This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
File: L5rGimsA32BW9wq8WqxtuSCrGx0.mft (raw, json)
Hash identifier: yDo5A3ss4XPW2yu8mCJc4rZ2K0caIyfUrKcwwr6dZpY=
Subject key identifier: 73:E2:FA:39:D5:0F:D2:7E:8C:9C:96:37:DE:0C:AF:5D:80:ED:D1:92
Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D
Certificate issuer: /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D
Certificate serial: 059B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
Manifest number: 0592
Signing time: Sat 24 Jan 2026 22:29:47 +0000
Manifest this update: Sat 24 Jan 2026 22:29:47 +0000
Manifest next update: Sat 31 Jan 2026 22:29:47 +0000
Files and hashes: 1: L5rGimsA32BW9wq8WqxtuSCrGx0.crl (hash: uOwso/reB90zAPSVhEX3DEwNuJEOuqMXvcYXbw06UtM=)
2: 85EAFFD806F911EC9558C827C4F9AE02.roa (hash: nbAwbUJb6JF/EVgcBuo6b8RRtXcpwDWvIQu43r6H87s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl
rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1435 (0x59b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144266, serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D
Validity
Not Before: Jan 24 22:29:47 2026 GMT
Not After : Jan 31 22:29:47 2026 GMT
Subject: CN=697547db-b9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:a8:f9:28:51:84:45:c9:3e:46:d5:a9:3a:
ab:92:d3:7a:46:15:c7:71:2a:fa:f8:58:23:97:5d:
15:db:2a:92:6b:9e:7a:fe:6c:bf:85:f6:27:6d:72:
c6:39:fd:da:83:f4:c0:2c:5e:bd:7f:f2:da:48:43:
e1:01:3e:a0:40:a2:e8:31:7c:f1:8d:28:39:27:de:
f6:71:ef:7c:e4:07:00:1c:c7:b9:0f:cc:c4:0b:7c:
4a:fb:3d:bc:b2:71:4d:88:3f:d5:4f:26:56:0c:8b:
bf:57:33:c3:7a:ab:4d:aa:c3:42:e0:57:3d:2d:a6:
bc:8a:2b:b6:42:49:a6:56:7b:24:09:99:fb:d6:2d:
b1:93:43:c1:7e:12:60:df:29:69:c9:a2:a1:b2:17:
d0:59:0f:53:e5:05:58:6a:c3:cf:8a:1f:04:2f:ae:
b9:10:b0:73:76:cc:0a:b7:eb:96:2c:54:98:73:b4:
57:61:96:c8:cc:42:e7:fc:c6:5a:57:85:d2:cc:3b:
50:7d:2f:0c:e2:a7:2a:89:89:79:87:ea:41:87:94:
e2:e5:a1:1f:f6:4e:79:0b:27:3d:56:3f:74:b7:2f:
af:ef:03:d6:67:74:8d:c4:b5:93:26:28:cc:3e:dd:
b5:3e:97:53:8a:19:62:b4:3a:e2:d1:cf:d5:f4:78:
59:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E2:FA:39:D5:0F:D2:7E:8C:9C:96:37:DE:0C:AF:5D:80:ED:D1:92
X509v3 Authority Key Identifier:
keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:35:dd:9e:23:42:be:91:8f:16:9c:ab:fb:4f:9c:cb:90:9a:
df:e8:11:57:e3:9b:65:ce:7f:b6:37:9b:e5:5d:a8:ed:a1:b0:
61:6a:36:b0:87:08:fb:b2:68:3e:44:79:4c:aa:10:5b:d2:5a:
8e:79:29:d4:2e:b1:75:6f:3e:59:95:7e:7f:36:84:e5:43:c0:
f4:77:47:c2:bf:bf:b0:32:56:08:14:13:80:37:c6:0f:8b:df:
91:a8:18:16:28:93:1f:79:4f:77:e6:a0:4c:27:1b:ab:76:ac:
b8:1e:b4:14:36:92:ac:81:de:7b:72:b8:f2:67:d7:ef:0c:38:
87:7c:ec:ae:4d:5f:7d:ea:44:b8:7c:63:7a:f3:46:e6:e3:cf:
39:d3:73:81:21:ce:36:48:78:48:aa:66:19:d7:9c:e8:8c:43:
13:48:d8:ed:44:41:8b:0b:3c:05:b8:4a:4f:c4:a6:39:57:96:
c8:c0:e5:11:32:ad:4b:dc:30:89:8b:6f:e7:a7:14:15:ae:27:
f4:7a:25:62:d0:c9:cf:93:d0:47:7a:bd:24:61:50:57:80:1d:
4a:5c:fa:8f:f7:b7:96:3e:de:66:3f:50:aa:03:3e:ca:57:04:
b4:a2:5b:41:00:ed:0b:84:1e:db:79:8e:3d:65:a2:9f:69:24:
3c:6a:61:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQyNjYxMTAvBgNVBAUTKDJGOUFDNjhBNkIwMERGNjA1NkY3MEFCQzVBQUM2REI5
MjBBQjFCMUQwHhcNMjYwMTI0MjIyOTQ3WhcNMjYwMTMxMjIyOTQ3WjAYMRYwFAYD
VQQDDA02OTc1NDdkYi1iOWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq0Ko+ShRhEXJPkbVqTqrktN6RhXHcSr6+Fgjl10V2yqSa556/my/hfYnbXLG
Of3ag/TALF69f/LaSEPhAT6gQKLoMXzxjSg5J972ce985AcAHMe5D8zEC3xK+z28
snFNiD/VTyZWDIu/VzPDeqtNqsNC4Fc9Laa8iiu2QkmmVnskCZn71i2xk0PBfhJg
3ylpyaKhshfQWQ9T5QVYasPPih8EL665ELBzdswKt+uWLFSYc7RXYZbIzELn/MZa
V4XSzDtQfS8M4qcqiYl5h+pBh5Ti5aEf9k55Cyc9Vj90ty+v7wPWZ3SNxLWTJijM
Pt21PpdTihlitDri0c/V9HhZdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPi+jnV
D9J+jJyWN94Mr12A7dGSMB8GA1UdIwQYMBaAFC+axoprAN9gVvcKvFqsbbkgqxsd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2Ni8wRTg1OEUyODA2
Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMyQlc5d3E4V3F4dHVTQ3JH
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w1ckdpbXNBMzJCVzl3cThXcXh0dVNDckd4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDI2Ni8wRTg1OEUyODA2Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMy
Qlc5d3E4V3F4dHVTQ3JHeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAmNd2eI0K+kY8WnKv7T5zLkJrf6BFX45tlzn+2N5vlXajtobBhajaw
hwj7smg+RHlMqhBb0lqOeSnULrF1bz5ZlX5/NoTlQ8D0d0fCv7+wMlYIFBOAN8YP
i9+RqBgWKJMfeU935qBMJxurdqy4HrQUNpKsgd57crjyZ9fvDDiHfOyuTV996kS4
fGN680bm488503OBIc42SHhIqmYZ15zojEMTSNjtREGLCzwFuEpPxKY5V5bIwOUR
Mq1L3DCJi2/npxQVrif0eiVi0MnPk9BHer0kYVBXgB1KXPqP97eWPt5mP1CqAz7K
VwS0oltBAO0LhB7beY49ZaKfaSQ8amFm
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:49:54 2026 by rpki-client