This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: HMKjwxIxMtLBw0FG1ZdeJa9qeNSpbUGtkGJsv6/oxqA= Subject key identifier: 8D:5F:BF:A4:EC:97:4B:C1:92:9F:53:CE:D7:DE:7A:C4:0C:88:82:8C Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0BB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0B97 Signing time: Sat 24 Jan 2026 18:36:40 +0000 Manifest this update: Sat 24 Jan 2026 18:36:39 +0000 Manifest next update: Sat 31 Jan 2026 18:36:39 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: P1+LOi7T1BJXFEInqXoeLuhWMKzHsz7t4oTSyWuiAxI=) 2: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: vpWpUnXP3M0kRZXRJe9IPBkx6ZqY5gGfHE6hnKUPIZE=) 3: 6DEA717805F811F0833EAC2FC4F9AE02.roa (hash: CCycuwjR/zG8JMtLvZuunOXdbHVwvFPn+/QALmHYm1I=) 4: A2055C2E57D911F0BD42DB6DC4F9AE02.roa (hash: TqYpv2WwUkuRYuB5QyDoQVNiTgsmONzJzREbUEtpPrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2993 (0xbb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Jan 24 18:36:39 2026 GMT Not After : Jan 31 18:36:39 2026 GMT Subject: CN=69751137-7f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2d:8f:96:31:8e:7c:fe:96:5b:11:d5:cf:6c: a4:de:13:00:d6:09:9c:ba:24:17:d2:61:56:08:4b: c3:e8:e3:af:43:29:70:54:2b:e4:71:53:c2:69:a1: e8:bb:ec:66:5e:b0:cd:5d:25:f5:4e:1c:02:a7:87: 36:1e:c1:1f:dc:94:e6:8b:17:72:23:3f:d3:7b:97: fe:5b:49:ee:46:b0:9a:94:e1:0e:49:12:cc:e6:c9: a2:48:69:5b:37:cb:51:66:47:8b:04:46:ec:72:09: ae:0d:2f:22:f1:6d:65:88:fe:52:2c:bc:7e:bb:94: e6:3b:84:38:6f:4f:3a:fb:92:90:09:70:e2:76:7c: b1:d8:97:60:51:51:0e:aa:0c:f8:03:ea:23:27:bb: 17:81:80:97:fa:21:88:00:0c:77:bd:43:f9:64:52: b6:52:be:b1:6a:24:56:67:7e:ac:9a:65:3d:1d:ea: 01:28:86:cd:6f:3d:81:47:77:6a:7b:86:f2:f2:15: 35:84:a5:f4:62:66:9c:b4:e2:b9:3d:f8:97:b6:8a: 14:85:a4:a7:7c:6a:eb:84:db:67:8a:f5:d5:53:cc: 8a:56:5f:3e:3a:44:74:62:fb:a2:ab:ec:9e:9f:27: 34:e3:a6:e2:68:38:fe:36:82:ac:14:30:17:e7:16: 14:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5F:BF:A4:EC:97:4B:C1:92:9F:53:CE:D7:DE:7A:C4:0C:88:82:8C X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:59:d6:d7:07:00:93:d7:cc:40:74:e6:05:cc:e2:3a:7e:8d: 81:df:e2:70:d3:20:04:4d:ea:3c:33:df:26:7e:33:5c:c6:a4: b3:67:7e:95:bf:23:a7:c9:f7:84:17:5c:ca:d0:95:16:d3:4e: a5:e7:b8:87:d9:6b:d9:be:ef:b4:0d:53:55:80:c3:d7:04:66: 24:7b:6b:95:a2:22:47:47:5f:58:43:86:d6:88:a3:40:40:01: ad:5d:f0:18:50:8b:89:e3:40:fa:72:26:70:91:6a:9f:b7:c1: e4:15:99:ef:4c:80:1a:b1:cc:30:36:ee:3e:d2:c0:aa:40:5a: a4:81:7a:bd:53:7b:22:5c:8a:37:9a:ca:5d:b7:12:c9:01:1d: 00:e5:82:b3:7c:a3:fd:4d:47:ea:77:9a:97:3d:8a:84:10:e5: 0a:4a:ff:f1:ea:e6:de:ba:6d:46:25:6b:d7:3b:17:13:a6:30: 46:37:bc:42:c1:3f:b7:51:0b:51:be:89:0f:93:36:82:cb:be: 36:3d:85:c9:f1:b8:4a:56:16:72:79:41:df:9b:06:22:e1:2d: 67:0a:c0:fe:e8:5c:5a:e1:00:69:04:94:cf:dc:c9:09:03:83: 27:68:e4:a3:b9:96:02:ab:04:af:9a:65:49:93:9c:bc:ad:66: f4:05:e0:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjYwMTI0MTgzNjM5WhcNMjYwMTMxMTgzNjM5WjAYMRYwFAYD VQQDDA02OTc1MTEzNy03ZjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArC2PljGOfP6WWxHVz2yk3hMA1gmcuiQX0mFWCEvD6OOvQylwVCvkcVPCaaHo u+xmXrDNXSX1ThwCp4c2HsEf3JTmixdyIz/Te5f+W0nuRrCalOEOSRLM5smiSGlb N8tRZkeLBEbscgmuDS8i8W1liP5SLLx+u5TmO4Q4b086+5KQCXDidnyx2JdgUVEO qgz4A+ojJ7sXgYCX+iGIAAx3vUP5ZFK2Ur6xaiRWZ36smmU9HeoBKIbNbz2BR3dq e4by8hU1hKX0YmactOK5PfiXtooUhaSnfGrrhNtnivXVU8yKVl8+OkR0Yvuiq+ye nyc046biaDj+NoKsFDAX5xYUwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1fv6Ts l0vBkp9TztfeesQMiIKMMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPWdbXBwCT18xAdOYFzOI6fo2B3+Jw0yAETeo8M98mfjNcxqSzZ36V vyOnyfeEF1zK0JUW006l57iH2WvZvu+0DVNVgMPXBGYke2uVoiJHR19YQ4bWiKNA QAGtXfAYUIuJ40D6ciZwkWqft8HkFZnvTIAascwwNu4+0sCqQFqkgXq9U3siXIo3 mspdtxLJAR0A5YKzfKP9TUfqd5qXPYqEEOUKSv/x6ubeum1GJWvXOxcTpjBGN7xC wT+3UQtRvokPkzaCy742PYXJ8bhKVhZyeUHfmwYi4S1nCsD+6Fxa4QBpBJTP3MkJ A4MnaOSjuZYCqwSvmmVJk5y8rWb0BeD9 -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:18 2026 by rpki-client