This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft File: NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft (raw, json) Hash identifier: oZVhsWQwk5dKS98iKpoRTqskltjHZX5JFHPQNiL3VAc= Subject key identifier: 19:70:45:7A:95:48:BD:67:8B:0B:78:3A:10:F2:56:6D:43:7B:1E:87 Authority key identifier: 34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3 Certificate issuer: /CN=A91BB9EF/serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft Manifest number: 23 Signing time: Sun 25 Jan 2026 06:49:32 +0000 Manifest this update: Sun 25 Jan 2026 06:49:32 +0000 Manifest next update: Sun 01 Feb 2026 06:49:32 +0000 Files and hashes: 1: NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl (hash: fXjFoKBUiFRKwGtnQMLTOHALCl6GnYFF772Zlv6nkpI=) 2: E57517B0C84F11F0B9AA990CC4F9AE02.roa (hash: APz1fq2YwQ7yS7mDD19LwdpN2CTZ/bZgxloH7c0/wbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB9EF, serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3 Validity Not Before: Jan 25 06:49:32 2026 GMT Not After : Feb 1 06:49:32 2026 GMT Subject: CN=6975bcfc-eee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:31:2f:55:03:18:d9:0e:ca:91:c1:80:b0:55: db:b4:cd:61:6f:ca:69:4b:27:fd:f8:92:b4:2a:98: 7c:de:52:72:fc:42:9b:b8:12:17:15:dc:73:df:1d: 8a:e4:47:bb:72:ff:98:9c:3e:80:18:b5:8c:89:e9: 05:51:39:34:82:ed:2a:7c:54:b3:96:7a:fc:ad:cb: 3f:d0:59:c5:d7:8d:91:8e:60:d4:37:76:bc:7c:e0: 90:31:cc:4c:d4:6d:4d:0b:9f:ca:b0:ba:69:f3:12: 3d:86:d6:1a:de:8e:78:ea:9c:98:97:a2:7e:28:7a: 29:bb:59:4c:9f:90:6c:4e:93:33:59:91:1e:bf:94: 4a:f0:d1:73:61:93:5f:70:72:84:6e:75:a3:27:1c: d4:59:9e:19:15:9b:72:6d:76:8c:9d:d2:10:4c:f4: 23:b7:43:a9:fd:af:1f:24:00:10:f3:77:e5:cd:ee: 66:f1:b2:8e:48:dc:ec:1e:05:a5:35:97:aa:44:2c: 8e:92:68:cd:be:9b:ab:5f:bd:fc:13:e8:a6:ca:73: 7b:3e:24:21:71:7f:2f:9b:eb:b8:d2:d1:da:4b:aa: 5f:4b:43:b2:5d:01:26:e6:99:a8:85:27:b5:7b:1b: 2e:82:94:ac:0a:bf:b5:62:a7:a7:3c:06:ca:73:46: e9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:70:45:7A:95:48:BD:67:8B:0B:78:3A:10:F2:56:6D:43:7B:1E:87 X509v3 Authority Key Identifier: keyid:34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1a:68:0f:7c:0a:82:54:fb:d5:6e:7c:d0:43:5d:be:02:66: 93:0a:b5:8c:65:32:52:79:dd:c0:7b:84:7f:6d:76:9e:1c:c8: 05:5b:ed:2b:32:8e:0d:b9:f5:df:01:f0:84:0d:7b:b7:29:6f: db:1f:d6:84:a8:f1:15:3a:84:45:a2:8b:a1:d1:1e:21:4b:26: 2d:5f:ff:ee:32:59:f7:e6:2c:c5:c8:3f:b5:5b:81:a3:96:2b: e5:1c:81:03:b0:dd:79:59:30:74:de:28:49:ff:44:17:27:eb: 3a:1c:80:40:d7:e2:f9:37:c2:91:f4:c0:f7:4b:e9:08:c9:fd: b5:29:50:4e:47:08:09:86:32:86:24:ca:98:59:68:26:ce:81: 5c:7b:98:ed:f4:e6:dd:a3:3c:70:ba:64:9c:82:c4:2a:f8:1a: 50:43:f5:b7:a2:a3:ac:e1:2d:2f:a2:e4:22:07:cf:74:8b:d1: 08:af:43:c2:90:bc:84:2c:53:f9:6c:ad:20:8d:94:65:74:56: 57:d1:67:f4:24:19:11:2d:36:62:16:48:b2:6d:fb:7a:c8:8f: da:aa:09:b1:6d:f5:14:47:01:8b:40:20:14:fe:df:78:97:64: 88:84:2b:42:63:20:a4:67:83:db:15:4d:d7:de:ab:26:ac:94: af:39:99:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjlFRjExMC8GA1UEBRMoMzRGNDY3NkMwNjYzODM5MTQ3OTczRDRDODY5QjQ5REM4 QzY2NDBGMzAeFw0yNjAxMjUwNjQ5MzJaFw0yNjAyMDEwNjQ5MzJaMBgxFjAUBgNV BAMMDTY5NzViY2ZjLWVlZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCNMS9VAxjZDsqRwYCwVdu0zWFvymlLJ/34krQqmHzeUnL8Qpu4EhcV3HPfHYrk R7ty/5icPoAYtYyJ6QVROTSC7Sp8VLOWevytyz/QWcXXjZGOYNQ3drx84JAxzEzU bU0Ln8qwumnzEj2G1hrejnjqnJiXon4oeim7WUyfkGxOkzNZkR6/lErw0XNhk19w coRudaMnHNRZnhkVm3Jtdoyd0hBM9CO3Q6n9rx8kABDzd+XN7mbxso5I3OweBaU1 l6pELI6SaM2+m6tfvfwT6KbKc3s+JCFxfy+b67jS0dpLql9LQ7JdASbmmaiFJ7V7 Gy6ClKwKv7Vip6c8BspzRukhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGXBFepVI vWeLC3g6EPJWbUN7HocwHwYDVR0jBBgwFoAUNPRnbAZjg5FHlz1MhptJ3IxmQPMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOUVGLzg3ODcyM0U2Qzg0 RjExRjA4QkVCQ0QwQkM0RjlBRTAyL05QUm5iQVpqZzVGSGx6MU1ocHRKM0l4bVFQ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlBSbmJBWmpnNUZIbHoxTWhwdEozSXhtUVBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC OUVGLzg3ODcyM0U2Qzg0RjExRjA4QkVCQ0QwQkM0RjlBRTAyL05QUm5iQVpqZzVG SGx6MU1ocHRKM0l4bVFQTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD4aaA98CoJU+9VufNBDXb4CZpMKtYxlMlJ53cB7hH9tdp4cyAVb7Ssy jg259d8B8IQNe7cpb9sf1oSo8RU6hEWii6HRHiFLJi1f/+4yWffmLMXIP7VbgaOW K+UcgQOw3XlZMHTeKEn/RBcn6zocgEDX4vk3wpH0wPdL6QjJ/bUpUE5HCAmGMoYk yphZaCbOgVx7mO305t2jPHC6ZJyCxCr4GlBD9beio6zhLS+i5CIHz3SL0QivQ8KQ vIQsU/lsrSCNlGV0VlfRZ/QkGREtNmIWSLJt+3rIj9qqCbFt9RRHAYtAIBT+33iX ZIiEK0JjIKRng9sVTdfeqyaslK85mYs= -----END CERTIFICATE-----Generated at Sun Jan 25 09:57:01 2026 by rpki-client