This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: 3uMzzermHa1MMXUH6SuhZUA6ucd1n2KzXbXbssjO9ec= Subject key identifier: BA:F1:74:70:4E:1A:A5:D4:89:72:E9:E7:B0:8E:17:BF:BB:08:0C:61 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0CF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0C95 Signing time: Sat 24 Jan 2026 18:17:30 +0000 Manifest this update: Sat 24 Jan 2026 18:17:29 +0000 Manifest next update: Sat 31 Jan 2026 18:17:29 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: nq2BdySDAPEZXBbqrRpxH1WHaZ9E3wBFRMuBuujl3WE=) 2: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: WVkxMnAPmYEx2pir9yJBj6S9Ri2HeWB84QrUcGBIgX0=) 3: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: uM9esMnbJemVTDXSBi0eBdZiTFnt+Mq64Yuw7Vo5ff8=) 4: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: mpanMW6E++IIJhwRfBokQkjYWR4BXeWQNkL+zlkPQk0=) 5: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: yVyxrQ/XexxsyDCtzcGEooxv2C0cJKVEzNUoJUfFCpg=) 6: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: EXrq9SaZzH6ZvSPXc9dAkv/CRi57VwFICygbDK3FbAQ=) 7: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: JKDdsewbmTds8DX8z5n44dixpiguXnj1mkHopckNnnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3318 (0xcf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Jan 24 18:17:29 2026 GMT Not After : Jan 31 18:17:29 2026 GMT Subject: CN=69750cba-ce50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3f:5c:f8:a5:1b:7b:76:79:0a:09:5f:83:60: 71:8b:e8:ec:a7:d8:f8:2d:41:60:75:7e:14:a9:de: e2:b8:88:03:8d:ac:5d:80:98:80:cc:46:37:f8:42: 11:cd:98:51:c3:35:ce:d2:80:81:d7:3d:1c:60:43: 2e:bd:ee:0b:c6:e1:ea:2b:f3:a6:46:ab:06:c2:30: bb:83:bc:51:75:2b:2a:36:ac:08:92:e8:50:e9:aa: 36:13:70:c7:1a:44:12:e3:dd:15:56:10:a6:7a:33: 95:38:89:c5:50:8a:58:04:c3:18:06:12:91:5c:79: 44:ca:56:8a:d4:aa:6e:f2:9e:34:91:55:0a:7d:71: f4:b0:5c:c7:5a:80:89:58:e8:02:d1:51:28:fe:59: 20:21:6a:fd:f3:21:4a:b0:ef:66:41:37:17:d9:ae: f0:a3:e9:da:e9:3b:aa:3f:88:ea:10:19:04:21:7c: fc:b3:1d:78:0a:83:e2:a2:81:24:25:12:90:4a:b5: d7:36:61:67:23:8c:2f:ec:9f:90:45:9e:91:5f:a4: 35:b7:f8:4b:7b:b2:15:4b:e3:b7:f5:e6:73:05:8e: fb:56:9e:5a:09:52:2f:b0:07:0e:2c:a5:2b:b2:d6: 8a:fc:88:f5:93:41:7c:b6:d9:a1:f7:96:37:7f:f1: 39:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F1:74:70:4E:1A:A5:D4:89:72:E9:E7:B0:8E:17:BF:BB:08:0C:61 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7f:74:a7:00:99:f0:2f:50:fc:04:29:c7:d2:65:c8:26:56: 58:de:8f:2a:7c:b2:b9:c6:57:f4:15:f4:27:8d:6c:d7:ab:c1: 0e:66:3a:1c:3a:63:43:c1:fb:0a:72:e0:5e:a7:e4:ef:0a:11: 75:f2:5b:ee:52:6f:0f:7e:0d:34:1b:1b:b9:06:fe:a0:bc:50: a9:7a:a1:0c:36:82:ff:b5:d3:42:98:61:50:bf:ec:4d:9f:c1: b1:66:b5:6e:ce:db:40:f6:25:e1:42:e4:bf:19:a7:27:b4:72: fd:e3:27:e0:1e:3b:1c:bd:5c:ad:b8:eb:14:1c:c9:c3:22:2e: 46:1d:49:5f:4e:de:2e:4a:6b:ab:65:06:ce:1a:5d:30:da:e9: a1:78:34:83:3b:39:c3:29:8b:32:4e:70:c9:14:70:a9:5e:53: bf:c6:2a:11:93:e8:d1:25:e3:35:42:4e:79:16:88:7a:80:72: 92:07:99:8b:80:50:f0:a6:60:bb:40:07:12:2a:59:13:ca:7b: 28:8e:a7:1d:69:ac:73:3d:a1:75:e0:a5:09:56:17:4e:31:0d: 5f:56:bb:62:dc:53:13:f3:1a:f5:f0:b3:4b:87:97:9b:09:53: 08:5d:4a:ec:df:d0:ed:20:1a:16:88:a0:bf:55:1e:5e:bf:52: f3:e6:43:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjYwMTI0MTgxNzI5WhcNMjYwMTMxMTgxNzI5WjAYMRYwFAYD VQQDDA02OTc1MGNiYS1jZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7T9c+KUbe3Z5Cglfg2Bxi+jsp9j4LUFgdX4Uqd7iuIgDjaxdgJiAzEY3+EIR zZhRwzXO0oCB1z0cYEMuve4LxuHqK/OmRqsGwjC7g7xRdSsqNqwIkuhQ6ao2E3DH GkQS490VVhCmejOVOInFUIpYBMMYBhKRXHlEylaK1Kpu8p40kVUKfXH0sFzHWoCJ WOgC0VEo/lkgIWr98yFKsO9mQTcX2a7wo+na6TuqP4jqEBkEIXz8sx14CoPiooEk JRKQSrXXNmFnI4wv7J+QRZ6RX6Q1t/hLe7IVS+O39eZzBY77Vp5aCVIvsAcOLKUr staK/Ij1k0F8ttmh95Y3f/E5cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrxdHBO GqXUiXLp57COF7+7CAxhMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaf3SnAJnwL1D8BCnH0mXIJlZY3o8qfLK5xlf0FfQnjWzXq8EOZjoc OmNDwfsKcuBep+TvChF18lvuUm8Pfg00Gxu5Bv6gvFCpeqEMNoL/tdNCmGFQv+xN n8GxZrVuzttA9iXhQuS/GacntHL94yfgHjscvVytuOsUHMnDIi5GHUlfTt4uSmur ZQbOGl0w2umheDSDOznDKYsyTnDJFHCpXlO/xioRk+jRJeM1Qk55Foh6gHKSB5mL gFDwpmC7QAcSKlkTynsojqcdaaxzPaF14KUJVhdOMQ1fVrti3FMT8xr18LNLh5eb CVMIXUrs39DtIBoWiKC/VR5ev1Lz5kNt -----END CERTIFICATE-----Generated at Sun Jan 25 09:54:34 2026 by rpki-client