This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft File: nNdxObeuQMY2CS0SiGlE3j8a_-I.mft (raw, json) Hash identifier: uuCel1VpKWkFnb2/BPeA/a62OVZ6JjRGPZwkP0VTkpY= Subject key identifier: CA:0C:8A:85:D6:7B:F2:B3:E0:8C:22:03:77:72:B9:7A:B3:99:09:4C Authority key identifier: 9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2 Certificate issuer: /CN=A91F3BDE/serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft Manifest number: 09 Signing time: Sat 24 Jan 2026 17:59:05 +0000 Manifest this update: Sat 24 Jan 2026 17:59:04 +0000 Manifest next update: Sat 31 Jan 2026 17:59:04 +0000 Files and hashes: 1: nNdxObeuQMY2CS0SiGlE3j8a_-I.crl (hash: mH/CSRATlTpVuGBm6rQ4Try1xUO6790rTlP/j5zTSeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3BDE, serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2 Validity Not Before: Jan 24 17:59:04 2026 GMT Not After : Jan 31 17:59:04 2026 GMT Subject: CN=69750869-63c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:5f:7e:ab:84:60:54:91:59:c4:b1:66:8e: 47:1f:95:02:e9:3e:d0:88:87:70:86:c1:f0:55:58: 02:29:1d:b5:8f:19:1e:6b:0f:36:d9:92:cd:70:39: 26:1d:8a:05:8f:9f:a9:b2:83:9f:e2:f2:09:9a:47: bf:32:db:4e:f8:12:44:b1:35:ed:71:e4:1a:b9:20: 27:90:8e:30:d2:30:c2:50:99:95:96:18:b9:75:88: 95:db:eb:5e:61:ae:29:83:bb:4a:93:53:fb:85:7b: d3:8d:ad:52:04:f9:b6:61:7d:08:df:c9:6a:73:d4: e7:7d:37:89:17:78:2c:9d:e6:5f:6c:77:58:6d:b2: ff:77:55:17:ae:bb:01:b4:bf:38:3b:af:b8:f3:26: 5a:64:4c:02:07:ca:0e:16:61:26:95:e4:a4:ce:2d: 85:5b:a4:c5:ae:fe:ee:cb:97:c2:40:42:e0:1f:35: 07:41:4f:51:93:cb:95:95:c7:49:f3:c3:1a:8d:22: 54:c0:b4:18:9d:6f:d0:d7:4d:7a:5f:2a:70:ee:0c: ba:6d:ac:c3:a9:50:58:30:32:ca:3e:2b:e0:f6:41: 61:6d:0d:6f:ea:1d:94:8e:45:69:b7:b7:9e:49:f8: 4e:07:62:ba:d4:4b:7b:5b:59:b8:dc:6d:31:2e:33: c7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0C:8A:85:D6:7B:F2:B3:E0:8C:22:03:77:72:B9:7A:B3:99:09:4C X509v3 Authority Key Identifier: keyid:9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d5:69:9a:4e:4f:21:ff:4b:04:ff:a6:d7:ad:a7:e8:b9:88: 9f:7c:8b:09:44:00:c0:89:c5:e3:6c:87:f9:99:ef:ba:86:8d: 97:81:1a:2a:43:ae:81:98:5c:45:2d:2d:8f:55:0b:2b:c5:51: fc:2c:eb:a7:7e:06:61:c0:41:d9:54:dc:6f:93:bc:3f:68:98: 07:61:20:cb:1e:60:24:d6:9c:5f:aa:30:23:89:92:0e:cf:9f: 7e:a1:59:56:dc:7d:5e:75:a0:f7:95:69:aa:ad:18:fc:ec:21: 7e:76:d4:1b:6c:15:05:c9:b8:32:6e:5b:e0:7d:62:56:f8:72: 6d:17:98:51:67:14:50:be:e1:ac:a9:56:01:f0:64:4b:c3:49: 87:d8:1b:0e:2d:14:82:57:18:30:14:d1:4a:0d:46:da:2a:27: b7:b0:3d:39:c1:90:d5:7b:ea:a0:be:16:fb:e6:6d:8c:a0:44: f2:78:22:9e:b1:e3:6c:e5:7f:89:ea:64:ae:7b:35:35:d0:0e: 7a:04:68:d0:3b:e1:4b:91:01:0f:62:31:01:c5:64:2f:93:94: 7b:63:2d:5b:9e:2a:b9:bb:70:bc:4f:4c:d1:6d:fe:5e:2b:d8: a3:0c:6a:f0:39:83:f9:9d:9c:11:e8:50:1f:e2:31:9e:c3:30: 3e:56:fb:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFG M0JERTExMC8GA1UEBRMoOUNENzcxMzlCN0FFNDBDNjM2MDkyRDEyODg2OTQ0REUz RjFBRkZFMjAeFw0yNjAxMjQxNzU5MDRaFw0yNjAxMzExNzU5MDRaMBgxFjAUBgNV BAMMDTY5NzUwODY5LTYzYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4sF9+q4RgVJFZxLFmjkcflQLpPtCIh3CGwfBVWAIpHbWPGR5rDzbZks1wOSYd igWPn6myg5/i8gmaR78y2074EkSxNe1x5Bq5ICeQjjDSMMJQmZWWGLl1iJXb615h rimDu0qTU/uFe9ONrVIE+bZhfQjfyWpz1Od9N4kXeCyd5l9sd1htsv93VReuuwG0 vzg7r7jzJlpkTAIHyg4WYSaV5KTOLYVbpMWu/u7Ll8JAQuAfNQdBT1GTy5WVx0nz wxqNIlTAtBidb9DXTXpfKnDuDLptrMOpUFgwMso+K+D2QWFtDW/qHZSORWm3t55J +E4HYrrUS3tbWbjcbTEuM8cPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUygyKhdZ7 8rPgjCIDd3K5erOZCUwwHwYDVR0jBBgwFoAUnNdxObeuQMY2CS0SiGlE3j8a/+Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQkRFLzZGRjIzQjkwRjAx NzExRjA4NTU0MUYyNDQ3NkY1NkJDL25OZHhPYmV1UU1ZMkNTMFNpR2xFM2o4YV8t SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbk5keE9iZXVRTVkyQ1MwU2lHbEUzajhhXy1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz QkRFLzZGRjIzQjkwRjAxNzExRjA4NTU0MUYyNDQ3NkY1NkJDL25OZHhPYmV1UU1Z MkNTMFNpR2xFM2o4YV8tSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHvVaZpOTyH/SwT/ptetp+i5iJ98iwlEAMCJxeNsh/mZ77qGjZeBGipD roGYXEUtLY9VCyvFUfws66d+BmHAQdlU3G+TvD9omAdhIMseYCTWnF+qMCOJkg7P n36hWVbcfV51oPeVaaqtGPzsIX521BtsFQXJuDJuW+B9Ylb4cm0XmFFnFFC+4ayp VgHwZEvDSYfYGw4tFIJXGDAU0UoNRtoqJ7ewPTnBkNV76qC+FvvmbYygRPJ4Ip6x 42zlf4nqZK57NTXQDnoEaNA74UuRAQ9iMQHFZC+TlHtjLVueKrm7cLxPTNFt/l4r 2KMMavA5g/mdnBHoUB/iMZ7DMD5W+x8= -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:50 2026 by rpki-client