This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft File: LD0jWhshn0FmEJALADuKv9wXAqI.mft (raw, json) Hash identifier: CDbrwfyV+I/VuLbGAM8AFimWpxPBjJtlm2Ijjq1t4Dw= Subject key identifier: 65:76:64:C5:87:07:CF:23:9E:7B:F8:EB:A1:B2:58:A0:9F:18:6D:63 Authority key identifier: 2C:3D:23:5A:1B:21:9F:41:66:10:90:0B:00:3B:8A:BF:DC:17:02:A2 Certificate issuer: /CN=A91CEA40/serialNumber=2C3D235A1B219F416610900B003B8ABFDC1702A2 Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft Manifest number: 067D Signing time: Sat 24 Jan 2026 21:51:20 +0000 Manifest this update: Sat 24 Jan 2026 21:51:19 +0000 Manifest next update: Sat 31 Jan 2026 21:51:19 +0000 Files and hashes: 1: LD0jWhshn0FmEJALADuKv9wXAqI.crl (hash: HATcTEHsyyVuFaRQqEaykaHzP4evZm/qYKeiP4k/PPU=) 2: 96F093D4BEA011EB8CAD965FC4F9AE02.roa (hash: NpLkQ/NypmNX/0X8ZR0aPK3YWZwmOShkZdvPXd4fivY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.crl rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEA40, serialNumber=2C3D235A1B219F416610900B003B8ABFDC1702A2 Validity Not Before: Jan 24 21:51:19 2026 GMT Not After : Jan 31 21:51:19 2026 GMT Subject: CN=69753ed7-35a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cf:59:c1:59:b3:25:81:5e:a0:ce:7f:05:a3: 03:0a:c1:e3:96:57:54:a7:bd:c3:dc:db:80:68:71: d6:db:2e:de:85:1b:a1:96:47:12:39:4c:a0:f3:3f: 43:00:2b:3f:8e:d4:44:d8:74:83:ef:63:7a:76:2a: 1a:81:ad:2b:a0:4b:a6:64:1e:b9:61:c5:d5:aa:a6: c6:34:9f:45:36:09:4d:93:fc:c3:39:17:82:5b:e0: 7b:ad:02:1d:af:2e:ca:ba:3a:7d:72:5d:03:ab:43: b1:31:72:7b:e0:54:af:15:40:35:be:aa:15:a8:bb: 1a:da:8a:bf:92:0d:24:51:5d:2f:1b:a8:b7:14:92: db:5f:83:30:90:96:28:27:fd:27:1b:98:94:ab:88: 13:9d:62:d8:90:da:3b:42:5c:6f:89:e2:ea:27:42: 29:bc:a8:45:0b:bd:15:b4:ff:ca:b1:41:18:aa:88: 20:fb:b5:8e:50:09:bb:38:35:06:1a:c1:5e:ff:21: 2c:6a:26:9f:6b:96:25:ef:ca:c4:18:ff:00:60:76: 4d:4d:02:41:df:aa:67:43:eb:9c:e7:7a:95:6e:d4: 2c:5f:c2:a0:49:a4:82:43:b1:de:aa:aa:6a:0c:db: 2c:f7:d8:39:4c:03:89:d7:f7:52:e9:30:44:12:7c: 33:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:76:64:C5:87:07:CF:23:9E:7B:F8:EB:A1:B2:58:A0:9F:18:6D:63 X509v3 Authority Key Identifier: keyid:2C:3D:23:5A:1B:21:9F:41:66:10:90:0B:00:3B:8A:BF:DC:17:02:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:22:26:ed:06:3a:33:d7:2e:f7:25:ad:81:5b:54:f8:05:91: