This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft File: NuogEr2z5hGaWu-_Zs7rOLWTHek.mft (raw, json) Hash identifier: sFqkLerGDkJHCE1YfDF8Io1T7Q3YeDmSYlJK8R7a5Fk= Subject key identifier: 9B:68:7B:B9:88:9C:81:E5:70:E7:E6:2C:F3:1F:AE:42:50:C9:B2:B9 Authority key identifier: 36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9 Certificate issuer: /CN=A914BE8E/serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft Manifest number: 12 Signing time: Sun 25 Jan 2026 07:02:12 +0000 Manifest this update: Sun 25 Jan 2026 07:02:12 +0000 Manifest next update: Sun 01 Feb 2026 07:02:12 +0000 Files and hashes: 1: NuogEr2z5hGaWu-_Zs7rOLWTHek.crl (hash: ETLBa8xRSbQkmHdhAjWJ7tJR3kuDcHQUS01XDPIa+jY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.crl rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BE8E, serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9 Validity Not Before: Jan 25 07:02:12 2026 GMT Not After : Feb 1 07:02:12 2026 GMT Subject: CN=6975bff4-d3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2f:32:a6:37:f7:89:2b:75:97:b5:56:4b:bc: 4e:d7:d0:e2:9c:44:97:23:38:23:39:22:80:5a:6c: 87:02:fb:e0:56:aa:53:de:db:6b:46:13:4a:bb:98: 4d:74:18:13:e5:00:b4:3a:a7:3c:a0:8e:28:2b:a4: 19:0c:1b:58:81:04:e4:80:64:43:02:80:d7:43:83: aa:2c:4c:40:fa:db:f8:21:73:c6:0c:ec:67:45:d9: 8b:1d:77:73:d3:40:cd:63:4e:a9:2b:54:55:9e:2a: ba:b7:93:55:63:7a:e4:3b:83:d6:33:8a:f6:1d:8e: 37:ae:2e:4f:3f:b7:de:69:77:03:10:5e:1a:98:0a: 95:1d:29:33:07:61:8e:98:4b:d1:02:9f:86:86:5e: 2c:83:d7:38:33:52:93:fa:f9:0e:51:6d:74:ff:01: 99:93:33:79:7d:30:17:ad:92:17:89:d6:86:4c:bc: a5:b8:37:e6:44:ac:99:36:c9:20:e7:26:30:05:9d: a6:5e:95:ad:d7:cb:e4:74:4d:cb:a2:af:73:1b:88: 0b:20:15:e0:ff:c2:6b:a6:76:0e:d2:1c:d5:51:67: 40:ca:6a:0d:bf:63:25:87:f6:a7:af:34:03:84:f2: 81:a6:f6:bb:80:9d:18:df:b9:4d:05:a8:be:5c:6e: 0c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:68:7B:B9:88:9C:81:E5:70:E7:E6:2C:F3:1F:AE:42:50:C9:B2:B9 X509v3 Authority Key Identifier: keyid:36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:f4:44:63:5a:c9:36:73:04:ed:93:68:2b:b9:a6:92:0f:f5: 81:89:fd:5c:f8:61:fa:4e:55:86:14:e0:07:f7:25:09:54:a1: 63:01:ff:b8:eb:37:e3:9a:7c:22:da:00:74:f1:81:39:6e:ba: 39:ce:43:e4:58:c5:e1:63:93:fc:2a:53:5a:35:07:62:ca:ec: 53:92:cd:9a:04:d9:eb:91:15:32:ef:23:63:e6:64:47:51:7a: e1:f8:a3:ad:03:9b:5f:76:2d:c4:54:ed:87:cc:78:33:b1:89: bc:d2:8f:96:4d:97:80:d9:99:5f:b9:07:81:ed:49:bc:23:fc: 7b:e8:26:f6:f3:62:bc:9b:9e:e8:7a:18:c3:9b:49:ad:47:01: 93:c8:21:ec:85:0c:a3:24:5b:5c:2c:57:b0:f8:4a:50:19:bc: b2:f5:82:58:e6:6b:e7:0e:e8:06:90:8b:28:16:c6:0d:11:ba: 6e:7b:b8:c2:7f:8d:a0:d0:1d:ec:74:61:ff:6e:98:cf:b0:38: fd:cd:5e:46:38:a9:12:ab:5b:d4:8f:50:2e:d2:27:4a:85:1d: f7:b4:a7:ff:da:77:7e:14:10:f9:6a:e2:b4:33:a4:ed:3a:67: 12:10:93:56:ca:78:67:45:47:31:54:d5:1f:a2:b7:a7:2e:e3: eb:9b:27:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE0 QkU4RTExMC8GA1UEBRMoMzZFQTIwMTJCREIzRTYxMTlBNUFFRkJGNjZDRUVCMzhC NTkzMURFOTAeFw0yNjAxMjUwNzAyMTJaFw0yNjAyMDEwNzAyMTJaMBgxFjAUBgNV BAMMDTY5NzViZmY0LWQzZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8LzKmN/eJK3WXtVZLvE7X0OKcRJcjOCM5IoBabIcC++BWqlPe22tGE0q7mE10 GBPlALQ6pzygjigrpBkMG1iBBOSAZEMCgNdDg6osTED62/ghc8YM7GdF2Ysdd3PT QM1jTqkrVFWeKrq3k1VjeuQ7g9YzivYdjjeuLk8/t95pdwMQXhqYCpUdKTMHYY6Y S9ECn4aGXiyD1zgzUpP6+Q5RbXT/AZmTM3l9MBetkheJ1oZMvKW4N+ZErJk2ySDn JjAFnaZela3Xy+R0Tcuir3MbiAsgFeD/wmumdg7SHNVRZ0DKag2/YyWH9qevNAOE 8oGm9ruAnRjfuU0FqL5cbgwhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm2h7uYic geVw5+Ys8x+uQlDJsrkwHwYDVR0jBBgwFoAUNuogEr2z5hGaWu+/Zs7rOLWTHekw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCRThFLzU0NjE5M0VDRTE0 NjExRjA5MTY0RTBBODcxNkY1NkJDL051b2dFcjJ6NWhHYVd1LV9aczdyT0xXVEhl ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnVvZ0VyMno1aEdhV3UtX1pzN3JPTFdUSGVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC RThFLzU0NjE5M0VDRTE0NjExRjA5MTY0RTBBODcxNkY1NkJDL051b2dFcjJ6NWhH YVd1LV9aczdyT0xXVEhlay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHb0RGNayTZzBO2TaCu5ppIP9YGJ/Vz4YfpOVYYU4Af3JQlUoWMB/7jr N+OafCLaAHTxgTluujnOQ+RYxeFjk/wqU1o1B2LK7FOSzZoE2euRFTLvI2PmZEdR euH4o60Dm192LcRU7YfMeDOxibzSj5ZNl4DZmV+5B4HtSbwj/HvoJvbzYrybnuh6 GMObSa1HAZPIIeyFDKMkW1wsV7D4SlAZvLL1gljma+cO6AaQiygWxg0Rum57uMJ/ jaDQHex0Yf9umM+wOP3NXkY4qRKrW9SPUC7SJ0qFHfe0p//ad34UEPlq4rQzpO06 ZxIQk1bKeGdFRzFU1R+it6cu4+ubJyk= -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:11 2026 by rpki-client