This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: lQ8IXWChDNmAj2ttceS0215T+ne8R2YQBph/eo0RQws= Subject key identifier: 03:8F:29:BA:EE:4A:5D:AA:8F:60:EC:AE:B3:B1:C5:22:DC:0B:A2:69 Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0D39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0D2A Signing time: Sat 24 Jan 2026 17:40:26 +0000 Manifest this update: Sat 24 Jan 2026 17:40:25 +0000 Manifest next update: Sat 31 Jan 2026 17:40:25 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: Jhq/twwbcOyGsDkZ6/E6X7DnxAV6BuwLl0vGHL09X/I=) 2: 0A7CA184B8C611F0B55B8B4EC4F9AE02.roa (hash: h1zv5buc+Cn7JuifmG3cLQTCbFRzAjARZCrKCnqaFQY=) 3: 97834674B8C511F0A874F663C4F9AE02.roa (hash: ccWVBhFOcENM09AuDRyLIP93A/dh9M6+1AU3r2Fkb/c=) 4: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: hN5uWTMLKihaDnB2GMrlEkHThQZGD2la1832Pp7TIb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3385 (0xd39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Jan 24 17:40:25 2026 GMT Not After : Jan 31 17:40:25 2026 GMT Subject: CN=69750409-cc94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:41:28:61:25:a2:bd:83:ba:55:1e:a1:e2: 3f:d9:3b:3b:16:0e:1d:dd:b3:7e:bd:6e:1e:f8:97: 5e:c0:8a:34:ab:f9:d2:61:64:e2:86:ca:ce:bb:37: 27:33:26:69:11:9d:37:6b:f2:09:f5:52:17:31:98: 40:b9:b9:be:06:bc:fe:dd:ba:5a:7c:a5:b8:82:55: 7f:bb:1b:a8:bc:55:20:0d:c1:19:dc:5d:05:b7:28: 34:84:ce:18:c3:30:3f:c6:6d:35:37:0c:1d:ef:db: b2:30:8e:82:8f:39:eb:5a:05:0f:a2:27:57:d5:e6: 51:e9:7a:cb:1f:11:0b:eb:66:51:03:e9:70:85:70: a0:db:c0:8b:03:02:1a:fb:e2:06:93:b5:dd:e3:a0: e4:3e:41:73:ab:9c:40:79:9f:c5:59:59:73:29:e3: 35:ef:7f:ef:c4:ad:84:8b:54:bf:94:38:c1:2e:af: c3:75:64:6c:a5:fe:5d:b5:cf:f5:37:a8:3b:91:58: af:a4:67:ae:b9:da:85:52:88:85:c1:67:e3:5c:e2: fa:ed:f6:5f:bd:8d:5d:f8:a5:95:0e:65:92:fe:19: 78:ee:6e:94:85:70:4a:19:1e:37:4f:67:ff:c8:cf: 5a:ed:74:d9:68:49:ac:11:5a:ad:b9:ae:b0:90:83: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8F:29:BA:EE:4A:5D:AA:8F:60:EC:AE:B3:B1:C5:22:DC:0B:A2:69 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:55:32:83:52:7b:49:1c:69:44:4d:80:5d:9d:1a:04:b7:75: 69:5d:61:75:62:31:52:38:62:28:22:c2:bd:73:ca:12:34:fa: 62:f0:ca:81:77:82:6f:41:b2:02:fe:4e:60:9b:63:b1:70:46: 6d:29:87:5a:ef:3a:52:55:d9:3a:b6:d0:e7:bb:85:de:2b:9a: 13:51:55:d9:c0:c2:9e:d5:3d:97:30:bf:ff:bb:84:4e:f5:9c: db:7d:28:b1:0c:d6:4d:3b:7e:26:c3:8b:ee:30:af:2a:41:b6: a9:ff:0d:3d:73:50:e4:99:64:d7:e4:65:4a:58:30:97:6f:37: ce:42:75:16:41:47:35:14:80:a9:7c:53:9a:27:62:10:45:ec: d9:62:d1:61:77:29:41:59:53:ad:bb:48:a8:c3:57:23:50:61: 5d:33:19:c6:86:92:7d:8e:f1:08:6f:1b:f0:9d:bd:84:1d:59: 8a:da:94:1d:f2:7a:1c:46:80:68:13:6c:77:d8:fc:b2:07:fd: 58:12:2f:ef:94:4f:48:0a:57:a2:d1:83:8d:61:a3:80:e3:4f: fb:85:e5:49:cc:32:68:4a:06:11:d0:27:60:3d:5c:be:61:3d: 39:c2:28:7e:f0:38:04:82:34:19:4b:1e:4a:48:39:79:c7:b0: 55:08:4a:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjYwMTI0MTc0MDI1WhcNMjYwMTMxMTc0MDI1WjAYMRYwFAYD VQQDDA02OTc1MDQwOS1jYzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAdBKGElor2DulUeoeI/2Ts7Fg4d3bN+vW4e+JdewIo0q/nSYWTihsrOuzcn MyZpEZ03a/IJ9VIXMZhAubm+Brz+3bpafKW4glV/uxuovFUgDcEZ3F0Ftyg0hM4Y wzA/xm01Nwwd79uyMI6CjznrWgUPoidX1eZR6XrLHxEL62ZRA+lwhXCg28CLAwIa ++IGk7Xd46DkPkFzq5xAeZ/FWVlzKeM173/vxK2Ei1S/lDjBLq/DdWRspf5dtc/1 N6g7kVivpGeuudqFUoiFwWfjXOL67fZfvY1d+KWVDmWS/hl47m6UhXBKGR43T2f/ yM9a7XTZaEmsEVqtua6wkIM+5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOPKbru Sl2qj2DsrrOxxSLcC6JpMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQVTKDUntJHGlETYBdnRoEt3VpXWF1YjFSOGIoIsK9c8oSNPpi8MqB d4JvQbIC/k5gm2OxcEZtKYda7zpSVdk6ttDnu4XeK5oTUVXZwMKe1T2XML//u4RO 9ZzbfSixDNZNO34mw4vuMK8qQbap/w09c1DkmWTX5GVKWDCXbzfOQnUWQUc1FICp fFOaJ2IQRezZYtFhdylBWVOtu0iow1cjUGFdMxnGhpJ9jvEIbxvwnb2EHVmK2pQd 8nocRoBoE2x32PyyB/1YEi/vlE9IClei0YONYaOA40/7heVJzDJoSgYR0CdgPVy+ YT05wih+8DgEgjQZSx5KSDl5x7BVCEqQ -----END CERTIFICATE-----Generated at Sun Jan 25 07:58:32 2026 by rpki-client