This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json) Hash identifier: Z+gCARTs2unqM6pnlkz7t0Zr6mr2wE/R4idlAs6UwOo= Subject key identifier: B0:7E:09:97:D4:62:DE:28:44:98:3E:90:89:0D:C1:97:FD:E7:82:0F Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft Manifest number: 0157 Signing time: Sun 25 Jan 2026 03:25:31 +0000 Manifest this update: Sun 25 Jan 2026 03:25:31 +0000 Manifest next update: Sun 01 Feb 2026 03:25:31 +0000 Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: /bn1IrmlpG/CpcdZXdFSY7hh1gVJqc+xGJQxa3GTeyo=) 2: A146F2C2ECD011EE8891034AC4F9AE02.roa (hash: GmCMvjggTyREWsN9zghyP/K3sWSTqD1LSQ/qEU2884A=) 3: 56C9937C28C911F086331776C4F9AE02.roa (hash: sWZ/9dCaz3v4S72MvDmq/CPoi7rGClA8JUEmnKlDJLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Validity Not Before: Jan 25 03:25:31 2026 GMT Not After : Feb 1 03:25:31 2026 GMT Subject: CN=69758d2b-bea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:83:cb:af:f1:f0:8b:e7:f9:fc:47:69:cf:c6: f0:2f:b6:0f:88:bf:64:ea:44:e4:9d:f2:f5:3c:95: 87:0a:8d:d2:cd:62:d4:e6:aa:b2:d2:06:1a:f7:86: 38:77:0a:9f:1d:95:73:5f:72:90:72:03:62:35:20: a5:fc:db:d6:85:da:aa:95:ac:b1:e1:35:97:f9:e7: b2:2e:da:e2:75:05:6c:22:31:3e:25:07:a0:e4:ba: d3:ba:e8:36:6f:b7:ac:66:cf:16:bb:ef:60:05:df: 44:92:14:82:85:8e:20:f0:e9:99:55:13:d0:2d:2d: b2:4b:86:f5:8e:4a:a9:9e:49:da:98:49:0c:1f:85: ce:3d:6b:e8:98:c4:ba:41:72:b1:46:e7:d7:3b:fd: 9a:2d:9a:ae:0f:a1:83:ef:e2:47:db:42:3f:ed:68: 17:29:b1:65:8e:77:6c:43:9e:c0:04:18:2f:8f:6a: 19:e1:fc:85:07:b4:67:da:99:d9:ad:a9:82:c5:92: 5a:62:1d:d5:5c:db:ee:ad:59:ea:4b:3f:4b:1f:88: ff:52:d2:18:46:9d:0e:ea:ae:8a:58:9b:f5:f1:4a: 6f:6e:49:1f:5d:2b:e1:38:74:05:65:50:e2:86:c8: cd:30:e6:77:7e:ee:30:bd:1c:53:af:fa:9a:d7:21: 86:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7E:09:97:D4:62:DE:28:44:98:3E:90:89:0D:C1:97:FD:E7:82:0F X509v3 Authority Key Identifier: keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:9b:4c:d6:67:b4:48:34:6f:6d:a6:d7:f3:ef:81:01:93:71: ef:5a:75:4d:13:80:99:c5:73:e7:bf:fb:fa:52:98:45:c1:45: ad:b7:55:4d:fa:f9:06:fc:b6:73:df:d7:c7:32:21:ac:e3:b5: 9d:c7:35:8a:99:86:c4:8c:e6:d1:93:7c:75:27:16:7f:3c:67: df:a1:32:92:2a:65:45:76:27:60:9b:71:57:2d:32:90:e8:be: 81:fd:9c:db:0f:e1:3e:16:c5:d8:cf:ef:a5:6c:9b:2b:40:f9: 44:4b:71:c2:00:61:5c:9f:98:20:7e:c9:b5:d4:92:64:b9:64: 51:30:85:f8:5e:99:3c:7f:f1:0a:0a:03:91:b6:aa:e4:19:51: 16:21:18:36:56:4c:cb:03:70:46:88:58:21:f7:de:7c:33:ce: cb:57:f1:9f:ae:b7:5b:3e:66:e3:b4:84:e8:d9:b8:8c:e7:52: 2c:b2:5f:bb:03:af:06:aa:41:dc:37:43:ff:29:ce:ac:0f:a5: bc:33:6d:cb:77:6e:7b:37:b1:bc:95:f3:a9:0b:bc:b0:55:83: 31:f4:01:0a:dc:9c:c4:48:5c:61:38:12:ef:13:e3:82:03:b4: 8b:ce:41:c8:60:ec:5c:f0:84:24:49:51:76:cb:bb:3d:f5:d0: ed:00:47:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDlBNDdCRjQwQkQ0ODg3RTIyNDE1MzMyNzlFN0YxRDdG MkE1RjZGQkIwHhcNMjYwMTI1MDMyNTMxWhcNMjYwMjAxMDMyNTMxWjAYMRYwFAYD VQQDDA02OTc1OGQyYi1iZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmoPLr/Hwi+f5/Edpz8bwL7YPiL9k6kTknfL1PJWHCo3SzWLU5qqy0gYa94Y4 dwqfHZVzX3KQcgNiNSCl/NvWhdqqlayx4TWX+eeyLtridQVsIjE+JQeg5LrTuug2 b7esZs8Wu+9gBd9EkhSChY4g8OmZVRPQLS2yS4b1jkqpnknamEkMH4XOPWvomMS6 QXKxRufXO/2aLZquD6GD7+JH20I/7WgXKbFljndsQ57ABBgvj2oZ4fyFB7Rn2pnZ ramCxZJaYh3VXNvurVnqSz9LH4j/UtIYRp0O6q6KWJv18UpvbkkfXSvhOHQFZVDi hsjNMOZ3fu4wvRxTr/qa1yGGZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLB+CZfU Yt4oRJg+kIkNwZf954IPMB8GA1UdIwQYMBaAFJpHv0C9SIfiJBUzJ55/HX8qX2+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zMTYxQzM3RUVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgtSWtGVE1ubm44ZGZ5cGZi N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21rZV9RTDFJaC1Ja0ZUTW5ubjhkZnlwZmI3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzk4OS8zMTYxQzM3RUVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgt SWtGVE1ubm44ZGZ5cGZiN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1m0zWZ7RING9tptfz74EBk3HvWnVNE4CZxXPnv/v6UphFwUWtt1VN +vkG/LZz39fHMiGs47WdxzWKmYbEjObRk3x1JxZ/PGffoTKSKmVFdidgm3FXLTKQ 6L6B/ZzbD+E+FsXYz++lbJsrQPlES3HCAGFcn5ggfsm11JJkuWRRMIX4Xpk8f/EK CgORtqrkGVEWIRg2VkzLA3BGiFgh9958M87LV/GfrrdbPmbjtITo2biM51Issl+7 A68GqkHcN0P/Kc6sD6W8M23Ld257N7G8lfOpC7ywVYMx9AEK3JzESFxhOBLvE+OC A7SLzkHIYOxc8IQkSVF2y7s99dDtAEd4 -----END CERTIFICATE-----Generated at Sun Jan 25 11:52:34 2026 by rpki-client