This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft File: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft (raw, json) Hash identifier: 6+Hf54+J/S03oQ0c9GI0IKVTMyfB6CYRcNe9RbKz0Ko= Subject key identifier: 88:6D:BB:2E:CC:A4:BE:0D:BA:02:1F:21:BE:00:27:07:39:76:BE:B9 Authority key identifier: 97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7 Certificate issuer: /CN=A91597A7/serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft Manifest number: 2C Signing time: Sun 25 Jan 2026 06:42:21 +0000 Manifest this update: Sun 25 Jan 2026 06:42:20 +0000 Manifest next update: Sun 01 Feb 2026 06:42:20 +0000 Files and hashes: 1: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl (hash: GAHBEyWyai4WxIZxbCnD4FpvwmKP7vCqC8+Jyb0sc9c=) 2: B674DD44BB3C11F0AD98C485C4F9AE02.roa (hash: PNZrl6zNI+1AHV1SGmGe71ONQBJFe9ys1G9nldi1fqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597A7, serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7 Validity Not Before: Jan 25 06:42:20 2026 GMT Not After : Feb 1 06:42:20 2026 GMT Subject: CN=6975bb4d-3753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:a4:75:86:c1:32:ef:d9:2d:53:92:98:a3: 1e:f3:b7:7c:79:b3:c8:0a:2e:f7:c1:7e:d7:14:cf: 37:7d:1b:d7:e3:db:27:15:ef:0f:b9:86:8e:ff:87: dd:5e:f7:e6:96:a1:43:e3:df:09:2f:2c:1b:15:70: 8d:fb:50:38:8f:40:a5:c4:52:12:ad:88:4a:ce:94: cd:ca:f8:66:1b:77:f8:21:20:a5:44:ec:b0:be:50: 4f:0b:b5:b9:ff:10:95:c3:e9:9f:8f:e7:01:32:ff: 76:a7:f3:e8:67:a8:dd:aa:a1:4f:b7:eb:84:41:c8: bd:b3:9b:05:cc:bc:47:32:cb:61:64:b6:b4:2c:7e: 1d:dc:1a:f0:85:ab:80:d9:3c:83:f4:f6:5f:e7:3f: 5b:23:d9:d1:14:7d:63:e1:22:f8:99:4b:b9:8e:1c: 5d:37:29:f8:bf:74:3b:90:6a:08:85:76:36:98:57: 32:10:b5:06:84:5d:4c:a9:f2:9e:b3:a5:df:6a:49: 44:e1:91:ab:77:7e:6a:b6:e0:d5:55:2c:46:fd:ff: a6:6f:9e:e0:07:d6:5f:a5:b4:48:a7:33:d1:83:1a: a1:ac:43:cc:77:9e:bf:37:ae:3b:de:3e:a7:38:7c: 4d:99:d5:69:b1:c5:5d:67:56:f1:d9:d3:b7:f7:17: dc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6D:BB:2E:CC:A4:BE:0D:BA:02:1F:21:BE:00:27:07:39:76:BE:B9 X509v3 Authority Key Identifier: keyid:97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:bc:81:f0:36:8a:c9:c5:6b:09:c6:2e:d8:83:e3:8a:49:6d: 12:2e:e7:e4:20:2f:ba:c9:9a:4d:23:05:ab:4f:77:5f:4c:d4: 58:3f:62:31:2c:ab:90:9e:3f:d5:cb:58:39:40:9b:a6:36:de: 8e:74:a8:07:41:17:4f:a4:7d:c5:a4:6a:f1:11:78:22:da:e0: 9f:e0:ed:79:fe:c8:17:4c:64:c2:30:72:d0:91:f7:d8:66:46: fd:5f:21:2a:43:1f:cf:4d:ef:26:64:ad:47:3c:85:25:de:b8: b6:94:c8:79:b8:ca:a4:ff:70:c5:16:84:76:56:84:06:51:9d: 1b:00:43:37:e2:52:27:a2:f1:49:1f:fd:48:ad:e0:83:3c:00: 6a:3a:59:c6:0e:d4:43:cf:51:ca:92:61:37:e0:45:2f:09:b7: c0:78:9c:62:90:8c:c4:d9:f6:39:b2:e9:55:8c:b8:a0:b3:92: e9:51:00:d3:58:ab:6e:d1:3d:3c:af:4f:24:96:c1:1e:cf:b4: 97:f2:ca:57:e2:6d:1c:f3:50:8e:9a:61:5e:ff:88:34:a9:93: 87:ff:c2:61:2a:3e:07:d0:fd:c5:e4:83:fe:fa:6d:3f:22:f7: 99:cf:8d:ab:c6:55:c3:b7:f8:d9:92:2e:39:d0:b6:0d:c9:66: 03:49:4c:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTdBNzExMC8GA1UEBRMoOTcxRjk5RDE4RjgzMERBRDQ1NTQ5MDZDQUQwQUQ1OTk4 QkJCNTJBNzAeFw0yNjAxMjUwNjQyMjBaFw0yNjAyMDEwNjQyMjBaMBgxFjAUBgNV BAMMDTY5NzViYjRkLTM3NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwQKR1hsEy79ktU5KYox7zt3x5s8gKLvfBftcUzzd9G9fj2ycV7w+5ho7/h91e 9+aWoUPj3wkvLBsVcI37UDiPQKXEUhKtiErOlM3K+GYbd/ghIKVE7LC+UE8Ltbn/ EJXD6Z+P5wEy/3an8+hnqN2qoU+364RByL2zmwXMvEcyy2FktrQsfh3cGvCFq4DZ PIP09l/nP1sj2dEUfWPhIviZS7mOHF03Kfi/dDuQagiFdjaYVzIQtQaEXUyp8p6z pd9qSUThkat3fmq24NVVLEb9/6ZvnuAH1l+ltEinM9GDGqGsQ8x3nr83rjvePqc4 fE2Z1WmxxV1nVvHZ07f3F9wxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiG27Lsyk vg26Ah8hvgAnBzl2vrkwHwYDVR0jBBgwFoAUlx+Z0Y+DDa1FVJBsrQrVmYu7Uqcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5N0E3LzBCNEMyREEwQkEz ODExRjA5MzQwOEY2QkM0RjlBRTAyL2x4LVowWS1ERGExRlZKQnNyUXJWbVl1N1Vx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHgtWjBZLUREYTFGVkpCc3JRclZtWXU3VXFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 N0E3LzBCNEMyREEwQkEzODExRjA5MzQwOEY2QkM0RjlBRTAyL2x4LVowWS1ERGEx RlZKQnNyUXJWbVl1N1VxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEm8gfA2isnFawnGLtiD44pJbRIu5+QgL7rJmk0jBatPd19M1Fg/YjEs q5CeP9XLWDlAm6Y23o50qAdBF0+kfcWkavEReCLa4J/g7Xn+yBdMZMIwctCR99hm Rv1fISpDH89N7yZkrUc8hSXeuLaUyHm4yqT/cMUWhHZWhAZRnRsAQzfiUiei8Ukf /Uit4IM8AGo6WcYO1EPPUcqSYTfgRS8Jt8B4nGKQjMTZ9jmy6VWMuKCzkulRANNY q27RPTyvTySWwR7PtJfyylfibRzzUI6aYV7/iDSpk4f/wmEqPgfQ/cXkg/76bT8i 95nPjavGVcO3+NmSLjnQtg3JZgNJTM8= -----END CERTIFICATE-----Generated at Sun Jan 25 10:42:54 2026 by rpki-client