This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft File: nlcX9fFLsp9ntXrX2dXweRWunEM.mft (raw, json) Hash identifier: 5vHeqec0D6c9mUo0PqfM5whSRN1BP/wraN82ON9ji5w= Subject key identifier: 07:05:31:75:02:2E:6B:BF:7B:BA:C1:4B:2F:3E:75:5C:A6:CA:76:A1 Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 Certificate issuer: /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Certificate serial: 0411 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft Manifest number: 040C Signing time: Sat 24 Jan 2026 23:36:45 +0000 Manifest this update: Sat 24 Jan 2026 23:36:45 +0000 Manifest next update: Sat 31 Jan 2026 23:36:45 +0000 Files and hashes: 1: nlcX9fFLsp9ntXrX2dXweRWunEM.crl (hash: jaJjbQRVNN+9aciP9MiM/Ogxu1tPAXABVBIZlDgyHvg=) 2: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (hash: l5UPW8luctznfhC7jBJpvRQP7pkTfMgJK+ognjXHfwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1041 (0x411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E01E, serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Validity Not Before: Jan 24 23:36:45 2026 GMT Not After : Jan 31 23:36:45 2026 GMT Subject: CN=6975578d-10e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:78:1c:d1:2e:f5:75:2c:91:c6:54:49:0e:75: 3b:7d:e8:d6:17:4f:a8:22:33:9b:d9:f6:16:29:bd: 31:0d:9e:5b:16:a5:55:84:81:7c:b2:8a:af:20:f5: 7e:91:49:27:0a:e2:89:ba:87:f9:30:8e:fe:27:f6: ef:5b:b9:e1:9b:84:02:6e:0c:86:4a:f0:77:19:7f: 72:88:a9:88:10:d2:8d:80:55:0f:3d:fe:9c:4b:12: 6a:83:43:36:08:d6:bb:50:88:14:cf:ca:f6:40:a8: 76:2a:2f:45:8f:09:4e:ea:4c:43:d6:38:48:7b:25: a9:fe:3c:fb:3e:eb:01:19:75:fb:77:04:9d:e0:8e: ba:14:58:1a:0b:b5:b8:47:68:a5:b3:3d:10:2a:65: 3a:0b:af:4e:4f:c3:58:9d:f4:71:8b:db:48:e3:30: 07:48:20:ab:7c:aa:3b:11:17:02:a8:72:83:a1:3e: 1c:bb:50:78:30:b4:b9:77:61:a7:de:78:ef:27:34: b5:18:b2:76:8a:f6:d9:95:65:69:a0:d5:57:4b:d6: d1:47:38:fd:1c:e9:73:54:1f:72:09:f5:1a:52:63: ea:82:15:f4:8c:7f:83:4e:a4:db:24:fe:ca:85:0c: 44:5e:c2:ae:b9:d3:65:53:29:81:56:95:b2:0f:d2: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:05:31:75:02:2E:6B:BF:7B:BA:C1:4B:2F:3E:75:5C:A6:CA:76:A1 X509v3 Authority Key Identifier: keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:bc:a9:57:11:2d:aa:47:ae:f4:d1:50:58:08:92:75:42:f1: 41:48:9f:44:a9:c4:f9:fb:8d:d4:ef:63:ea:c3:c0:03:82:d9: a3:e9:75:d6:59:58:c3:59:04:8f:61:9e:b3:6c:3f:07:ef:3a: f7:f7:5e:19:22:1e:f7:d7:48:56:62:87:5f:33:ce:b9:61:3c: 03:cc:e8:90:ab:c2:ca:61:19:62:f5:97:a8:99:24:0e:f0:27: ba:b9:68:cf:fb:44:ec:2e:14:b4:e0:cc:f4:5a:1a:a2:23:eb: 53:d3:87:69:41:12:40:3e:57:52:d6:8b:06:8b:14:eb:8c:ce: ab:fa:e2:0e:6e:9f:52:f3:2b:63:1d:a0:9e:37:a2:6f:46:66: 98:de:fa:c7:aa:40:43:07:13:ac:0a:9f:60:07:2f:48:f3:fc: 1a:22:6e:34:00:6f:da:e6:9d:b6:fc:79:51:75:a4:cc:0a:e0: a7:b9:5b:0e:70:b3:5b:b2:b8:76:91:d8:33:87:94:45:97:bf: b8:06:74:d2:e7:b8:da:74:33:34:b4:91:b5:f0:4a:f6:91:ef: a3:b3:7e:37:f1:9a:0c:81:05:2f:9c:68:58:0c:5e:bd:ea:a9: eb:47:a5:7b:69:17:18:b9:d2:6f:ba:ed:ca:29:75:1f:74:f2: e0:ef:49:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMUUxMTAvBgNVBAUTKDlFNTcxN0Y1RjE0QkIyOUY2N0I1N0FEN0Q5RDVGMDc5 MTVBRTlDNDMwHhcNMjYwMTI0MjMzNjQ1WhcNMjYwMTMxMjMzNjQ1WjAYMRYwFAYD VQQDDA02OTc1NTc4ZC0xMGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHgc0S71dSyRxlRJDnU7fejWF0+oIjOb2fYWKb0xDZ5bFqVVhIF8soqvIPV+ kUknCuKJuof5MI7+J/bvW7nhm4QCbgyGSvB3GX9yiKmIENKNgFUPPf6cSxJqg0M2 CNa7UIgUz8r2QKh2Ki9FjwlO6kxD1jhIeyWp/jz7PusBGXX7dwSd4I66FFgaC7W4 R2ilsz0QKmU6C69OT8NYnfRxi9tI4zAHSCCrfKo7ERcCqHKDoT4cu1B4MLS5d2Gn 3njvJzS1GLJ2ivbZlWVpoNVXS9bRRzj9HOlzVB9yCfUaUmPqghX0jH+DTqTbJP7K hQxEXsKuudNlUymBVpWyD9KbLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcFMXUC Lmu/e7rBSy8+dVymynahMB8GA1UdIwQYMBaAFJ5XF/XxS7KfZ7V619nV8HkVrpxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAxRS9DNUM2RjA1RTlF QTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNwOW50WHJYMmRYd2VSV3Vu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sY1g5ZkZMc3A5bnRYclgyZFh3ZVJXdW5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAxRS9DNUM2RjA1RTlFQTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNw OW50WHJYMmRYd2VSV3VuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5vKlXES2qR6700VBYCJJ1QvFBSJ9EqcT5+43U72Pqw8ADgtmj6XXW WVjDWQSPYZ6zbD8H7zr3914ZIh7310hWYodfM865YTwDzOiQq8LKYRli9ZeomSQO 8Ce6uWjP+0TsLhS04Mz0WhqiI+tT04dpQRJAPldS1osGixTrjM6r+uIObp9S8ytj HaCeN6JvRmaY3vrHqkBDBxOsCp9gBy9I8/waIm40AG/a5p22/HlRdaTMCuCnuVsO cLNbsrh2kdgzh5RFl7+4BnTS57jadDM0tJG18Er2ke+js3438ZoMgQUvnGhYDF69 6qnrR6V7aRcYudJvuu3KKXUfdPLg70no -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:15 2026 by rpki-client