This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json) Hash identifier: D++MWlD88mp4m8673nJRbeLl57V3NZAOLH64RIMY7ho= Subject key identifier: 5D:8B:F5:07:49:5C:BD:0C:88:1B:E3:79:C3:1C:C5:70:F8:F2:AC:83 Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Certificate serial: 0753 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft Manifest number: 074D Signing time: Sat 24 Jan 2026 21:02:28 +0000 Manifest this update: Sat 24 Jan 2026 21:02:27 +0000 Manifest next update: Sat 31 Jan 2026 21:02:27 +0000 Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: kJao4RwjFS8GNqRFKDnJflfNOdFYnTrEp8gOC/EVb3o=) 2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: yon8zk/9fCZ3WyFBjyvszv/gLcYp08xtnvCiEsyDKSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1875 (0x753) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Validity Not Before: Jan 24 21:02:27 2026 GMT Not After : Jan 31 21:02:27 2026 GMT Subject: CN=69753364-a120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:65:91:eb:f2:4f:38:21:da:01:3f:8b:ab:3d: b3:d4:82:53:4c:2a:74:41:54:c7:4d:ce:6a:86:96: d1:56:74:ce:8a:dc:04:4b:6d:2b:31:5f:8d:c6:d0: 8d:59:90:cf:9d:ec:48:5d:94:93:5b:ed:0e:47:f1: a4:89:c9:7e:4c:21:2f:93:7f:52:23:7b:f6:84:c1: a5:a2:c0:78:93:ad:d3:6e:94:09:e6:0f:28:84:ba: 69:fe:c6:d7:f1:12:e2:e3:be:13:cb:1e:6e:a9:5e: 7a:95:2a:ce:94:4e:e0:37:ab:ca:1c:32:f2:0e:81: c6:8d:fd:43:21:73:00:9a:58:2c:2e:12:3d:66:06: 46:34:d7:92:72:07:8f:36:66:45:dd:75:4e:f9:b5: 98:65:1a:d2:a5:b2:ae:4e:30:42:39:4f:96:d8:cc: d3:b8:50:12:4d:6b:52:4c:16:50:89:34:d1:ac:0b: 88:68:36:72:e8:9f:87:7f:c4:c6:3f:8a:8a:14:d9: 19:22:e3:2d:a0:8b:8c:fe:c8:f3:4d:0a:6c:f0:2f: 20:d8:f7:48:4a:2f:6e:1d:da:34:ea:e2:60:ec:e0: 49:f1:f7:a9:db:c4:5c:4d:0c:03:cd:d5:3d:31:93: 77:93:d1:7b:07:33:cb:ae:bf:ed:b0:ec:0d:ae:73: 15:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8B:F5:07:49:5C:BD:0C:88:1B:E3:79:C3:1C:C5:70:F8:F2:AC:83 X509v3 Authority Key Identifier: keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:81:61:3d:a4:75:18:5d:38:de:a8:cb:d7:ad:2b:60:b8:d5: a3:f0:dc:ef:ed:ce:fa:3e:de:bc:4f:6c:e1:44:86:f9:11:3d: 89:25:80:ee:f9:29:f1:43:37:01:b5:53:dd:e6:62:b0:10:d5: 46:78:56:83:2a:3a:20:21:98:c0:4f:86:ea:9d:14:6b:5c:66: b2:da:f7:9f:69:86:14:9a:8a:11:10:eb:9e:1d:92:14:e8:f5: 53:64:0c:2b:12:6a:f1:bd:38:41:0c:9c:b0:a9:d4:47:f9:c1: 6c:c8:fd:03:99:b5:d1:e5:4a:ed:55:cc:6b:b6:0f:f2:46:bd: 76:3e:2c:b1:ee:82:98:ab:7c:91:4e:95:8c:05:72:e4:63:45: 89:2a:c4:e1:33:dd:54:b9:14:77:91:78:ac:cd:5f:dd:7b:8f: af:ea:8c:62:8f:b1:5f:d2:76:2c:ea:38:1a:5c:30:e1:e3:1d: e1:e5:39:45:1d:f5:40:c3:42:cd:23:17:ea:da:01:aa:2d:8b: f3:ba:9b:1a:f6:44:ab:6c:04:1d:e3:06:36:55:0a:db:66:d0: 55:c7:b6:09:62:23:e3:e6:f2:ff:d9:89:2c:ea:a9:69:dd:93: 53:81:a6:a0:7e:b5:87:04:76:02:5c:f3:b4:0d:60:89:0d:bf: a9:25:52:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM0REQxMTAvBgNVBAUTKDkwQzNEODM1MTcyNkE4QjkxREUyNkQ0NjgxMTI4MzQz NUNDNTI2MjMwHhcNMjYwMTI0MjEwMjI3WhcNMjYwMTMxMjEwMjI3WjAYMRYwFAYD VQQDDA02OTc1MzM2NC1hMTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GWR6/JPOCHaAT+Lqz2z1IJTTCp0QVTHTc5qhpbRVnTOitwES20rMV+NxtCN WZDPnexIXZSTW+0OR/Gkicl+TCEvk39SI3v2hMGlosB4k63TbpQJ5g8ohLpp/sbX 8RLi474Tyx5uqV56lSrOlE7gN6vKHDLyDoHGjf1DIXMAmlgsLhI9ZgZGNNeScgeP NmZF3XVO+bWYZRrSpbKuTjBCOU+W2MzTuFASTWtSTBZQiTTRrAuIaDZy6J+Hf8TG P4qKFNkZIuMtoIuM/sjzTQps8C8g2PdISi9uHdo06uJg7OBJ8fep28RcTQwDzdU9 MZN3k9F7BzPLrr/tsOwNrnMVVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2L9QdJ XL0MiBvjecMcxXD48qyDMB8GA1UdIwQYMBaAFJDD2DUXJqi5HeJtRoESg0NcxSYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzRERC9CODhDMjI0QzU1 N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFMa2Q0bTFHZ1JLRFExekZK aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNUFlOUmNtcUxrZDRtMUdnUktEUTF6RkppTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzRERC9CODhDMjI0QzU1N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFM a2Q0bTFHZ1JLRFExekZKaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZgWE9pHUYXTjeqMvXrStguNWj8Nzv7c76Pt68T2zhRIb5ET2JJYDu +SnxQzcBtVPd5mKwENVGeFaDKjogIZjAT4bqnRRrXGay2vefaYYUmooREOueHZIU 6PVTZAwrEmrxvThBDJywqdRH+cFsyP0DmbXR5UrtVcxrtg/yRr12Piyx7oKYq3yR TpWMBXLkY0WJKsThM91UuRR3kXiszV/de4+v6oxij7Ff0nYs6jgaXDDh4x3h5TlF HfVAw0LNIxfq2gGqLYvzupsa9kSrbAQd4wY2VQrbZtBVx7YJYiPj5vL/2Yks6qlp 3ZNTgaagfrWHBHYCXPO0DWCJDb+pJVJK -----END CERTIFICATE-----Generated at Sun Jan 25 10:58:10 2026 by rpki-client