This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: lVxBUTXXvJadZWbXL1Wcg8Tkb/2FPijnS6dECLY6OZw= Subject key identifier: 47:0B:B6:91:19:B3:34:A5:22:4C:2A:D4:3F:F5:BD:C5:9B:32:49:9A Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 0352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 032A Signing time: Sun 25 Jan 2026 00:20:04 +0000 Manifest this update: Sun 25 Jan 2026 00:20:03 +0000 Manifest next update: Sun 01 Feb 2026 00:20:03 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: bkLTuLhahMnapEOxNZcTeOGS0AWqWIxmfUC/BBJM3G0=) 2: 880B53F493C611F093DD4E26C4F9AE02.roa (hash: kI7hR0gi82H4tGr9L9+N926LnNI7bRFFE0ZznH05Fqo=) 3: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: EXZKaPGUwtsDkK02FHOfFve03nhQLXnXoDpLr6aZfVk=) 4: 88E1581E93C611F093DD4E26C4F9AE02.roa (hash: 3ZU7uxKO/t/DcPW4C30weX2MJ8vKNau0nNzc4ySxziM=) 5: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: D4Hg/JdRTfX/l8c7oXgoLhl4NGoM7URqBmQ0qnzy3No=) 6: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: 1228kG65FpzFsgF5OYDLN0KZ5wJbY2X2RckkI0NfZ9U=) 7: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: 7d7gP27b9zch7ZSnAleqYPL3fKv267/ReH6uWVU9VP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Jan 25 00:20:03 2026 GMT Not After : Feb 1 00:20:03 2026 GMT Subject: CN=697561b4-648f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f3:e2:98:c8:52:df:f3:1f:e9:13:31:67:df: 64:a6:96:5e:d9:da:89:df:47:be:95:fc:a7:22:5d: e9:6f:cf:e7:c7:f9:8d:cb:15:a1:5b:e4:bb:8c:eb: 35:2f:66:9c:b2:12:b7:c9:54:16:c7:05:d4:b7:dd: 11:39:1d:46:27:e4:fe:c0:90:72:13:95:7b:0d:38: d1:55:16:5b:a2:77:00:0b:0e:f7:0a:26:86:f8:7d: 19:0c:10:f1:4f:69:89:92:86:24:89:5d:41:0e:59: 94:9d:47:59:1b:27:da:41:49:4a:14:66:82:9e:66: 90:4f:28:b3:0a:c7:97:ba:62:ff:9a:31:f2:98:44: 9f:1a:57:91:91:41:bb:fc:48:b0:e3:8b:2b:ee:06: 38:44:54:e6:d6:90:54:fd:6c:27:f3:93:31:3f:bb: 44:58:c4:54:fb:4d:4f:00:bd:f3:7a:a2:58:5e:48: 86:d9:9d:80:50:d9:03:bc:83:2f:78:5a:c3:58:93: d9:4d:6e:57:e7:a3:7b:9e:49:95:63:40:7f:cb:0b: 56:17:be:88:b0:bb:05:48:7f:84:bb:ee:c1:16:47: d7:be:8c:bf:75:8e:de:f0:66:27:a3:a4:89:c9:5e: 16:ce:33:b3:fe:d9:ae:bf:0c:c7:21:79:96:73:75: f3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0B:B6:91:19:B3:34:A5:22:4C:2A:D4:3F:F5:BD:C5:9B:32:49:9A X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:74:4f:26:5c:3a:42:06:9e:6e:69:ff:25:77:b1:1a:cf:86: 43:d3:b2:79:bf:07:57:90:b2:88:7b:4f:10:b5:33:2c:c2:0c: df:b6:8f:71:7d:60:91:f0:00:54:04:41:20:4a:79:27:be:3a: 13:2e:76:86:be:54:ca:5c:f5:2a:50:3d:04:5c:38:2a:d3:ce: 5b:58:40:3a:3a:9f:93:66:4b:f5:91:d8:7d:a3:49:dd:fe:b5: 24:05:8f:f6:87:d2:e5:bd:9c:10:57:b3:56:1b:82:d9:12:fc: 31:12:76:26:44:94:c0:03:04:69:cf:ac:a9:a0:79:99:32:27: f5:6c:1b:ad:da:12:9d:78:4f:62:c5:fa:6e:e8:18:ff:35:0e: 19:cc:49:6d:64:4d:0e:75:14:8a:53:25:32:af:7a:c5:c1:7d: 63:82:52:58:08:85:65:b3:6a:cb:96:71:a9:c7:4e:4c:60:9f: 12:8d:f1:c8:f4:47:ce:2b:51:4d:09:6a:0f:7b:5c:6e:d6:b6: 90:e3:e2:b5:c5:98:40:13:f7:80:da:7b:c0:ed:79:95:25:0b: d5:9e:04:25:18:06:2d:d9:e8:78:ac:d5:b7:c9:f9:af:6a:6c: 2c:b4:25:4b:e2:da:2a:7f:ea:44:4f:84:85:67:8f:de:ea:f9: d2:29:de:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjYwMTI1MDAyMDAzWhcNMjYwMjAxMDAyMDAzWjAYMRYwFAYD VQQDDA02OTc1NjFiNC02NDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvPimMhS3/Mf6RMxZ99kppZe2dqJ30e+lfynIl3pb8/nx/mNyxWhW+S7jOs1 L2acshK3yVQWxwXUt90ROR1GJ+T+wJByE5V7DTjRVRZboncACw73CiaG+H0ZDBDx T2mJkoYkiV1BDlmUnUdZGyfaQUlKFGaCnmaQTyizCseXumL/mjHymESfGleRkUG7 /Eiw44sr7gY4RFTm1pBU/Wwn85MxP7tEWMRU+01PAL3zeqJYXkiG2Z2AUNkDvIMv eFrDWJPZTW5X56N7nkmVY0B/ywtWF76IsLsFSH+Eu+7BFkfXvoy/dY7e8GYno6SJ yV4WzjOz/tmuvwzHIXmWc3Xz3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcLtpEZ szSlIkwq1D/1vcWbMkmaMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbdE8mXDpCBp5uaf8ld7Eaz4ZD07J5vwdXkLKIe08QtTMswgzfto9x fWCR8ABUBEEgSnknvjoTLnaGvlTKXPUqUD0EXDgq085bWEA6Op+TZkv1kdh9o0nd /rUkBY/2h9LlvZwQV7NWG4LZEvwxEnYmRJTAAwRpz6ypoHmZMif1bBut2hKdeE9i xfpu6Bj/NQ4ZzEltZE0OdRSKUyUyr3rFwX1jglJYCIVls2rLlnGpx05MYJ8SjfHI 9EfOK1FNCWoPe1xu1raQ4+K1xZhAE/eA2nvA7XmVJQvVngQlGAYt2eh4rNW3yfmv amwstCVL4toqf+pET4SFZ4/e6vnSKd64 -----END CERTIFICATE-----Generated at Sun Jan 25 10:54:06 2026 by rpki-client