This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft File: l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json) Hash identifier: bL5+r2sgSwoB5hQxcDKvu2TghuffmTVMCogkAeP0ZNc= Subject key identifier: 7F:EA:5B:2C:E9:2C:30:F5:C0:6E:23:5A:9E:9E:1B:8A:4D:B2:AA:2D Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 Certificate issuer: /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Certificate serial: 0A81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft Manifest number: 0A7A Signing time: Sat 10 Jan 2026 19:04:22 +0000 Manifest this update: Sat 10 Jan 2026 19:04:22 +0000 Manifest next update: Sat 17 Jan 2026 19:04:22 +0000 Files and hashes: 1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: cZ7s9BS07iQcpzagnBVySY1jqwqFRyJbfTJ1CKe0amc=) 2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: v31hx7pnoT1x1labmZhnEXrmOdmMDEQ40w+RQf8muiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 19:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2689 (0xa81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Validity Not Before: Jan 10 19:04:22 2026 GMT Not After : Jan 17 19:04:22 2026 GMT Subject: CN=6962a2b6-cc24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ef:ba:83:d6:2b:88:6a:55:2d:f8:02:21:34: a5:f6:87:dd:91:6c:7f:2c:a8:c8:b4:05:b3:3d:32: e3:ab:ee:6f:59:26:a4:4c:ed:85:92:fb:a8:32:26: 2e:3e:53:e5:12:36:a9:9a:de:4f:37:7f:9e:58:df: e0:5d:37:e8:58:9f:4e:3f:82:c0:9e:ba:b0:25:a6: 74:59:8c:0f:08:a7:37:6f:cc:cf:ff:58:04:58:ed: f0:a7:d3:26:30:79:e8:3e:2e:f4:6a:49:5f:87:e8: de:c8:c1:fb:5d:3a:de:91:90:0e:20:a1:bc:9f:08: e6:ab:47:8b:a9:f1:98:27:12:51:a5:61:bd:de:38: 88:b9:fb:31:27:9e:5d:33:b4:8e:6f:d8:0d:7b:7e: b7:08:fa:06:8a:be:07:12:47:87:0a:92:da:20:8c: 1d:6e:26:ea:6f:90:73:04:2a:1e:0c:76:0e:f5:fb: 80:ed:8d:50:70:a6:28:cd:5b:f0:53:ac:04:74:17: 99:fb:b3:91:6c:87:bd:0c:08:aa:7b:9b:4f:9a:e1: c4:cc:dc:84:88:f9:b8:2a:a4:92:bb:0b:f5:9d:d5: f9:b1:c1:6c:28:9a:43:51:07:cb:5a:2c:7c:36:23: a1:d7:0a:6b:3d:76:fa:32:66:a9:a5:8d:84:72:d3: c2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EA:5B:2C:E9:2C:30:F5:C0:6E:23:5A:9E:9E:1B:8A:4D:B2:AA:2D X509v3 Authority Key Identifier: keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:f8:7b:81:df:3e:26:23:72:3d:a4:c9:ce:09:58:0a:f1:55: 52:fa:37:96:b4:fb:3a:f6:ef:98:21:55:00:a5:a3:9c:bc:1b: ae:eb:50:ad:e3:c9:ed:83:be:81:20:ee:1c:38:a5:fa:1b:0e: a3:b5:34:66:89:64:4f:25:87:c4:8b:2e:10:31:b1:4c:e1:12: 1c:d2:78:bf:97:da:7c:50:81:9a:eb:34:48:7b:e9:5b:ec:59: 54:97:d2:7f:e7:61:a7:32:eb:85:45:ba:44:c1:67:b7:6e:73: 21:e5:ca:f8:a9:1a:6f:c7:af:31:c1:7b:2e:d5:1b:fa:12:4e: 4c:ba:b1:9f:78:89:3f:60:ef:a5:47:ab:f1:9a:8a:55:da:00: 87:63:ef:d4:af:3f:4b:52:57:bd:5e:00:d9:9d:d3:99:a5:6b: ae:d1:45:41:d1:58:90:cd:6c:56:84:d7:df:3b:09:34:56:f1: 6f:f5:f6:21:fb:98:fa:f8:5c:56:90:de:fd:0c:81:a5:b1:22: 34:7d:66:7a:d1:ea:7a:52:ac:dd:bb:86:b5:2e:78:25:73:5b: b3:66:a1:7b:ba:67:cf:e6:4a:e9:11:45:4a:83:99:32:f4:4f: 44:3c:ac:ef:9c:1f:de:8f:9f:fc:1d:39:fe:f7:7e:fa:65:e2: 98:a9:ba:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwNjMxMTAvBgNVBAUTKDk3OTdGNzg1MjcwNkVFMUM0MkM2OEE1RTQ1MEI1NzJG OEVFNTA4MTgwHhcNMjYwMTEwMTkwNDIyWhcNMjYwMTE3MTkwNDIyWjAYMRYwFAYD VQQDDA02OTYyYTJiNi1jYzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte+6g9YriGpVLfgCITSl9ofdkWx/LKjItAWzPTLjq+5vWSakTO2FkvuoMiYu PlPlEjapmt5PN3+eWN/gXTfoWJ9OP4LAnrqwJaZ0WYwPCKc3b8zP/1gEWO3wp9Mm MHnoPi70aklfh+jeyMH7XTrekZAOIKG8nwjmq0eLqfGYJxJRpWG93jiIufsxJ55d M7SOb9gNe363CPoGir4HEkeHCpLaIIwdbibqb5BzBCoeDHYO9fuA7Y1QcKYozVvw U6wEdBeZ+7ORbIe9DAiqe5tPmuHEzNyEiPm4KqSSuwv1ndX5scFsKJpDUQfLWix8 NiOh1wprPXb6MmappY2EctPCfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/qWyzp LDD1wG4jWp6eG4pNsqotMB8GA1UdIwQYMBaAFJeX94UnBu4cQsaKXkULVy+O5QgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTA2My82ODg5QURGMjc0 QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdoeEN4b3BlUlF0WEw0N2xD QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1ZjNoU2NHN2h4Q3hvcGVSUXRYTDQ3bENCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTA2My82ODg5QURGMjc0QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdo eEN4b3BlUlF0WEw0N2xDQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG+HuB3z4mI3I9pMnOCVgK8VVS+jeWtPs69u+YIVUApaOcvBuu61Ct 48ntg76BIO4cOKX6Gw6jtTRmiWRPJYfEiy4QMbFM4RIc0ni/l9p8UIGa6zRIe+lb 7FlUl9J/52GnMuuFRbpEwWe3bnMh5cr4qRpvx68xwXsu1Rv6Ek5MurGfeIk/YO+l R6vxmopV2gCHY+/Urz9LUle9XgDZndOZpWuu0UVB0ViQzWxWhNffOwk0VvFv9fYh +5j6+FxWkN79DIGlsSI0fWZ60ep6Uqzdu4a1Lnglc1uzZqF7umfP5krpEUVKg5ky 9E9EPKzvnB/ej5/8HTn+9376ZeKYqbra -----END CERTIFICATE-----Generated at Mon Jan 12 05:58:03 2026 by rpki-client