This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft File: npzIDlqYTBof1BodMUaSYKIS2t8.mft (raw, json) Hash identifier: SIfGFhwfIYF7TwM4l+liCF5BOPetXQkKWAKP1wiDwTM= Subject key identifier: C6:8B:F6:D1:BA:18:D0:1E:29:A9:15:13:7D:97:E1:6E:F1:54:CD:12 Authority key identifier: 9E:9C:C8:0E:5A:98:4C:1A:1F:D4:1A:1D:31:46:92:60:A2:12:DA:DF Certificate issuer: /CN=A91CFBA9/serialNumber=9E9CC80E5A984C1A1FD41A1D31469260A212DADF Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft Manifest number: 39 Signing time: Fri 23 Jan 2026 06:31:51 +0000 Manifest this update: Fri 23 Jan 2026 06:31:50 +0000 Manifest next update: Fri 30 Jan 2026 06:31:50 +0000 Files and hashes: 1: npzIDlqYTBof1BodMUaSYKIS2t8.crl (hash: +wVCNqrk4aOxtmApmWi9Qc6eqY6SXXOd0QYicjzcu7A=) 2: 8966E266A77811F092FD731BC4F9AE02.roa (hash: UIqdJutuJDlhfZ5sjZNc55vuXujNjCHWgG438Kpp1wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.crl rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBA9, serialNumber=9E9CC80E5A984C1A1FD41A1D31469260A212DADF Validity Not Before: Jan 23 06:31:50 2026 GMT Not After : Jan 30 06:31:50 2026 GMT Subject: CN=697315d6-00c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:5e:ce:38:12:5f:f4:38:d4:84:80:3f:70: 82:9b:1c:13:d6:6e:5d:7c:72:d7:92:c1:ba:3b:f1: 51:43:f7:55:f9:5b:75:eb:4f:a2:fb:d0:4b:e8:e9: 1a:64:d7:89:27:30:9e:0e:0d:68:d8:96:18:45:68: 67:33:4e:94:0f:7e:ba:99:12:be:ac:7a:b3:e6:ef: b0:38:a6:bc:f8:99:88:bc:01:0a:d8:26:e9:ae:a5: ee:43:e3:cb:45:83:f0:91:61:e0:e6:ac:9d:e7:4e: d2:45:a5:16:e9:2e:7a:58:e9:39:f4:1b:61:6b:62: e9:8f:d6:16:77:3e:ac:31:14:4a:fa:9b:55:87:e8: 82:b9:5c:2f:5b:20:90:5b:5f:ac:18:74:7e:40:99: c3:00:28:4e:be:c2:cc:ee:f5:8e:0f:30:83:e7:a1: 81:f7:f6:fa:20:a0:23:85:6a:36:6a:a5:38:9c:a0: 05:31:86:eb:5e:c4:36:76:d5:e5:73:86:dd:8e:d0: 5a:c1:57:44:09:b4:dc:42:48:6d:b5:38:c7:90:aa: f8:16:f6:e5:76:c3:80:f3:06:1c:62:07:4f:58:fc: 22:0f:36:66:fa:fd:ee:c1:ae:7b:96:bd:7d:21:cc: 07:ca:58:4e:e9:4c:eb:8a:13:fb:ed:51:19:ec:c3: 8b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8B:F6:D1:BA:18:D0:1E:29:A9:15:13:7D:97:E1:6E:F1:54:CD:12 X509v3 Authority Key Identifier: keyid:9E:9C:C8:0E:5A:98:4C:1A:1F:D4:1A:1D:31:46:92:60:A2:12:DA:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:06:74:55:67:51:9f:da:eb:30:2c:d0:e5:d7:2a:14:d7:a3: 