This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft File: NQgZehD-pGpxhGMxT-upOUS2JIs.mft (raw, json) Hash identifier: xI5Rdnxm4Tc7Nnyza53AGDl9QacLzPzSxrKH9114Tic= Subject key identifier: F4:1B:60:B2:96:2E:C1:A2:AE:7A:E3:AF:8C:33:17:C0:01:7D:5C:18 Authority key identifier: 35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B Certificate issuer: /CN=A912B666/serialNumber=3508197A10FEA46A718463314FEBA93944B6248B Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft Manifest number: 26 Signing time: Sun 25 Jan 2026 06:50:50 +0000 Manifest this update: Sun 25 Jan 2026 06:50:49 +0000 Manifest next update: Sun 01 Feb 2026 06:50:49 +0000 Files and hashes: 1: NQgZehD-pGpxhGMxT-upOUS2JIs.crl (hash: qCDbggit9Psn5eChNLJA5WZUwy9dSATDCBxPbiQogK8=) 2: 86227722C92A11F0872AB883C4F9AE02.roa (hash: RCgqSnz/5wU5bIIOXEkp3UnnvACHFxrmmpLQxkHAG04=) 3: F084D9AADF1B11F0BDFBE1B1616F56BC.roa (hash: yfzcOl58QHWsxj/XdVdFOBJQ6VIhvnY3q000dZ/BJ44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B666, serialNumber=3508197A10FEA46A718463314FEBA93944B6248B Validity Not Before: Jan 25 06:50:49 2026 GMT Not After : Feb 1 06:50:49 2026 GMT Subject: CN=6975bd4a-eba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ff:27:35:af:da:ee:5d:62:b8:c9:73:13:54: 96:b5:de:81:17:80:7a:b1:1b:97:da:4b:ee:62:23: 83:eb:6a:62:a7:7b:c1:dc:ed:ec:2b:ad:00:ce:fb: 0c:7c:93:20:f5:17:fb:8e:98:4c:40:68:07:f1:85: 5a:da:d5:42:68:1c:f5:c7:a0:ea:3c:83:72:fc:c4: bb:b7:a3:ed:ca:72:0a:41:f4:86:b8:fb:28:40:06: 7b:1d:85:47:f6:8c:2f:8b:f7:3b:ad:51:16:d6:fd: e3:c0:2d:e7:cf:29:7d:24:b6:ff:cb:df:68:a2:f2: ef:d2:db:cb:63:48:9a:3e:9a:86:03:a0:a4:fa:c6: d5:68:4c:bc:ea:b1:68:40:cb:c1:62:82:23:9e:ca: 70:7f:9b:fe:63:6c:bf:5a:0c:09:e6:e5:a8:81:1b: f2:0a:a3:87:9b:03:e1:dc:eb:b5:0f:28:e0:ec:8a: d7:8a:d7:12:62:41:8d:b6:8f:a2:20:41:af:e2:2c: 08:34:39:0a:94:84:c5:6b:3e:fb:50:68:8f:49:1a: a9:b2:a8:83:7f:18:23:45:43:4d:28:4c:2b:bf:78: 4d:6d:d1:45:b8:66:33:73:3b:cf:46:62:77:62:d6: ac:3a:21:82:fc:21:9c:08:7d:f8:31:68:d5:f5:f3: 54:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1B:60:B2:96:2E:C1:A2:AE:7A:E3:AF:8C:33:17:C0:01:7D:5C:18 X509v3 Authority Key Identifier: keyid:35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:ff:76:bf:53:2b:02:a2:a9:ce:6e:34:78:82:3b:32:4e:e6: 