This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft File: LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json) Hash identifier: L2LshDOkeAWn+DMHcivvgsgAMU7IUlPWQY9eekgbpto= Subject key identifier: F9:EF:C7:CB:CE:C7:B4:97:0B:FE:DC:82:4B:CC:E5:67:54:FE:04:C1 Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Certificate serial: 0C0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft Manifest number: 0C03 Signing time: Sat 24 Jan 2026 18:24:50 +0000 Manifest this update: Sat 24 Jan 2026 18:24:50 +0000 Manifest next update: Sat 31 Jan 2026 18:24:50 +0000 Files and hashes: 1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: /JS6vJofpBh2c0MWFxkbbwgIvXqeEMF5V7EXKhgTcvQ=) 2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: IpF3dE92/TbQ62Lm9/2a1/eIhWDEF6cu9VkkblkvmV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3085 (0xc0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EBB, serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Validity Not Before: Jan 24 18:24:50 2026 GMT Not After : Jan 31 18:24:50 2026 GMT Subject: CN=69750e72-b7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3c:82:89:77:92:90:44:38:46:cf:4b:29:72: 21:78:91:a8:f7:0d:13:c3:60:c2:2f:69:4a:27:d1: a5:b6:5f:87:f3:32:92:e2:c8:30:28:9e:85:cf:6c: 86:96:3a:0c:d1:6b:59:22:dd:94:03:f7:db:b6:0b: 21:b5:7c:b3:0c:a7:18:14:94:47:74:83:3e:52:be: 7c:30:b8:a1:17:26:3c:0a:27:7f:59:6a:4b:15:51: 28:81:6b:49:9f:80:a5:2a:3f:1a:70:e7:21:1c:53: 39:68:f0:4e:f6:c1:2d:99:ee:d6:4d:2c:8c:c4:0a: 95:1f:04:a2:a1:79:7c:3a:e7:32:8c:25:6c:2f:26: dd:59:d4:4c:3a:a8:fc:e4:5c:52:b1:e0:f7:1c:8e: ec:61:3e:86:9d:48:d5:f9:86:f5:80:96:aa:97:c4: 2f:cb:58:c8:07:e5:5a:6d:1f:22:57:a8:6f:5e:24: 7e:62:46:b4:6b:46:9b:51:92:37:8e:5a:2c:a1:c7: 09:7e:e2:f4:bf:02:77:51:07:7c:d6:d7:19:b0:9b: 65:09:fb:ec:d8:79:d8:8f:a5:cf:bd:2b:db:6b:04: 28:cd:dc:d9:0c:4b:e7:07:2f:90:b2:8b:2a:fd:d9: 10:f1:e3:4c:f5:c5:67:98:a7:d9:3b:3e:c0:5e:bd: 9f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EF:C7:CB:CE:C7:B4:97:0B:FE:DC:82:4B:CC:E5:67:54:FE:04:C1 X509v3 Authority Key Identifier: keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a2:f7:1a:12:b8:2c:30:43:41:44:c5:65:5b:89:8e:31:9a: 45:01:14:fd:85:19:d5:80:6c:61:e1:a1:ae:8f:ec:92:81:25: 75:eb:7d:32:ed:2a:75:d6:45:99:a3:58:26:d9:4d:d0:df:4b: 94:5d:94:03:24:56:3e:3b:1e:f0:5a:b7:5f:3d:9e:e6:d3:01: 61:1a:77:9b:7f:26:10:ba:55:de:64:58:0f:09:f9:80:f0:58: 21:4b:4a:20:cc:59:d0:48:aa:0d:04:a9:ef:a3:5f:f1:1a:4e: b9:d0:c3:ec:53:02:8d:1a:c7:57:cb:b0:82:e8:73:74:ca:51: 35:86:97:ee:8b:cd:02:68:57:83:cd:d6:b4:9a:f6:bb:f0:8e: 31:a3:40:d9:98:5e:3d:92:74:1c:db:b9:47:e2:37:5a:71:3a: ca:9d:bd:e3:73:a4:38:84:fe:fc:9b:6e:da:48:30:ca:30:8d: 28:c9:63:f6:8c:f3:c7:01:1c:b4:18:59:b6:21:d5:a9:98:08: 6c:59:1f:df:f1:21:4c:ad:e0:1c:4f:ec:9f:e2:78:46:fa:fc: dc:81:be:33:13:9d:73:32:fe:a1:68:5a:e6:b4:a6:c2:03:28: d1:dc:f1:84:1b:81:3b:bd:10:b7:ae:14:56:59:2c:e9:11:1b: 42:52:38:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFQkIxMTAvBgNVBAUTKDJENjRGQTM0NzhDOTk0OTE3NjhFNjZFNkU5OTdFOUZB QTk1Q0EyRDMwHhcNMjYwMTI0MTgyNDUwWhcNMjYwMTMxMTgyNDUwWjAYMRYwFAYD VQQDDA02OTc1MGU3Mi1iN2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjyCiXeSkEQ4Rs9LKXIheJGo9w0Tw2DCL2lKJ9Gltl+H8zKS4sgwKJ6Fz2yG ljoM0WtZIt2UA/fbtgshtXyzDKcYFJRHdIM+Ur58MLihFyY8Cid/WWpLFVEogWtJ n4ClKj8acOchHFM5aPBO9sEtme7WTSyMxAqVHwSioXl8OucyjCVsLybdWdRMOqj8 5FxSseD3HI7sYT6GnUjV+Yb1gJaql8Qvy1jIB+VabR8iV6hvXiR+Yka0a0abUZI3 jlosoccJfuL0vwJ3UQd81tcZsJtlCfvs2HnYj6XPvSvbawQozdzZDEvnBy+Qsosq /dkQ8eNM9cVnmKfZOz7AXr2fmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnvx8vO x7SXC/7cgkvM5WdU/gTBMB8GA1UdIwQYMBaAFC1k+jR4yZSRdo5m5umX6fqpXKLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVCQi9GOTI2M0QxNjJC MDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxKRjJqbWJtNlpmcC1xbGNv dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXVDZOSGpKbEpGMmptYm02WmZwLXFsY290TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVCQi9GOTI2M0QxNjJCMDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxK RjJqbWJtNlpmcC1xbGNvdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfovcaErgsMENBRMVlW4mOMZpFART9hRnVgGxh4aGuj+ySgSV1630y 7Sp11kWZo1gm2U3Q30uUXZQDJFY+Ox7wWrdfPZ7m0wFhGnebfyYQulXeZFgPCfmA 8FghS0ogzFnQSKoNBKnvo1/xGk650MPsUwKNGsdXy7CC6HN0ylE1hpfui80CaFeD zda0mva78I4xo0DZmF49knQc27lH4jdacTrKnb3jc6Q4hP78m27aSDDKMI0oyWP2 jPPHARy0GFm2IdWpmAhsWR/f8SFMreAcT+yf4nhG+vzcgb4zE51zMv6haFrmtKbC AyjR3PGEG4E7vRC3rhRWWSzpERtCUjgg -----END CERTIFICATE-----Generated at Sun Jan 25 15:33:27 2026 by rpki-client