This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft File: MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft (raw, json) Hash identifier: tJ9KxvGkb4ZPmVgp73eVSEOsDI3YEgSHw5nIsIQwBCQ= Subject key identifier: 41:0F:A1:FB:75:70:16:09:31:33:EF:62:29:C1:49:E4:9D:42:BB:25 Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 Certificate issuer: /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft Manifest number: 25 Signing time: Sat 31 Jan 2026 07:23:05 +0000 Manifest this update: Sat 31 Jan 2026 07:23:05 +0000 Manifest next update: Sat 07 Feb 2026 07:23:05 +0000 Files and hashes: 1: MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl (hash: X1bhQY4ITqEvHIXL0P1pCe9AygiF3qUkJKm0JfUR1XA=) 2: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (hash: ibYzYu8RH8C02kfa+CuxIWX8fTb9oHtMSxPb31nALF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Feb 2026 07:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Validity Not Before: Jan 31 07:23:05 2026 GMT Not After : Feb 7 07:23:05 2026 GMT Subject: CN=697dadd9-1c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8b:a7:eb:2e:c4:b6:83:c0:ef:60:83:f0:a9: 67:c0:8f:9f:e9:59:fc:03:2a:fa:37:6b:ca:39:5f: fe:24:68:d1:2e:06:be:b5:ff:e4:a6:2f:57:7f:1a: ec:5c:ca:bd:30:59:b4:6e:00:2b:07:7f:cb:03:ee: b3:3f:a1:11:86:82:81:5f:69:ff:bd:ad:3d:61:22: 49:88:2b:16:52:00:2d:15:1d:f2:44:49:42:94:8c: 2d:67:58:6d:39:5d:34:52:a9:e3:79:6d:f4:16:9f: 68:7e:8c:e2:99:d4:3d:5d:8c:56:45:3e:c9:9e:5f: 60:59:47:85:f8:92:cb:f0:5e:15:e8:54:6f:ef:b4: c3:b4:b5:b3:78:0f:b6:a2:ee:fc:7f:fa:91:49:5d: 5e:aa:5d:cb:5f:35:6f:72:6c:8e:b8:99:66:fa:1c: 5e:0a:36:72:02:9e:ec:b5:4d:1a:16:68:15:ff:fb: 9b:08:0a:91:0c:67:35:b5:34:63:8d:fb:76:1a:a6: bd:d8:e4:d1:30:ba:25:9e:f3:17:7b:fa:96:2f:fb: ff:f9:c1:6c:b1:10:9b:b1:69:9f:a6:4f:ca:06:1b: a1:44:81:c4:92:f2:69:fd:f9:b8:30:5a:d1:84:bc: dc:d7:6c:4b:2f:5a:b4:41:88:71:76:a7:21:80:e7: 57:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0F:A1:FB:75:70:16:09:31:33:EF:62:29:C1:49:E4:9D:42:BB:25 X509v3 Authority Key Identifier: keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:1d:e3:00:aa:43:98:a5:ee:0d:82:55:76:61:8e:31:5f:f6: 60:7c:a3:58:7b:02:a2:f0:bd:9e:20:11:70:00:30:9a:6d:42: 28:46:a5:42:07:b6:8f:86:d5:7f:41:4c:6c:6d:db:46:75:db: ea:64:c6:39:b4:61:0b:73:10:38:ec:b4:71:c8:23:66:d3:e7: ef:68:f3:8d:6b:7e:94:66:eb:d3:46:fd:2b:ef:8d:39:db:74: 8a:10:f5:ed:2e:94:86:87:8d:41:1f:b3:85:49:fd:1d:13:da: 15:e0:2d:f0:7a:72:3c:23:df:40:47:54:29:45:0c:e5:0b:03: bd:4e:0d:90:9a:e8:01:26:69:41:ef:ff:7b:34:b7:61:de:19: 14:86:25:14:64:87:69:79:59:54:aa:39:92:e9:76:df:b0:74: ef:2c:9e:f2:5a:77:3e:86:64:62:1e:d7:cd:62:97:19:52:ed: f7:f4:f8:4a:96:35:6f:3d:40:64:a7:cc:93:01:40:e9:64:c2: 4d:19:cc:74:20:c7:bc:65:0c:6d:bd:86:bb:3f:15:73:b4:23: 8a:e9:bd:4d:f2:d1:63:8a:b9:42:33:21:c2:d2:6e:81:d1:f1: 88:74:df:96:47:58:81:da:81:fe:3f:f8:10:ba:f1:1d:96:c7: e3:1c:59:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODg2RjExMC8GA1UEBRMoMzI1MzIxOUNCNjBDN0Q5Q0ZBNkU2MzNEQkI0Q0E5NEQ2 ODM5OTJFMDAeFw0yNjAxMzEwNzIzMDVaFw0yNjAyMDcwNzIzMDVaMBgxFjAUBgNV BAMMDTY5N2RhZGQ5LTFjMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxi6frLsS2g8DvYIPwqWfAj5/pWfwDKvo3a8o5X/4kaNEuBr61/+SmL1d/Guxc yr0wWbRuACsHf8sD7rM/oRGGgoFfaf+9rT1hIkmIKxZSAC0VHfJESUKUjC1nWG05 XTRSqeN5bfQWn2h+jOKZ1D1djFZFPsmeX2BZR4X4ksvwXhXoVG/vtMO0tbN4D7ai 7vx/+pFJXV6qXctfNW9ybI64mWb6HF4KNnICnuy1TRoWaBX/+5sICpEMZzW1NGON +3Yapr3Y5NEwuiWe8xd7+pYv+//5wWyxEJuxaZ+mT8oGG6FEgcSS8mn9+bgwWtGE vNzXbEsvWrRBiHF2pyGA51fFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQQ+h+3Vw FgkxM+9iKcFJ5J1CuyUwHwYDVR0jBBgwFoAUMlMhnLYMfZz6bmM9u0ypTWg5kuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODZGL0YxRjU2N0QwQzhF ODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6NmJtTTl1MHlwVFdnNWt1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWxNaG5MWU1mWno2Ym1NOXUweXBUV2c1a3VBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 ODZGL0YxRjU2N0QwQzhFODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6 NmJtTTl1MHlwVFdnNWt1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACEd4wCqQ5il7g2CVXZhjjFf9mB8o1h7AqLwvZ4gEXAAMJptQihGpUIH to+G1X9BTGxt20Z12+pkxjm0YQtzEDjstHHII2bT5+9o841rfpRm69NG/SvvjTnb dIoQ9e0ulIaHjUEfs4VJ/R0T2hXgLfB6cjwj30BHVClFDOULA71ODZCa6AEmaUHv /3s0t2HeGRSGJRRkh2l5WVSqOZLpdt+wdO8snvJadz6GZGIe181ilxlS7ff0+EqW NW89QGSnzJMBQOlkwk0ZzHQgx7xlDG29hrs/FXO0I4rpvU3y0WOKuUIzIcLSboHR 8Yh035ZHWIHagf4/+BC68R2Wx+McWV4= -----END CERTIFICATE-----Generated at Sat Jan 31 11:56:28 2026 by rpki-client