This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json) Hash identifier: DMk+0ha2FNo5yTTWGAYXFXD2hESMbtGq9F1+kHTI9LE= Subject key identifier: 72:9B:DC:DA:AC:20:89:5B:51:B5:D4:2D:8D:CE:67:41:DC:67:E8:5A Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Certificate serial: 0803 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft Manifest number: 07F9 Signing time: Sat 24 Jan 2026 20:31:35 +0000 Manifest this update: Sat 24 Jan 2026 20:31:35 +0000 Manifest next update: Sat 31 Jan 2026 20:31:35 +0000 Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: 6IXfkFXmp4YiNp8IpVAM+3u1SKxZkD9vpFspWR0IJ6Y=) 2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: mzfP7cRrxNz2Kg58jiJEQRZoLcbYz297WZboxMM7e8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2051 (0x803) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Validity Not Before: Jan 24 20:31:35 2026 GMT Not After : Jan 31 20:31:35 2026 GMT Subject: CN=69752c27-ca21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4e:07:f0:c3:09:34:08:6a:ce:b2:c1:6f:2e: fe:c7:20:e9:e0:d5:8a:40:63:b6:f8:e1:eb:93:08: 01:8f:f0:a9:30:4c:84:0c:45:89:0d:37:48:3c:4b: be:58:4f:63:92:ef:a5:ec:0b:1b:f8:3e:64:92:d3: f2:ac:e1:ac:c0:ff:cd:f7:2a:cc:8e:f2:1b:2c:a7: 0d:10:39:8e:aa:2e:f2:18:ea:02:5c:ba:24:21:22: f5:ec:11:fe:d1:fb:68:de:d9:ba:3e:42:e3:64:08: 11:bd:12:a9:37:f8:95:38:08:23:10:69:60:cf:cf: c7:80:03:df:25:5b:20:0b:70:07:91:b0:bf:d4:15: 0f:37:ec:f5:32:bb:8f:67:4f:f3:2a:16:e1:3a:61: 17:25:14:dc:f1:7b:9b:11:92:54:c4:5b:0e:e7:7f: a8:c8:ae:d5:39:03:ea:44:a6:7f:44:69:0a:6d:59: fe:7d:5e:e6:e5:60:02:43:c3:f5:80:40:86:f3:5b: 4f:2c:3f:a2:69:f9:2d:9e:81:10:96:d1:bd:3a:f7: 73:0b:b5:8f:10:b8:4b:ec:ac:d3:1c:e1:a2:d7:d0: 69:f7:71:59:b8:7c:c6:a1:74:24:3c:1f:d1:e2:dd: a0:e1:d5:2e:3f:41:9c:6d:93:f1:4f:dd:03:9c:4c: 9a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9B:DC:DA:AC:20:89:5B:51:B5:D4:2D:8D:CE:67:41:DC:67:E8:5A X509v3 Authority Key Identifier: keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:33:cb:8c:8f:05:73:09:22:44:b9:b8:75:3f:67:84:14:3b: 96:2c:1b:35:60:0f:5f:a6:39:cc:af:ab:38:d7:cb:50:10:5f: 51:f9:24:7a:41:26:9e:f7:92:5b:81:e5:35:e2:c7:ba:4c:4d: 4e:6f:bd:3b:0c:5a:a3:ff:59:8f:a0:19:80:92:82:da:8b:c9: 10:a3:f1:b5:86:f9:54:5b:9a:10:cf:2d:c4:9f:86:d6:5d:a5: 81:19:18:1a:da:e3:13:56:d8:bb:80:b2:5d:41:7c:3a:ce:22: 93:22:1d:10:a3:eb:df:2e:d4:79:5e:af:0e:a0:7b:13:e2:33: 04:95:c3:d1:bd:52:8f:c5:be:96:67:ea:e3:c5:81:2c:27:52: 1a:f1:2a:c7:65:31:9c:fc:83:73:c3:64:93:8c:d2:97:38:6c: 76:a0:cc:73:d7:91:d6:7a:66:d6:73:6b:e6:e8:8a:de:7a:03: 49:89:f3:5d:25:6c:b0:0e:a9:51:a3:36:c8:99:20:06:c3:8e: 59:da:d3:c5:90:d2:04:eb:d8:a1:98:c7:8a:7c:0f:e2:f0:3d: bb:9e:99:e5:a4:8e:87:1a:92:bf:ab:00:f4:30:93:21:79:e2: 5f:5e:1c:2e:0f:22:02:ec:64:dc:9e:cd:14:11:bf:2b:2f:9c: 40:ec:1a:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyNTkxMTAvBgNVBAUTKDk3NTJERDFBMTVGNUVDNjFEOTc2OTFDQjVFQ0NFQkVD QkQzQTYxMzcwHhcNMjYwMTI0MjAzMTM1WhcNMjYwMTMxMjAzMTM1WjAYMRYwFAYD VQQDDA02OTc1MmMyNy1jYTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvE4H8MMJNAhqzrLBby7+xyDp4NWKQGO2+OHrkwgBj/CpMEyEDEWJDTdIPEu+ WE9jku+l7Asb+D5kktPyrOGswP/N9yrMjvIbLKcNEDmOqi7yGOoCXLokISL17BH+ 0fto3tm6PkLjZAgRvRKpN/iVOAgjEGlgz8/HgAPfJVsgC3AHkbC/1BUPN+z1MruP Z0/zKhbhOmEXJRTc8XubEZJUxFsO53+oyK7VOQPqRKZ/RGkKbVn+fV7m5WACQ8P1 gECG81tPLD+iafktnoEQltG9OvdzC7WPELhL7KzTHOGi19Bp93FZuHzGoXQkPB/R 4t2g4dUuP0GcbZPxT90DnEyarQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKb3Nqs IIlbUbXULY3OZ0HcZ+haMB8GA1UdIwQYMBaAFJdS3RoV9exh2XaRy17M6+y9OmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI1OS82OTEyOEM0QTE1 QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdHSFpkcEhMWHN6cjdMMDZZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxTGRHaFgxN0dIWmRwSExYc3pyN0wwNllUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI1OS82OTEyOEM0QTE1QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdH SFpkcEhMWHN6cjdMMDZZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFM8uMjwVzCSJEubh1P2eEFDuWLBs1YA9fpjnMr6s418tQEF9R+SR6 QSae95JbgeU14se6TE1Ob707DFqj/1mPoBmAkoLai8kQo/G1hvlUW5oQzy3En4bW XaWBGRga2uMTVti7gLJdQXw6ziKTIh0Qo+vfLtR5Xq8OoHsT4jMElcPRvVKPxb6W Z+rjxYEsJ1Ia8SrHZTGc/INzw2STjNKXOGx2oMxz15HWembWc2vm6IreegNJifNd JWywDqlRozbImSAGw45Z2tPFkNIE69ihmMeKfA/i8D27npnlpI6HGpK/qwD0MJMh eeJfXhwuDyIC7GTcns0UEb8rL5xA7Bo4 -----END CERTIFICATE-----Generated at Sun Jan 25 07:51:00 2026 by rpki-client