This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: /2d4PIzoM0U3YgchNK4kBpC7lHySdTycVyGgbcSEohY= Subject key identifier: 12:38:5B:7A:4C:9B:1D:00:75:44:B9:29:8C:9F:9F:08:2B:B2:90:EC Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 087C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 0870 Signing time: Sat 24 Jan 2026 20:02:50 +0000 Manifest this update: Sat 24 Jan 2026 20:02:50 +0000 Manifest next update: Sat 31 Jan 2026 20:02:50 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: VSHk2b83mCZM48mZrEiHcJLcM7XNZn01QPqCHplKgTA=) 2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: hdHi4xqpMBX0AQynSt0UCqWOxzfycEn8kuSXfk/h1Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2172 (0x87c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: Jan 24 20:02:50 2026 GMT Not After : Jan 31 20:02:50 2026 GMT Subject: CN=6975256a-7182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3d:e2:aa:61:b3:f7:bc:9e:45:e5:30:dd:27: c6:3a:4d:6a:0a:72:63:83:d5:bf:58:17:9d:26:85: 06:c1:d2:d4:87:fb:e6:bc:9d:07:29:dc:ec:82:34: 53:cf:e3:8b:e7:13:90:c8:48:0e:b8:6c:07:92:43: 98:6a:fe:7a:4d:33:d2:5f:3f:0a:a8:ed:ff:4c:dd: 50:9e:cb:6a:42:42:28:98:e4:72:21:56:77:67:26: 92:cf:7e:4e:dc:85:48:1b:92:bd:ff:00:fd:21:04: 47:1c:21:aa:9b:be:5b:5c:cc:cc:72:72:3a:1e:dd: d1:35:e0:56:0e:92:e9:0f:67:e3:c5:c2:e1:68:bd: 7f:81:39:c6:db:f5:b9:9a:55:d6:13:a8:5e:ff:91: 96:9b:36:96:6c:25:05:75:1c:1a:c3:d7:73:5a:90: ce:e8:85:a6:e4:35:c8:4a:d7:70:18:7d:08:a9:62: bf:cd:6b:7c:bc:3f:ca:2f:b7:d7:5d:56:97:96:53: 26:fc:14:36:76:32:5d:7d:45:90:5b:70:82:13:b5: 21:f8:22:03:64:a1:19:40:0b:79:28:2f:b1:03:bc: 4a:9f:61:8b:52:97:c7:08:ed:50:11:53:15:63:ad: f9:ae:76:ed:d8:d5:4d:ec:d3:70:a9:2f:73:79:ef: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:38:5B:7A:4C:9B:1D:00:75:44:B9:29:8C:9F:9F:08:2B:B2:90:EC X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:02:41:4e:1d:07:b1:01:f8:9d:fd:fa:85:dc:23:1b:02:e4: bd:23:88:c5:b6:60:8e:11:88:f5:38:96:c7:46:4c:5a:fd:63: 3f:f0:20:2d:1e:e7:b5:41:8e:d5:98:72:d9:f8:04:a8:89:d9: 6a:cb:0f:ad:2a:64:1f:c7:c9:fd:aa:13:50:21:14:10:4f:ad: c0:b5:71:a8:ba:5a:49:7a:1e:37:2a:64:c1:5c:48:b3:57:5b: 68:b6:50:39:f5:85:91:04:b5:fb:e3:6e:0d:9c:e4:b9:2b:40: e6:c6:47:76:bf:41:ad:ce:2c:99:f1:15:b3:e2:77:f3:7c:c7: 05:3b:68:87:42:00:75:e2:1a:ca:93:bb:e0:aa:9d:f4:20:dd: d0:0d:7d:e5:e7:57:65:43:00:ac:fa:53:4a:78:52:ff:40:7e: ed:fb:33:b9:67:25:af:05:0d:f1:0f:68:d6:c5:6e:dc:8f:fb: 43:cc:ac:db:fe:e1:28:41:e5:fd:cd:d9:56:93:69:cc:1c:84: 3e:4d:da:16:69:af:d9:92:a5:a5:f9:2e:a6:a9:23:70:64:58: 8a:91:42:d7:52:0a:5c:33:fd:b5:7d:a6:43:10:cd:fa:3f:bc: b4:fd:c5:08:f9:cf:42:36:af:fc:32:c3:45:4e:7d:b7:dc:0e: d8:eb:7f:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjYwMTI0MjAwMjUwWhcNMjYwMTMxMjAwMjUwWjAYMRYwFAYD VQQDDA02OTc1MjU2YS03MTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D3iqmGz97yeReUw3SfGOk1qCnJjg9W/WBedJoUGwdLUh/vmvJ0HKdzsgjRT z+OL5xOQyEgOuGwHkkOYav56TTPSXz8KqO3/TN1QnstqQkIomORyIVZ3ZyaSz35O 3IVIG5K9/wD9IQRHHCGqm75bXMzMcnI6Ht3RNeBWDpLpD2fjxcLhaL1/gTnG2/W5 mlXWE6he/5GWmzaWbCUFdRwaw9dzWpDO6IWm5DXIStdwGH0IqWK/zWt8vD/KL7fX XVaXllMm/BQ2djJdfUWQW3CCE7Uh+CIDZKEZQAt5KC+xA7xKn2GLUpfHCO1QEVMV Y635rnbt2NVN7NNwqS9zee9nAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBI4W3pM mx0AdUS5KYyfnwgrspDsMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2AkFOHQexAfid/fqF3CMbAuS9I4jFtmCOEYj1OJbHRkxa/WM/8CAt Hue1QY7VmHLZ+ASoidlqyw+tKmQfx8n9qhNQIRQQT63AtXGoulpJeh43KmTBXEiz V1totlA59YWRBLX7424NnOS5K0Dmxkd2v0GtziyZ8RWz4nfzfMcFO2iHQgB14hrK k7vgqp30IN3QDX3l51dlQwCs+lNKeFL/QH7t+zO5ZyWvBQ3xD2jWxW7cj/tDzKzb /uEoQeX9zdlWk2nMHIQ+TdoWaa/ZkqWl+S6mqSNwZFiKkULXUgpcM/21faZDEM36 P7y0/cUI+c9CNq/8MsNFTn233A7Y63/l -----END CERTIFICATE-----Generated at Sun Jan 25 09:23:49 2026 by rpki-client