This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json) Hash identifier: D9QMLRVMaq4p2uYtBusqq+vh+f3p+p+5R/AKlGce2uQ= Subject key identifier: 88:91:4D:DD:15:93:CB:A4:DB:A5:AD:FA:51:DD:8F:F5:93:F5:F6:87 Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Certificate serial: 0629 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft Manifest number: 0609 Signing time: Sat 24 Jan 2026 22:12:18 +0000 Manifest this update: Sat 24 Jan 2026 22:12:18 +0000 Manifest next update: Sat 31 Jan 2026 22:12:18 +0000 Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: NQusNUrHCsNw54gNmoZxptCGAWeJ4nwyTUBZXbGReRU=) 2: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 5J+X0LjgteZA7gTRmfGapcuapYL3WvWAdk4QrzcZNQo=) 3: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 414/5RyiyMUZFN0SEFameoFpU4rRSpvpvgBCGAe+h0s=) 4: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: 1ILmh7AVLQm5eSNZItp8QnZ0ivg8piYKVtyisI3TQ00=) 5: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: /i4Id8Q+jnrw5e+R6tIy1tKz8MPyg9GBRlUx3W4xwjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Validity Not Before: Jan 24 22:12:18 2026 GMT Not After : Jan 31 22:12:18 2026 GMT Subject: CN=697543c2-ab71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:17:12:cc:85:d8:0e:18:ca:24:99:1a:1f:71: a9:76:91:6f:fc:ef:c1:dd:12:d5:bc:3f:de:4f:ff: 4e:14:38:b9:5f:c5:0e:05:76:7e:22:38:fc:b7:30: b8:ac:cc:1a:92:34:f3:1b:01:08:15:be:18:df:03: 86:b2:d5:c4:6f:aa:44:5c:60:8a:af:2c:89:5b:05: c0:9f:f4:73:62:b9:db:dc:84:cc:4b:15:74:7b:e6: 77:d8:df:03:89:ae:47:bd:7d:40:2e:ac:92:c9:a4: 90:70:18:f2:37:35:eb:8e:d6:42:4d:ae:33:e9:74: bb:c2:28:44:92:13:3b:f0:60:c4:05:a3:0e:33:34: 12:69:74:c7:98:78:32:f9:be:25:58:25:b8:55:0d: a8:6f:fb:bd:47:5f:08:63:6e:4e:b5:f6:7d:1d:7e: 31:cc:1d:c8:ae:b3:2d:d9:6a:74:f2:6e:c6:a6:6b: 33:82:d4:56:bc:53:74:13:23:24:9c:4c:de:0b:31: d0:41:77:42:85:1e:c7:7b:a4:b2:89:cf:40:ee:b4: 61:54:46:98:59:99:41:46:98:00:be:68:0d:35:f8: ba:af:de:77:70:77:27:b3:35:f6:f6:d0:d5:bf:f3: 79:f7:68:bd:be:07:64:8a:b3:e6:9b:1f:e3:1c:8a: c9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:91:4D:DD:15:93:CB:A4:DB:A5:AD:FA:51:DD:8F:F5:93:F5:F6:87 X509v3 Authority Key Identifier: keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:49:03:ec:c1:16:b1:8f:02:aa:c0:4f:9a:ef:e5:3b:ff:31: 7b:37:fa:f3:a7:7b:dc:39:51:ea:98:3e:ef:17:47:7f:99:aa: 0a:c8:92:72:14:48:fc:e3:1e:dc:1b:29:7a:94:05:93:6f:96: 5a:ba:92:68:a9:6d:03:04:33:d4:d1:50:94:69:23:76:2e:02: 81:14:cf:f5:78:d0:29:91:ad:1a:35:c2:aa:e5:e2:f4:ee:c0: e0:7f:00:1c:24:43:8e:1e:3d:58:94:e2:70:85:f3:1d:8f:a2: 53:fc:c9:e9:3b:d5:d1:3e:c6:94:d0:f7:50:8c:f7:18:85:41: c2:76:57:49:26:e1:57:b5:47:0f:8d:ec:06:01:ca:1b:f3:dc: b4:fb:a1:7b:79:35:cc:5f:59:8c:6b:51:31:80:ed:05:c3:57: 81:3e:d9:ad:f7:3c:f6:6f:bf:80:f0:c1:11:8c:2b:50:3c:a2: 67:4e:cf:85:f4:a9:34:f7:b3:4a:1a:03:ac:9e:c2:c8:a8:fb: 76:e9:bc:1c:dd:14:83:5c:3f:09:98:21:13:9f:c4:e1:aa:37: b8:c6:78:c8:99:4f:23:7d:22:ac:9a:02:3a:cf:66:f6:40:56: 47:58:8d:57:65:ee:13:30:ee:fe:d2:42:bd:de:e6:e5:93:f4: 63:7c:d2:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC RkI4MENGNUUwHhcNMjYwMTI0MjIxMjE4WhcNMjYwMTMxMjIxMjE4WjAYMRYwFAYD VQQDDA02OTc1NDNjMi1hYjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxcSzIXYDhjKJJkaH3GpdpFv/O/B3RLVvD/eT/9OFDi5X8UOBXZ+Ijj8tzC4 rMwakjTzGwEIFb4Y3wOGstXEb6pEXGCKryyJWwXAn/RzYrnb3ITMSxV0e+Z32N8D ia5HvX1ALqySyaSQcBjyNzXrjtZCTa4z6XS7wihEkhM78GDEBaMOMzQSaXTHmHgy +b4lWCW4VQ2ob/u9R18IY25OtfZ9HX4xzB3IrrMt2Wp08m7GpmszgtRWvFN0EyMk nEzeCzHQQXdChR7He6Syic9A7rRhVEaYWZlBRpgAvmgNNfi6r953cHcnszX29tDV v/N592i9vgdkirPmmx/jHIrJWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiRTd0V k8uk26Wt+lHdj/WT9faHMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6 MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4My84Q0MyQTlBQURFNzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4 MEQxcnc0V3pmZG1fdUF6MTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVSQPswRaxjwKqwE+a7+U7/zF7N/rzp3vcOVHqmD7vF0d/maoKyJJy FEj84x7cGyl6lAWTb5ZaupJoqW0DBDPU0VCUaSN2LgKBFM/1eNApka0aNcKq5eL0 7sDgfwAcJEOOHj1YlOJwhfMdj6JT/MnpO9XRPsaU0PdQjPcYhUHCdldJJuFXtUcP jewGAcob89y0+6F7eTXMX1mMa1ExgO0Fw1eBPtmt9zz2b7+A8MERjCtQPKJnTs+F 9Kk097NKGgOsnsLIqPt26bwc3RSDXD8JmCETn8Thqje4xnjImU8jfSKsmgI6z2b2 QFZHWI1XZe4TMO7+0kK93ublk/RjfNLX -----END CERTIFICATE-----Generated at Sun Jan 25 04:31:29 2026 by rpki-client