This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: /FCUMs4h1+Hya7RoEHS9AKBXi5dy4SddLxrKSTadCeU= Subject key identifier: BF:3B:5A:B5:3E:F9:F5:32:B2:DA:EC:54:1B:D4:5B:93:50:1F:03:B1 Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1F66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1E90 Signing time: Sat 24 Jan 2026 15:54:50 +0000 Manifest this update: Sat 24 Jan 2026 15:54:49 +0000 Manifest next update: Sat 31 Jan 2026 15:54:49 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: UEedgRUjXYXE/bPAFescU1dlX3n91xUh5R1YrLfiaqc=) 2: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: 5b1/IgnFBtnOU/QGYhYiucXHvjsBgfKiscQ0RXrreCU=) 3: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: 50LilFdBJbezb7tEZ8nsCEOtBU33AYgM2/+xtSJDySI=) 4: B6D9896CD51111F0AE06421FC4F9AE02.roa (hash: JeWsOi+knaSUxggDbgl626QjqrgQeIlCOoedWQ2j1gw=) 5: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: i7wEnbCyGMVzc1IAkdcmx0nvf45iFjmn6BBF93GVkvU=) 6: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: ltr4XnwnjVpdj/jucAxqqv9mxZJ3S6DG2NUkiYWuAIA=) 7: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: 2B6MyeDlusb2e4Wysz6uj9aO5/idmj+cmIrB8/V1Q4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8038 (0x1f66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Jan 24 15:54:49 2026 GMT Not After : Jan 31 15:54:49 2026 GMT Subject: CN=6974eb49-18b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:e4:d0:23:ad:a3:69:4b:51:ee:62:3d:27: 5a:33:f6:87:25:ff:31:b0:96:30:69:35:0d:c5:09: bb:e9:36:a5:ba:28:74:69:92:ef:77:3f:cd:40:a5: 56:58:60:8a:87:d1:48:ca:c3:5b:a1:2c:ff:48:25: 79:c3:8e:cc:9e:7a:9b:f2:7d:f4:94:f5:7f:e2:a3: f3:b4:da:94:fd:12:68:ab:0d:ec:c9:5a:f7:2a:71: a6:45:43:bb:66:4b:c1:73:f1:d0:a3:4a:f3:a2:24: dd:a6:86:2c:e4:65:c0:14:96:48:ed:80:98:41:b0: 65:69:a7:14:5e:55:c1:42:67:5c:a4:df:5e:5a:d7: 3e:65:0f:25:89:e0:0e:da:38:4d:a6:ba:a2:6a:be: 7c:f9:b7:08:14:ec:9a:ba:44:ed:55:f4:2e:85:86: 81:ac:8c:ce:9f:62:39:f9:f1:13:30:cb:8b:91:d8: 41:0f:66:0a:27:a7:b7:b4:7a:5f:b1:ef:29:7d:ce: e4:ad:ea:02:88:d5:70:e8:c3:2b:21:92:e5:58:67: 1e:19:d5:88:48:07:81:f0:30:7b:94:da:8f:19:06: a5:1a:6e:7a:68:f0:4a:22:25:c7:f9:b4:21:e6:5d: bf:e1:74:da:bc:5c:6d:8f:0d:50:8b:cc:38:f4:51: 9a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3B:5A:B5:3E:F9:F5:32:B2:DA:EC:54:1B:D4:5B:93:50:1F:03:B1 X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:3a:ee:ae:af:72:3c:d0:f9:88:32:7d:db:86:1e:a4:5f:c1: 9d:8d:42:06:da:07:6d:d8:0f:93:b8:a7:e0:71:2b:e3:56:99: f1:c4:2c:5a:04:b9:f4:8d:90:8b:f2:fa:60:07:8f:ff:d9:d1: 2a:64:13:ae:1e:f8:58:f1:35:0b:11:fd:24:cc:ee:ae:6f:61: f9:dc:74:a2:d4:f5:51:a1:ad:59:f2:95:fc:6e:93:f8:03:36: 82:87:a3:9a:b1:d6:3a:e8:7b:67:0c:3b:bb:0e:3b:70:d2:df: 44:db:bd:1e:07:83:19:a5:bf:67:cf:cf:77:31:55:22:c8:19: ab:c4:56:98:bc:8f:e2:88:54:61:c8:6b:a3:a3:69:a3:09:08: b6:92:1e:94:cc:cf:a7:7a:80:2e:7b:ea:e7:72:8a:38:91:8c: 45:a7:0e:9b:0d:d4:5d:1b:f9:47:b6:1f:11:65:44:c2:f6:82: 79:fe:b0:45:32:14:b0:c4:95:76:21:6c:07:f1:f0:cf:83:66: 03:ef:9b:67:a4:cc:41:10:bc:ce:a3:83:95:06:9b:6a:e3:60: 13:f5:08:13:61:63:8f:a2:c7:10:65:a8:00:4d:43:4a:e0:bd: 58:8e:67:29:38:35:f4:d6:80:81:08:5c:be:06:e3:91:2d:59: 43:03:6c:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjYwMTI0MTU1NDQ5WhcNMjYwMTMxMTU1NDQ5WjAYMRYwFAYD VQQDDA02OTc0ZWI0OS0xOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxn/k0COto2lLUe5iPSdaM/aHJf8xsJYwaTUNxQm76Taluih0aZLvdz/NQKVW WGCKh9FIysNboSz/SCV5w47Mnnqb8n30lPV/4qPztNqU/RJoqw3syVr3KnGmRUO7 ZkvBc/HQo0rzoiTdpoYs5GXAFJZI7YCYQbBlaacUXlXBQmdcpN9eWtc+ZQ8lieAO 2jhNprqiar58+bcIFOyaukTtVfQuhYaBrIzOn2I5+fETMMuLkdhBD2YKJ6e3tHpf se8pfc7kreoCiNVw6MMrIZLlWGceGdWISAeB8DB7lNqPGQalGm56aPBKIiXH+bQh 5l2/4XTavFxtjw1Qi8w49FGapQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL87WrU+ +fUystrsVBvUW5NQHwOxMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATOu6ur3I80PmIMn3bhh6kX8GdjUIG2gdt2A+TuKfgcSvjVpnxxCxa BLn0jZCL8vpgB4//2dEqZBOuHvhY8TULEf0kzO6ub2H53HSi1PVRoa1Z8pX8bpP4 AzaCh6OasdY66HtnDDu7Djtw0t9E270eB4MZpb9nz893MVUiyBmrxFaYvI/iiFRh yGujo2mjCQi2kh6UzM+neoAue+rncoo4kYxFpw6bDdRdG/lHth8RZUTC9oJ5/rBF MhSwxJV2IWwH8fDPg2YD75tnpMxBELzOo4OVBptq42AT9QgTYWOPoscQZagATUNK 4L1YjmcpODX01oCBCFy+BuORLVlDA2yd -----END CERTIFICATE-----Generated at Sun Jan 25 13:41:41 2026 by rpki-client