This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft File: NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json) Hash identifier: q9TqPL4x5s4xAvJHlNsNMJqHbuMgM8nqqwXB8AIyIy8= Subject key identifier: C0:0D:D6:86:55:0A:AA:D1:E3:5F:5A:97:FA:C4:C9:9E:B7:57:A9:E6 Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C Certificate issuer: /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft Manifest number: 0225 Signing time: Fri 23 Jan 2026 01:16:00 +0000 Manifest this update: Fri 23 Jan 2026 01:16:00 +0000 Manifest next update: Fri 30 Jan 2026 01:16:00 +0000 Files and hashes: 1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: vKfkFxyJRegSJP+gbZp3GqfdyEDiwoX2RkshcCI7Mlc=) 2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: WkJCgrbBmelQA5c6twQaEqrtwUH2ZoyRfcoaWRVuiIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 01:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Validity Not Before: Jan 23 01:16:00 2026 GMT Not After : Jan 30 01:16:00 2026 GMT Subject: CN=6972cbd0-32ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:0f:8f:ca:dc:3b:8e:bd:e1:63:a9:d7:d8: dd:d4:a0:cc:b7:01:bf:52:19:7b:35:9d:ee:95:a8: 38:0b:27:cd:6d:22:25:62:69:2d:99:41:08:77:29: db:15:e5:85:fb:a5:6b:8d:d6:99:45:2e:ce:3d:ee: 9e:3c:0b:52:dd:c9:2e:2a:3c:48:b2:b9:9e:a5:7b: 51:37:ec:a5:4c:89:2a:d4:2d:74:95:15:65:31:d0: f0:de:61:fb:9e:29:45:8e:d8:02:1d:a9:be:7b:b0: a1:37:64:42:8f:44:b6:5f:70:45:04:cf:f8:46:6c: 52:9c:49:ba:bc:e9:aa:a7:4a:49:a6:41:a7:fb:b4: 35:02:c0:5e:7f:94:22:88:27:33:2a:df:15:a5:15: 38:83:18:b8:7a:c3:94:9f:33:09:d4:b4:c4:22:f9: ae:1f:22:31:4e:85:b9:3f:24:ae:09:bc:79:ab:3d: 2d:04:2f:fd:9a:f3:d9:e8:bf:8b:d2:3b:9e:58:bb: bc:4d:9e:fd:a1:a8:83:0b:83:b1:ea:23:be:29:35: d8:e3:e8:9b:e2:3d:8c:0d:09:75:d9:c5:a0:86:e3: 6c:ae:b9:dd:f0:c7:80:51:46:01:5b:23:7f:f2:80: b2:d2:09:ec:e0:ed:e0:0d:dd:f9:44:31:1c:9b:cd: 7d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0D:D6:86:55:0A:AA:D1:E3:5F:5A:97:FA:C4:C9:9E:B7:57:A9:E6 X509v3 Authority Key Identifier: keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:cd:d7:54:77:1f:90:f8:60:bb:c1:24:b2:59:fb:a2:82:89: d7:d7:96:9e:9c:1a:c9:37:8d:d0:2e:f3:ec:dc:1c:d5:64:aa: e6:5b:d0:db:20:e3:42:04:40:01:c5:eb:66:2c:43:9d:31:b8: a0:60:1b:33:e1:08:91:ff:28:3d:ba:c9:82:8c:50:0f:cc:aa: 84:14:0b:90:e6:41:37:36:3e:02:21:43:36:7b:dd:83:84:9b: 9f:1e:57:a9:c5:91:c2:98:fa:22:d2:53:48:22:b5:f1:47:30: d3:b8:c3:46:37:0f:b7:21:33:9a:44:ef:fb:06:e7:e6:a1:e6: e3:e6:bd:0e:3a:75:cb:e6:ea:fe:0f:f8:27:97:54:35:50:fe: 6e:cf:67:56:6f:d3:75:0b:ed:2d:21:10:1a:de:ba:d0:9f:bc: 87:af:25:95:d1:02:d9:99:58:ce:de:a7:0f:1c:3c:2c:39:ac: 5e:28:0f:bf:9e:c1:cb:2f:b5:cc:f0:6c:fe:47:e1:b5:3c:09: ef:38:dd:62:c3:a8:b7:94:7e:d7:4d:24:2a:00:fb:7e:c7:a0: 2b:d0:51:29:32:59:c4:8a:bd:42:28:43:b2:7a:b0:cb:5f:80: 5c:24:ec:e2:d5:93:d9:45:8c:cf:49:fe:5b:69:74:2b:49:7e: f7:60:6c:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4NjAxMTAvBgNVBAUTKDM1RjIxMEMzRkNCRUYwRDYyQTNERTg4RjVGM0ZBMjRF MTE5Mzc0NEMwHhcNMjYwMTIzMDExNjAwWhcNMjYwMTMwMDExNjAwWjAYMRYwFAYD VQQDDA02OTcyY2JkMC0zMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCwPj8rcO4694WOp19jd1KDMtwG/Uhl7NZ3ulag4CyfNbSIlYmktmUEIdynb FeWF+6VrjdaZRS7OPe6ePAtS3ckuKjxIsrmepXtRN+ylTIkq1C10lRVlMdDw3mH7 nilFjtgCHam+e7ChN2RCj0S2X3BFBM/4RmxSnEm6vOmqp0pJpkGn+7Q1AsBef5Qi iCczKt8VpRU4gxi4esOUnzMJ1LTEIvmuHyIxToW5PySuCbx5qz0tBC/9mvPZ6L+L 0jueWLu8TZ79oaiDC4Ox6iO+KTXY4+ib4j2MDQl12cWghuNsrrnd8MeAUUYBWyN/ 8oCy0gns4O3gDd35RDEcm819EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAN1oZV CqrR419al/rEyZ63V6nmMB8GA1UdIwQYMBaAFDXyEMP8vvDWKj3oj18/ok4Rk3RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg2MC80MjIyRTY2NEFD RkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThOWXFQZWlQWHotaVRoR1Rk RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mSVF3X3ktOE5ZcVBlaVBYei1pVGhHVGRFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTg2MC80MjIyRTY2NEFDRkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThO WXFQZWlQWHotaVRoR1RkRXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAizddUdx+Q+GC7wSSyWfuigonX15aenBrJN43QLvPs3BzVZKrmW9Db IONCBEABxetmLEOdMbigYBsz4QiR/yg9usmCjFAPzKqEFAuQ5kE3Nj4CIUM2e92D hJufHlepxZHCmPoi0lNIIrXxRzDTuMNGNw+3ITOaRO/7Bufmoebj5r0OOnXL5ur+ D/gnl1Q1UP5uz2dWb9N1C+0tIRAa3rrQn7yHryWV0QLZmVjO3qcPHDwsOaxeKA+/ nsHLL7XM8Gz+R+G1PAnvON1iw6i3lH7XTSQqAPt+x6Ar0FEpMlnEir1CKEOyerDL X4BcJOzi1ZPZRYzPSf5baXQrSX73YGw9 -----END CERTIFICATE-----Generated at Sun Jan 25 03:02:48 2026 by rpki-client