This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft File: LHtdhHIAPPNDas_lth6J7Isa2Ks.mft (raw, json) Hash identifier: g5zatbh9PEh7olOw95/Y/C3eqCVLF93R9z/O9kzbJag= Subject key identifier: C8:96:B6:A9:51:8D:A0:9F:B1:79:9C:4A:32:B0:C8:EF:B3:3A:2A:A4 Authority key identifier: 2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB Certificate issuer: /CN=A91E0CA1/serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft Manifest number: 0100 Signing time: Sat 24 Jan 2026 18:47:18 +0000 Manifest this update: Sat 24 Jan 2026 18:47:17 +0000 Manifest next update: Sat 31 Jan 2026 18:47:17 +0000 Files and hashes: 1: LHtdhHIAPPNDas_lth6J7Isa2Ks.crl (hash: beFFdRgv2vhnxk8C4lKyNhuRJrq0+1cnvLRzRomfBI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CA1, serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB Validity Not Before: Jan 24 18:47:17 2026 GMT Not After : Jan 31 18:47:17 2026 GMT Subject: CN=697513b5-84d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c7:d0:44:de:60:e3:4f:a8:43:70:d2:83:92: d5:28:3a:58:34:df:8c:3f:d1:84:3c:5f:d8:30:81: 84:f7:16:fb:e9:6e:e7:23:98:98:6e:61:bf:d9:2b: 59:f3:0a:39:46:14:7d:81:51:34:37:7f:c1:1e:3a: 43:57:17:c3:c7:15:5b:02:ec:d8:93:70:96:59:70: 09:87:87:f5:d5:8c:ad:6f:fb:28:26:de:07:4a:0c: ac:65:3a:06:82:41:59:5b:b0:25:41:18:dd:06:b6: d8:50:c4:21:7e:cb:e1:c2:fc:62:57:04:8e:13:6b: 09:13:f7:08:79:30:39:13:10:8c:ad:c2:82:a3:97: 6a:2d:04:70:ea:27:54:cd:d2:8e:3b:ad:ee:58:70: f3:7f:90:0a:8c:e9:94:ee:c7:41:82:cb:de:8e:be: e8:9e:c1:9e:d4:7a:31:fd:75:82:ce:60:40:6c:10: 9f:ac:25:81:6e:dc:9b:b0:e1:5b:1b:ac:9d:63:77: 76:86:b4:5b:ef:22:83:88:14:90:0a:1a:87:4d:3e: 5a:d9:da:0f:9d:06:ae:73:0f:14:1b:ed:ea:c7:a8: ad:a0:4a:d4:bc:bf:da:bf:66:3a:51:bf:b9:e4:13: 6a:b0:5d:6b:ea:12:1e:fa:5f:a8:81:de:f8:7e:35: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:96:B6:A9:51:8D:A0:9F:B1:79:9C:4A:32:B0:C8:EF:B3:3A:2A:A4 X509v3 Authority Key Identifier: keyid:2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:46:9f:84:18:cf:ed:bc:b2:bf:cc:b3:50:53:fb:b1:04:76: 3d:da:3f:c4:9c:d9:d2:ef:b3:ae:a8:83:59:ef:98:dd:69:c3: 48:32:b7:46:5b:7c:ad:be:e2:f6:f2:bc:54:99:8b:65:c3:f1: b1:da:df:e9:95:a8:e3:12:19:15:19:2b:de:f4:7f:b7:84:76: aa:74:4c:ff:f7:e6:cd:13:a6:9c:22:78:7f:ad:fe:fd:be:32: ea:42:29:84:63:91:fa:5f:60:bf:12:2c:0d:4c:9d:dc:9f:52: 9e:d3:9d:6f:4f:4e:88:86:5a:70:fa:21:fe:eb:a5:cb:b0:ce: 04:40:bb:7d:40:69:c3:a6:16:74:2f:b5:c1:74:ee:09:4d:48: f7:85:f0:23:1d:c5:15:2a:ce:fa:d0:6c:0f:c0:1f:87:e1:88: 89:5b:63:1b:d4:30:d4:9b:9d:28:f0:1d:73:df:14:90:0a:90: cb:59:ad:f8:d3:eb:b2:19:cc:fc:ae:7f:18:df:68:15:6c:56: 31:41:46:1d:6a:a7:06:87:a3:74:cb:38:f8:08:c1:df:88:e4: 8b:57:3c:c8:20:12:df:0f:fe:c4:9d:10:10:fa:39:8d:e4:cd: 00:08:8d:69:43:a4:8e:4d:d5:14:ce:bd:81:10:3d:30:53:81: 27:26:02:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDQTExMTAvBgNVBAUTKDJDN0I1RDg0NzIwMDNDRjM0MzZBQ0ZFNUI2MUU4OUVD OEIxQUQ4QUIwHhcNMjYwMTI0MTg0NzE3WhcNMjYwMTMxMTg0NzE3WjAYMRYwFAYD VQQDDA02OTc1MTNiNS04NGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssfQRN5g40+oQ3DSg5LVKDpYNN+MP9GEPF/YMIGE9xb76W7nI5iYbmG/2StZ 8wo5RhR9gVE0N3/BHjpDVxfDxxVbAuzYk3CWWXAJh4f11Yytb/soJt4HSgysZToG gkFZW7AlQRjdBrbYUMQhfsvhwvxiVwSOE2sJE/cIeTA5ExCMrcKCo5dqLQRw6idU zdKOO63uWHDzf5AKjOmU7sdBgsvejr7onsGe1Hox/XWCzmBAbBCfrCWBbtybsOFb G6ydY3d2hrRb7yKDiBSQChqHTT5a2doPnQaucw8UG+3qx6itoErUvL/av2Y6Ub+5 5BNqsF1r6hIe+l+ogd74fjUcrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiWtqlR jaCfsXmcSjKwyO+zOiqkMB8GA1UdIwQYMBaAFCx7XYRyADzzQ2rP5bYeieyLGtir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS80RTExRjRENjcx OTAxMUVGODNDNEJGN0FDNEY5QUUwMi9MSHRkaEhJQVBQTkRhc19sdGg2SjdJc2Ey S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xIdGRoSElBUFBORGFzX2x0aDZKN0lzYTJLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENBMS80RTExRjRENjcxOTAxMUVGODNDNEJGN0FDNEY5QUUwMi9MSHRkaEhJQVBQ TkRhc19sdGg2SjdJc2EyS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByRp+EGM/tvLK/zLNQU/uxBHY92j/EnNnS77OuqINZ75jdacNIMrdG W3ytvuL28rxUmYtlw/Gx2t/plajjEhkVGSve9H+3hHaqdEz/9+bNE6acInh/rf79 vjLqQimEY5H6X2C/EiwNTJ3cn1Ke051vT06Ihlpw+iH+66XLsM4EQLt9QGnDphZ0 L7XBdO4JTUj3hfAjHcUVKs760GwPwB+H4YiJW2Mb1DDUm50o8B1z3xSQCpDLWa34 0+uyGcz8rn8Y32gVbFYxQUYdaqcGh6N0yzj4CMHfiOSLVzzIIBLfD/7EnRAQ+jmN 5M0ACI1pQ6SOTdUUzr2BED0wU4EnJgLP -----END CERTIFICATE-----Generated at Sun Jan 25 15:46:50 2026 by rpki-client