This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft File: bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft (raw, json) Hash identifier: HQFCT8ANJUTlLOtqJaic5r+vlMYCej5aBlnsbweoJcI= Subject key identifier: 5B:EE:1C:61:05:1D:D9:A2:30:76:73:E2:71:64:FD:AA:1C:F8:FB:8B Authority key identifier: 6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF Certificate issuer: /CN=A91E855B/serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft Manifest number: 07 Signing time: Sat 17 Jan 2026 07:07:08 +0000 Manifest this update: Sat 17 Jan 2026 07:07:07 +0000 Manifest next update: Sat 24 Jan 2026 07:07:07 +0000 Files and hashes: 1: bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl (hash: kj3OkHAce7zP/qJOfUCc/vLn6duIkpthcRZ48RkkxM8=) 2: C1B7F140EF6811F09BA576A7586F56BC.roa (hash: 4jZh/AUohlYOypPBvV6z3q4rXnhSp14Z18jcZ4dgFT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 07:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E855B, serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF Validity Not Before: Jan 17 07:07:07 2026 GMT Not After : Jan 24 07:07:07 2026 GMT Subject: CN=696b351b-5a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:61:70:3e:43:5e:fe:c8:79:61:df:45:aa:91: 84:96:22:05:91:bf:b4:0b:f8:43:c4:3b:e2:26:43: c7:d2:7c:44:32:61:76:25:6c:e9:9a:0b:21:ba:61: 57:3c:e6:7b:b5:f9:00:51:11:bd:b2:3e:74:43:b5: e3:f6:e4:c4:3f:06:09:5c:4e:13:0f:fd:36:d3:5c: fa:fd:17:43:0c:a7:2d:fc:88:36:37:0c:1d:7d:ac: 51:54:6e:29:b5:d7:47:8e:d7:20:aa:4a:69:6b:2d: 39:e9:cf:6d:26:d1:33:f2:f9:24:44:9d:0d:da:5a: 15:73:33:c7:3a:25:60:da:f1:0e:2f:f5:e8:ad:69: ad:6f:68:97:1d:50:26:32:b1:81:bb:33:5d:e2:a2: 31:37:98:b8:36:3e:8b:83:68:05:55:a7:bc:4b:a9: a7:3a:54:ea:cc:05:cc:0b:96:ed:6d:af:9b:b3:ad: f0:14:6a:8e:6a:47:c9:21:d6:87:86:bd:0b:7b:cb: 86:97:5d:cc:4b:3e:2f:5f:39:e7:1f:d2:76:16:a5: f7:61:95:ad:37:c3:c5:b4:cc:c1:d7:94:6b:2b:12: 5f:24:65:24:f2:b6:a9:a4:9f:6b:42:3d:ea:37:e3: cf:27:f2:16:f1:39:09:05:e4:18:0a:af:6a:46:03: 87:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EE:1C:61:05:1D:D9:A2:30:76:73:E2:71:64:FD:AA:1C:F8:FB:8B X509v3 Authority Key Identifier: keyid:6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:a7:aa:58:56:4a:c4:b1:7e:a1:8a:36:44:c1:79:d7:d1:2a: 70:64:32:45:b4:4d:f0:ef:28:3e:97:15:19:f1:82:6b:a8:90: c7:df:37:07:33:ea:c4:70:04:03:5b:95:6e:52:a0:5d:c1:ed: ca:f4:6f:2e:73:25:07:30:c6:e9:ae:5f:03:b5:69:df:8c:de: 8c:52:4c:2d:1c:5e:f5:11:8d:32:2e:9a:2c:87:11:b9:66:ac: f3:8d:93:aa:ca:36:00:51:c8:31:9b:51:7a:a2:fc:8e:a3:5b: 14:37:72:5d:92:58:26:b0:dc:3e:19:24:be:a0:31:88:2b:b5: 1e:0f:f1:90:97:f1:be:47:75:69:26:45:aa:dc:83:a8:56:0d: cf:0e:f4:ba:72:5e:2c:9d:42:85:e0:ff:d1:f8:14:fc:62:d5: cf:a2:ac:5b:ee:a9:6e:7b:24:cb:5a:35:ab:b4:1d:de:64:f8: 0c:bb:f2:ad:56:d9:9c:48:4d:6d:2e:f4:8c:d9:27:bc:94:96: 34:3a:c4:a0:96:7c:2f:be:3b:37:01:f6:bf:e2:ba:de:78:94: 21:d2:95:ab:28:9d:1c:b6:09:e0:e6:aa:4b:72:55:83:fd:d3: 00:f0:cc:a4:31:46:9a:18:34:f3:3e:89:0e:f2:a2:da:2c:7c: 76:ab:a1:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFF ODU1QjExMC8GA1UEBRMoNkYzOTU3OUQ5NzExMzM1MTAzQTZERTcyMDE3RUQwNzVC M0Q2OTZFRjAeFw0yNjAxMTcwNzA3MDdaFw0yNjAxMjQwNzA3MDdaMBgxFjAUBgNV BAMMDTY5NmIzNTFiLTVhNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkYXA+Q17+yHlh30WqkYSWIgWRv7QL+EPEO+ImQ8fSfEQyYXYlbOmaCyG6YVc8 5nu1+QBREb2yPnRDteP25MQ/BglcThMP/TbTXPr9F0MMpy38iDY3DB19rFFUbim1 10eO1yCqSmlrLTnpz20m0TPy+SREnQ3aWhVzM8c6JWDa8Q4v9eitaa1vaJcdUCYy sYG7M13iojE3mLg2PouDaAVVp7xLqac6VOrMBcwLlu1tr5uzrfAUao5qR8kh1oeG vQt7y4aXXcxLPi9fOecf0nYWpfdhla03w8W0zMHXlGsrEl8kZSTytqmkn2tCPeo3 488n8hbxOQkF5BgKr2pGA4d7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW+4cYQUd 2aIwdnPicWT9qhz4+4swHwYDVR0jBBgwFoAUbzlXnZcRM1EDpt5yAX7QdbPWlu8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NTVCLzcwRDdGMzhBRUY2 NjExRjA4MzNEN0IyNjU4NkY1NkJDL2J6bFhuWmNSTTFFRHB0NXlBWDdRZGJQV2x1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYnpsWG5aY1JNMUVEcHQ1eUFYN1FkYlBXbHU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NTVCLzcwRDdGMzhBRUY2NjExRjA4MzNEN0IyNjU4NkY1NkJDL2J6bFhuWmNSTTFF RHB0NXlBWDdRZGJQV2x1OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKCnqlhWSsSxfqGKNkTBedfRKnBkMkW0TfDvKD6XFRnxgmuokMffNwcz 6sRwBANblW5SoF3B7cr0by5zJQcwxumuXwO1ad+M3oxSTC0cXvURjTIumiyHEblm rPONk6rKNgBRyDGbUXqi/I6jWxQ3cl2SWCaw3D4ZJL6gMYgrtR4P8ZCX8b5HdWkm Rarcg6hWDc8O9LpyXiydQoXg/9H4FPxi1c+irFvuqW57JMtaNau0Hd5k+Ay78q1W 2ZxITW0u9IzZJ7yUljQ6xKCWfC++OzcB9r/iut54lCHSlasonRy2CeDmqktyVYP9 0wDwzKQxRpoYNPM+iQ7yotosfHarodI= -----END CERTIFICATE-----Generated at Sun Jan 18 08:13:31 2026 by rpki-client