This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: NbwwG3VA9Mi1CMVchGXROQXX1k0muWD8ECYydSvnfJ8= Subject key identifier: A0:06:51:A2:6E:F6:2A:70:09:F3:84:24:5C:1B:5E:D5:4E:1E:03:E3 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 1221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 11EC Signing time: Mon 26 Jan 2026 16:53:13 +0000 Manifest this update: Mon 26 Jan 2026 16:53:13 +0000 Manifest next update: Mon 02 Feb 2026 16:53:13 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: bK0gm3sWNPVUvg3FBEdsXrbENVJkwYYy1ghYzu+X6AE=) 2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: jot76CXrAz3dE65zS5eFuiF7pvf8X1MVAGSlp7hXRdo=) 3: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: L9KTvljF01QWUS68uL1ITUuZceQQf452UdFJmG0kCrI=) 4: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: NhCnhSZSfkDREQa5IgZy4tILaVnRqHkxPBLk2fQgkMU=) 5: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: C3b1kJVj/ZgKAe5Ws86NLC+2MF3aglPyf/qxRhLS+ZQ=) 6: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: 0Ni5FHtxPqtRB1YXZ5zRXDqJAM/35OEWFhDuPTdXe6o=) 7: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: IlX871gTVlMjHgxawx+1RHJJOHvxDDWwU+dINDtj5G0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 16:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4641 (0x1221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Jan 26 16:53:13 2026 GMT Not After : Feb 2 16:53:13 2026 GMT Subject: CN=69779bf9-4cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d2:bc:49:4d:14:f1:f5:fc:b9:f6:08:67:8d: 8b:c0:81:2e:0c:7d:52:68:af:dc:28:e5:01:dc:0c: 55:23:ae:27:47:78:f6:2c:25:1d:84:69:f5:3e:18: 91:e3:73:1f:97:3b:92:9e:7f:51:5f:37:9e:3d:c6: 3a:c4:a5:30:bb:97:22:ef:3d:45:02:87:52:89:71: 51:7f:08:53:9b:ad:a9:2c:ef:0d:2e:d5:a2:79:f3: 6e:64:d2:62:53:6c:1f:c9:27:45:3c:0d:2d:b6:d3: b9:16:a0:4d:d8:ff:84:54:2c:0a:2e:35:d0:8c:3e: 07:4f:d4:31:72:27:40:3c:60:3c:3d:ac:b2:b1:3b: ee:38:e1:4d:8a:02:46:bd:9b:c1:25:b4:b4:62:9d: c8:b5:ba:fe:37:7d:eb:99:2a:91:dd:34:85:a1:28: c4:e6:ff:a0:4a:5d:52:33:bd:c6:0b:70:10:fb:48: d5:fc:aa:b5:1f:5a:12:3c:55:bd:d1:1b:b9:a2:3f: 9f:8e:c3:26:4e:6c:0b:83:38:7a:a3:c9:54:1c:34: 62:37:c3:05:31:d8:30:0a:4a:38:15:8f:af:b6:36: c5:40:01:49:11:ff:04:69:ba:62:3c:4e:f0:7d:6f: 0b:96:75:ef:74:3a:70:a5:36:df:73:a4:73:ef:f4: 54:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:06:51:A2:6E:F6:2A:70:09:F3:84:24:5C:1B:5E:D5:4E:1E:03:E3 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ed:e8:f8:4e:e4:98:7b:08:c2:09:a3:49:9f:1d:fb:61:73: 08:b3:f0:07:4a:2f:75:9f:51:97:86:27:72:f9:e0:3b:77:de: ed:59:da:06:cd:ea:5a:9c:94:51:b0:b2:81:0b:ae:72:c5:b6: 12:f0:41:66:fd:b7:e4:7d:91:b0:22:73:e2:7c:93:2a:66:36: 70:3e:05:4e:e6:4c:8a:72:91:9c:7a:46:51:e4:71:19:8b:53: 37:bd:b1:c1:ba:42:47:0f:80:63:6c:ab:c8:45:1f:60:8c:a8: 77:01:c2:f3:e7:9a:e9:17:b0:ba:a2:f9:2f:82:2b:77:5b:af: 21:18:f7:df:e0:d4:e5:b3:1d:82:0d:93:ec:f8:ed:b4:a9:c7: f1:73:59:50:ef:5b:d7:d8:c3:02:8c:a3:3a:b8:39:27:82:bd: 07:14:35:d0:34:b7:f9:1a:30:2a:9c:d6:c6:71:ba:7f:7d:9c: a8:8d:28:4a:3e:11:80:51:8b:a3:1e:c5:42:22:63:ac:0d:d3: d2:6d:4b:90:41:ca:75:18:2c:8e:4e:2c:51:61:05:a6:c2:1f: cd:5a:7f:70:13:28:54:63:d4:cc:72:ad:a3:23:aa:ee:2f:b2: 88:6e:99:c8:4a:c7:1c:0d:1d:ac:0f:88:a4:2b:37:12:25:4a: 98:d9:30:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjYwMTI2MTY1MzEzWhcNMjYwMjAyMTY1MzEzWjAYMRYwFAYD VQQDDA02OTc3OWJmOS00Y2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tK8SU0U8fX8ufYIZ42LwIEuDH1SaK/cKOUB3AxVI64nR3j2LCUdhGn1PhiR 43MflzuSnn9RXzeePcY6xKUwu5ci7z1FAodSiXFRfwhTm62pLO8NLtWiefNuZNJi U2wfySdFPA0tttO5FqBN2P+EVCwKLjXQjD4HT9QxcidAPGA8PayysTvuOOFNigJG vZvBJbS0Yp3Itbr+N33rmSqR3TSFoSjE5v+gSl1SM73GC3AQ+0jV/Kq1H1oSPFW9 0Ru5oj+fjsMmTmwLgzh6o8lUHDRiN8MFMdgwCko4FY+vtjbFQAFJEf8EabpiPE7w fW8LlnXvdDpwpTbfc6Rz7/RUtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAGUaJu 9ipwCfOEJFwbXtVOHgPjMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz7ej4TuSYewjCCaNJnx37YXMIs/AHSi91n1GXhidy+eA7d97tWdoG zepanJRRsLKBC65yxbYS8EFm/bfkfZGwInPifJMqZjZwPgVO5kyKcpGcekZR5HEZ i1M3vbHBukJHD4BjbKvIRR9gjKh3AcLz55rpF7C6ovkvgit3W68hGPff4NTlsx2C DZPs+O20qcfxc1lQ71vX2MMCjKM6uDkngr0HFDXQNLf5GjAqnNbGcbp/fZyojShK PhGAUYujHsVCImOsDdPSbUuQQcp1GCyOTixRYQWmwh/NWn9wEyhUY9TMcq2jI6ru L7KIbpnISsccDR2sD4ikKzcSJUqY2TAW -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:23 2026 by rpki-client