=69754f1a-0102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bb:66:fd:43:1d:04:ba:0e:e9:e0:20:20:dd: 4e:33:eb:01:d8:65:f2:e2:87:7d:f5:f2:9a:41:4b: 0d:3f:c7:80:6e:96:b2:2e:6c:0b:ae:1d:e3:e8:7c: 96:7b:7e:93:ef:f9:84:43:f4:6b:4a:5e:88:0a:22: 6e:2b:ee:eb:af:80:27:67:bb:c9:e6:4f:61:57:5a: 40:0e:80:60:f9:94:b0:58:1a:b7:7b:bc:48:68:eb: 29:bd:56:d1:9b:50:12:90:aa:08:fc:26:a3:f8:d5: 32:b2:28:8f:f8:d3:7d:83:0e:4c:88:0f:62:34:eb: 75:9f:1c:50:0b:98:69:16:91:18:4f:a7:c2:50:23: f8:e7:36:b4:c7:14:30:2b:2f:a7:83:4a:d6:de:c1: 0d:0f:67:46:21:ed:85:04:fa:2e:66:09:95:85:f8: e2:c8:74:15:46:98:0c:22:f4:96:7b:0d:13:9d:b6: e4:0a:eb:bc:c2:72:13:33:fd:f4:7c:76:a6:7f:a9: 22:fd:15:7b:8f:ae:34:2a:55:78:da:2f:0c:86:ff: 00:08:fe:54:98:85:65:ac:68:32:49:8b:6e:4c:c1: ae:d3:33:55:0e:b3:b9:6f:72:80:be:6e:c4:5b:cf: a9:3a:30:84:4d:66:4f:33:f8:02:36:66:73:52:c9: 3a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EB:7F:75:22:69:84:13:19:95:98:55:9B:B9:16:FE:7A:BB:9E:B0 X509v3 Authority Key Identifier: keyid:30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b7:ff:cb:36:20:8b:79:02:ac:cd:23:a3:82:02:09:42:5c: ac:1e:7d:89:25:5e:1c:30:d7:c8:bf:ab:28:65:d2:35:ab:37: 50:8d:f6:f8:d7:b1:7e:a6:10:0d:8b:4c:5c:e7:11:65:04:d2: e9:30:87:78:18:3c:03:c2:c2:75:5c:70:69:b7:f9:18:ab:14: 59:49:6f:4d:07:db:3b:9c:92:c0:5d:bb:e5:62:4e:bb:8f:d3: 85:43:af:72:e7:0c:65:dc:0c:c7:bd:7a:5b:29:0b:f6:98:0d: 2f:94:46:e1:78:6a:c7:58:b3:21:65:6c:2f:23:40:70:f0:87: d0:6a:b3:68:f7:c7:97:6c:4e:d9:a8:73:31:4f:0a:3d:0f:73: 7e:42:b2:fc:48:44:03:bf:95:43:12:88:14:4f:7e:72:27:c5: 02:61:36:b2:16:d0:00:d0:5c:9e:c7:c5:c2:52:3f:4d:98:f6: 56:67:cc:d2:b5:df:b1:88:19:aa:1d:b4:14:bc:87:c9:af:c4: 8a:9a:9f:2f:ff:74:b1:4c:7e:5a:e5:09:69:19:7e:29:98:bd: 20:ae:c9:8f:58:23:30:5b:39:86:56:0c:a7:58:8e:10:47:1f: 01:4d:03:ac:9d:95:99:af:4c:35:e8:02:96:7f:22:d6:8f:73: 67:a9:96:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDMwMDI4NUIxMjhDQjhEQjk1RjFFNDFGRkJEMkVCQzIy OEQ0NTNFRkMwHhcNMjYwMTI0MjMwMDQyWhcNMjYwMTMxMjMwMDQyWjAYMRYwFAYD VQQDDA02OTc1NGYxYS0wMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rtm/UMdBLoO6eAgIN1OM+sB2GXy4od99fKaQUsNP8eAbpayLmwLrh3j6HyW e36T7/mEQ/RrSl6ICiJuK+7rr4AnZ7vJ5k9hV1pADoBg+ZSwWBq3e7xIaOspvVbR m1ASkKoI/Caj+NUysiiP+NN9gw5MiA9iNOt1nxxQC5hpFpEYT6fCUCP45za0xxQw Ky+ng0rW3sEND2dGIe2FBPouZgmVhfjiyHQVRpgMIvSWew0TnbbkCuu8wnITM/30 fHamf6ki/RV7j640KlV42i8Mhv8ACP5UmIVlrGgySYtuTMGu0zNVDrO5b3KAvm7E W8+pOjCETWZPM/gCNmZzUsk6mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrrf3Ui aYQTGZWYVZu5Fv56u56wMB8GA1UdIwQYMBaAFDAChbEoy425Xx5B/70uvCKNRT78 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ENDRFMzZEMDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9NQUtGc1NqTGpibGZIa0hfdlM2OElvMUZQ dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01BS0ZzU2pMamJsZkhrSF92UzY4SW8xRlB2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ENDRFMzZEMDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9NQUtGc1NqTGpi bGZIa0hfdlM2OElvMUZQdncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjt//LNiCLeQKszSOjggIJQlysHn2JJV4cMNfIv6soZdI1qzdQjfb4 17F+phANi0xc5xFlBNLpMId4GDwDwsJ1XHBpt/kYqxRZSW9NB9s7nJLAXbvlYk67 j9OFQ69y5wxl3AzHvXpbKQv2mA0vlEbheGrHWLMhZWwvI0Bw8IfQarNo98eXbE7Z qHMxTwo9D3N+QrL8SEQDv5VDEogUT35yJ8UCYTayFtAA0Fyex8XCUj9NmPZWZ8zS td+xiBmqHbQUvIfJr8SKmp8v/3SxTH5a5QlpGX4pmL0grsmPWCMwWzmGVgynWI4Q Rx8BTQOsnZWZr0w16AKWfyLWj3NnqZbi -----END CERTIFICATE-----Generated at Sun Jan 25 11:52:02 2026 by rpki-client