This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json) Hash identifier: MknFmMgEvkETp/fOJWHyBgBsSkEDSGoAZudJRP/dmq8= Subject key identifier: 93:68:DE:22:92:78:4B:97:C9:0C:14:34:20:F9:45:D5:4F:D8:6A:3F Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Certificate serial: 0CA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft Manifest number: 0C9E Signing time: Sat 24 Jan 2026 18:02:53 +0000 Manifest this update: Sat 24 Jan 2026 18:02:52 +0000 Manifest next update: Sat 31 Jan 2026 18:02:52 +0000 Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: LxPj9RNeU1J9BMfKW75dH/lfGk+duL4yUarrM8AijHM=) 2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: /1zN6Gwwi0zP2Xs45slEdMpw3TT72EUNYyQ6n/qRBPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD174, serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Validity Not Before: Jan 24 18:02:52 2026 GMT Not After : Jan 31 18:02:52 2026 GMT Subject: CN=6975094d-aec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:dd:71:fe:04:e0:a6:72:db:9c:df:44:5a: 8d:3c:28:bb:78:5d:7d:c8:94:0b:c4:d5:f1:c6:f6: d7:17:a7:60:49:0f:ad:ac:91:ff:ba:95:4f:bc:26: 06:ad:ed:6e:d2:68:13:b9:2c:54:3a:d1:a8:d1:9b: 6a:8e:07:66:c7:31:f8:0f:c6:83:21:8b:27:ed:0c: b8:4b:09:0c:8e:cb:af:8c:76:29:5e:03:0b:9e:b9: b3:4b:ae:9a:e7:ed:a7:1f:4f:36:07:f4:f0:9d:b0: a0:5e:03:18:4f:5f:8c:21:77:d1:92:f1:bb:20:50: 1b:36:98:02:10:e2:d8:89:4d:95:49:09:b5:dc:10: 44:fd:e6:f3:1a:98:b8:2d:fc:ce:fa:5e:26:b4:80: 89:9f:e0:83:36:ef:d6:74:de:12:96:5c:13:2b:26: b7:f0:a8:3b:82:79:89:21:bb:2d:3b:e1:cd:c9:25: 4b:b6:91:18:60:1e:a2:e3:87:7a:27:58:4e:1f:e7: 43:89:7d:1b:73:78:bb:6a:9e:f8:39:8f:f9:ab:e8: d3:07:45:b3:c3:16:4e:ee:76:15:b4:a2:1a:5e:a9: 2c:4b:a0:54:96:91:10:ea:d0:b8:0f:bb:2a:bd:e1: 90:b1:6f:f5:6c:06:b5:76:72:21:76:46:bb:b2:17: be:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:68:DE:22:92:78:4B:97:C9:0C:14:34:20:F9:45:D5:4F:D8:6A:3F X509v3 Authority Key Identifier: keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:d9:5c:01:e8:e5:23:5b:4a:24:fe:72:03:38:94:30:f8:14: 31:05:ba:82:5b:37:60:36:0e:73:62:e1:2f:ba:c3:86:c8:2f: 3d:5f:15:0b:cf:23:cc:e5:bc:1e:90:aa:18:62:a7:d0:45:68: 11:44:d8:48:7a:70:8e:ed:e7:1a:d0:f6:50:86:fd:95:fe:32: e2:d8:6e:29:54:95:8b:1e:84:4f:1e:b5:96:b4:d9:24:3c:e0: 8f:ec:70:44:a1:a1:45:50:c1:c2:a4:21:7f:33:c4:82:7a:31: 1d:67:54:5d:93:12:06:b8:0e:18:5b:49:0d:55:e8:fa:28:6d: a4:8d:43:2e:0d:96:18:61:e1:75:96:b2:40:bf:c4:28:d8:83: 46:4c:71:c9:c3:6e:2a:05:c6:ce:f5:d8:93:54:64:50:ca:29: 7c:99:26:0b:06:21:3b:7b:57:4a:3b:c1:8b:bd:7e:77:17:35: 44:56:d3:5a:0f:8c:73:97:fc:76:93:56:e2:fe:e2:ef:e5:5c: 8c:5a:e3:4c:5f:a8:74:5a:38:b6:e2:09:e1:53:45:cc:d0:fe: fd:80:f2:ec:ad:8b:6a:6b:1d:11:14:f7:26:07:49:0e:7d:ac: 2f:1e:97:50:ab:87:e4:92:1a:d9:83:f8:29:c4:ba:53:fc:db: 9f:93:66:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0 REU0MUMyMDYwHhcNMjYwMTI0MTgwMjUyWhcNMjYwMTMxMTgwMjUyWjAYMRYwFAYD VQQDDA02OTc1MDk0ZC1hZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2fdcf4E4KZy25zfRFqNPCi7eF19yJQLxNXxxvbXF6dgSQ+trJH/upVPvCYG re1u0mgTuSxUOtGo0ZtqjgdmxzH4D8aDIYsn7Qy4SwkMjsuvjHYpXgMLnrmzS66a 5+2nH082B/TwnbCgXgMYT1+MIXfRkvG7IFAbNpgCEOLYiU2VSQm13BBE/ebzGpi4 LfzO+l4mtICJn+CDNu/WdN4SllwTKya38Kg7gnmJIbstO+HNySVLtpEYYB6i44d6 J1hOH+dDiX0bc3i7ap74OY/5q+jTB0WzwxZO7nYVtKIaXqksS6BUlpEQ6tC4D7sq veGQsW/1bAa1dnIhdka7she+HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNo3iKS eEuXyQwUNCD5RdVP2Go/MB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC62VwB6OUjW0ok/nIDOJQw+BQxBbqCWzdgNg5zYuEvusOGyC89XxUL zyPM5bwekKoYYqfQRWgRRNhIenCO7eca0PZQhv2V/jLi2G4pVJWLHoRPHrWWtNkk POCP7HBEoaFFUMHCpCF/M8SCejEdZ1RdkxIGuA4YW0kNVej6KG2kjUMuDZYYYeF1 lrJAv8Qo2INGTHHJw24qBcbO9diTVGRQyil8mSYLBiE7e1dKO8GLvX53FzVEVtNa D4xzl/x2k1bi/uLv5VyMWuNMX6h0Wji24gnhU0XM0P79gPLsrYtqax0RFPcmB0kO fawvHpdQq4fkkhrZg/gpxLpT/Nufk2Yn -----END CERTIFICATE-----Generated at Sun Jan 25 06:11:45 2026 by rpki-client