This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: bq3lKakXLjU+eDrJ5XkkpC5ZPFAIKgPJzO51NvVJuS4= Subject key identifier: 7A:BF:4F:F1:F4:DA:3C:C4:86:14:B5:99:96:8E:1F:77:C6:F1:2E:0E Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0BD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0BC4 Signing time: Sat 24 Jan 2026 18:29:38 +0000 Manifest this update: Sat 24 Jan 2026 18:29:37 +0000 Manifest next update: Sat 31 Jan 2026 18:29:37 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: JzOCvNPeDjzjRvtb58iAmHxMZDbFbeMcg8ANR06sjUY=) 2: A7982B82B88011F081A7B245C4F9AE02.roa (hash: LvTJBLnJPXcw1Th5AV7X1RP31W6NL3Gb75mx55CzI/c=) 3: 849DE48AB8DC11F0AFE11A3EC4F9AE02.roa (hash: TmSgj2BbfJrSYYFTQM+K5zkNfjyQBni5tmx0lg44eIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3025 (0xbd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Jan 24 18:29:37 2026 GMT Not After : Jan 31 18:29:37 2026 GMT Subject: CN=69750f92-02c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:03:e1:97:31:b3:8f:0a:b1:29:b0:4a:8a:57: 2c:34:ec:a8:63:3d:e2:3b:1c:73:25:f5:dd:3d:16: 4d:2b:0e:88:86:43:d2:94:50:4c:19:5c:1c:73:ea: bd:2b:6c:60:fc:c7:b5:da:4f:a2:bf:6b:39:af:83: 5e:b9:6c:3c:5b:be:7d:ea:d9:f4:ec:3e:b2:d3:f7: 6a:e5:55:13:cb:57:5b:83:d0:e6:ca:4f:2c:5e:f9: 0c:f1:bf:8a:1c:6b:4f:59:30:e1:f5:42:71:b2:12: 43:fd:e4:17:17:8e:68:0d:47:65:f1:d6:07:aa:ad: 4a:4f:ab:d0:76:1b:a7:2c:29:d8:bc:c5:b0:7b:88: 1e:04:ce:2f:d5:d3:b7:c3:09:9e:95:f3:04:b3:aa: f0:07:bb:a9:30:56:a0:aa:4a:5b:41:0c:42:5e:b1: 7e:8a:ab:8b:ee:35:90:38:97:d6:98:56:68:5d:63: 51:ff:41:75:5a:72:22:05:62:65:17:27:62:bf:64: 01:24:60:6d:ef:33:db:ef:9d:d9:d0:de:1c:82:ac: ba:16:bd:c9:8c:32:2e:27:e8:fa:08:51:ef:0d:03: df:fc:77:3a:5c:86:12:c3:34:fe:28:d4:ca:f7:3a: b9:39:12:3e:dc:a4:0f:83:79:59:f4:41:ba:ec:fd: 24:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BF:4F:F1:F4:DA:3C:C4:86:14:B5:99:96:8E:1F:77:C6:F1:2E:0E X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:0d:2b:46:43:b5:cd:55:9b:09:ed:32:da:88:d5:b9:e1:7d: 68:3c:01:d0:92:7d:b7:16:52:ab:25:c8:30:6c:5d:2d:e6:94: a4:79:64:9d:91:7c:04:41:86:88:8b:39:62:fc:6a:d6:49:48: 04:d8:8d:f0:ac:33:97:6e:43:fb:b5:29:61:c2:20:f1:00:db: 5b:02:7e:b3:01:14:08:a8:85:22:89:c4:e3:72:31:c1:e6:cc: 9b:bb:fa:c7:2c:72:7f:cd:28:41:0e:7f:1c:13:b3:0a:43:2c: 31:0b:78:69:42:63:69:d3:33:f8:6c:50:b5:3e:98:d8:a7:0c: 7e:7d:59:49:2c:c7:78:f1:a2:15:80:f2:4e:2a:8d:af:33:b7: cb:f3:eb:98:25:df:ec:6d:ed:92:b7:1d:1d:eb:e8:79:ae:2b: 18:2d:46:4c:db:cf:96:7c:b9:2e:ac:18:6f:28:7c:14:ac:49: 09:4a:91:6b:dc:ed:2a:03:44:76:8b:7e:36:c0:e4:5c:91:5e: 39:ee:18:1c:3d:41:fa:38:a8:38:fe:c0:ef:e9:d5:61:d1:c4: 9d:f1:e9:f1:32:d2:b1:dd:33:13:c5:b5:fd:32:81:e4:6e:90: 4b:ca:56:8c:08:27:93:0a:36:64:d8:1c:b3:93:5d:3b:8c:fc: 2c:82:fc:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjYwMTI0MTgyOTM3WhcNMjYwMTMxMTgyOTM3WjAYMRYwFAYD VQQDDA02OTc1MGY5Mi0wMmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwPhlzGzjwqxKbBKilcsNOyoYz3iOxxzJfXdPRZNKw6IhkPSlFBMGVwcc+q9 K2xg/Me12k+iv2s5r4NeuWw8W7596tn07D6y0/dq5VUTy1dbg9Dmyk8sXvkM8b+K HGtPWTDh9UJxshJD/eQXF45oDUdl8dYHqq1KT6vQdhunLCnYvMWwe4geBM4v1dO3 wwmelfMEs6rwB7upMFagqkpbQQxCXrF+iquL7jWQOJfWmFZoXWNR/0F1WnIiBWJl Fydiv2QBJGBt7zPb753Z0N4cgqy6Fr3JjDIuJ+j6CFHvDQPf/Hc6XIYSwzT+KNTK 9zq5ORI+3KQPg3lZ9EG67P0kQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHq/T/H0 2jzEhhS1mZaOH3fG8S4OMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQDStGQ7XNVZsJ7TLaiNW54X1oPAHQkn23FlKrJcgwbF0t5pSkeWSd kXwEQYaIizli/GrWSUgE2I3wrDOXbkP7tSlhwiDxANtbAn6zARQIqIUiicTjcjHB 5sybu/rHLHJ/zShBDn8cE7MKQywxC3hpQmNp0zP4bFC1PpjYpwx+fVlJLMd48aIV gPJOKo2vM7fL8+uYJd/sbe2Stx0d6+h5risYLUZM28+WfLkurBhvKHwUrEkJSpFr 3O0qA0R2i342wORckV457hgcPUH6OKg4/sDv6dVh0cSd8enxMtKx3TMTxbX9MoHk bpBLylaMCCeTCjZk2Byzk107jPwsgvxw -----END CERTIFICATE-----Generated at Sun Jan 25 20:10:42 2026 by rpki-client