ec:c5:7f:5f:e9:6f:07:86:a2:c9:d5:0e:1e:a9:52:26:bc:69: e3:c3:91:a2:6c:d6:cb:e5:2a:1c:2d:6d:8b:ce:19:a0:7f:a0: e5:ec:ae:60:0d:b2:3e:d1:0d:49:61:6b:b7:42:71:6c:37:fa: 05:15:04:12:dc:ce:37:48:3d:7f:ad:ef:32:b9:5d:f9:6b:5d: d6:b4:80:18:2a:d5:0f:84:d1:26:05:29:4b:cc:98:97:ac:a7: a6:42:20:df:01:a0:c2:e7:7d:da:8f:1a:fe:c5:0c:be:5f:fc: 44:69:63:7a:76:cb:26:4c:1b:f0:f2:e8:79:7d:4a:32:72:f6: c6:08:e1:29:07:03:48:55:b7:2f:ae:17:25:b2:39:56:28:87: 43:37:7b:8e:5c:64:db:4b:83:75:40:42:d0:64:5b:4d:f6:9d: 0b:d8:ba:46:92:fe:59:bb:50:7b:88:3b:0e:10:16:20:12:5b: 98:8f:4f:e7:c5:a1:ff:e6:81:10:7b:4c:d8:be:5e:99:64:98: 5e:a5:cd:06:1c:84:3b:6f:a8:b5:4a:bf:12:44:24:a2:c7:c4: 94:c1:d4:74:92:83:d2:12:d0:d9:8f:fd:00:90:bf:26:7f:a3: f1:ce:ce:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBNDAxMTAvBgNVBAUTKDJDM0QyMzVBMUIyMTlGNDE2NjEwOTAwQjAwM0I4QUJG REMxNzAyQTIwHhcNMjYwMTI0MjE1MTE5WhcNMjYwMTMxMjE1MTE5WjAYMRYwFAYD VQQDDA02OTc1M2VkNy0zNWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5c9ZwVmzJYFeoM5/BaMDCsHjlldUp73D3NuAaHHW2y7ehRuhlkcSOUyg8z9D ACs/jtRE2HSD72N6dioaga0roEumZB65YcXVqqbGNJ9FNglNk/zDOReCW+B7rQId ry7Kujp9cl0Dq0OxMXJ74FSvFUA1vqoVqLsa2oq/kg0kUV0vG6i3FJLbX4MwkJYo J/0nG5iUq4gTnWLYkNo7QlxvieLqJ0IpvKhFC70VtP/KsUEYqogg+7WOUAm7ODUG GsFe/yEsaiafa5Yl78rEGP8AYHZNTQJB36pnQ+uc53qVbtQsX8KgSaSCQ7Heqqpq DNss99g5TAOJ1/dS6TBEEnwzkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGV2ZMWH B88jnnv466GyWKCfGG1jMB8GA1UdIwQYMBaAFCw9I1obIZ9BZhCQCwA7ir/cFwKi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUE0MC84RTk2NEJDRUFG NzkxMUVCODQyMTdBNThDNEY5QUUwMi9MRDBqV2hzaG4wRm1FSkFMQUR1S3Y5d1hB cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEMGpXaHNobjBGbUVKQUxBRHVLdjl3WEFxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUE0MC84RTk2NEJDRUFGNzkxMUVCODQyMTdBNThDNEY5QUUwMi9MRDBqV2hzaG4w Rm1FSkFMQUR1S3Y5d1hBcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4IibtBjoz1y73Ja2BW1T4BZHsxX9f6W8HhqLJ1Q4eqVImvGnjw5Gi bNbL5SocLW2Lzhmgf6Dl7K5gDbI+0Q1JYWu3QnFsN/oFFQQS3M43SD1/re8yuV35 a13WtIAYKtUPhNEmBSlLzJiXrKemQiDfAaDC533ajxr+xQy+X/xEaWN6dssmTBvw 8uh5fUoycvbGCOEpBwNIVbcvrhclsjlWKIdDN3uOXGTbS4N1QELQZFtN9p0L2LpG kv5Zu1B7iDsOEBYgEluYj0/nxaH/5oEQe0zYvl6ZZJhepc0GHIQ7b6i1Sr8SRCSi x8SUwdR0koPSEtDZj/0AkL8mf6Pxzs6m -----END CERTIFICATE-----Generated at Sun Jan 25 06:18:09 2026 by rpki-client