This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json)
Hash identifier: U7A6T4EsBK4SVCai5nJCiWYkDlikmxCNESB5V8Rhv1o=
Subject key identifier: 1E:39:DD:E2:BB:6F:48:9C:DC:5A:E9:7D:75:ED:1E:F4:DE:3C:89:45
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 25D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
Manifest number: 2321
Signing time: Sat 24 Jan 2026 15:45:43 +0000
Manifest this update: Sat 24 Jan 2026 15:45:43 +0000
Manifest next update: Sat 31 Jan 2026 15:45:43 +0000
Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: t3lP4Orka35RKkBFr4cL+e/6YavaEdRU7mnn6jU5JoA=)
2: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: Ms7QsXkh2kQNfde4KuGq3vFMf59+eXYHE6ZiNy8XHPg=)
3: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: CcwUXK2Ib0st/gF/B8/lAm6jU9CpXcqxg7fd8dewyTs=)
4: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: vY03ulP+sNEIa8G9vSg/u1gVOLM+s6C9pglT3z4JdiE=)
5: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: b9KSK49f3+RJ5Zndahld37Ne8rgyICiG4X/yrNeRCwg=)
6: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: Pn3UiRI/u84/PSVY6hBOi61rOJXfl8nDViwTqHYc55g=)
7: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: PToSeikp/9y9g+Y+7PlL1TL5uKk45sRjErrgPWURTKA=)
8: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: jIa+/65UAgiJ/NRkd/a4I2EsNsv3JwQP5Q3Ix5cv5qo=)
9: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: QKfklbWPsoXlxByZaPbmc1+075SBHQiALuuEdPCAB50=)
10: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: nJOgKpKVASxgnXQj3ba2FE3qRrXdPvsCxLHQPYaRz00=)
11: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: 9gHoLg8JZHPr+J2x22rrHeXv+R5JGIJTxxftyvYwHuQ=)
12: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: D3ZGO/WUxLPwaJZfxjpDYyNLveQ3u6uEceV8mvZASMk=)
13: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: C3qoGzcQZndm1u3tww57NTFE5NsW08UfVUZpiRELltQ=)
14: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: NK9LWbF8pONuCfm9ynpNYVUJq0bnRlvsHPhOA7O7K+Y=)
15: 94C16496222811EF99153155C4F9AE02.roa (hash: njk+98oMXqEhaQH4K0CdtGJQNcY6Zsh8AbaFjT9X3L8=)
16: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: kMzN7sJi/LRFE283RDzU5y7iSG/i/1PsyZ93O11mO5c=)
17: 9043DEEC36D311F0944CB44FC4F9AE02.roa (hash: bEqkiO8ENywDu5LUBsotcsupS4ydOR5MpQpDbxlm4V4=)
18: BA007060162D11EEB79F703CC4F9AE02.roa (hash: e+8uiRyglTJ61jp+NHN/xhpvUYkVwouUN/cZkA6eEOU=)
19: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: /Q1bh32UWOj4J5FAl9U6ArPlxdi0wsvaB+wwXRJ3Lqs=)
20: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: 7nW4B9tgYZxJlUM/jyWz4ppQFx5pTU5qJulzmizVwPY=)
21: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: 8OLjwPx61KkIQCmyjk1QuR/uGi52Ry48+A0/nvUFhto=)
22: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: mTrnMVZI3oc2hbgBbqTPzvSY22GeIaQ6Sv1aw5zibZo=)
