This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json) Hash identifier: WcI2WfnuAmWb2iA6pu9oHfzK61+TtKb8bxFPABZpZI4= Subject key identifier: 88:B3:B4:86:73:EE:CF:E2:19:43:1F:FA:3F:B4:D2:50:DA:4B:33:F6 Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Certificate serial: 0C81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft Manifest number: 0C7A Signing time: Sat 24 Jan 2026 18:08:44 +0000 Manifest this update: Sat 24 Jan 2026 18:08:43 +0000 Manifest next update: Sat 31 Jan 2026 18:08:43 +0000 Files and hashes: 1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: j/tdW6SaHKlR/V5m5DXbqWBrsHYEk4RDlJtAN/iiX0U=) 2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: Sb4C6SBlwbEgArJd0mwobbSvCSiB+bY80WW0ZbhEHoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Validity Not Before: Jan 24 18:08:43 2026 GMT Not After : Jan 31 18:08:43 2026 GMT Subject: CN=69750aac-5520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b4:fb:59:e8:19:d1:b5:ef:8c:1a:2d:92:4c: 99:d8:db:9f:00:80:c7:a6:5c:16:2b:5d:fb:a2:14: 26:e0:92:b9:33:8a:6b:2c:cf:05:48:f1:5d:31:5e: f7:f8:54:ac:34:bf:07:aa:c3:cf:6d:fe:ad:d7:5c: 42:3d:bf:b4:c6:3b:07:db:64:ec:44:25:fa:06:d4: be:65:ab:68:b0:ce:97:2f:47:a7:33:fb:ac:e0:e8: 95:a6:99:f6:69:20:25:f1:af:e6:07:57:f5:65:4c: c6:81:c1:9f:cd:08:8f:ba:90:e2:0f:e8:82:1f:f5: ad:1c:69:45:a1:56:c2:dc:8d:42:35:b9:79:cd:1b: ce:fe:1f:49:4c:93:80:aa:de:2d:b5:16:09:1f:80: 84:38:dc:d3:a2:37:42:09:ff:f4:04:90:b4:af:d5: 8f:f9:0a:ee:ae:c2:17:bf:c8:9d:5f:fd:be:88:d8: 86:b4:d1:df:e0:9b:db:ea:c9:a0:7c:5d:33:6c:4f: 4b:8d:c0:6b:dc:b0:a4:d1:a2:76:cd:f1:cd:36:de: 8b:2b:de:8f:30:db:72:88:9e:c7:ca:da:08:b3:7d: 15:01:14:52:0c:7e:ac:c9:83:81:56:6f:d3:b0:b3: 77:77:45:b7:f2:c9:df:50:d7:08:f0:85:ba:e0:19: 3a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B3:B4:86:73:EE:CF:E2:19:43:1F:FA:3F:B4:D2:50:DA:4B:33:F6 X509v3 Authority Key Identifier: keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c1:b5:2a:72:86:4b:df:35:34:39:db:bd:66:92:23:a0:f4: e5:8e:5e:87:f3:af:08:bd:88:66:8c:fa:01:44:e9:32:cd:2d: 2c:f1:d3:84:7f:20:24:b6:be:38:ab:a4:e9:a6:8f:f9:65:e8: 77:ae:3f:a1:df:88:05:90:bf:12:7a:82:40:ae:93:80:66:d2: 92:99:7e:9a:fe:a3:35:b8:3f:6f:87:66:e5:2f:68:e0:83:ee: 65:c3:a1:fd:66:c5:14:38:22:7f:4e:ac:b4:92:b1:f3:f0:22: b5:77:fe:13:eb:eb:52:07:05:66:ec:25:45:b0:30:7b:67:5b: ae:9b:c6:16:c2:41:9b:68:d0:96:f2:41:65:82:bb:e6:3e:74: 70:04:f4:23:5e:af:50:9b:32:47:c6:05:e5:0a:8b:5f:99:fd: 10:72:42:31:01:33:11:b3:e3:57:36:74:3a:05:3d:92:fd:07: 86:e0:19:03:43:38:ba:83:c5:f9:f8:79:35:d3:eb:cf:48:64: 1e:ba:b6:a8:07:b1:42:2d:6b:de:7a:d0:86:e6:e0:6a:99:54: 81:76:84:a4:b3:e7:c3:a0:ea:ec:18:38:bd:3c:8a:43:89:bb: 25:60:76:2b:a7:98:d9:11:d0:92:c3:80:2d:16:77:7c:fe:70: f8:f0:72:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2RTcxMTAvBgNVBAUTKDM0NzYzNkYwRTk4QUY4MjQ4MjZCMUJDRjk2RjNDNzc2 RDgxMkY1NUIwHhcNMjYwMTI0MTgwODQzWhcNMjYwMTMxMTgwODQzWjAYMRYwFAYD VQQDDA02OTc1MGFhYy01NTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk7T7WegZ0bXvjBotkkyZ2NufAIDHplwWK137ohQm4JK5M4prLM8FSPFdMV73 +FSsNL8HqsPPbf6t11xCPb+0xjsH22TsRCX6BtS+ZatosM6XL0enM/us4OiVppn2 aSAl8a/mB1f1ZUzGgcGfzQiPupDiD+iCH/WtHGlFoVbC3I1CNbl5zRvO/h9JTJOA qt4ttRYJH4CEONzTojdCCf/0BJC0r9WP+QrursIXv8idX/2+iNiGtNHf4Jvb6smg fF0zbE9LjcBr3LCk0aJ2zfHNNt6LK96PMNtyiJ7HytoIs30VARRSDH6syYOBVm/T sLN3d0W38snfUNcI8IW64Bk6LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiztIZz 7s/iGUMf+j+00lDaSzP2MB8GA1UdIwQYMBaAFDR2NvDpivgkgmsbz5bzx3bYEvVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTZFNy83ODYwRjhCQTEx QzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1DU0NheHZQbHZQSGR0Z1M5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IWTI4T21LLUNTQ2F4dlBsdlBIZHRnUzlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTZFNy83ODYwRjhCQTExQzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1D U0NheHZQbHZQSGR0Z1M5VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8wbUqcoZL3zU0Odu9ZpIjoPTljl6H868IvYhmjPoBROkyzS0s8dOE fyAktr44q6Tppo/5Zeh3rj+h34gFkL8SeoJArpOAZtKSmX6a/qM1uD9vh2blL2jg g+5lw6H9ZsUUOCJ/Tqy0krHz8CK1d/4T6+tSBwVm7CVFsDB7Z1uum8YWwkGbaNCW 8kFlgrvmPnRwBPQjXq9QmzJHxgXlCotfmf0QckIxATMRs+NXNnQ6BT2S/QeG4BkD Qzi6g8X5+Hk10+vPSGQeuraoB7FCLWveetCG5uBqmVSBdoSks+fDoOrsGDi9PIpD ibslYHYrp5jZEdCSw4AtFnd8/nD48HIu -----END CERTIFICATE-----Generated at Sun Jan 25 04:32:29 2026 by rpki-client