This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft File: L9JLb9eYBEVzVDhmYs4w3aOyALU.mft (raw, json) Hash identifier: DSVu6h8rPD9zOc+4J0CXfcfXttmU9rKAgtUcQqCXPgQ= Subject key identifier: 92:C3:69:E6:23:DD:F4:8B:22:60:C6:01:43:11:37:8C:19:DC:8D:7A Authority key identifier: 2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5 Certificate issuer: /CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft Manifest number: 015C Signing time: Sat 17 Jan 2026 03:14:25 +0000 Manifest this update: Sat 17 Jan 2026 03:14:24 +0000 Manifest next update: Sat 24 Jan 2026 03:14:24 +0000 Files and hashes: 1: L9JLb9eYBEVzVDhmYs4w3aOyALU.crl (hash: iChD/gSagWhGALI3ySdUFC9HVEl8hlXr51XhzEtiymM=) 2: AE2FD9C4DA5411EE83E9E67EC4F9AE02.roa (hash: tK5HTPbAj/ZNMX+j7tcaCGQxo/xqwq0UKtlHWscWUVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 03:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA, serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5 Validity Not Before: Jan 17 03:14:24 2026 GMT Not After : Jan 24 03:14:24 2026 GMT Subject: CN=696afe91-4fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d5:a8:71:7f:d1:93:e6:c1:2c:dd:c8:26:f1: 95:14:43:82:94:3d:12:70:0f:62:2a:88:48:39:36: e6:69:f1:d8:0b:c3:89:57:88:3b:7d:41:99:6d:fb: 5e:ae:28:64:53:a2:20:81:c9:54:1b:43:b0:6f:a5: d7:19:ae:02:56:b9:23:f2:55:be:d3:6f:5d:3d:c3: b4:b7:84:93:20:4a:1b:e8:bf:db:ae:45:7e:3b:64: 21:e4:dc:f9:e7:94:81:3d:51:43:c1:44:d1:a6:94: a4:ee:ac:a4:2e:68:53:95:cd:af:c4:56:8e:aa:78: d4:5f:ff:a9:06:60:b1:78:1b:1b:0f:56:12:9a:a5: 4e:24:85:e6:01:39:c2:cb:63:30:3c:4d:35:cb:db: 59:f3:5d:ec:65:f9:88:01:84:78:4f:c5:db:c9:88: fa:1e:0f:97:74:08:55:90:3c:f1:c6:53:36:d2:a1: fd:bc:14:cd:14:1c:ba:f1:4d:b6:87:02:7b:b3:e8: 54:6e:19:e2:91:aa:1e:47:1d:e0:e9:95:ae:74:5c: be:a5:06:32:f5:91:14:7a:da:e4:10:c7:29:39:d2: 2e:2b:1e:17:d2:8a:8c:d9:8a:eb:38:b1:80:c4:38: bb:f1:ce:52:10:5a:93:67:01:60:d9:26:cd:82:70: e2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C3:69:E6:23:DD:F4:8B:22:60:C6:01:43:11:37:8C:19:DC:8D:7A X509v3 Authority Key Identifier: keyid:2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:cd:4f:3f:a1:f5:cb:32:22:24:64:14:e6:5e:80:b0:7b:90: 94:bd:01:37:51:dc:78:da:6c:e5:4f:e8:46:89:49:f8:de:82: f2:e1:49:22:15:f3:d2:7d:56:a2:e3:1a:36:63:ea:42:06:82: fb:55:15:74:5c:af:b7:1f:dc:17:85:5d:65:ec:c4:12:cd:8d: db:a7:28:a4:79:0d:de:33:fb:91:37:79:f6:fe:15:35:41:96: be:63:93:c2:53:b7:6e:8d:2e:e5:71:52:43:e2:26:1d:03:7a: c3:2e:56:5f:c2:ab:e1:48:02:7b:65:96:49:3c:1f:36:5e:a5: 03:2b:6e:77:37:6d:5a:b3:14:22:57:f4:8f:6b:72:01:37:dd: a8:63:8a:cb:01:e8:96:1e:1e:e5:63:15:44:02:51:9d:a4:45: c5:94:80:09:b1:34:05:f5:8c:9e:b9:0e:ac:97:7f:e7:56:f5: 51:1f:a0:c5:5b:1f:d1:a3:88:21:ca:7e:bd:94:1d:0e:26:7b: 99:61:45:72:81:0e:b6:b3:27:69:80:65:b8:93:8f:68:a6:82: db:2e:aa:12:b4:dc:cc:2d:cc:f0:43:5d:7a:92:97:15:8d:8a: c7:10:41:0c:99:f3:69:60:7b:df:8e:3d:3b:55:43:28:3b:f2: 8a:f5:2d:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5REExMTAvBgNVBAUTKDJGRDI0QjZGRDc5ODA0NDU3MzU0Mzg2NjYyQ0UzMERE QTNCMjAwQjUwHhcNMjYwMTE3MDMxNDI0WhcNMjYwMTI0MDMxNDI0WjAYMRYwFAYD VQQDDA02OTZhZmU5MS00ZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodWocX/Rk+bBLN3IJvGVFEOClD0ScA9iKohIOTbmafHYC8OJV4g7fUGZbfte rihkU6IggclUG0Owb6XXGa4CVrkj8lW+029dPcO0t4STIEob6L/brkV+O2Qh5Nz5 55SBPVFDwUTRppSk7qykLmhTlc2vxFaOqnjUX/+pBmCxeBsbD1YSmqVOJIXmATnC y2MwPE01y9tZ813sZfmIAYR4T8XbyYj6Hg+XdAhVkDzxxlM20qH9vBTNFBy68U22 hwJ7s+hUbhnikaoeRx3g6ZWudFy+pQYy9ZEUetrkEMcpOdIuKx4X0oqM2YrrOLGA xDi78c5SEFqTZwFg2SbNgnDiZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLDaeYj 3fSLImDGAUMRN4wZ3I16MB8GA1UdIwQYMBaAFC/SS2/XmARFc1Q4ZmLOMN2jsgC1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zNEI1QjUxNERB NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJFVnpWRGhtWXM0dzNhT3lB TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0w5SkxiOWVZQkVWelZEaG1ZczR3M2FPeUFMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zNEI1QjUxNERBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJF VnpWRGhtWXM0dzNhT3lBTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUzU8/ofXLMiIkZBTmXoCwe5CUvQE3Udx42mzlT+hGiUn43oLy4Uki FfPSfVai4xo2Y+pCBoL7VRV0XK+3H9wXhV1l7MQSzY3bpyikeQ3eM/uRN3n2/hU1 QZa+Y5PCU7dujS7lcVJD4iYdA3rDLlZfwqvhSAJ7ZZZJPB82XqUDK253N21asxQi V/SPa3IBN92oY4rLAeiWHh7lYxVEAlGdpEXFlIAJsTQF9YyeuQ6sl3/nVvVRH6DF Wx/Ro4ghyn69lB0OJnuZYUVygQ62sydpgGW4k49opoLbLqoStNzMLczwQ116kpcV jYrHEEEMmfNpYHvfjj07VUMoO/KK9S1K -----END CERTIFICATE-----Generated at Sun Jan 18 03:15:25 2026 by rpki-client