This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft File: lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json) Hash identifier: cNrRaGQem4sDkoNu3HRY6XI/C7X4OcXmCYSVYX/QZMk= Subject key identifier: BA:76:EA:C5:BE:99:ED:E2:4A:4D:AB:BF:28:50:4F:4E:E7:89:3D:B9 Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF Certificate issuer: /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft Manifest number: 014A Signing time: Sun 25 Jan 2026 03:34:10 +0000 Manifest this update: Sun 25 Jan 2026 03:34:09 +0000 Manifest next update: Sun 01 Feb 2026 03:34:09 +0000 Files and hashes: 1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: i0WzhWOXhNJ+T3IROLbXB/Qhl1yd/B3Zx6S0HfhoD0Q=) 2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: MhVCwr+DLav+lA/a+EyaekFbp041Ik8QtWt4lKnp/qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Validity Not Before: Jan 25 03:34:09 2026 GMT Not After : Feb 1 03:34:09 2026 GMT Subject: CN=69758f32-72c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:27:a6:be:36:fb:45:6d:1d:16:4f:7b:cc:0d: 4b:f9:3f:f8:8f:61:61:ed:63:51:86:c0:6b:b4:51: 6f:ea:b9:7a:98:ed:e4:36:8d:a8:05:ea:70:1a:1e: e6:ff:c0:d3:71:c2:de:13:aa:d5:40:ab:54:64:4c: 0b:01:5e:81:10:86:33:aa:e3:fc:69:82:ed:49:42: ec:94:d2:c7:af:d5:d2:8d:7d:d4:14:76:fe:55:a5: f1:a2:df:50:fe:5b:9b:8d:4a:9e:c2:c0:4a:57:ce: 37:a5:b6:eb:19:12:19:78:69:e1:29:9e:c3:0c:ef: 23:82:e7:b4:72:fd:9f:8e:4a:cd:aa:37:95:90:6b: ba:8c:bc:b4:69:2a:99:ae:f3:44:04:f0:e2:2b:d9: c6:c3:99:02:fa:42:93:19:9d:dd:8f:89:15:78:57: c0:8a:e6:1e:20:11:9b:f1:f0:a3:03:fc:fb:48:42: 5b:b1:a1:ea:18:48:be:4e:a1:d1:af:4e:e9:51:ad: cc:ec:ae:21:8f:43:41:8c:17:3f:f9:39:24:23:ff: f3:af:3b:4e:53:58:2a:82:40:cd:12:da:72:d4:a6: 00:bf:a2:10:fb:3f:a6:b1:06:32:90:e5:3d:c5:ff: 4e:c5:ac:b7:a1:ce:a8:31:92:ae:ba:b5:af:9f:b4: f4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:76:EA:C5:BE:99:ED:E2:4A:4D:AB:BF:28:50:4F:4E:E7:89:3D:B9 X509v3 Authority Key Identifier: keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e5:d5:53:da:bb:d3:d8:7e:15:a7:8e:97:d8:f7:0c:b3:20: 83:2e:99:c6:a1:4b:a0:ae:20:7e:9e:cc:85:a3:b1:25:9a:41: 2e:1d:c3:cc:69:b9:b0:56:5b:47:c5:bb:7d:1f:9a:14:cb:ef: 5d:f2:ab:33:22:65:26:c8:5e:45:a9:a1:4b:7c:c6:1f:14:5b: 2f:a9:c1:9e:aa:a4:4e:55:39:d6:9d:8a:76:6b:af:33:27:6e: 5c:be:5f:87:49:4d:7b:19:05:dd:06:c1:62:10:ea:61:08:96: 10:89:f7:6a:36:01:29:39:63:99:16:40:d9:4d:f9:b3:89:ac: 56:2c:5e:03:a5:57:a5:03:23:1e:03:63:1a:93:5b:b9:3f:69: fb:55:99:da:86:50:b3:65:6e:49:5a:0a:b7:04:26:ee:fd:a6: 3f:70:39:6c:ab:e8:02:97:1b:85:86:fa:f2:51:64:2c:85:ef: 90:36:5c:88:63:ce:bc:d7:0e:77:9e:ee:92:43:e3:b7:1a:ee: bc:84:84:e1:e3:81:3e:37:fb:42:08:10:9a:e1:0c:23:c0:0a: 41:55:cb:8e:93:8b:c7:52:fd:00:84:35:b2:1a:cc:61:92:6e: b2:4f:b0:25:c0:88:44:ab:09:93:5f:6d:18:25:20:1c:ac:b1: 0c:b2:8b:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJFNUUxMTAvBgNVBAUTKDk2QjY1MDEzMTJGOUUxMkVCMTlBNjRGNjIyRTE3Q0Q0 Mjc5REYwQ0YwHhcNMjYwMTI1MDMzNDA5WhcNMjYwMjAxMDMzNDA5WjAYMRYwFAYD VQQDDA02OTc1OGYzMi03MmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSemvjb7RW0dFk97zA1L+T/4j2Fh7WNRhsBrtFFv6rl6mO3kNo2oBepwGh7m /8DTccLeE6rVQKtUZEwLAV6BEIYzquP8aYLtSULslNLHr9XSjX3UFHb+VaXxot9Q /lubjUqewsBKV843pbbrGRIZeGnhKZ7DDO8jgue0cv2fjkrNqjeVkGu6jLy0aSqZ rvNEBPDiK9nGw5kC+kKTGZ3dj4kVeFfAiuYeIBGb8fCjA/z7SEJbsaHqGEi+TqHR r07pUa3M7K4hj0NBjBc/+TkkI//zrztOU1gqgkDNEtpy1KYAv6IQ+z+msQYykOU9 xf9Oxay3oc6oMZKuurWvn7T02wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLp26sW+ me3iSk2rvyhQT07niT25MB8GA1UdIwQYMBaAFJa2UBMS+eEusZpk9iLhfNQnnfDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkU1RS84M0I4NzJGNDAz OUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRTNnhtbVQySXVGODFDZWQ4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xyWlFFeEw1NFM2eG1tVDJJdUY4MUNlZDhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkU1RS84M0I4NzJGNDAzOUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRT NnhtbVQySXVGODFDZWQ4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr5dVT2rvT2H4Vp46X2PcMsyCDLpnGoUugriB+nsyFo7ElmkEuHcPM abmwVltHxbt9H5oUy+9d8qszImUmyF5FqaFLfMYfFFsvqcGeqqROVTnWnYp2a68z J25cvl+HSU17GQXdBsFiEOphCJYQifdqNgEpOWOZFkDZTfmziaxWLF4DpVelAyMe A2Mak1u5P2n7VZnahlCzZW5JWgq3BCbu/aY/cDlsq+gClxuFhvryUWQshe+QNlyI Y8681w53nu6SQ+O3Gu68hITh44E+N/tCCBCa4QwjwApBVcuOk4vHUv0AhDWyGsxh km6yT7AlwIhEqwmTX20YJSAcrLEMsovn -----END CERTIFICATE-----Generated at Sun Jan 25 10:47:52 2026 by rpki-client