This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft File: NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json) Hash identifier: WkNDJXr96JnqAuFXFEZV3zB7hqSXedt5+uqCD8wYvv0= Subject key identifier: 6E:BC:18:36:A0:FB:70:34:A3:28:B9:B5:71:D9:2F:05:00:B1:EC:35 Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E Certificate issuer: /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Certificate serial: 0AE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft Manifest number: 0AD9 Signing time: Sat 24 Jan 2026 18:54:59 +0000 Manifest this update: Sat 24 Jan 2026 18:54:59 +0000 Manifest next update: Sat 31 Jan 2026 18:54:59 +0000 Files and hashes: 1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: 7cG8nOogEmxBCfwDIjx22Yz8V5VFElj7GZz0pQMmYoE=) 2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: fU8vQqfQoMkw2OgpsDDB/67NjlBXBQzXqWK5MxSMa5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2785 (0xae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912677F, serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Validity Not Before: Jan 24 18:54:59 2026 GMT Not After : Jan 31 18:54:59 2026 GMT Subject: CN=69751583-dfff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:fc:b2:f1:8b:2c:3b:07:47:b1:85:48:30: 7c:5f:c9:49:6c:96:96:09:ac:ec:37:21:9f:20:91: da:83:a0:28:0b:8c:e8:9f:3a:46:72:41:6e:53:3d: 97:d7:89:d5:a0:6f:23:60:c3:49:68:17:33:11:71: be:15:f9:c6:74:b3:2a:ed:77:ef:32:c6:e2:78:e5: 87:0a:00:a0:d1:a7:5a:3a:23:d4:2e:8c:f1:71:fc: 9f:49:e4:bd:51:5f:63:cb:88:ed:84:d9:b0:08:60: 24:04:89:b1:64:c6:e8:f9:2c:e1:64:df:15:cb:66: 95:3a:39:c0:f7:4b:98:f8:5c:5e:fb:1e:e5:cd:e2: e4:ba:a9:8c:b6:42:f0:61:66:db:76:3f:70:85:a7: fb:6e:c3:56:ec:fd:47:fe:e5:9c:91:8e:83:9c:cc: 26:4e:cd:56:9d:25:71:76:36:a5:7e:01:ec:4e:1c: eb:9a:fa:bd:73:44:5a:6f:a4:57:56:43:92:7a:2f: 81:4f:d5:a7:df:f8:46:68:48:ea:03:85:28:68:d6: 17:4b:a6:44:d3:9e:24:1a:26:57:10:e4:86:c1:27: 87:2a:2f:01:5a:e5:5c:1d:6c:4a:98:9f:b1:b0:6b: 60:c3:07:90:2b:7e:bf:9c:6e:67:32:62:c7:e5:71: 4b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BC:18:36:A0:FB:70:34:A3:28:B9:B5:71:D9:2F:05:00:B1:EC:35 X509v3 Authority Key Identifier: keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f3:2f:f5:67:73:5e:ac:de:d6:6e:fb:ba:82:14:08:c3:bf: b5:f9:61:f2:e0:c3:98:03:4f:c5:7b:f7:a5:7c:5f:a0:1e:2b: f7:88:61:c9:fd:40:2d:44:e5:c8:e0:7d:a2:6e:b2:05:df:6f: a9:c7:81:7d:cf:eb:70:13:38:ef:9a:ff:41:12:46:f4:45:aa: 5f:be:ec:57:18:52:19:79:36:a6:b2:52:fd:52:36:32:1d:c4: 73:aa:10:2e:0a:b1:fc:95:6d:de:c7:57:69:87:1f:64:82:28: 42:dc:81:da:af:b7:44:a2:ef:fa:08:e5:2f:4a:4d:5d:ca:8d: 4b:5e:8f:c2:d4:83:74:8f:15:5b:92:12:9a:34:a2:89:29:a8: 98:f2:a1:94:52:1f:da:a1:31:1c:f1:1a:1f:86:2e:f5:50:64: 83:fd:fe:6b:0d:0b:a4:f8:7d:34:df:ad:70:11:81:e2:8d:ba: 05:48:cf:d8:69:62:db:b4:5f:a7:cc:cc:3c:ad:81:45:5e:5f: 03:e9:11:6f:90:fe:87:7d:ca:1f:28:ea:06:67:84:f3:09:ca: f7:6f:ce:69:9b:e2:bf:8f:59:76:a8:91:49:37:fd:39:f0:13: 55:ea:ff:5b:16:fe:93:ef:27:b5:fa:75:19:23:92:e7:e4:73: 2f:ef:f7:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MjY3N0YxMTAvBgNVBAUTKDM2NjQyOTJENEZEMkRGRjFDODg0MTc1MEZDODM3OUYx OTQ1QTEzN0UwHhcNMjYwMTI0MTg1NDU5WhcNMjYwMTMxMTg1NDU5WjAYMRYwFAYD VQQDDA02OTc1MTU4My1kZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAra38svGLLDsHR7GFSDB8X8lJbJaWCazsNyGfIJHag6AoC4zonzpGckFuUz2X 14nVoG8jYMNJaBczEXG+FfnGdLMq7XfvMsbieOWHCgCg0adaOiPULozxcfyfSeS9 UV9jy4jthNmwCGAkBImxZMbo+SzhZN8Vy2aVOjnA90uY+Fxe+x7lzeLkuqmMtkLw YWbbdj9whaf7bsNW7P1H/uWckY6DnMwmTs1WnSVxdjalfgHsThzrmvq9c0Rab6RX VkOSei+BT9Wn3/hGaEjqA4UoaNYXS6ZE054kGiZXEOSGwSeHKi8BWuVcHWxKmJ+x sGtgwweQK36/nG5nMmLH5XFLswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG68GDag +3A0oyi5tXHZLwUAsew1MB8GA1UdIwQYMBaAFDZkKS1P0t/xyIQXUPyDefGUWhN+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjc3Ri9DNDNENzY5NjYz RUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNfSEloQmRRX0lONThaUmFF MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05tUXBMVV9TM19ISWhCZFFfSU41OFpSYUUzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njc3Ri9DNDNENzY5NjYzRUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNf SEloQmRRX0lONThaUmFFMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP8y/1Z3NerN7Wbvu6ghQIw7+1+WHy4MOYA0/Fe/elfF+gHiv3iGHJ /UAtROXI4H2ibrIF32+px4F9z+twEzjvmv9BEkb0RapfvuxXGFIZeTamslL9UjYy HcRzqhAuCrH8lW3ex1dphx9kgihC3IHar7dEou/6COUvSk1dyo1LXo/C1IN0jxVb khKaNKKJKaiY8qGUUh/aoTEc8Rofhi71UGSD/f5rDQuk+H00361wEYHijboFSM/Y aWLbtF+nzMw8rYFFXl8D6RFvkP6HfcofKOoGZ4TzCcr3b85pm+K/j1l2qJFJN/05 8BNV6v9bFv6T7ye1+nUZI5Ln5HMv7/fx -----END CERTIFICATE-----Generated at Sun Jan 25 11:00:23 2026 by rpki-client