This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: cQ7Q4K0bhv1ZaZwTXm7WapwsW9m3V4OsVx0Y7d3I1Js= Subject key identifier: 44:B2:75:77:88:F7:6A:87:68:79:65:97:33:4E:44:34:8E:F3:83:5D Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0BC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0BB7 Signing time: Fri 02 Jan 2026 18:31:53 +0000 Manifest this update: Fri 02 Jan 2026 18:31:53 +0000 Manifest next update: Fri 09 Jan 2026 18:31:53 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: tRlPsIz7oOY+JTnNEpRkcMYCdqFJx7iSI1iyKroFMkI=) 2: 849DE48AB8DC11F0AFE11A3EC4F9AE02.roa (hash: 9KcIlyq8ZHlGeHgUeAIBs2zA8Q5DDSxKmMBg/qqD5B0=) 3: A7982B82B88011F081A7B245C4F9AE02.roa (hash: nckl+Acp7B7ApcHsl6K4bJl3rtQ4qeg5UR18Zt3JPwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Jan 2026 18:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3010 (0xbc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Jan 2 18:31:53 2026 GMT Not After : Jan 9 18:31:53 2026 GMT Subject: CN=69580f19-bdac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:41:6c:e2:d6:e6:8f:e3:86:d7:a8:9e:a6: cf:06:ec:b9:d7:52:6c:41:ff:4c:bb:6a:a5:91:54: 6d:4b:28:8e:10:7d:41:71:0e:5a:80:e2:84:e7:51: f5:e3:65:18:05:cd:6c:fd:98:af:1b:b5:b3:73:97: fb:f1:ed:10:b9:a2:30:12:2f:09:32:0d:6c:69:92: 89:8c:b8:36:5e:25:8b:67:8a:3b:97:1f:c1:70:64: b9:35:9a:70:4f:a7:42:df:db:33:5e:88:40:6e:fa: 31:16:64:0a:3d:fc:d6:16:cf:de:60:4f:bd:1e:58: 2e:79:b2:1b:9c:6a:f7:ac:4d:35:09:f1:37:20:e8: 68:6a:d1:9e:93:14:34:72:e9:92:25:a3:f7:0e:10: 11:9f:32:81:d4:ed:95:28:c7:ec:de:01:79:b5:af: 39:76:08:00:bb:0e:f5:88:4b:b6:b3:fa:f3:19:fc: 4d:fb:13:9a:8c:10:f6:b0:c7:9c:cc:02:a8:c5:a1: 99:9c:a3:7f:d3:6d:12:61:d2:df:27:83:a2:51:36: a0:18:77:21:4b:2d:0f:c3:90:2c:fe:ac:90:18:bc: b8:4e:25:15:3a:8d:cd:64:40:74:59:72:1c:f5:a3: 14:e3:a1:b9:26:28:82:b2:27:c3:ae:e5:b0:9b:2b: 23:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B2:75:77:88:F7:6A:87:68:79:65:97:33:4E:44:34:8E:F3:83:5D X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:e6:4a:4b:0e:44:33:81:0d:97:86:bc:fb:f3:87:60:43:27: 61:a6:16:a1:53:37:80:25:76:0c:84:1a:d4:7c:74:69:e3:10: 69:8b:09:05:35:67:c7:0a:dd:3e:cb:c4:c3:db:72:ff:ec:18: 9e:1d:19:50:53:8e:66:63:1d:f7:ea:c9:78:e4:96:49:37:32: 51:b3:ed:fc:d2:59:3a:b7:17:e4:72:1e:83:3a:5e:6f:f3:49: 66:ec:9e:1b:70:bf:a9:a8:26:6f:b0:74:88:66:db:35:4e:a9: f2:5b:82:5e:73:0b:f2:36:85:3f:c7:9c:13:1a:85:31:de:b5: 5d:12:c0:30:24:aa:c1:53:fd:dd:3d:75:36:e3:99:76:ae:e5: ab:25:f5:56:68:41:5e:c3:b0:e7:12:76:36:70:4e:1d:a3:23: d3:41:24:be:11:17:19:e4:b3:37:2a:e4:97:a8:91:03:e3:50: d0:1e:fd:3e:cd:75:58:cc:e7:40:bc:f0:e1:bb:ff:64:fc:e3: e2:82:f8:2e:e8:4d:79:23:97:85:d3:e8:bb:cb:ad:2b:db:55: 5d:09:4e:da:2f:cb:fe:e5:c7:5e:00:4f:f2:9a:25:5b:a0:fd: 68:2a:a6:7b:6b:16:41:95:d9:41:15:00:a5:dc:8e:49:9b:c4: dd:a1:b0:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjYwMTAyMTgzMTUzWhcNMjYwMTA5MTgzMTUzWjAYMRYwFAYD VQQDDA02OTU4MGYxOS1iZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaJBbOLW5o/jhteonqbPBuy511JsQf9Mu2qlkVRtSyiOEH1BcQ5agOKE51H1 42UYBc1s/ZivG7Wzc5f78e0QuaIwEi8JMg1saZKJjLg2XiWLZ4o7lx/BcGS5NZpw T6dC39szXohAbvoxFmQKPfzWFs/eYE+9HlguebIbnGr3rE01CfE3IOhoatGekxQ0 cumSJaP3DhARnzKB1O2VKMfs3gF5ta85dggAuw71iEu2s/rzGfxN+xOajBD2sMec zAKoxaGZnKN/020SYdLfJ4OiUTagGHchSy0Pw5As/qyQGLy4TiUVOo3NZEB0WXIc 9aMU46G5JiiCsifDruWwmysjPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESydXeI 92qHaHlllzNORDSO84NdMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZ5kpLDkQzgQ2Xhrz784dgQydhphahUzeAJXYMhBrUfHRp4xBpiwkF NWfHCt0+y8TD23L/7BieHRlQU45mYx336sl45JZJNzJRs+380lk6txfkch6DOl5v 80lm7J4bcL+pqCZvsHSIZts1TqnyW4JecwvyNoU/x5wTGoUx3rVdEsAwJKrBU/3d PXU245l2ruWrJfVWaEFew7DnEnY2cE4doyPTQSS+ERcZ5LM3KuSXqJED41DQHv0+ zXVYzOdAvPDhu/9k/OPigvgu6E15I5eF0+i7y60r21VdCU7aL8v+5cdeAE/ymiVb oP1oKqZ7axZBldlBFQCl3I5Jm8TdobA+ -----END CERTIFICATE-----Generated at Fri Jan 2 23:35:32 2026 by rpki-client