23: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: pK1U2tlcFI5eVZ+yZ2Uz2T2hO3URX24xuIkzXvQNT6Q=)
24: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: tFFS7u2Pbz7scJ4rW1SHoAlT2k6YOdbY+5qrpMKq+14=)
25: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: TAXb6aVncKSk3q+7kBMZVnP/khsko2EZ8HMsWkq82Bs=)
26: DB8ED438DEFD11F0BBECA30E5A6F56BC.roa (hash: fh8I1ka4GO8XNJmiky+IWKrVXpp1/PhEPHLqtz63e2I=)
27: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: dWk76zBErGHiI9GT7cS+58hFi3EPMy2HTqsf8PBtUYY=)
28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: QW+0w7vdm64Mp8G687zcaLqftcXIlQy6snzgmEoSsjY=)
29: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: QoW5v9awLkcGnpT1+XKXrYAVeGX7bCmbAXmL1gr+qQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9689 (0x25d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Validity
Not Before: Jan 24 15:45:43 2026 GMT
Not After : Jan 31 15:45:43 2026 GMT
Subject: CN=6974e927-18d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:f3:85:14:92:f8:82:b4:0f:b5:f1:c4:f1:
51:dd:92:52:29:f0:61:13:f4:a3:81:1c:01:5b:a9:
28:76:45:d0:30:b3:80:66:8b:10:d3:21:b1:1f:d0:
89:82:e8:76:3b:4a:0a:09:19:3f:f8:31:ff:c4:84:
a0:3f:1c:22:84:49:e1:66:3d:75:01:53:c0:23:34:
57:26:b0:70:fc:a4:38:79:95:f5:aa:e5:fe:79:a4:
d9:99:08:35:b1:75:44:fc:d5:88:13:b0:b6:5a:57:
8b:37:93:ba:50:e3:92:80:6a:ad:f3:c9:ad:1d:52:
14:50:c9:50:2c:dc:b3:8a:5a:4d:8e:b4:6c:8a:62:
71:0c:9e:e4:e6:ab:cd:43:8a:b9:34:40:b5:00:88:
8b:9c:19:7e:63:31:ff:f8:ce:8b:78:00:7c:ad:36:
1e:c0:5d:16:50:b6:98:83:ac:1b:ce:1e:45:c5:d6:
c0:6b:fc:58:1e:f7:c4:67:d9:de:94:b3:be:eb:32:
4d:62:5e:48:55:8c:24:5e:eb:3e:e1:fb:e8:66:0e:
1d:3f:7b:10:38:32:68:04:79:8e:05:67:0a:b7:fa:
f8:61:51:2e:52:cb:b9:ca:80:65:cf:9d:a2:00:6d:
44:2e:75:50:23:c7:96:82:78:e5:43:0d:e1:48:33:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:39:DD:E2:BB:6F:48:9C:DC:5A:E9:7D:75:ED:1E:F4:DE:3C:89:45
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:cc:43:42:44:cf:73:7b:cb:f6:73:71:01:1d:38:43:e2:9c:
3e:43:cd:76:af:9b:d0:78:ef:7f:38:11:1a:f4:35:de:b4:f3:
5b:5f:10:4f:46:f3:9e:87:95:a8:e2:a3:3f:55:29:7e:e4:93:
1a:f2:06:58:1b:11:5d:cd:f7:8f:cb:5e:cd:41:a5:a5:27:75:
a4:59:fb:e7:13:88:7b:61:7a:e5:5c:1f:0b:c4:3b:83:3b:d0:
e1:e8:35:f0:9e:0f:5a:a2:84:2f:12:c4:a5:91:8a:95:cc:8f:
f1:68:fc:6f:5d:a2:17:61:90:12:1d:ca:9c:d4:af:40:8d:8e:
23:d5:ec:4f:6b:80:a5:74:72:92:d8:ec:1a:15:c3:23:23:78:
38:30:fc:52:4d:11:90:c8:15:0f:6c:2f:6c:35:df:3a:e3:db:
e6:4c:26:5d:a2:b0:e1:2d:ea:dc:4f:ec:d8:3f:57:95:ee:9d:
be:e2:f4:06:29:4d:cd:d3:ee:3b:13:15:22:4b:f3:33:b0:d1:
68:a3:c6:6d:85:67:81:1b:4d:d6:50:dc:db:36:25:22:5d:8c:
74:63:3d:70:40:c0:30:ff:6d:ce:f2:21:73:04:a5:cc:93:7b:
da:68:c3:67:44:3f:a5:02:84:35:6a:ec:e3:e9:3b:e8:c8:1d:
16:73:0b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:58:20 2026 by rpki-client