This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json) Hash identifier: P0vQvH02qut1BVCD9OPP9wmddZY+K1+NDBMJAGBEEfU= Subject key identifier: 8C:FA:EF:2E:A4:11:5D:AD:BE:C1:E2:46:F6:26:8B:B8:DB:12:F0:2D Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft Manifest number: 46 Signing time: Sat 17 Jan 2026 06:21:08 +0000 Manifest this update: Sat 17 Jan 2026 06:21:08 +0000 Manifest next update: Sat 24 Jan 2026 06:21:08 +0000 Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: nRNBEds+rmZrVXkipOpIKbn7enf2h/Nzn0+Ccbhaf+w=) 2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: vMZkY4LJvSskuTqDy/+VGXHXuUJS0EC4VIR/FgkiiB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: Jan 17 06:21:08 2026 GMT Not After : Jan 24 06:21:08 2026 GMT Subject: CN=696b2a54-3a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ba:bc:07:c6:87:98:96:fa:f2:7c:55:e5:94: f1:28:c4:21:95:7c:9b:03:26:c0:90:01:fb:01:be: 7f:6a:f3:00:40:d8:5e:da:49:b3:1f:8c:79:6a:54: 71:73:0c:2e:c3:d8:d0:7f:64:40:01:e3:a3:6b:95: 23:ec:93:af:4b:f7:4f:17:dd:95:67:de:f7:d0:b5: b9:ce:3e:b4:c3:40:90:1f:1a:62:3b:6f:87:b0:c7: 64:64:99:11:c4:77:34:7f:aa:fb:e2:d8:c4:3b:7a: 47:75:a4:b3:98:e3:55:d3:53:05:46:93:21:f5:61: 90:75:5a:5c:de:43:5f:cc:82:5d:09:50:f7:70:fb: 0f:39:f2:4b:4a:7f:81:54:92:74:f1:88:2b:b8:7d: e5:33:c3:6f:82:ad:99:57:e1:49:e4:da:fa:9d:c1: f2:e4:65:3a:f7:32:4f:e9:3d:0d:12:05:b5:e9:82: 04:48:7b:c5:c6:4f:34:45:3b:91:09:9f:f7:af:27: 3d:4e:11:ea:80:fd:63:5b:8e:e1:7e:0f:90:c7:8f: 8c:ea:38:91:29:75:8c:f4:97:34:ff:b5:d2:77:5a: f3:d9:db:d7:7e:2c:8f:e4:8e:93:b9:32:82:78:90: b1:0c:3f:51:7e:b0:bc:6e:54:30:ce:e8:86:45:7f: 1f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FA:EF:2E:A4:11:5D:AD:BE:C1:E2:46:F6:26:8B:B8:DB:12:F0:2D X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d0:04:94:d6:42:f2:8d:3e:c7:db:73:92:b0:d7:1a:48:7f: b1:9a:f5:ca:50:9a:6a:b7:bc:a4:47:79:3d:f1:5a:da:48:12: 76:8c:56:5b:b9:36:78:a2:4c:a2:1e:8e:29:22:c9:23:92:1a: 88:b5:92:0e:5b:b3:78:f8:f7:5f:15:0f:f7:16:d2:1b:96:37: 98:e4:be:aa:e4:de:f5:d0:57:7d:5d:5a:91:93:db:3f:e0:89: 2e:6b:f9:d6:a0:52:95:0d:f1:59:ba:1b:54:27:74:ba:39:1a: de:e4:92:cb:80:a5:f6:49:38:f0:3d:86:c5:f9:61:ed:13:2d: 73:c6:23:10:d8:14:61:a9:44:f5:31:2f:dc:a2:82:62:19:d6: d6:17:3b:65:a5:bd:6d:61:c6:aa:f4:7e:d4:58:af:e2:7c:f4: 69:0e:e4:aa:d5:bd:8a:28:64:c4:0c:a7:2b:5b:56:a5:18:27: 80:33:c9:79:72:79:39:48:b8:fb:48:b1:bb:7a:08:8b:92:bf: 60:5e:2f:20:0f:8a:22:85:3d:33:83:da:6f:64:f4:39:54:45: 50:92:05:20:2a:2e:97:8d:90:29:b1:02:40:01:9b:d0:1b:3d: 34:2f:2f:bd:6f:07:81:45:4e:67:7d:ad:6e:09:43:4b:4e:7d: c2:cf:d2:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFQzExMC8GA1UEBRMoMDgxMkEwOTY2MkYwQjNFMzRGMkI1QTUxQzMzRThFOTI3 MDNFNDM2OTAeFw0yNjAxMTcwNjIxMDhaFw0yNjAxMjQwNjIxMDhaMBgxFjAUBgNV BAMMDTY5NmIyYTU0LTNhOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpurwHxoeYlvryfFXllPEoxCGVfJsDJsCQAfsBvn9q8wBA2F7aSbMfjHlqVHFz DC7D2NB/ZEAB46NrlSPsk69L908X3ZVn3vfQtbnOPrTDQJAfGmI7b4ewx2RkmRHE dzR/qvvi2MQ7ekd1pLOY41XTUwVGkyH1YZB1WlzeQ1/Mgl0JUPdw+w858ktKf4FU knTxiCu4feUzw2+CrZlX4Unk2vqdwfLkZTr3Mk/pPQ0SBbXpggRIe8XGTzRFO5EJ n/evJz1OEeqA/WNbjuF+D5DHj4zqOJEpdYz0lzT/tdJ3WvPZ29d+LI/kjpO5MoJ4 kLEMP1F+sLxuVDDO6IZFfx9zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjPrvLqQR Xa2+weJG9iaLuNsS8C0wHwYDVR0jBBgwFoAUCBKglmLws+NPK1pRwz6OknA+Q2kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0VDLzI1NjM1N0M4ODdE RDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEy ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0JLZ2xtTHdzLU5QSzFwUnd6Nk9rbkEtUTJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0VDLzI1NjM1N0M4ODdERDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1O UEsxcFJ3ejZPa25BLVEyay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABvQBJTWQvKNPsfbc5Kw1xpIf7Ga9cpQmmq3vKRHeT3xWtpIEnaMVlu5 NniiTKIejikiySOSGoi1kg5bs3j4918VD/cW0huWN5jkvqrk3vXQV31dWpGT2z/g iS5r+dagUpUN8Vm6G1QndLo5Gt7kksuApfZJOPA9hsX5Ye0TLXPGIxDYFGGpRPUx L9yigmIZ1tYXO2WlvW1hxqr0ftRYr+J89GkO5KrVvYooZMQMpytbVqUYJ4AzyXly eTlIuPtIsbt6CIuSv2BeLyAPiiKFPTOD2m9k9DlURVCSBSAqLpeNkCmxAkABm9Ab PTQvL71vB4FFTmd9rW4JQ0tOfcLP0l4= -----END CERTIFICATE-----Generated at Sun Jan 18 03:09:38 2026 by rpki-client