This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json) Hash identifier: TRPsTS9yEfA5C5uPTz0DaSVYxnassDIeFNeVCIjUr7o= Subject key identifier: 7C:A2:EF:F3:C4:B6:8E:66:DE:11:1C:19:B6:96:2D:33:03:34:66:AD Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 130F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft Manifest number: 12E8 Signing time: Fri 30 Jan 2026 16:54:00 +0000 Manifest this update: Fri 30 Jan 2026 16:54:00 +0000 Manifest next update: Fri 06 Feb 2026 16:54:00 +0000 Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: SgPxTa4CY24yeWjGWH/d1LgK7wkPtbFpuqYtC5yja5Q=) 2: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: 3BEJ1gCiaz/4ZdrE3qzkDJ5+ojL/iMHnMesKRyA+c6Q=) 3: 08DCBB24DC8011F0AB4C816E3A6F56BC.roa (hash: WXCmLL//FoCjMGfjt8pRmkTjKi9B4euZO4lNoEtZDGU=) 4: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: nxXSdnwoUfmzLx95eiSN62zk0YbQxEgJtgpJheqOOz4=) 5: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: gcGbaS+C10OxA3/sWZJEHnaLaEauoh+9kGT7bNc0D6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Feb 2026 16:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4879 (0x130f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Validity Not Before: Jan 30 16:54:00 2026 GMT Not After : Feb 6 16:54:00 2026 GMT Subject: CN=697ce228-aaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:45:89:58:b2:3e:c0:0d:a1:8f:cb:3e:52:5d: 34:60:0b:98:76:35:08:a2:2f:bd:8f:05:cb:6a:e6: b2:08:15:c4:a8:49:54:a9:c5:f3:62:12:38:98:60: 89:e4:9b:69:3f:b8:8e:02:aa:58:96:f8:57:db:a8: 2f:5a:5e:b6:1c:34:41:d6:da:c1:fc:98:ac:16:3b: f9:e9:c4:71:2e:76:42:12:74:fd:1d:ab:fb:93:30: ba:0e:87:6e:5b:9a:a8:85:26:6a:82:5c:6c:94:45: 30:60:af:ec:57:59:35:1b:63:8a:09:35:dc:94:e3: 2f:4a:fc:3e:e7:2c:bc:53:c4:81:6b:66:d4:39:d6: 8b:f2:df:af:8c:13:cb:f5:31:4e:b4:69:af:bb:b4: ea:75:10:7b:3e:4b:f8:2d:c6:44:ad:93:ae:c9:14: 5a:16:1b:64:b8:27:6b:3a:32:8c:9e:2d:8f:4f:5e: 53:fe:3b:88:d0:95:fd:89:bf:0c:54:1a:9c:e2:ab: d9:f4:4f:cf:45:2a:9f:af:ac:ca:1d:48:4a:a3:a2: 22:62:3d:f5:22:20:09:5f:15:65:61:db:6a:5c:36: 0d:0d:43:ef:e0:53:09:ed:03:73:46:72:3a:fa:2d: 8e:b1:3a:ea:af:7c:49:2f:be:8a:33:fb:a1:3a:8d: 51:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A2:EF:F3:C4:B6:8E:66:DE:11:1C:19:B6:96:2D:33:03:34:66:AD X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:50:a5:aa:2e:a6:05:25:63:77:6d:aa:9b:47:7b:f8:03:e4: fa:f0:34:16:91:d5:37:fc:e5:e6:0f:09:02:91:c6:1e:7c:74: 9c:31:46:cc:9e:50:0f:0b:95:17:cd:e3:ce:4d:2b:5f:b3:60: ad:4c:0a:87:28:e2:15:cc:22:7b:03:96:25:b2:45:63:c6:42: 5d:21:c1:05:8d:29:e8:84:0e:cc:af:b1:a0:be:6a:f2:d7:4d: 3c:9c:c1:4c:a2:ad:e1:74:f8:55:56:5f:99:fb:be:46:32:bf: da:94:8e:ba:f3:c2:21:63:48:8e:66:aa:4e:7b:cc:3a:48:e6: df:18:3f:96:c6:1d:b3:99:6a:81:66:69:95:aa:e7:11:db:dc: c5:8b:02:2d:67:55:1d:8e:5b:5b:d4:c8:f5:9a:64:d2:3b:b9: 0f:4a:bf:bf:46:1a:52:e1:aa:ae:22:43:a2:bd:16:82:2e:1f: 29:b2:44:55:63:98:b8:4b:77:4d:42:6e:90:b7:c8:24:e4:70: 5e:5a:21:d1:14:6f:b1:ea:92:cd:25:94:39:6a:e9:95:de:81: 7e:d0:3e:2a:b2:c7:16:cb:46:d7:62:7b:a3:d2:18:69:08:01: 8b:4c:36:17:38:e0:79:f1:4e:72:79:ab:8d:c5:fc:de:be:b4: da:0d:ea:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjYwMTMwMTY1NDAwWhcNMjYwMjA2MTY1NDAwWjAYMRYwFAYD VQQDDA02OTdjZTIyOC1hYWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkWJWLI+wA2hj8s+Ul00YAuYdjUIoi+9jwXLauayCBXEqElUqcXzYhI4mGCJ 5JtpP7iOAqpYlvhX26gvWl62HDRB1trB/JisFjv56cRxLnZCEnT9Hav7kzC6Dodu W5qohSZqglxslEUwYK/sV1k1G2OKCTXclOMvSvw+5yy8U8SBa2bUOdaL8t+vjBPL 9TFOtGmvu7TqdRB7Pkv4LcZErZOuyRRaFhtkuCdrOjKMni2PT15T/juI0JX9ib8M VBqc4qvZ9E/PRSqfr6zKHUhKo6IiYj31IiAJXxVlYdtqXDYNDUPv4FMJ7QNzRnI6 +i2OsTrqr3xJL76KM/uhOo1RqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyi7/PE to5m3hEcGbaWLTMDNGatMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU2QS8xRDY0MzI4RUQzODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhW QkpRZlZ4N3Qtc0N2ekZLRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGUKWqLqYFJWN3baqbR3v4A+T68DQWkdU3/OXmDwkCkcYefHScMUbM nlAPC5UXzePOTStfs2CtTAqHKOIVzCJ7A5YlskVjxkJdIcEFjSnohA7Mr7Ggvmry 1008nMFMoq3hdPhVVl+Z+75GMr/alI6688IhY0iOZqpOe8w6SObfGD+Wxh2zmWqB ZmmVqucR29zFiwItZ1Udjltb1Mj1mmTSO7kPSr+/RhpS4aquIkOivRaCLh8pskRV Y5i4S3dNQm6Qt8gk5HBeWiHRFG+x6pLNJZQ5aumV3oF+0D4qsscWy0bXYnuj0hhp CAGLTDYXOOB58U5yeauNxfzevrTaDeqx -----END CERTIFICATE-----Generated at Sat Jan 31 13:38:47 2026 by rpki-client