This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft File: lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft (raw, json) Hash identifier: 34IzEOjI+tVPcMkVFHO8TdmFUafmec0Snlvw7Bl3Fjg= Subject key identifier: FF:2E:BF:62:B9:09:67:0F:17:37:1C:8E:DB:1B:CD:97:AC:46:A1:74 Authority key identifier: 94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13 Certificate issuer: /CN=A91CAA8A/serialNumber=94C643E16D04A7738BC72B5B107E05B161614013 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft Manifest number: 03 Signing time: Sat 17 Jan 2026 07:10:01 +0000 Manifest this update: Sat 17 Jan 2026 07:10:01 +0000 Manifest next update: Sat 24 Jan 2026 07:10:01 +0000 Files and hashes: 1: lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl (hash: c+VEeC5nDF4Tz7aOIa8BWMb8V2uq8+YfZ9I0u8kpVXM=) 2: 537A2262F2D211F0BAE73FD33C6F56BC.roa (hash: L8pI+kk5Q/YTRXnKqVRKOin29T/vEZBD6+7QfyjMyHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 07:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA8A, serialNumber=94C643E16D04A7738BC72B5B107E05B161614013 Validity Not Before: Jan 17 07:10:01 2026 GMT Not After : Jan 24 07:10:01 2026 GMT Subject: CN=696b35c9-2262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bb:dd:91:3c:82:72:9f:38:f4:18:bb:6c:5a: 99:1e:65:56:e3:9a:52:eb:4d:77:7b:38:6e:cb:e6: 78:a8:c1:39:a4:58:6b:84:84:05:82:3b:20:ad:02: 1a:85:df:a9:5f:b9:b6:49:3f:d3:bc:df:75:27:f1: 4b:83:4c:a9:7c:9c:9b:8e:a0:e7:68:f9:20:2e:dd: 66:ff:9c:d1:f9:10:03:ce:6f:fa:e7:9f:0d:37:a9: a6:06:56:3b:95:69:96:a3:8b:3d:b2:34:a7:80:6e: 99:8d:c3:22:4f:ef:3a:db:d2:2f:01:5c:af:a9:d1: b5:a4:61:6b:2e:48:fe:a8:76:ac:a6:a8:4c:3e:c3: 1f:91:a9:93:31:44:c7:ef:61:bf:ed:a3:75:f6:75: 69:e9:f8:d1:d4:7b:bc:c7:f8:9d:aa:bd:5d:71:b7: 27:5f:0b:2a:1c:64:36:f6:d7:84:4f:39:b5:d4:05: 1e:ca:23:d8:55:da:a0:41:f1:3a:bd:e9:57:ba:14: 39:26:b4:5d:86:f7:f6:8d:78:42:e6:2a:cd:de:84: e0:40:56:1e:d4:89:2e:5d:f9:de:4c:6c:da:b5:46: 29:3c:49:a4:da:bd:5d:2e:75:9f:c6:65:07:8c:95: 87:d0:a8:d2:ed:57:be:16:78:3d:33:80:ac:ea:bf: 39:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2E:BF:62:B9:09:67:0F:17:37:1C:8E:DB:1B:CD:97:AC:46:A1:74 X509v3 Authority Key Identifier: keyid:94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1f:d2:78:08:9e:4a:91:8f:6f:ac:34:83:38:b0:20:ef:a1: 