This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft File: L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft (raw, json) Hash identifier: wNRqV2G+n+jaUT+CwhC/G5IRhkOz340NQi2k1lTJmpc= Subject key identifier: 60:82:61:B9:AE:1D:65:A8:3B:9F:9C:D2:B0:6D:57:35:C1:33:5B:23 Authority key identifier: 2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 Certificate issuer: /CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Certificate serial: 0460 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft Manifest number: 045E Signing time: Sat 24 Jan 2026 23:20:12 +0000 Manifest this update: Sat 24 Jan 2026 23:20:12 +0000 Manifest next update: Sat 31 Jan 2026 23:20:12 +0000 Files and hashes: 1: L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl (hash: EgKLO/oO44DNO6/8VFX0Z28WK39jPXyEQSiWLMpQcfk=) 2: 74D78D2AB28F11EFB915BB1BC4F9AE02.roa (hash: RBXkfOsNfCkPwqzSfm7Z1YZlXHjwWFawgr5+RKn+Spg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D1E, serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Validity Not Before: Jan 24 23:20:12 2026 GMT Not After : Jan 31 23:20:12 2026 GMT Subject: CN=697553ac-0918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5e:64:14:1d:c6:20:8a:19:93:4e:9c:4b:a1: c0:9f:c2:eb:8a:e1:cd:5f:ad:a1:a2:e7:9f:e0:7e: b0:bf:7c:6f:06:6c:6d:9c:53:00:0a:32:12:c1:b3: 7d:53:16:75:02:d2:83:22:8d:d6:65:77:61:c3:ed: d7:10:80:e9:74:b2:a2:0c:39:5e:28:e3:79:9f:7d: 05:e0:52:b4:cb:aa:c1:79:6e:98:37:bb:3b:d1:0a: dc:b4:d7:48:5a:9a:b8:8b:56:af:75:46:73:d7:9e: 70:44:0a:ac:5b:bd:5e:3d:4d:23:cc:37:39:38:ca: a9:11:e1:64:b7:73:4a:d2:76:02:ac:8f:48:36:81: 30:ee:8d:0a:bd:6b:c4:5a:da:25:68:94:29:bf:48: ab:5b:35:55:1d:b7:a4:2f:6b:43:97:89:69:e0:7d: 2a:40:66:b2:e0:e0:27:a1:f2:97:48:fc:87:86:71: 84:45:5b:51:e0:b6:cf:31:3c:15:d3:48:d5:50:30: 2e:06:ac:13:7d:e9:23:d8:8a:ad:ce:6b:3a:5f:19: 39:6f:f1:e7:44:d4:c5:61:1e:b4:0e:4f:ca:51:61: dd:1a:53:13:bc:26:9c:bd:fe:fa:ba:97:a3:21:07: 0e:c6:21:04:82:c9:6b:fb:7e:ba:f0:d8:48:3e:a3: ff:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:82:61:B9:AE:1D:65:A8:3B:9F:9C:D2:B0:6D:57:35:C1:33:5B:23 X509v3 Authority Key Identifier: keyid:2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ad:5a:ac:9f:1f:bf:2a:a0:d3:93:64:15:8c:18:aa:a8:ed: c8:2f:e2:83:4e:50:7f:9a:05:66:32:18:8b:23:55:7b:cd:02: 0f:ad:f1:4e:b0:7e:3f:22:8e:4d:e0:28:0a:dd:08:d9:6a:13: 02:a1:0e:00:f6:cb:a1:99:2e:62:52:cf:55:cc:bd:a8:93:0e: 55:03:e1:26:a7:69:c9:57:6c:c0:2b:93:55:da:60:e8:3a:bd: a2:df:05:4b:09:8c:b8:7f:92:c8:be:39:72:c8:fe:d1:e5:a5: cb:2e:25:85:2f:1a:b8:0d:dd:d1:19:fb:c7:e6:39:a1:d0:f9: 02:09:33:04:4b:a1:bd:89:71:4a:49:7b:ba:18:17:9b:bb:44: 99:11:fb:7e:ef:90:63:fc:24:45:f5:d5:f1:27:0f:c8:24:f3: af:ab:13:ee:68:b0:5d:68:19:31:05:c4:d3:e5:f7:30:52:08: e7:6f:cb:d7:ab:c0:c6:d2:90:f6:65:2e:b0:ef:2c:6e:05:8b: 80:80:d5:4e:6a:9d:53:cb:06:36:ab:3e:7b:73:72:31:ca:91: 4b:0c:fc:cc:82:bc:2a:be:06:24:3a:fc:59:2e:07:54:93:9c: e7:30:96:90:fd:82:15:05:60:0a:fe:fb:db:26:81:f5:9f:aa: b9:03:1c:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMUUxMTAvBgNVBAUTKDJGQzQ2MDE5RUU1MkQxRTkxQkIxRDFEOEUxN0U5OThB NzE1QjcyNDQwHhcNMjYwMTI0MjMyMDEyWhcNMjYwMTMxMjMyMDEyWjAYMRYwFAYD VQQDDA02OTc1NTNhYy0wOTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnF5kFB3GIIoZk06cS6HAn8LriuHNX62houef4H6wv3xvBmxtnFMACjISwbN9 UxZ1AtKDIo3WZXdhw+3XEIDpdLKiDDleKON5n30F4FK0y6rBeW6YN7s70QrctNdI Wpq4i1avdUZz155wRAqsW71ePU0jzDc5OMqpEeFkt3NK0nYCrI9INoEw7o0KvWvE WtolaJQpv0irWzVVHbekL2tDl4lp4H0qQGay4OAnofKXSPyHhnGERVtR4LbPMTwV 00jVUDAuBqwTfekj2Iqtzms6Xxk5b/HnRNTFYR60Dk/KUWHdGlMTvCacvf76upej IQcOxiEEgslr+3668NhIPqP/iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCCYbmu HWWoO5+c0rBtVzXBM1sjMB8GA1UdIwQYMBaAFC/EYBnuUtHpG7HR2OF+mYpxW3JE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQxRS9DN0MwQzFEQTdE NjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBla2JzZEhZNFg2WmluRmJj a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UmdHZTVTMGVrYnNkSFk0WDZaaW5GYmNrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQxRS9DN0MwQzFEQTdENjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBl a2JzZEhZNFg2WmluRmJja1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAerVqsnx+/KqDTk2QVjBiqqO3IL+KDTlB/mgVmMhiLI1V7zQIPrfFO sH4/Io5N4CgK3QjZahMCoQ4A9suhmS5iUs9VzL2okw5VA+Emp2nJV2zAK5NV2mDo Or2i3wVLCYy4f5LIvjlyyP7R5aXLLiWFLxq4Dd3RGfvH5jmh0PkCCTMES6G9iXFK SXu6GBebu0SZEft+75Bj/CRF9dXxJw/IJPOvqxPuaLBdaBkxBcTT5fcwUgjnb8vX q8DG0pD2ZS6w7yxuBYuAgNVOap1TywY2qz57c3IxypFLDPzMgrwqvgYkOvxZLgdU k5znMJaQ/YIVBWAK/vvbJoH1n6q5AxyT -----END CERTIFICATE-----Generated at Mon Jan 26 05:12:50 2026 by rpki-client