This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft File: pi_NZFSmighl9rlcwOh3RJ7z76k.mft (raw, json) Hash identifier: 6snJ9eCuMXfuoZX0LiqF50CbqXN7JRWGN4cmpgIPpcU= Subject key identifier: 28:03:27:19:58:C4:E5:69:09:2A:41:C5:14:B9:79:FE:B7:33:80:74 Authority key identifier: A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9 Certificate issuer: /CN=A911BA76/serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft Manifest number: 33 Signing time: Fri 23 Jan 2026 06:36:18 +0000 Manifest this update: Fri 23 Jan 2026 06:36:18 +0000 Manifest next update: Fri 30 Jan 2026 06:36:18 +0000 Files and hashes: 1: pi_NZFSmighl9rlcwOh3RJ7z76k.crl (hash: b3NkDeFrbbJjBCT8x4UjHnVJTHt3S7ltubF9RCWDHAc=) 2: 82CDD7C4B0C011F09232CD7BC4F9AE02.roa (hash: jehIFKXQzxSa2naNE6wehGEUSZh95Rm5N+knZ8mynTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BA76, serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9 Validity Not Before: Jan 23 06:36:18 2026 GMT Not After : Jan 30 06:36:18 2026 GMT Subject: CN=697316e2-7de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:63:78:b4:ad:d9:d4:d4:0d:d1:f5:e7:05:dc: 16:26:28:0b:2d:ab:60:ea:cc:3f:0f:cd:83:20:73: f9:ff:8a:b9:bb:bc:93:60:b1:1b:a1:ea:27:e8:d0: 06:1e:6b:13:2e:9b:c5:5e:88:56:37:1d:00:a7:7a: 2f:40:f4:89:3b:1c:b6:eb:e9:74:6c:9b:94:c2:72: f7:b6:47:94:d2:90:d8:48:7c:8e:b2:33:99:d4:b5: 2e:7e:ff:a6:d6:7c:1c:13:28:3f:40:b7:6d:6a:46: fb:ae:aa:61:0e:4f:03:cf:d7:d8:b1:3b:41:a6:1c: bb:05:55:94:ae:4d:3c:b5:16:55:eb:24:e7:af:8e: 42:88:e2:30:f6:e1:8d:fc:16:bd:cf:5e:0d:9a:37: 89:a8:4a:a1:19:77:3f:cc:0a:29:6b:ab:d8:db:a9: d5:74:3b:95:b4:c7:59:bd:cd:7c:d2:da:c9:60:4e: de:f6:c5:52:a9:82:75:52:d8:7e:c3:03:8c:1f:28: 02:47:ee:86:51:01:04:4b:29:fd:e7:e7:88:12:2c: 48:58:a5:5b:36:0c:cb:f1:28:9f:aa:49:f7:f2:b6: 80:c7:2f:6e:50:6f:0b:e5:b8:ca:87:0f:92:e9:d0: a5:4a:00:a1:a8:2b:dc:6b:58:fc:56:3c:0a:ff:2e: 95:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:03:27:19:58:C4:E5:69:09:2A:41:C5:14:B9:79:FE:B7:33:80:74 X509v3 Authority Key Identifier: keyid:A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:bb:53:e1:d8:86:93:ad:06:da:45:41:ab:a0:81:67:19:19: d2:01:59:34:10:23:11:9f:f2:f6:dd:40:8f:53:b9:d9:6d:1f: c5:b6:99:8b:f1:6a:03:57:10:60:79:c9:e5:3c:5e:61:a3:c5: ae:30:32:08:e1:cb:70:c8:b5:5b:7e:f7:39:08:8e:c4:a9:32: 6f:39:80:f5:e7:81:2e:fc:09:10:42:9d:b7:38:06:24:ce:2b: 6e:04:e7:da:ce:c5:3e:cd:45:01:85:46:ff:93:40:36:4f:1c: a8:ff:69:39:ba:22:3b:be:f0:74:d0:eb:1c:d9:48:a4:91:a1: 18:8e:e3:a9:fa:9a:f1:f7:68:ac:c9:ad:41:95:d1:9c:b4:ad: 83:7b:e3:c1:7a:3d:10:28:a6:1d:d8:52:72:66:40:13:1a:08: 65:26:8b:9c:47:21:32:25:db:c3:2b:ef:c0:49:b2:b3:0b:18: c3:a7:1a:62:16:f4:b7:54:50:7d:24:34:03:2d:ed:c4:b1:b6: b2:da:c0:16:bd:34:b3:31:ce:69:23:cb:cc:7d:82:3f:c4:50: 68:c5:4a:62:a7:82:09:cb:53:44:39:50:a7:24:3b:46:6e:d8: 68:23:85:a1:ff:77:d5:11:a4:94:31:2f:04:83:0e:3c:00:81: 78:9d:da:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkE3NjExMC8GA1UEBRMoQTYyRkNENjQ1NEE2OEEwODY1RjZCOTVDQzBFODc3NDQ5 RUYzRUZBOTAeFw0yNjAxMjMwNjM2MThaFw0yNjAxMzAwNjM2MThaMBgxFjAUBgNV BAMMDTY5NzMxNmUyLTdkZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAY3i0rdnU1A3R9ecF3BYmKAstq2DqzD8PzYMgc/n/irm7vJNgsRuh6ifo0AYe axMum8VeiFY3HQCnei9A9Ik7HLbr6XRsm5TCcve2R5TSkNhIfI6yM5nUtS5+/6bW fBwTKD9At21qRvuuqmEOTwPP19ixO0GmHLsFVZSuTTy1FlXrJOevjkKI4jD24Y38 Fr3PXg2aN4moSqEZdz/MCilrq9jbqdV0O5W0x1m9zXzS2slgTt72xVKpgnVS2H7D A4wfKAJH7oZRAQRLKf3n54gSLEhYpVs2DMvxKJ+qSffytoDHL25QbwvluMqHD5Lp 0KVKAKGoK9xrWPxWPAr/LpXVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKAMnGVjE 5WkJKkHFFLl5/rczgHQwHwYDVR0jBBgwFoAUpi/NZFSmighl9rlcwOh3RJ7z76kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCQTc2LzA4N0NDN0EwQjBD MDExRjBCNjlFQTI1NkM0RjlBRTAyL3BpX05aRlNtaWdobDlybGN3T2gzUko3ejc2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGlfTlpGU21pZ2hsOXJsY3dPaDNSSjd6NzZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC QTc2LzA4N0NDN0EwQjBDMDExRjBCNjlFQTI1NkM0RjlBRTAyL3BpX05aRlNtaWdo bDlybGN3T2gzUko3ejc2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHW7U+HYhpOtBtpFQauggWcZGdIBWTQQIxGf8vbdQI9TudltH8W2mYvx agNXEGB5yeU8XmGjxa4wMgjhy3DItVt+9zkIjsSpMm85gPXngS78CRBCnbc4BiTO K24E59rOxT7NRQGFRv+TQDZPHKj/aTm6Iju+8HTQ6xzZSKSRoRiO46n6mvH3aKzJ rUGV0Zy0rYN748F6PRAoph3YUnJmQBMaCGUmi5xHITIl28Mr78BJsrMLGMOnGmIW 9LdUUH0kNAMt7cSxtrLawBa9NLMxzmkjy8x9gj/EUGjFSmKnggnLU0Q5UKckO0Zu 2GgjhaH/d9URpJQxLwSDDjwAgXid2ho= -----END CERTIFICATE-----Generated at Sun Jan 25 04:33:01 2026 by rpki-client