This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft File: NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft (raw, json) Hash identifier: CWZvfiAiQrbVkz9CkGvEcetBawtbXGKyb+BYuMD/7+A= Subject key identifier: F9:0C:CF:06:68:4D:27:35:7E:11:2F:9F:5D:29:04:B3:7D:56:64:55 Authority key identifier: 34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD Certificate issuer: /CN=A91E8F36/serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft Manifest number: 024A Signing time: Sun 25 Jan 2026 01:07:39 +0000 Manifest this update: Sun 25 Jan 2026 01:07:38 +0000 Manifest next update: Sun 01 Feb 2026 01:07:38 +0000 Files and hashes: 1: NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl (hash: L5EsgxJL9kGnI4t7pWR+yPjqBrkXKqrLPOPreKd9rvI=) 2: AC270A727D0711ED8181DA7FC4F9AE02.roa (hash: iIeWWLVIFJDjrG1ibZP/xl+WAjIK44IJWqOkBlQGCcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8F36, serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Validity Not Before: Jan 25 01:07:38 2026 GMT Not After : Feb 1 01:07:38 2026 GMT Subject: CN=69756cdb-b6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:16:10:08:23:20:69:5d:a6:37:89:d8:65: 9c:8f:0c:fc:02:6e:53:e7:27:ec:49:3d:c9:6a:a8: 97:27:ea:f7:ac:77:e6:2a:bc:0f:0d:d5:67:d6:ec: 13:4a:44:a7:4d:7c:c7:3b:be:d6:7d:67:5c:bd:79: af:6b:f6:a4:58:a6:64:1b:e8:c2:96:59:09:47:b1: 2d:af:2c:ab:dd:3b:f7:e0:e8:31:33:30:60:d5:8e: 2d:ff:0e:06:7e:40:a0:a7:47:c6:42:c2:99:f5:e6: e4:70:1c:3f:ea:73:80:19:b9:9f:58:bf:4c:12:11: c7:37:fd:51:17:0a:59:35:1e:68:6c:f2:a1:bd:c6: 93:eb:e5:96:c2:4e:8e:43:2e:8d:67:8a:ed:3b:9d: de:0d:cb:a4:7a:fb:41:01:ec:4e:b6:10:3b:48:62: e6:f0:f0:26:df:c5:a8:a9:06:9f:9e:f2:6d:69:da: 5e:10:e3:1d:61:21:0d:e6:bc:86:fa:e7:d3:47:29: 67:57:cb:38:51:30:95:43:5e:1d:ab:c5:61:4b:dc: 71:18:93:ea:bf:07:2f:54:38:a5:15:28:ed:c8:81: cc:b7:ca:34:5c:33:63:7a:35:a6:1f:c8:0d:c9:85: 82:a7:50:f1:9f:70:b9:0e:fc:d3:a3:4b:8e:a5:40: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0C:CF:06:68:4D:27:35:7E:11:2F:9F:5D:29:04:B3:7D:56:64:55 X509v3 Authority Key Identifier: keyid:34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b0:94:85:69:57:62:c4:c4:f9:39:dd:ff:3e:82:59:7a:76: 00:d3:6a:2d:30:08:51:41:9e:14:19:fe:89:94:ad:aa:2f:60: dd:53:56:9f:5c:5e:18:a0:68:d9:93:14:bd:0e:f8:c8:76:72: a4:ee:79:73:b6:66:a1:72:87:3b:d7:df:e4:34:d0:26:9d:de: c6:2b:f7:51:87:41:25:e0:c8:5e:b5:59:8b:f2:b6:41:4e:f2: 03:e2:70:94:1d:da:a0:9d:01:97:45:bb:f0:62:38:a8:44:2c: 0f:19:6e:d8:f5:c1:bd:9a:62:e2:72:88:d7:33:78:c3:75:39: af:7d:37:65:9a:af:47:f2:c7:77:0b:e3:ad:25:7e:f0:81:0c: 3a:17:5b:94:fd:9d:b7:27:4b:c3:d0:5b:c9:d3:fe:bf:91:f9: 92:fe:20:4e:a1:b8:d2:be:f4:9d:97:4c:b9:31:49:61:d0:45: e4:8d:ae:3b:e4:69:0e:0d:e9:c2:97:df:da:a1:26:95:6a:f0: 2f:e3:74:a2:e0:6f:b3:db:b2:43:9a:b8:f0:80:f5:1f:8c:a2: 85:b8:91:69:b5:e4:fb:1d:96:63:63:40:49:e7:21:97:30:ee: 0a:5a:fe:54:d6:37:e1:0a:ae:8c:10:88:11:3c:27:70:66:93: d9:0c:fc:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThGMzYxMTAvBgNVBAUTKDM0RDdENkQ0NDFDMzJEN0M4NzE0MkU5RkU1QzdFQkM0 RjQ3OUIwQ0QwHhcNMjYwMTI1MDEwNzM4WhcNMjYwMjAxMDEwNzM4WjAYMRYwFAYD VQQDDA02OTc1NmNkYi1iNmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxH8WEAgjIGldpjeJ2GWcjwz8Am5T5yfsST3JaqiXJ+r3rHfmKrwPDdVn1uwT SkSnTXzHO77WfWdcvXmva/akWKZkG+jCllkJR7Etryyr3Tv34OgxMzBg1Y4t/w4G fkCgp0fGQsKZ9ebkcBw/6nOAGbmfWL9MEhHHN/1RFwpZNR5obPKhvcaT6+WWwk6O Qy6NZ4rtO53eDcukevtBAexOthA7SGLm8PAm38WoqQafnvJtadpeEOMdYSEN5ryG +ufTRylnV8s4UTCVQ14dq8VhS9xxGJPqvwcvVDilFSjtyIHMt8o0XDNjejWmH8gN yYWCp1Dxn3C5DvzTo0uOpUBrZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkMzwZo TSc1fhEvn10pBLN9VmRVMB8GA1UdIwQYMBaAFDTX1tRBwy18hxQun+XH68T0ebDN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEYzNi8yNDlGNDE0NjdE MDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExYeUhGQzZmNWNmcnhQUjVz TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05OZlcxRUhETFh5SEZDNmY1Y2ZyeFBSNXNNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEYzNi8yNDlGNDE0NjdEMDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExY eUhGQzZmNWNmcnhQUjVzTTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6sJSFaVdixMT5Od3/PoJZenYA02otMAhRQZ4UGf6JlK2qL2DdU1af XF4YoGjZkxS9DvjIdnKk7nlztmahcoc719/kNNAmnd7GK/dRh0El4MhetVmL8rZB TvID4nCUHdqgnQGXRbvwYjioRCwPGW7Y9cG9mmLicojXM3jDdTmvfTdlmq9H8sd3 C+OtJX7wgQw6F1uU/Z23J0vD0FvJ0/6/kfmS/iBOobjSvvSdl0y5MUlh0EXkja47 5GkODenCl9/aoSaVavAv43Si4G+z27JDmrjwgPUfjKKFuJFpteT7HZZjY0BJ5yGX MO4KWv5U1jfhCq6MEIgRPCdwZpPZDPzP -----END CERTIFICATE-----Generated at Sun Jan 25 04:27:21 2026 by rpki-client