This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft File: nwZsuF9biPgjeA1flmJfQ4VIG78.mft (raw, json) Hash identifier: Q72HpSQvfqSxSn1Ix94nUGYBVv74d5g9Nems9e+puTU= Subject key identifier: 10:06:41:7F:49:43:30:91:B1:0B:AA:3D:66:72:96:F0:D1:DA:7F:3D Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF Certificate issuer: /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft Manifest number: 07A3 Signing time: Sat 24 Jan 2026 20:51:28 +0000 Manifest this update: Sat 24 Jan 2026 20:51:27 +0000 Manifest next update: Sat 31 Jan 2026 20:51:27 +0000 Files and hashes: 1: nwZsuF9biPgjeA1flmJfQ4VIG78.crl (hash: RwEq6N3i1gS+SO7bEdvhBxRB/0UAFkTj7l8ezCS72/s=) 2: 026A84FC4C3211ECB9639932C4F9AE02.roa (hash: jS334U9iP0LsvG7IMQzbvCDhrmoJkxnr7mSzJK0aIOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD44, serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Validity Not Before: Jan 24 20:51:27 2026 GMT Not After : Jan 31 20:51:27 2026 GMT Subject: CN=697530d0-4b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:72:44:d8:fc:49:87:4e:ea:52:fb:f3:c8: a3:6a:96:d2:4b:91:85:47:d8:3c:43:a4:3c:2c:a1: 5b:69:e0:1a:c2:5d:f5:21:07:4e:1c:30:e2:f1:9d: 20:3b:87:51:8b:7d:32:13:03:81:24:ce:b0:a7:1d: 3d:2a:63:cf:d8:be:00:2d:53:4c:9b:ee:2c:9c:cf: 7a:c1:75:ff:3b:65:e8:9e:89:66:d0:52:b7:16:dd: cc:ae:65:ca:56:f6:ab:c7:73:53:a2:ba:f3:d8:84: 5d:00:e6:18:b7:09:96:4a:bc:67:f2:07:50:ea:7b: 93:4e:d5:46:ab:7c:ac:48:39:bc:ab:2b:9f:44:2c: 87:bc:28:0d:b1:89:cc:b4:17:b5:ac:d3:1a:6b:0e: b0:e1:68:b1:4d:7c:34:93:e8:e8:58:08:84:59:17: 9e:66:22:b2:ae:78:c0:f2:e4:84:00:29:3e:75:50: dd:34:fb:5f:41:0a:c0:14:5d:be:fc:66:18:8b:ee: 26:29:f8:35:cb:e2:f4:f4:e4:13:f0:f7:ad:6b:c8: 93:28:e8:07:53:c1:2a:41:e4:fc:4c:88:b9:37:48: 71:d1:d9:bc:cf:8e:85:94:d8:93:81:95:bc:0f:9a: 75:33:8a:4e:f5:bd:a3:81:fc:71:a4:70:f6:bc:35: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:06:41:7F:49:43:30:91:B1:0B:AA:3D:66:72:96:F0:D1:DA:7F:3D X509v3 Authority Key Identifier: keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d1:b3:ab:e8:7e:1a:cc:b1:bf:f3:ee:ae:59:0e:3c:56:16: d7:76:d9:94:ec:3d:0b:67:cc:cd:1e:69:2f:60:a8:b5:76:00: 8a:eb:0a:37:10:5b:64:a6:4e:a9:c9:93:90:c9:a0:84:9c:fb: f6:3f:95:4e:a7:96:cc:70:a9:93:8b:b5:57:20:f7:7a:c2:f8: e3:b0:72:62:d2:2d:a3:b8:86:0d:4d:01:4a:a0:f7:a1:81:12: fd:a0:a8:5f:f4:19:3f:c6:06:31:c5:5f:05:1b:6a:9b:22:f1: 1e:86:33:c4:1e:11:8a:46:ef:f4:5a:66:68:7e:a9:2a:94:40: b0:d1:82:8b:5d:49:be:86:5f:34:18:c2:d0:5f:87:89:be:5a: 64:4e:e7:69:b4:9d:ae:c3:cf:d3:3a:eb:67:72:d6:1e:d1:9f: 83:e5:17:a1:a1:45:84:e2:91:96:bd:15:44:d2:95:7e:28:3a: 13:ff:ea:8d:e7:09:64:05:f8:83:75:e4:d6:74:bf:9a:fa:18: 65:03:de:63:ac:04:81:25:6a:6c:1b:ad:b3:18:6c:57:46:92: d4:53:d3:3d:d7:8b:b7:7a:a2:44:28:41:d2:5a:30:01:4e:2c: ea:56:64:b5:45:78:9a:fa:c4:99:2c:66:25:b4:4f:64:df:1e: a0:a4:80:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURENDQxMTAvBgNVBAUTKDlGMDY2Q0I4NUY1Qjg4RjgyMzc4MEQ1Rjk2NjI1RjQz ODU0ODFCQkYwHhcNMjYwMTI0MjA1MTI3WhcNMjYwMTMxMjA1MTI3WjAYMRYwFAYD VQQDDA02OTc1MzBkMC00YjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuolyRNj8SYdO6lL788ijapbSS5GFR9g8Q6Q8LKFbaeAawl31IQdOHDDi8Z0g O4dRi30yEwOBJM6wpx09KmPP2L4ALVNMm+4snM96wXX/O2Xonolm0FK3Ft3MrmXK Vvarx3NTorrz2IRdAOYYtwmWSrxn8gdQ6nuTTtVGq3ysSDm8qyufRCyHvCgNsYnM tBe1rNMaaw6w4WixTXw0k+joWAiEWReeZiKyrnjA8uSEACk+dVDdNPtfQQrAFF2+ /GYYi+4mKfg1y+L09OQT8Peta8iTKOgHU8EqQeT8TIi5N0hx0dm8z46FlNiTgZW8 D5p1M4pO9b2jgfxxpHD2vDVSIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAGQX9J QzCRsQuqPWZylvDR2n89MB8GA1UdIwQYMBaAFJ8GbLhfW4j4I3gNX5ZiX0OFSBu/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQ0NC9EOEUzMUU3NjNB MUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQZ2plQTFmbG1KZlE0VklH NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253WnN1RjliaVBnamVBMWZsbUpmUTRWSUc3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQ0NC9EOEUzMUU3NjNBMUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQ Z2plQTFmbG1KZlE0VklHNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa0bOr6H4azLG/8+6uWQ48VhbXdtmU7D0LZ8zNHmkvYKi1dgCK6wo3 EFtkpk6pyZOQyaCEnPv2P5VOp5bMcKmTi7VXIPd6wvjjsHJi0i2juIYNTQFKoPeh gRL9oKhf9Bk/xgYxxV8FG2qbIvEehjPEHhGKRu/0WmZofqkqlECw0YKLXUm+hl80 GMLQX4eJvlpkTudptJ2uw8/TOutnctYe0Z+D5RehoUWE4pGWvRVE0pV+KDoT/+qN 5wlkBfiDdeTWdL+a+hhlA95jrASBJWpsG62zGGxXRpLUU9M914u3eqJEKEHSWjAB TizqVmS1RXia+sSZLGYltE9k3x6gpICb -----END CERTIFICATE-----Generated at Sun Jan 25 12:32:28 2026 by rpki-client