This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json) Hash identifier: CFTbKNYfA39abZ1CLEKncYKH1afkSE3o8Xu4ruv6sk0= Subject key identifier: B2:12:AE:C4:1E:5D:4F:41:85:07:C9:30:C8:99:0A:D0:D6:3E:D3:5A Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Certificate serial: 03AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft Manifest number: 03A7 Signing time: Sat 24 Jan 2026 23:53:02 +0000 Manifest this update: Sat 24 Jan 2026 23:53:02 +0000 Manifest next update: Sat 31 Jan 2026 23:53:02 +0000 Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: q75xTD0BOR8erSAbtoKF/POTGfKK3EhQFBCE4fJl6UE=) 2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: Upjs7verB9kHZN2eaB1a6dX0s9sFshQhi4VCB4ap3GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Validity Not Before: Jan 24 23:53:02 2026 GMT Not After : Jan 31 23:53:02 2026 GMT Subject: CN=69755b5e-fc53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:17:d0:7e:8b:f7:97:8c:10:bc:b8:3f:36: 2b:b3:e9:b9:5a:26:3b:aa:87:55:8f:74:ad:ac:ec: e1:ce:64:59:84:9a:c7:d1:bd:ae:0e:40:f2:d7:b2: 75:bd:81:70:2d:c3:d9:9b:73:60:ed:70:dc:ed:b3: b3:1e:f4:d8:fa:ec:bb:0b:d0:76:e6:e7:a5:86:c7: 96:b4:92:bb:17:d8:2a:fe:9f:3a:d1:2a:b2:ee:f3: 8e:da:a4:09:32:50:6e:45:f1:b1:c6:d4:76:70:61: 09:42:7b:13:19:ae:20:62:6b:9d:c2:45:a0:89:1d: 7c:ee:4f:5c:3a:ea:81:ab:2c:c8:7b:b9:ed:b2:3b: 34:37:22:78:31:f4:ed:03:21:c6:0f:7e:ab:b5:cc: 43:ef:20:6b:c9:7c:50:79:93:a6:b7:78:bc:da:bf: 8f:25:25:26:07:9c:72:87:41:fc:be:d5:ca:36:b6: 76:4f:46:0b:0b:4d:e3:48:72:5f:5a:9b:85:e6:3a: 39:b0:18:3e:57:d1:fc:a1:d4:f3:96:5a:14:21:4a: ef:21:9e:5a:89:35:9f:87:9d:c7:ed:d8:b5:1f:6d: 1f:b5:c6:b8:82:9a:4b:5d:87:58:7c:5a:5a:98:13: d8:82:c6:5e:16:6e:f6:da:b4:05:9f:43:c0:06:90: 54:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:12:AE:C4:1E:5D:4F:41:85:07:C9:30:C8:99:0A:D0:D6:3E:D3:5A X509v3 Authority Key Identifier: keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:e8:ef:f0:82:d4:78:86:9d:eb:87:7d:62:71:73:ac:55:f9: fb:c7:45:19:78:5d:fc:76:1f:42:0c:26:0b:aa:98:90:d3:23: e7:f4:17:53:ee:01:0d:3d:69:f2:b0:62:2b:9c:8b:c0:5e:6c: 80:ee:fb:e5:c1:3f:ff:1a:ba:78:5e:68:44:55:eb:6f:d0:f9: ff:e4:66:c3:5b:c5:95:f1:5e:99:57:26:bd:85:20:9a:77:dd: b1:3a:c3:55:37:12:6c:9c:a9:fb:f7:34:8b:07:e8:9b:49:e2: e0:89:13:67:de:f6:5f:1d:05:f1:7a:1e:94:09:a5:a3:c4:15: ea:49:4b:f2:76:b4:3c:42:4f:32:9d:5f:3e:83:da:e5:77:12: 6e:48:4d:f4:46:0d:42:e6:e3:f4:20:9e:5a:eb:86:53:0c:4b: 79:fe:c8:df:44:5e:42:ae:75:9c:5c:30:8b:1e:69:91:af:bc: b6:8d:78:19:79:81:f5:d8:94:bb:b9:6f:ee:c7:e2:72:51:b2: f5:1b:de:c4:c3:2c:71:5a:e0:55:24:b2:df:85:3c:e3:d5:1d: 3f:f7:08:ad:b9:dd:f2:77:c3:59:7d:62:cf:70:12:7f:ce:ea: e7:56:a4:58:69:92:17:f7:bb:a0:fa:38:83:5d:50:77:1a:91: 0a:5b:b2:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQkYxMTAvBgNVBAUTKDlDRkE4NjlEQzMwNjM1N0Q3QUMzMDkyRTRGRkZEMDRD QTUwMjc3NUUwHhcNMjYwMTI0MjM1MzAyWhcNMjYwMTMxMjM1MzAyWjAYMRYwFAYD VQQDDA02OTc1NWI1ZS1mYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqW0X0H6L95eMELy4PzYrs+m5WiY7qodVj3StrOzhzmRZhJrH0b2uDkDy17J1 vYFwLcPZm3Ng7XDc7bOzHvTY+uy7C9B25uelhseWtJK7F9gq/p860Sqy7vOO2qQJ MlBuRfGxxtR2cGEJQnsTGa4gYmudwkWgiR187k9cOuqBqyzIe7ntsjs0NyJ4MfTt AyHGD36rtcxD7yBryXxQeZOmt3i82r+PJSUmB5xyh0H8vtXKNrZ2T0YLC03jSHJf WpuF5jo5sBg+V9H8odTzlloUIUrvIZ5aiTWfh53H7di1H20ftca4gppLXYdYfFpa mBPYgsZeFm722rQFn0PABpBUwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLISrsQe XU9BhQfJMMiZCtDWPtNaMB8GA1UdIwQYMBaAFJz6hp3DBjV9esMJLk//0EylAnde MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCRi9FRDUyRjAzMEM1 RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05YMTZ3d2t1VF9fUVRLVUNk MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QcUduY01HTlgxNnd3a3VUX19RVEtVQ2QxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCRi9FRDUyRjAzMEM1RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05Y MTZ3d2t1VF9fUVRLVUNkMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB16O/wgtR4hp3rh31icXOsVfn7x0UZeF38dh9CDCYLqpiQ0yPn9BdT 7gENPWnysGIrnIvAXmyA7vvlwT//Grp4XmhEVetv0Pn/5GbDW8WV8V6ZVya9hSCa d92xOsNVNxJsnKn79zSLB+ibSeLgiRNn3vZfHQXxeh6UCaWjxBXqSUvydrQ8Qk8y nV8+g9rldxJuSE30Rg1C5uP0IJ5a64ZTDEt5/sjfRF5CrnWcXDCLHmmRr7y2jXgZ eYH12JS7uW/ux+JyUbL1G97EwyxxWuBVJLLfhTzj1R0/9witud3yd8NZfWLPcBJ/ zurnVqRYaZIX97ug+jiDXVB3GpEKW7LR -----END CERTIFICATE-----Generated at Sun Jan 25 10:43:10 2026 by rpki-client