30:73:9b:86:f3:c8:04:ee:57:4b:3c:c2:bf:bf:de:88:46:80: 26:4b:ba:14:33:a9:15:52:bb:3f:39:a1:1f:45:7c:2b:44:85: 80:23:5a:58:3a:1f:a4:17:8b:5d:e4:4e:98:00:62:84:16:3b: ea:11:d3:ee:e1:55:11:fb:ce:a8:06:5d:02:e3:77:24:22:93: e7:88:9b:cb:94:0e:bb:ef:e5:b2:31:95:a4:ae:b2:7e:b7:ee: 9e:24:c6:08:b0:ca:b6:0a:a6:76:0d:8c:57:58:8d:fb:6a:8a: b0:bb:58:e6:09:7c:47:6e:2f:12:a0:96:ee:c7:60:40:9c:42: 05:8f:51:3e:0c:ce:e6:26:55:e2:1a:e5:4d:88:e2:7f:38:a4: 51:9d:bf:93:3d:c6:d9:26:92:ff:97:a4:74:a3:e7:92:26:54: 16:98:8f:05:85:2e:33:36:0f:64:2c:ac:16:0b:0e:b3:bb:10: be:d3:bb:90:29:78:b1:3d:56:13:aa:43:38:87:43:94:ae:fc: dc:c0:6f:19:0d:8b:36:ad:0d:17:61:75:e2:ec:a5:8c:fc:8a: 8e:91:8a:01:84:6e:cf:ee:3d:86:58:ff:70:6c:82:ef:06:5d: b3:9c:4e:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkJBOTExMC8GA1UEBRMoOUU5Q0M4MEU1QTk4NEMxQTFGRDQxQTFEMzE0NjkyNjBB MjEyREFERjAeFw0yNjAxMjMwNjMxNTBaFw0yNjAxMzAwNjMxNTBaMBgxFjAUBgNV BAMMDTY5NzMxNWQ2LTAwYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP+V7OOBJf9DjUhIA/cIKbHBPWbl18cteSwbo78VFD91X5W3XrT6L70Evo6Rpk 14knMJ4ODWjYlhhFaGczTpQPfrqZEr6serPm77A4prz4mYi8AQrYJumupe5D48tF g/CRYeDmrJ3nTtJFpRbpLnpY6Tn0G2FrYumP1hZ3PqwxFEr6m1WH6IK5XC9bIJBb X6wYdH5AmcMAKE6+wszu9Y4PMIPnoYH39vogoCOFajZqpTicoAUxhutexDZ21eVz ht2O0FrBV0QJtNxCSG21OMeQqvgW9uV2w4DzBhxiB09Y/CIPNmb6/e7BrnuWvX0h zAfKWE7pTOuKE/vtURnsw4v3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxov20boY 0B4pqRUTfZfhbvFUzRIwHwYDVR0jBBgwFoAUnpzIDlqYTBof1BodMUaSYKIS2t8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkE5LzYyMDk3RTg0QTc3 NTExRjA5NERFQkYyREM0RjlBRTAyL25weklEbHFZVEJvZjFCb2RNVWFTWUtJUzJ0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnB6SURscVlUQm9mMUJvZE1VYVNZS0lTMnQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QkE5LzYyMDk3RTg0QTc3NTExRjA5NERFQkYyREM0RjlBRTAyL25weklEbHFZVEJv ZjFCb2RNVWFTWUtJUzJ0OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALgGdFVnUZ/a6zAs0OXXKhTXozBzm4bzyATuV0s8wr+/3ohGgCZLuhQz qRVSuz85oR9FfCtEhYAjWlg6H6QXi13kTpgAYoQWO+oR0+7hVRH7zqgGXQLjdyQi k+eIm8uUDrvv5bIxlaSusn637p4kxgiwyrYKpnYNjFdYjftqirC7WOYJfEduLxKg lu7HYECcQgWPUT4MzuYmVeIa5U2I4n84pFGdv5M9xtkmkv+XpHSj55ImVBaYjwWF LjM2D2QsrBYLDrO7EL7Tu5ApeLE9VhOqQziHQ5Su/NzAbxkNizatDRdhdeLspYz8 io6RigGEbs/uPYZY/3Bsgu8GXbOcTgA= -----END CERTIFICATE-----Generated at Sun Jan 25 06:11:55 2026 by rpki-client