66:b0:3b:89:31:92:88:88:1a:7a:3b:d3:ee:57:cd:ad:ca:78: d6:7e:da:99:50:e4:57:7c:eb:1d:1f:a9:ff:72:84:c0:e3:6d: 7c:e5:4d:61:d7:ff:9b:6f:c6:7e:21:31:ed:ea:3b:bd:9b:07: ba:ec:b6:c3:f0:6f:f7:a0:a7:e4:c0:0c:7b:d2:e6:bc:95:8f: f9:83:3a:b8:8a:bd:a1:39:71:8e:16:07:e3:3c:53:6d:54:5a: 79:18:d4:cd:ab:1a:ad:f7:eb:d3:de:ed:70:cc:2c:d2:cf:89: 67:98:b9:4c:af:df:6d:b8:21:ba:89:80:ad:11:4b:32:e9:be: 25:c1:ec:68:c7:21:aa:ec:59:76:98:7e:1a:a4:4e:1f:20:1c: f4:b1:2c:0c:61:ad:5f:0c:e5:23:a1:0a:5c:67:e6:ec:01:6b: 12:7b:a4:ea:86:3f:38:4d:6a:32:37:5b:97:ba:96:23:33:b1: 3d:b4:7a:23:7e:e8:1d:ea:9e:ba:c0:5a:16:d5:84:7b:85:cb: fe:7d:6b:cf:52:aa:a6:dc:b2:a4:0d:40:0e:15:53:2a:07:88: 26:af:d6:bd:ad:2c:e3:96:67:d6:05:7a:aa:6c:26:12:f0:3e: be:44:e1:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEy QjY2NjExMC8GA1UEBRMoMzUwODE5N0ExMEZFQTQ2QTcxODQ2MzMxNEZFQkE5Mzk0 NEI2MjQ4QjAeFw0yNjAxMjUwNjUwNDlaFw0yNjAyMDEwNjUwNDlaMBgxFjAUBgNV BAMMDTY5NzViZDRhLWViYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5/yc1r9ruXWK4yXMTVJa13oEXgHqxG5faS+5iI4PramKne8Hc7ewrrQDO+wx8 kyD1F/uOmExAaAfxhVra1UJoHPXHoOo8g3L8xLu3o+3KcgpB9Ia4+yhABnsdhUf2 jC+L9zutURbW/ePALefPKX0ktv/L32ii8u/S28tjSJo+moYDoKT6xtVoTLzqsWhA y8FigiOeynB/m/5jbL9aDAnm5aiBG/IKo4ebA+Hc67UPKODsiteK1xJiQY22j6Ig Qa/iLAg0OQqUhMVrPvtQaI9JGqmyqIN/GCNFQ00oTCu/eE1t0UW4ZjNzO89GYndi 1qw6IYL8IZwIffgxaNX181S9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9BtgspYu waKueuOvjDMXwAF9XBgwHwYDVR0jBBgwFoAUNQgZehD+pGpxhGMxT+upOUS2JIsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCNjY2Lzk5MzYxQTdDQzky OTExRjBCMjM4RjI4MUM0RjlBRTAyL05RZ1plaEQtcEdweGhHTXhULXVwT1VTMkpJ cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlFnWmVoRC1wR3B4aEdNeFQtdXBPVVMySklzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC NjY2Lzk5MzYxQTdDQzkyOTExRjBCMjM4RjI4MUM0RjlBRTAyL05RZ1plaEQtcEdw eGhHTXhULXVwT1VTMkpJcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIL/dr9TKwKiqc5uNHiCOzJO5mawO4kxkoiIGno70+5Xza3KeNZ+2plQ 5Fd86x0fqf9yhMDjbXzlTWHX/5tvxn4hMe3qO72bB7rstsPwb/egp+TADHvS5ryV j/mDOriKvaE5cY4WB+M8U21UWnkY1M2rGq3369Pe7XDMLNLPiWeYuUyv3224IbqJ gK0RSzLpviXB7GjHIarsWXaYfhqkTh8gHPSxLAxhrV8M5SOhClxn5uwBaxJ7pOqG PzhNajI3W5e6liMzsT20eiN+6B3qnrrAWhbVhHuFy/59a89SqqbcsqQNQA4VUyoH iCav1r2tLOOWZ9YFeqpsJhLwPr5E4dw= -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:59 2026 by rpki-client