This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: pker+tgMWdtSQL+hSbTVWVu3yuAZwy+fgCHbCLve4mc= Subject key identifier: C9:6D:95:E2:39:35:AD:F7:2A:4B:A9:86:87:BF:6D:4D:AF:92:1F:13 Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 0875 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 0869 Signing time: Sat 10 Jan 2026 20:03:31 +0000 Manifest this update: Sat 10 Jan 2026 20:03:31 +0000 Manifest next update: Sat 17 Jan 2026 20:03:31 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: vqYd6a0QtIpiibU3uDFbZS4602XPV9XnE3mlmWvckTQ=) 2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: hdHi4xqpMBX0AQynSt0UCqWOxzfycEn8kuSXfk/h1Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 20:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2165 (0x875) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: Jan 10 20:03:31 2026 GMT Not After : Jan 17 20:03:31 2026 GMT Subject: CN=6962b093-2f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b7:45:b1:cd:dc:a4:84:a6:ed:91:50:e5:04: 8b:ba:26:14:e8:57:ba:a0:90:de:d7:5d:7b:3d:d6: 75:98:3c:01:9a:51:aa:b1:c4:b0:47:92:b1:23:ca: 5c:f5:15:e2:1e:06:31:7a:28:6a:bd:4a:5f:0d:87: 48:58:d1:f5:11:68:2d:e2:a8:09:59:e1:1f:77:57: 1c:67:7a:d5:57:f1:71:d3:0b:79:5e:07:b4:31:d0: e2:fd:a1:3e:c4:a7:00:7b:c0:3c:8f:cc:49:91:c8: 6d:f1:ee:22:1d:e4:59:f0:75:64:c5:c0:47:b5:a8: 27:59:8e:f8:53:fb:b3:22:e5:a2:98:f9:3b:4d:3f: 1e:72:30:6b:1d:6e:0a:dd:65:47:9c:87:1a:10:0f: 67:86:f7:11:83:c4:d4:b2:14:c1:7c:24:0d:af:56: a7:f6:dc:07:44:c6:1a:b9:f7:c3:1a:24:c3:d7:5f: 65:3f:4a:ce:28:f2:13:6e:be:1a:cc:d3:74:46:c0: 08:43:09:5f:b9:f8:5b:22:70:f8:7b:5c:0d:0f:62: eb:33:22:60:18:ea:23:b0:b8:81:6b:b3:72:ca:51: 52:84:88:96:90:88:98:cf:e5:50:df:eb:59:a5:49: 57:96:ea:8a:f1:7d:3c:74:de:64:02:86:07:74:a4: 04:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6D:95:E2:39:35:AD:F7:2A:4B:A9:86:87:BF:6D:4D:AF:92:1F:13 X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:42:b7:8e:c4:b6:53:45:14:97:f2:ee:e8:bc:72:83:c6:01: d9:12:22:b6:1a:c6:d1:b7:00:d2:4f:73:90:dc:89:98:35:63: 8f:76:c3:a1:3a:74:2b:31:98:f7:cd:79:48:f4:b1:c1:94:8b: 11:49:0f:80:f2:31:b4:2d:51:b5:47:a4:7e:50:df:92:de:16: b1:07:8c:f3:02:a6:4e:9e:8a:53:8e:23:ef:ca:ca:64:ca:d3: a4:6a:0a:0d:71:14:2a:50:43:2d:c0:be:81:d5:d5:cc:90:87: d6:01:c3:c1:d2:ba:3a:94:9f:50:c5:5f:cb:9e:e1:97:cc:78: 4f:eb:58:f4:d5:85:d2:9c:34:e5:d5:f4:0e:2b:ba:2e:64:d4: 7d:19:6c:10:6f:0c:9b:c6:77:29:56:c8:3e:08:9e:17:6f:1f: ea:e5:45:f9:39:8c:d1:91:d5:5f:89:3d:1d:c4:70:80:6d:74: 8d:99:fe:9a:70:3a:f4:b8:75:2e:ca:9a:9d:45:3a:5c:5a:d6: 8f:9f:b1:c3:05:fc:72:c5:62:1d:39:d7:c3:3d:95:10:13:3a: ec:9e:a1:ba:2a:50:bd:e5:0e:39:3f:4c:75:cc:fd:e3:84:74: b9:37:6e:44:75:0e:5e:10:85:ab:4e:d9:40:d2:80:5c:46:d2: 0e:ad:cb:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjYwMTEwMjAwMzMxWhcNMjYwMTE3MjAwMzMxWjAYMRYwFAYD VQQDDA02OTYyYjA5My0yZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rdFsc3cpISm7ZFQ5QSLuiYU6Fe6oJDe1117PdZ1mDwBmlGqscSwR5KxI8pc 9RXiHgYxeihqvUpfDYdIWNH1EWgt4qgJWeEfd1ccZ3rVV/Fx0wt5Xge0MdDi/aE+ xKcAe8A8j8xJkcht8e4iHeRZ8HVkxcBHtagnWY74U/uzIuWimPk7TT8ecjBrHW4K 3WVHnIcaEA9nhvcRg8TUshTBfCQNr1an9twHRMYauffDGiTD119lP0rOKPITbr4a zNN0RsAIQwlfufhbInD4e1wND2LrMyJgGOojsLiBa7NyylFShIiWkIiYz+VQ3+tZ pUlXluqK8X08dN5kAoYHdKQEpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMltleI5 Na33Kkuphoe/bU2vkh8TMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuQreOxLZTRRSX8u7ovHKDxgHZEiK2GsbRtwDST3OQ3ImYNWOPdsOh OnQrMZj3zXlI9LHBlIsRSQ+A8jG0LVG1R6R+UN+S3haxB4zzAqZOnopTjiPvyspk ytOkagoNcRQqUEMtwL6B1dXMkIfWAcPB0ro6lJ9QxV/LnuGXzHhP61j01YXSnDTl 1fQOK7ouZNR9GWwQbwybxncpVsg+CJ4Xbx/q5UX5OYzRkdVfiT0dxHCAbXSNmf6a cDr0uHUuypqdRTpcWtaPn7HDBfxyxWIdOdfDPZUQEzrsnqG6KlC95Q45P0x1zP3j hHS5N25EdQ5eEIWrTtlA0oBcRtIOrctR -----END CERTIFICATE-----Generated at Mon Jan 12 15:13:28 2026 by rpki-client