This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft File: L2sefhQB3gCsju23qFkNA9xUD3g.mft (raw, json) Hash identifier: Bl9w71535atUecVIJXnuXlmsovhr9e42i0CWTeUVJnQ= Subject key identifier: F9:89:9A:9F:FE:88:AA:C6:95:60:7C:41:08:28:DE:D8:F2:EA:3D:41 Authority key identifier: 2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 Certificate issuer: /CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft Manifest number: D0 Signing time: Sun 25 Jan 2026 04:57:10 +0000 Manifest this update: Sun 25 Jan 2026 04:57:09 +0000 Manifest next update: Sun 01 Feb 2026 04:57:09 +0000 Files and hashes: 1: L2sefhQB3gCsju23qFkNA9xUD3g.crl (hash: oqBLmKpaTBCcbgLXn3aRQwcNIr4Ig+BhD5QBXkOCids=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD38B, serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Validity Not Before: Jan 25 04:57:09 2026 GMT Not After : Feb 1 04:57:09 2026 GMT Subject: CN=6975a2a6-c1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:aa:9b:6a:8f:c1:39:3e:49:94:a7:1c:6c: dc:d9:0f:90:a2:1c:38:9c:44:52:20:35:8e:98:2f: 72:bb:40:7f:f9:8e:89:1c:31:6d:48:25:35:71:70: 6d:5f:dc:8e:68:bf:b7:43:b0:1d:9d:e9:59:3b:d6: 64:55:61:50:9c:f4:5f:d1:db:b6:72:3b:eb:4c:d3: ca:6e:a9:51:51:93:14:26:32:08:51:a4:9b:62:a9: 6f:7b:96:94:8c:48:91:e8:75:5d:5c:67:c3:7e:c2: f8:20:ab:93:11:53:43:e3:f5:e0:0e:1f:1a:b0:33: 09:13:40:80:4e:7a:7b:c6:51:28:3e:75:a6:87:86: 62:93:36:e2:6a:14:20:bd:0f:b7:5a:dd:78:0c:52: 9e:87:de:fe:c9:27:fc:17:7e:f8:b4:b2:4c:e6:c6: 4f:69:c1:b2:50:a8:6c:f5:c8:bf:37:fe:9d:cb:d9: 86:a5:a1:fd:08:08:56:72:7a:10:d0:0f:b3:b2:08: 79:5d:cb:ab:48:e7:61:51:8c:3f:be:62:35:99:80: a6:e2:34:47:5a:2e:9c:61:47:f4:b2:5f:a3:12:4d: 44:1e:7f:19:38:f4:e7:3c:08:ee:25:62:a4:1e:b8: d6:71:f7:91:23:92:34:28:40:f4:4b:8b:a5:70:c7: b5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:89:9A:9F:FE:88:AA:C6:95:60:7C:41:08:28:DE:D8:F2:EA:3D:41 X509v3 Authority Key Identifier: keyid:2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:08:45:06:36:04:0b:b6:e1:fd:89:9a:a9:f6:7b:47:c3:18: 21:41:87:7e:9e:61:f4:ab:4e:73:f4:59:d9:d6:84:e5:21:ff: 58:a3:01:45:79:4c:ae:9b:25:a0:88:22:72:ce:a3:a4:23:e9: 41:e9:58:8c:46:a9:c2:40:22:78:84:72:32:96:4c:a9:11:31: 72:49:a6:9b:b6:6b:f9:12:5e:3d:64:06:d8:cd:ac:f0:b3:8e: 20:33:0b:56:53:39:25:45:fe:fc:10:75:0f:c8:c9:ed:d8:eb: 8b:ca:ae:11:c2:ef:66:ef:89:d9:32:db:b5:bd:57:56:43:64: 7c:f1:fa:69:e7:04:25:1e:ae:0d:e1:f9:1a:1e:d7:b3:ce:31: 1c:44:e4:09:e0:87:fb:41:d9:3a:9e:e4:0d:06:41:c4:34:d4: 46:13:6a:7f:1f:a6:99:44:ea:63:f9:e6:76:47:5e:d0:10:bd: b7:9d:6e:25:0b:0c:b5:68:bc:cc:1d:2f:2b:76:d6:72:69:71: 09:b4:48:bf:22:0c:fe:ae:d8:c9:43:8c:d3:99:05:73:4c:b4: 80:4b:cb:17:84:e1:b8:44:28:89:6e:ce:6c:d0:ce:9c:bb:74: fa:d1:f5:63:ac:8a:bf:db:e2:1d:26:7e:0e:24:9e:00:44:90: cd:a4:79:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzOEIxMTAvBgNVBAUTKDJGNkIxRTdFMTQwMURFMDBBQzhFRURCN0E4NTkwRDAz REM1NDBGNzgwHhcNMjYwMTI1MDQ1NzA5WhcNMjYwMjAxMDQ1NzA5WjAYMRYwFAYD VQQDDA02OTc1YTJhNi1jMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMiqm2qPwTk+SZSnHGzc2Q+Qohw4nERSIDWOmC9yu0B/+Y6JHDFtSCU1cXBt X9yOaL+3Q7AdnelZO9ZkVWFQnPRf0du2cjvrTNPKbqlRUZMUJjIIUaSbYqlve5aU jEiR6HVdXGfDfsL4IKuTEVND4/XgDh8asDMJE0CATnp7xlEoPnWmh4ZikzbiahQg vQ+3Wt14DFKeh97+ySf8F374tLJM5sZPacGyUKhs9ci/N/6dy9mGpaH9CAhWcnoQ 0A+zsgh5XcurSOdhUYw/vmI1mYCm4jRHWi6cYUf0sl+jEk1EHn8ZOPTnPAjuJWKk HrjWcfeRI5I0KED0S4ulcMe11wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmJmp/+ iKrGlWB8QQgo3tjy6j1BMB8GA1UdIwQYMBaAFC9rHn4UAd4ArI7tt6hZDQPcVA94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM4Qi9BMUFCMkFCQ0JB ODkxMUVGOUIzMzg1MTJDNEY5QUUwMi9MMnNlZmhRQjNnQ3NqdTIzcUZrTkE5eFVE M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyc2VmaFFCM2dDc2p1MjNxRmtOQTl4VUQzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDM4Qi9BMUFCMkFCQ0JBODkxMUVGOUIzMzg1MTJDNEY5QUUwMi9MMnNlZmhRQjNn Q3NqdTIzcUZrTkE5eFVEM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCICEUGNgQLtuH9iZqp9ntHwxghQYd+nmH0q05z9FnZ1oTlIf9YowFF eUyumyWgiCJyzqOkI+lB6ViMRqnCQCJ4hHIylkypETFySaabtmv5El49ZAbYzazw s44gMwtWUzklRf78EHUPyMnt2OuLyq4Rwu9m74nZMtu1vVdWQ2R88fpp5wQlHq4N 4fkaHtezzjEcROQJ4If7Qdk6nuQNBkHENNRGE2p/H6aZROpj+eZ2R17QEL23nW4l Cwy1aLzMHS8rdtZyaXEJtEi/Igz+rtjJQ4zTmQVzTLSAS8sXhOG4RCiJbs5s0M6c u3T60fVjrIq/2+IdJn4OJJ4ARJDNpHmZ -----END CERTIFICATE-----Generated at Sun Jan 25 17:13:54 2026 by rpki-client