6d:c5:83:57:5c:2f:ad:88:72:c6:13:74:d0:01:0e:9d:57:5c: 2e:af:13:fb:6e:c1:14:f0:64:8b:e0:7d:5c:89:3c:a0:e7:b4: 6d:63:76:15:28:95:52:05:8a:8d:1f:11:2e:d8:24:e0:ae:20: fa:80:07:ef:0a:b0:e3:b1:92:ea:6e:71:d8:34:ff:54:00:25: 71:6a:ab:95:88:a2:ac:52:2d:13:b8:93:8d:56:fa:8f:f1:fd: 4b:d4:d2:d6:74:24:a9:a8:0a:31:ca:2f:07:66:df:1f:32:5b: 79:88:d0:9e:1a:f7:d9:d4:95:9d:7a:61:ce:89:e3:6d:71:dc: 28:64:6e:28:65:fb:12:43:1f:82:fc:a3:e9:dc:b0:2f:45:dc: a4:90:e5:66:c5:e7:57:e2:38:5d:ce:a3:4f:81:90:12:99:94: 0f:6c:d4:11:05:2e:8c:c4:de:88:b8:c8:fa:bc:ca:10:1b:d4: 20:ed:8c:44:c5:bb:25:d7:fc:9f:d3:3e:38:5a:ec:3e:81:16: 1e:79:e8:2c:31:92:e2:22:d0:89:bd:08:8b:cf:09:4b:30:12: 81:3e:02:ad:53:b5:a6:e5:72:21:e2:32:96:67:c2:76:7a:63: 85:52:cc:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFD QUE4QTExMC8GA1UEBRMoOTRDNjQzRTE2RDA0QTc3MzhCQzcyQjVCMTA3RTA1QjE2 MTYxNDAxMzAeFw0yNjAxMTcwNzEwMDFaFw0yNjAxMjQwNzEwMDFaMBgxFjAUBgNV BAMMDTY5NmIzNWM5LTIyNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgu92RPIJynzj0GLtsWpkeZVbjmlLrTXd7OG7L5niowTmkWGuEhAWCOyCtAhqF 36lfubZJP9O833Un8UuDTKl8nJuOoOdo+SAu3Wb/nNH5EAPOb/rnnw03qaYGVjuV aZajiz2yNKeAbpmNwyJP7zrb0i8BXK+p0bWkYWsuSP6odqymqEw+wx+RqZMxRMfv Yb/to3X2dWnp+NHUe7zH+J2qvV1xtydfCyocZDb214RPObXUBR7KI9hV2qBB8Tq9 6Ve6FDkmtF2G9/aNeELmKs3ehOBAVh7UiS5d+d5MbNq1Rik8SaTavV0udZ/GZQeM lYfQqNLtV74WeD0zgKzqvzmxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/y6/YrkJ Zw8XNxyO2xvNl6xGoXQwHwYDVR0jBBgwFoAUlMZD4W0Ep3OLxytbEH4FsWFhQBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBQThBLzk2QzJGQjA4RjJE MTExRjA5ODlBRDhDRTNDNkY1NkJDL2xNWkQ0VzBFcDNPTHh5dGJFSDRGc1dGaFFC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbE1aRDRXMEVwM09MeHl0YkVINEZzV0ZoUUJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB QThBLzk2QzJGQjA4RjJEMTExRjA5ODlBRDhDRTNDNkY1NkJDL2xNWkQ0VzBFcDNP THh5dGJFSDRGc1dGaFFCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEof0ngInkqRj2+sNIM4sCDvoW3Fg1dcL62IcsYTdNABDp1XXC6vE/tu wRTwZIvgfVyJPKDntG1jdhUolVIFio0fES7YJOCuIPqAB+8KsOOxkupucdg0/1QA JXFqq5WIoqxSLRO4k41W+o/x/UvU0tZ0JKmoCjHKLwdm3x8yW3mI0J4a99nUlZ16 Yc6J421x3Chkbihl+xJDH4L8o+ncsC9F3KSQ5WbF51fiOF3Oo0+BkBKZlA9s1BEF LozE3oi4yPq8yhAb1CDtjETFuyXX/J/TPjha7D6BFh556CwxkuIi0Im9CIvPCUsw EoE+Aq1TtablciHiMpZnwnZ6Y4VSzNo= -----END CERTIFICATE-----Generated at Sun Jan 18 03:12:52 2026 by rpki-client