This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft File: lHy2dKhYzZGupVJro2aKEeSey5M.mft (raw, json) Hash identifier: aiQ8EbRMeKycE1oVdpRJNX6YiOKHicf1VW4VWSVKRCY= Subject key identifier: 67:31:5C:86:F6:EE:A6:27:67:D9:12:54:9E:03:AA:97:D3:DB:BE:09 Authority key identifier: 94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93 Certificate issuer: /CN=A91DFC30/serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93 Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft Manifest number: 0451 Signing time: Sat 24 Jan 2026 23:25:59 +0000 Manifest this update: Sat 24 Jan 2026 23:25:59 +0000 Manifest next update: Sat 31 Jan 2026 23:25:59 +0000 Files and hashes: 1: lHy2dKhYzZGupVJro2aKEeSey5M.crl (hash: nMmfOUmD2o7ckiLOqvbE5D6mK+fMR2/GX/sB3D68sN0=) 2: 13F5D28685B111ECB675B552C4F9AE02.roa (hash: wg979tEV/edC9z/60lEEUA1wH6+Atveb0Z20mtMK9/g=) 3: 147D51CA85B111ECB675B552C4F9AE02.roa (hash: e9cwg8d7bC8r2DHgx/kL7/A4+KHztZ7rWF6Yv+XqYD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC30, serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93 Validity Not Before: Jan 24 23:25:59 2026 GMT Not After : Jan 31 23:25:59 2026 GMT Subject: CN=69755507-c5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3e:31:1f:8d:f1:69:e8:50:72:48:76:0d:1c: ed:36:b1:12:14:67:a9:c0:35:99:c4:53:d0:80:8e: 6c:25:fd:68:1a:41:4d:4c:00:b0:b2:31:21:0a:bc: dd:56:8b:c1:9f:7b:17:26:9a:23:4f:55:70:9f:c7: 4f:89:c1:79:19:2e:fa:71:a9:64:90:f3:75:29:45: 8a:38:0d:d0:d8:fc:6c:45:a0:f9:df:20:e7:c4:f3: e5:fb:9d:84:00:af:20:07:aa:53:39:6f:c0:e2:01: 8a:0f:7f:95:53:8c:93:5d:61:2f:cb:ee:0e:8b:a7: a9:e6:65:45:09:8e:a9:92:77:93:83:7a:4b:c8:18: ef:9a:cb:a9:c6:20:7c:ae:ff:06:6a:bd:73:ea:97: d5:7e:cb:4e:f6:05:08:e4:7c:c7:e7:76:86:b7:0b: a6:3f:d4:28:a9:62:c9:03:eb:53:d2:71:79:14:60: 6c:e2:98:15:89:f8:75:ee:5e:90:d7:54:6b:23:54: 2e:a8:a3:6d:cb:0a:e4:33:07:27:e9:98:22:78:33: 8c:01:6e:ec:b7:14:eb:ac:91:7b:47:fe:cd:48:2f: 19:3d:7a:f1:cb:f7:79:9f:e7:28:57:8e:2a:b2:7d: 0c:09:e4:7c:2d:6d:48:67:73:24:00:d3:fe:af:95: 96:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:31:5C:86:F6:EE:A6:27:67:D9:12:54:9E:03:AA:97:D3:DB:BE:09 X509v3 Authority Key Identifier: keyid:94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:bb:6f:c4:e8:14:04:99:57:01:19:2f:a2:2d:27:f9:4a:35: 79:10:01:1b:f7:58:1d:f7:c0:e1:a4:5e:88:2e:ff:75:91:fc: 6c:91:36:29:45:2b:e0:6e:38:56:77:4b:4c:2e:9c:a2:80:38: 7a:fd:70:8e:e2:ca:cb:de:93:84:a2:f5:a0:06:7e:41:94:b9: b5:55:65:e4:fe:01:67:0d:03:fa:5a:5a:52:ee:cd:64:af:7f: ef:e0:d8:74:f2:0f:48:5e:a2:aa:49:9a:74:40:8f:97:35:3f: 00:da:d4:cb:e9:04:85:a7:5b:c9:e6:96:c7:f3:e0:c1:74:8d: 75:6e:f7:e9:d4:ff:80:0e:4b:14:f8:3a:59:e7:dd:c6:98:c4: c3:ec:81:80:6a:e9:0e:cd:c8:18:16:35:36:c1:1d:72:57:4b: b9:39:d7:67:db:2a:42:22:af:07:cd:ef:77:6b:e7:1c:a2:63: 3d:6c:57:e3:c2:e8:df:15:48:dd:31:da:1c:59:83:0e:a1:a0: 2c:01:dc:e4:51:a9:61:d3:da:d9:7a:9c:34:2f:ba:03:3a:22: 33:62:14:02:77:ed:64:7f:2a:a5:ce:60:70:fe:3c:18:33:67: 10:35:78:43:6a:d6:51:93:8c:e1:66:13:62:29:cc:52:8e:ed: 93:6f:56:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDMzAxMTAvBgNVBAUTKDk0N0NCNjc0QTg1OENEOTFBRUE1NTI2QkEzNjY4QTEx RTQ5RUNCOTMwHhcNMjYwMTI0MjMyNTU5WhcNMjYwMTMxMjMyNTU5WjAYMRYwFAYD VQQDDA02OTc1NTUwNy1jNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoT4xH43xaehQckh2DRztNrESFGepwDWZxFPQgI5sJf1oGkFNTACwsjEhCrzd VovBn3sXJpojT1Vwn8dPicF5GS76calkkPN1KUWKOA3Q2PxsRaD53yDnxPPl+52E AK8gB6pTOW/A4gGKD3+VU4yTXWEvy+4Oi6ep5mVFCY6pkneTg3pLyBjvmsupxiB8 rv8Gar1z6pfVfstO9gUI5HzH53aGtwumP9QoqWLJA+tT0nF5FGBs4pgVifh17l6Q 11RrI1QuqKNtywrkMwcn6ZgieDOMAW7stxTrrJF7R/7NSC8ZPXrxy/d5n+coV44q sn0MCeR8LW1IZ3MkANP+r5WWywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcxXIb2 7qYnZ9kSVJ4DqpfT274JMB8GA1UdIwQYMBaAFJR8tnSoWM2RrqVSa6NmihHknsuT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkMzMC8xMTJBRjFBQzg1 QUQxMUVDQjM2RjQxNERDNEY5QUUwMi9sSHkyZEtoWXpaR3VwVkpybzJhS0VlU2V5 NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xIeTJkS2hZelpHdXBWSnJvMmFLRWVTZXk1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkMzMC8xMTJBRjFBQzg1QUQxMUVDQjM2RjQxNERDNEY5QUUwMi9sSHkyZEtoWXpa R3VwVkpybzJhS0VlU2V5NU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEu2/E6BQEmVcBGS+iLSf5SjV5EAEb91gd98DhpF6ILv91kfxskTYp RSvgbjhWd0tMLpyigDh6/XCO4srL3pOEovWgBn5BlLm1VWXk/gFnDQP6WlpS7s1k r3/v4Nh08g9IXqKqSZp0QI+XNT8A2tTL6QSFp1vJ5pbH8+DBdI11bvfp1P+ADksU +DpZ593GmMTD7IGAaukOzcgYFjU2wR1yV0u5Oddn2ypCIq8Hze93a+ccomM9bFfj wujfFUjdMdocWYMOoaAsAdzkUalh09rZepw0L7oDOiIzYhQCd+1kfyqlzmBw/jwY M2cQNXhDatZRk4zhZhNiKcxSju2Tb1ZY -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:32 2026 by rpki-client