This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft File: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft (raw, json) Hash identifier: 4YG0eNcLnpYgT9L8Zi7RW5ArI58MqU0JdXYTDBV+liQ= Subject key identifier: B8:04:29:28:A6:D7:56:03:DA:FF:F0:77:FC:0C:2A:CD:3C:A8:8D:AC Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39 Certificate issuer: /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft Manifest number: 72 Signing time: Sun 25 Jan 2026 05:58:25 +0000 Manifest this update: Sun 25 Jan 2026 05:58:24 +0000 Manifest next update: Sun 01 Feb 2026 05:58:24 +0000 Files and hashes: 1: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl (hash: ktHN/Se32+El9PmOsjecDXL0x4hM9EiS5jFa1KqjFeU=) 2: 1E008B864B7411F09B3DF33BC4F9AE02.roa (hash: ev5mDZ6XFmJ+ji01cNK3sq1eGbo1TIpqJN2vMLDyQBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939 Validity Not Before: Jan 25 05:58:24 2026 GMT Not After : Feb 1 05:58:24 2026 GMT Subject: CN=6975b100-5602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:b4:6d:87:23:cc:47:4b:fc:c1:b4:4d:53: 3e:dc:a7:75:0d:0f:76:ca:e8:b3:ce:5e:18:a4:ba: 0c:33:ed:96:45:93:0c:d6:cf:14:fc:9a:93:6a:ac: c8:87:e5:c7:75:d2:67:43:1f:bd:96:12:f1:3d:1e: cc:3e:c6:18:e8:bb:ec:e4:fd:ae:7b:7a:8a:57:59: d5:15:c1:dd:a2:a7:67:29:06:5f:e3:33:1a:63:d1: b5:71:03:ec:30:40:68:db:d4:2d:b1:e5:0b:d0:c3: 44:8d:c5:83:47:fd:e0:c4:ae:8e:84:c3:86:5a:32: 29:1c:ab:23:d5:18:71:a3:92:cd:c3:f9:1c:8d:7a: bb:8e:0f:44:bc:ec:7a:34:50:00:3b:ec:d4:10:5e: b5:1f:86:eb:8a:4f:8a:4d:14:5e:10:8a:0b:4f:ad: a4:01:fe:3c:02:d3:1a:6a:7f:32:98:4e:23:c1:0e: 32:bc:a0:3a:92:86:d0:96:cb:3a:0c:3b:a8:05:61: 10:5d:fd:09:ea:f4:db:70:7f:d1:87:4b:15:b4:8b: 80:f4:ae:36:85:e2:1a:8d:4f:d8:c1:54:a9:9b:e3: 0c:9b:45:87:69:ae:d3:ca:2a:e2:e6:a3:1c:29:ce: 4f:88:69:24:2c:12:c9:a0:53:57:86:f4:81:e7:1c: ee:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:04:29:28:A6:D7:56:03:DA:FF:F0:77:FC:0C:2A:CD:3C:A8:8D:AC X509v3 Authority Key Identifier: keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:fa:54:af:02:01:15:33:e1:3d:e8:1b:8d:50:79:4f:c2:be: dd:fe:05:86:86:ee:4c:c6:8d:ae:6a:8a:71:46:f3:59:cc:64: d6:5b:a7:99:76:bc:7c:5b:1d:82:9c:8b:9a:86:aa:5a:24:09: 75:8b:aa:61:5d:55:9b:15:27:1e:e0:37:9d:92:9b:1d:b4:cb: 44:ed:e3:26:03:45:a0:7f:89:89:22:8b:ad:11:6c:eb:4f:29: 3f:88:5f:23:27:c3:c0:fc:6a:34:4e:a8:eb:23:98:d0:dd:3f: f5:ff:78:36:55:05:57:9f:79:f0:26:08:5f:17:76:41:e6:1f: fa:c2:d8:40:5b:9c:9b:6e:f2:09:1d:59:cc:c6:b9:3e:b3:3b: ca:73:a2:04:46:4f:38:ea:b7:87:14:b5:bb:15:e1:e5:5b:fc: a7:0d:ec:66:87:f4:77:5a:28:6a:84:77:f3:cf:cc:a9:26:70: a8:db:3f:26:3a:d1:99:c5:bc:24:78:f0:da:69:b9:31:db:9b: 19:7e:4e:90:31:28:9d:c0:ce:4f:9a:64:4f:1c:94:63:b9:9c: 66:f4:77:b2:dc:b6:95:92:c2:4f:38:88:6f:80:b4:56:17:78: 1f:f2:7e:bc:85:1f:5d:d2:fa:b7:e0:8d:a8:e7:4b:83:8e:57: 72:a5:31:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0U4MDExMC8GA1UEBRMoOUE1ODdFNEVDRjY4RUM3NzI5RDhERTQzNUZGREFBRENF QTVCNDkzOTAeFw0yNjAxMjUwNTU4MjRaFw0yNjAyMDEwNTU4MjRaMBgxFjAUBgNV BAMMDTY5NzViMTAwLTU2MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC36LRthyPMR0v8wbRNUz7cp3UND3bK6LPOXhikugwz7ZZFkwzWzxT8mpNqrMiH 5cd10mdDH72WEvE9Hsw+xhjou+zk/a57eopXWdUVwd2ip2cpBl/jMxpj0bVxA+ww QGjb1C2x5QvQw0SNxYNH/eDEro6Ew4ZaMikcqyPVGHGjks3D+RyNeruOD0S87Ho0 UAA77NQQXrUfhuuKT4pNFF4QigtPraQB/jwC0xpqfzKYTiPBDjK8oDqShtCWyzoM O6gFYRBd/Qnq9Ntwf9GHSxW0i4D0rjaF4hqNT9jBVKmb4wybRYdprtPKKuLmoxwp zk+IaSQsEsmgU1eG9IHnHO5lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuAQpKKbX VgPa//B3/AwqzTyojawwHwYDVR0jBBgwFoAUmlh+Ts9o7Hcp2N5DX/2q3OpbSTkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRTgwLzM1NDMzRjIyNEI2 NjExRjBCODg1MjQzOUM0RjlBRTAyL21saC1UczlvN0hjcDJONURYXzJxM09wYlNU ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbWxoLVRzOW83SGNwMk41RFhfMnEzT3BiU1RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RTgwLzM1NDMzRjIyNEI2NjExRjBCODg1MjQzOUM0RjlBRTAyL21saC1UczlvN0hj cDJONURYXzJxM09wYlNUay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJf6VK8CARUz4T3oG41QeU/Cvt3+BYaG7kzGja5qinFG81nMZNZbp5l2 vHxbHYKci5qGqlokCXWLqmFdVZsVJx7gN52Smx20y0Tt4yYDRaB/iYkii60RbOtP KT+IXyMnw8D8ajROqOsjmNDdP/X/eDZVBVefefAmCF8XdkHmH/rC2EBbnJtu8gkd WczGuT6zO8pzogRGTzjqt4cUtbsV4eVb/KcN7GaH9HdaKGqEd/PPzKkmcKjbPyY6 0ZnFvCR48NppuTHbmxl+TpAxKJ3Azk+aZE8clGO5nGb0d7LctpWSwk84iG+AtFYX eB/yfryFH13S+rfgjajnS4OOV3KlMR8= -----END CERTIFICATE-----Generated at Sun Jan 25 11:50:46 2026 by rpki-client