This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft File: NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft (raw, json) Hash identifier: LM42vEPULyTOnXxX7oKzKeJQBzZ1gl9PccpG0pRcoLY= Subject key identifier: C7:E5:4C:3D:F9:0E:D5:46:76:49:93:78:82:44:75:82:22:51:C4:2B Authority key identifier: 34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A Certificate issuer: /CN=A91B927E/serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A Certificate serial: 0ABC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft Manifest number: 1226 Signing time: Sat 24 Jan 2026 18:58:18 +0000 Manifest this update: Sat 24 Jan 2026 18:58:17 +0000 Manifest next update: Sat 31 Jan 2026 18:58:17 +0000 Files and hashes: 1: NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl (hash: 7JzDPZ9TkloRRaGPjsg0aMHVSESDj3X9Yz9rrohIC7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2748 (0xabc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B927E, serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A Validity Not Before: Jan 24 18:58:17 2026 GMT Not After : Jan 31 18:58:17 2026 GMT Subject: CN=6975164a-ca5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:fe:0f:6f:7d:38:c3:81:61:be:6a:66:04: 84:4c:f8:8b:bb:5c:fe:4b:25:0f:3d:15:09:5b:df: 36:d5:ff:d6:1f:c7:1e:e6:18:24:79:36:4d:f4:b2: 11:a7:12:ef:1a:e9:14:c3:1d:00:23:78:d5:4e:3a: ad:fd:f1:22:15:6b:f2:93:8c:5b:72:6a:b1:a4:58: bc:83:29:7b:85:85:1c:ad:08:0c:9b:41:92:4c:22: 7b:35:d5:90:ed:bc:e1:3c:a2:01:c0:fb:71:9f:2d: 8a:7d:6a:0c:e4:a4:3c:60:de:e7:b1:27:e0:a3:be: 00:06:36:d3:75:00:09:bc:22:30:fe:46:4b:c8:ba: d6:44:57:30:3f:c9:9f:88:6d:9d:c4:10:89:99:0b: df:f4:69:06:7e:17:1c:5a:8c:f1:a7:a9:f3:24:6a: 13:7e:37:74:8d:11:70:8d:ab:20:4f:08:f2:00:53: 9c:b7:63:ce:1c:44:68:6c:c7:ce:78:9b:48:62:e2: 31:21:78:1d:09:89:03:f8:ca:b5:7d:e4:85:cb:e1: ca:5f:5e:ff:10:d0:b4:72:23:ff:b5:d3:a0:42:83: 8e:9d:de:5b:0a:71:fe:b8:a8:9b:fc:b2:af:3a:07: 92:33:73:2a:81:e5:94:d1:44:9b:68:69:04:93:ce: f3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E5:4C:3D:F9:0E:D5:46:76:49:93:78:82:44:75:82:22:51:C4:2B X509v3 Authority Key Identifier: keyid:34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:5f:03:13:19:7c:66:09:db:13:a1:54:97:35:c9:7f:6d:14: 07:31:2b:fb:9f:83:b9:49:82:4d:23:33:a2:ea:7a:d4:e6:66: 6e:0a:75:8a:a2:b2:45:5c:07:1f:12:9f:16:49:47:ae:de:3a: d3:3b:74:5a:a0:26:06:fb:a2:74:87:11:25:31:92:25:e6:b2: 6a:03:c3:d1:6b:4e:cd:ff:79:74:3e:90:8a:2d:c6:b6:98:18: 7d:61:d9:68:00:ee:db:aa:8f:81:d4:ba:76:20:fd:91:75:67: fd:45:f4:41:7b:58:99:fb:6c:e8:42:4d:21:2e:22:54:a5:c7: cc:53:89:a5:29:f1:0c:28:ed:db:80:0c:fd:ad:3b:c9:bc:de: c7:05:12:eb:db:43:c3:3d:87:66:70:90:68:8e:76:44:39:78: 99:86:50:77:a8:a7:46:23:6d:b7:6e:82:dc:36:02:0c:6c:ea: 60:4c:78:46:07:ce:c2:4c:38:a7:08:58:65:9b:ff:2b:3e:34: 6f:d9:ca:ca:93:d0:fc:7e:64:a8:d4:5c:0b:89:99:ad:1d:8d: e5:cf:1f:3c:24:57:97:05:13:9f:47:c3:64:94:b3:2b:9c:26: f9:a3:24:24:e8:76:93:8a:38:1c:b5:99:b0:20:b4:9d:3e:e2: 5d:8d:48:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyN0UxMTAvBgNVBAUTKDM0NkRGMEVGNEQ4QkM2M0MzODI0RDZFNDkwMDY3NDYz MjU0N0IwOEEwHhcNMjYwMTI0MTg1ODE3WhcNMjYwMTMxMTg1ODE3WjAYMRYwFAYD VQQDDA02OTc1MTY0YS1jYTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAr+D299OMOBYb5qZgSETPiLu1z+SyUPPRUJW9821f/WH8ce5hgkeTZN9LIR pxLvGukUwx0AI3jVTjqt/fEiFWvyk4xbcmqxpFi8gyl7hYUcrQgMm0GSTCJ7NdWQ 7bzhPKIBwPtxny2KfWoM5KQ8YN7nsSfgo74ABjbTdQAJvCIw/kZLyLrWRFcwP8mf iG2dxBCJmQvf9GkGfhccWozxp6nzJGoTfjd0jRFwjasgTwjyAFOct2POHERobMfO eJtIYuIxIXgdCYkD+Mq1feSFy+HKX17/ENC0ciP/tdOgQoOOnd5bCnH+uKib/LKv OgeSM3MqgeWU0USbaGkEk87zlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMflTD35 DtVGdkmTeIJEdYIiUcQrMB8GA1UdIwQYMBaAFDRt8O9Ni8Y8OCTW5JAGdGMlR7CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI3RS9DQ0Q2RUQxQzY4 REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9ORzN3NzAyTHhqdzRKTmJra0FaMFl5Vkhz SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05HM3c3MDJMeGp3NEpOYmtrQVowWXlWSHNJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI3RS9DQ0Q2RUQxQzY4REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9ORzN3NzAyTHhq dzRKTmJra0FaMFl5VkhzSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgXwMTGXxmCdsToVSXNcl/bRQHMSv7n4O5SYJNIzOi6nrU5mZuCnWK orJFXAcfEp8WSUeu3jrTO3RaoCYG+6J0hxElMZIl5rJqA8PRa07N/3l0PpCKLca2 mBh9YdloAO7bqo+B1Lp2IP2RdWf9RfRBe1iZ+2zoQk0hLiJUpcfMU4mlKfEMKO3b gAz9rTvJvN7HBRLr20PDPYdmcJBojnZEOXiZhlB3qKdGI223boLcNgIMbOpgTHhG B87CTDinCFhlm/8rPjRv2crKk9D8fmSo1FwLiZmtHY3lzx88JFeXBROfR8NklLMr nCb5oyQk6HaTijgctZmwILSdPuJdjUgb -----END CERTIFICATE-----Generated at Sun Jan 25 02:57:44 2026 by rpki-client