This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: D5pPJX/+dYra+3x0SKIF/Ubszvbm1Dilg2ElmWsPo3o= Subject key identifier: DD:24:C1:45:DA:19:31:D1:6B:EF:61:B0:78:E5:FD:A8:0E:C1:7F:05 Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 095E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 0955 Signing time: Sat 24 Jan 2026 19:35:49 +0000 Manifest this update: Sat 24 Jan 2026 19:35:48 +0000 Manifest next update: Sat 31 Jan 2026 19:35:48 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: Jw6EDBrWjS5TgeWfKogorg8ks9W+UD9rmJN6OAsjXZs=) 2: 518ED8E0B10511EAA4771B5BC4F9AE02.roa (hash: 4NqH+CTlAXcxsKUUu0JoB2lmVEYgLTqKdl4anKNbgT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2398 (0x95e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: Jan 24 19:35:48 2026 GMT Not After : Jan 31 19:35:48 2026 GMT Subject: CN=69751f15-5c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:05:7d:10:df:40:55:ef:39:0e:ec:ec:df:e9: 59:da:ba:18:25:4b:a3:74:18:2c:9a:4e:69:d5:a6: 32:68:d8:a9:e7:24:ab:69:9e:01:6e:ff:7b:84:12: 4d:f0:95:8b:55:7b:a0:9b:69:df:c1:ce:5d:8c:32: 66:96:e6:b5:9e:b4:8e:7f:e5:55:47:69:bf:e9:65: c7:aa:91:fc:b1:df:7a:71:18:6e:87:de:99:46:74: 24:f6:9e:43:1e:3d:cd:5a:80:76:d5:fb:c8:af:81: 9a:42:14:35:60:c4:c0:80:4e:80:f9:bf:84:8f:0f: cb:ee:88:00:23:b8:2d:66:1c:0d:c0:6f:7e:a8:78: 0d:57:a8:85:39:62:b5:4a:fa:2f:40:48:a7:ff:a1: 24:19:fa:c6:bb:29:ae:69:be:2f:9a:23:84:d2:52: c8:a1:cb:e2:53:62:69:6a:a8:c5:e3:85:69:f6:15: e1:03:25:9f:0c:46:b2:12:bc:5d:0b:b8:d4:df:f1: 28:f8:e7:1a:bf:b0:01:2c:58:4c:af:a9:e8:f5:bd: 18:3a:f8:7b:ac:cb:26:a0:4a:25:be:e9:2a:3d:1c: 24:77:78:e5:52:39:e8:8d:e0:dc:82:1a:99:38:e2: 1b:12:33:67:fd:c2:b5:98:4e:21:af:60:85:6e:68: 31:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:24:C1:45:DA:19:31:D1:6B:EF:61:B0:78:E5:FD:A8:0E:C1:7F:05 X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:43:74:92:20:af:06:a1:bc:a8:f1:9a:e2:f8:00:2e:67:85: ee:4f:95:15:fc:e1:50:1d:ba:8b:43:ab:c4:84:79:c1:b3:01: b2:62:a9:fa:88:96:e6:41:71:b8:86:ee:7a:f8:64:ed:bd:b0: 2d:df:07:38:6e:c0:4b:8e:1c:31:16:70:8c:8a:cc:83:bc:49: 49:88:29:7d:fe:e4:23:4d:ed:bb:ae:a0:63:17:30:a5:8f:be: 7f:fc:91:f6:52:6d:17:1d:34:d6:5a:81:b4:8e:02:83:66:61: a0:21:9d:15:86:cf:78:31:fa:0d:a6:58:d2:cb:79:e1:bd:29: 6d:be:37:4a:57:67:ca:45:ba:ab:a7:dd:f3:fe:0e:da:cd:76: f8:de:06:13:a9:54:4f:b1:5b:5e:1b:10:4f:29:c1:79:77:8b: 1c:fa:1c:3b:37:cf:96:66:1f:73:fc:04:04:20:55:40:30:25: 69:78:4f:38:e5:f3:a5:00:d8:2c:6f:ad:29:1e:a5:33:a9:89: 08:7e:dc:dc:fe:99:a3:25:6b:23:92:de:fe:bf:b2:75:33:e8: a5:87:a2:36:04:c6:1c:10:4c:5d:09:55:72:81:79:85:83:27: 6c:5d:e2:11:fc:79:85:88:06:34:b3:37:a7:b9:b5:30:b6:77: 7d:94:9a:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjYwMTI0MTkzNTQ4WhcNMjYwMTMxMTkzNTQ4WjAYMRYwFAYD VQQDDA02OTc1MWYxNS01YzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQV9EN9AVe85Duzs3+lZ2roYJUujdBgsmk5p1aYyaNip5ySraZ4Bbv97hBJN 8JWLVXugm2nfwc5djDJmlua1nrSOf+VVR2m/6WXHqpH8sd96cRhuh96ZRnQk9p5D Hj3NWoB21fvIr4GaQhQ1YMTAgE6A+b+Ejw/L7ogAI7gtZhwNwG9+qHgNV6iFOWK1 SvovQEin/6EkGfrGuymuab4vmiOE0lLIocviU2JpaqjF44Vp9hXhAyWfDEayErxd C7jU3/Eo+Ocav7ABLFhMr6no9b0YOvh7rMsmoEolvukqPRwkd3jlUjnojeDcghqZ OOIbEjNn/cK1mE4hr2CFbmgxpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0kwUXa GTHRa+9hsHjl/agOwX8FMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtQ3SSIK8Gobyo8Zri+AAuZ4XuT5UV/OFQHbqLQ6vEhHnBswGyYqn6 iJbmQXG4hu56+GTtvbAt3wc4bsBLjhwxFnCMisyDvElJiCl9/uQjTe27rqBjFzCl j75//JH2Um0XHTTWWoG0jgKDZmGgIZ0Vhs94MfoNpljSy3nhvSltvjdKV2fKRbqr p93z/g7azXb43gYTqVRPsVteGxBPKcF5d4sc+hw7N8+WZh9z/AQEIFVAMCVpeE84 5fOlANgsb60pHqUzqYkIftzc/pmjJWsjkt7+v7J1M+ilh6I2BMYcEExdCVVygXmF gydsXeIR/HmFiAY0szenubUwtnd9lJp3 -----END CERTIFICATE-----Generated at Sun Jan 25 09:32:18 2026 by rpki-client