This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft File: NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json) Hash identifier: KKBG7KBx/E0PcYLQtOufSWBVqcYauoeH5ywSMm2fDnw= Subject key identifier: CA:AE:99:99:1D:C0:F7:85:A6:51:EC:F8:E4:D9:3C:0A:BC:D1:6C:C7 Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E Certificate issuer: /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E Certificate serial: 06B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft Manifest number: 06B3 Signing time: Sat 24 Jan 2026 21:36:34 +0000 Manifest this update: Sat 24 Jan 2026 21:36:34 +0000 Manifest next update: Sat 31 Jan 2026 21:36:34 +0000 Files and hashes: 1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: CbeZOfQdVe430ksuH1LXSibbgxeDx3ICZwYKXeg9cTM=) 2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: aj64AT3Eg74eRiHek2DyIpF1DXkedRqzt0byGVydNm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1721 (0x6b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E Validity Not Before: Jan 24 21:36:34 2026 GMT Not After : Jan 31 21:36:34 2026 GMT Subject: CN=69753b62-6c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c6:3e:75:16:11:a4:d6:ae:44:e7:ad:f9:3e: 84:fe:0b:4d:64:dc:25:35:86:77:5c:58:2e:03:fd: e5:a7:20:05:ff:72:a9:37:e8:7f:1c:77:07:ac:b1: 1b:61:31:74:de:14:c4:43:2a:ff:14:d3:64:ce:66: f4:35:74:9d:03:fd:08:af:1b:9a:a0:d6:ce:36:1a: e4:3d:da:3a:88:e8:64:04:75:64:ac:1b:af:2a:4d: b9:48:82:21:67:b5:8b:cf:23:5b:90:d9:39:03:3e: 43:cf:2e:cf:cc:f4:28:f1:91:ca:2f:6e:32:96:44: d0:0e:f1:cf:0b:73:ce:ed:f8:fa:63:45:d4:9e:4e: 7f:64:6f:20:3e:b1:c9:8c:f1:ba:c9:ff:39:fc:d2: e6:64:5b:c1:0d:74:e3:ef:15:25:a4:5d:67:62:14: 73:db:e3:ac:b2:f2:ba:d3:bf:fb:c0:2f:a6:82:80: ea:96:d7:46:f7:db:6a:bb:15:14:74:67:6d:0c:1a: 93:f2:e2:08:fa:9f:bd:82:dd:de:0a:a3:a2:27:63: 1f:a8:16:3b:a8:52:9d:2f:7a:ba:ce:25:1b:59:d7: c7:1d:4d:76:19:fd:fe:00:7f:70:83:f1:a0:aa:44: a8:27:c5:38:a1:98:cb:7b:e2:af:ad:ee:66:29:c4: 55:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AE:99:99:1D:C0:F7:85:A6:51:EC:F8:E4:D9:3C:0A:BC:D1:6C:C7 X509v3 Authority Key Identifier: keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:82:2a:88:c1:fd:9d:26:33:23:64:7d:93:37:af:27:b5:c4: 77:e4:c8:63:5e:60:16:c6:95:83:41:01:1d:54:0a:8a:bd:b9: 4b:7b:21:83:6b:cf:c2:5b:29:af:01:45:0d:e5:33:f7:6d:ff: f8:bd:fb:71:61:68:ae:70:7f:2d:36:13:dc:17:70:c9:39:d7: 53:69:c3:0e:a3:20:42:41:39:77:c8:84:0f:40:e6:a0:a1:4d: 39:95:60:59:32:76:29:a9:d0:82:31:36:cd:c0:84:df:f0:3f: 72:f8:95:a7:93:23:d5:76:a1:18:d6:81:5b:6c:5d:c8:44:c4: 3f:3a:ac:1f:4c:73:ae:4e:ed:93:41:47:d3:e4:6b:55:bc:eb: 7b:16:18:5c:90:cc:a7:2e:59:54:3a:2f:46:66:db:98:7c:94: 31:ec:8d:55:2b:f3:8e:cf:37:29:a1:91:2b:35:d9:87:e0:aa: 02:ff:a4:e8:06:f8:17:03:c2:f7:77:66:53:80:2c:6e:78:d6: 26:9d:d0:db:d5:61:cf:c4:d8:78:a2:ae:aa:f9:b1:66:57:ae: 4c:14:3c:ff:e0:2e:d7:c9:84:e4:48:35:08:fe:ec:e1:84:0c: 0b:13:00:1f:f2:28:04:fe:b4:9b:b6:e6:fb:d6:51:79:12:65: ad:2f:a1:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyODUxMTAvBgNVBAUTKDM3MTkzMDk0QkNGM0UzNjUyMkZBREJGMTk1NEVFNUZG OUQ2MDFFMEUwHhcNMjYwMTI0MjEzNjM0WhcNMjYwMTMxMjEzNjM0WjAYMRYwFAYD VQQDDA02OTc1M2I2Mi02YzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8Y+dRYRpNauROet+T6E/gtNZNwlNYZ3XFguA/3lpyAF/3KpN+h/HHcHrLEb YTF03hTEQyr/FNNkzmb0NXSdA/0IrxuaoNbONhrkPdo6iOhkBHVkrBuvKk25SIIh Z7WLzyNbkNk5Az5Dzy7PzPQo8ZHKL24ylkTQDvHPC3PO7fj6Y0XUnk5/ZG8gPrHJ jPG6yf85/NLmZFvBDXTj7xUlpF1nYhRz2+OssvK607/7wC+mgoDqltdG99tquxUU dGdtDBqT8uII+p+9gt3eCqOiJ2MfqBY7qFKdL3q6ziUbWdfHHU12Gf3+AH9wg/Gg qkSoJ8U4oZjLe+Kvre5mKcRV+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqumZkd wPeFplHs+OTZPAq80WzHMB8GA1UdIwQYMBaAFDcZMJS88+NlIvrb8ZVO5f+dYB4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDI4NS82RjE1QjU3Mjky ODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQyVWktdHZ4bFU3bF81MWdI ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054a3dsTHp6NDJVaS10dnhsVTdsXzUxZ0hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDI4NS82RjE1QjU3MjkyODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQy VWktdHZ4bFU3bF81MWdIZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLgiqIwf2dJjMjZH2TN68ntcR35MhjXmAWxpWDQQEdVAqKvblLeyGD a8/CWymvAUUN5TP3bf/4vftxYWiucH8tNhPcF3DJOddTacMOoyBCQTl3yIQPQOag oU05lWBZMnYpqdCCMTbNwITf8D9y+JWnkyPVdqEY1oFbbF3IRMQ/OqwfTHOuTu2T QUfT5GtVvOt7FhhckMynLllUOi9GZtuYfJQx7I1VK/OOzzcpoZErNdmH4KoC/6To BvgXA8L3d2ZTgCxueNYmndDb1WHPxNh4oq6q+bFmV65MFDz/4C7XyYTkSDUI/uzh hAwLEwAf8igE/rSbtub71lF5EmWtL6Hi -----END CERTIFICATE-----Generated at Sun Jan 25 09:59:36 2026 by rpki-client