This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json)
Hash identifier: inmLTyZMq0f93xuI9v3twpNt6tcl3c8F21W73xPUMNE=
Subject key identifier: ED:9E:30:47:B7:6D:15:87:0B:D1:E0:2A:63:12:7C:85:03:2D:1B:51
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 25D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
Manifest number: 231F
Signing time: Tue 20 Jan 2026 15:46:06 +0000
Manifest this update: Tue 20 Jan 2026 15:46:05 +0000
Manifest next update: Tue 27 Jan 2026 15:46:05 +0000
Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: /LAxLgjaDOObpw4FE7V/ZBflJkgbnMjtPdLVToctcxw=)
2: BA007060162D11EEB79F703CC4F9AE02.roa (hash: e+8uiRyglTJ61jp+NHN/xhpvUYkVwouUN/cZkA6eEOU=)
3: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: Ms7QsXkh2kQNfde4KuGq3vFMf59+eXYHE6ZiNy8XHPg=)
4: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: CcwUXK2Ib0st/gF/B8/lAm6jU9CpXcqxg7fd8dewyTs=)
5: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: vY03ulP+sNEIa8G9vSg/u1gVOLM+s6C9pglT3z4JdiE=)
6: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: TAXb6aVncKSk3q+7kBMZVnP/khsko2EZ8HMsWkq82Bs=)
7: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: 8OLjwPx61KkIQCmyjk1QuR/uGi52Ry48+A0/nvUFhto=)
8: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: /Q1bh32UWOj4J5FAl9U6ArPlxdi0wsvaB+wwXRJ3Lqs=)
9: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: PToSeikp/9y9g+Y+7PlL1TL5uKk45sRjErrgPWURTKA=)
10: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: jIa+/65UAgiJ/NRkd/a4I2EsNsv3JwQP5Q3Ix5cv5qo=)
11: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: QoW5v9awLkcGnpT1+XKXrYAVeGX7bCmbAXmL1gr+qQ4=)
12: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: 7nW4B9tgYZxJlUM/jyWz4ppQFx5pTU5qJulzmizVwPY=)
13: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: tFFS7u2Pbz7scJ4rW1SHoAlT2k6YOdbY+5qrpMKq+14=)
14: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: dWk76zBErGHiI9GT7cS+58hFi3EPMy2HTqsf8PBtUYY=)
15: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: QKfklbWPsoXlxByZaPbmc1+075SBHQiALuuEdPCAB50=)
16: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: nJOgKpKVASxgnXQj3ba2FE3qRrXdPvsCxLHQPYaRz00=)
17: 9043DEEC36D311F0944CB44FC4F9AE02.roa (hash: bEqkiO8ENywDu5LUBsotcsupS4ydOR5MpQpDbxlm4V4=)
18: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: kMzN7sJi/LRFE283RDzU5y7iSG/i/1PsyZ93O11mO5c=)
19: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: C3qoGzcQZndm1u3tww57NTFE5NsW08UfVUZpiRELltQ=)
20: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: mTrnMVZI3oc2hbgBbqTPzvSY22GeIaQ6Sv1aw5zibZo=)
21: DB8ED438DEFD11F0BBECA30E5A6F56BC.roa (hash: fh8I1ka4GO8XNJmiky+IWKrVXpp1/PhEPHLqtz63e2I=)
22: 94C16496222811EF99153155C4F9AE02.roa (hash: njk+98oMXqEhaQH4K0CdtGJQNcY6Zsh8AbaFjT9X3L8=)
23: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: b9KSK49f3+RJ5Zndahld37Ne8rgyICiG4X/yrNeRCwg=)
24: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: 9gHoLg8JZHPr+J2x22rrHeXv+R5JGIJTxxftyvYwHuQ=)
25: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: pK1U2tlcFI5eVZ+yZ2Uz2T2hO3URX24xuIkzXvQNT6Q=)
26: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: NK9LWbF8pONuCfm9ynpNYVUJq0bnRlvsHPhOA7O7K+Y=)
27: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: Pn3UiRI/u84/PSVY6hBOi61rOJXfl8nDViwTqHYc55g=)
28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: QW+0w7vdm64Mp8G687zcaLqftcXIlQy6snzgmEoSsjY=)
29: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: D3ZGO/WUxLPwaJZfxjpDYyNLveQ3u6uEceV8mvZASMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9687 (0x25d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Validity
Not Before: Jan 20 15:46:05 2026 GMT
Not After : Jan 27 15:46:05 2026 GMT
Subject: CN=696fa33e-c489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:5c:bf:30:d8:71:06:e7:3d:14:b1:75:b9:
f7:01:f1:71:3f:40:f4:2c:41:e2:bc:da:d4:76:8b:
04:76:57:15:de:12:86:60:8d:4a:55:dd:7e:94:38:
be:91:48:e6:0a:4c:e0:00:07:fd:65:dd:1d:88:c2:
43:35:dd:68:95:c9:33:81:9c:e4:f9:7d:73:f1:fd:
12:14:a9:32:5b:ca:f0:6b:56:0c:37:68:5d:ab:38:
d2:00:57:dc:6c:a2:01:b5:89:65:08:5e:28:1d:fa:
81:0f:42:e4:18:cd:9c:48:95:76:18:81:c5:9e:e9:
b0:cd:e2:aa:e7:b9:b4:10:c1:be:2e:18:ec:1c:86:
b8:66:39:74:b3:43:85:b9:fe:a4:9e:47:3b:11:1a:
fa:f6:7f:64:82:78:f8:c3:01:32:9c:ab:9c:7c:72:
b7:aa:f4:db:e1:fa:a2:5f:b4:0d:b6:0e:c8:0a:8c:
61:70:75:f1:86:66:ac:31:22:f5:84:ae:8c:12:9b:
7e:fd:24:0d:42:12:0b:b9:19:78:aa:a1:5e:2e:58:
17:b2:1a:e0:1a:cc:97:e1:3d:20:b8:b5:d9:d1:ca:
91:aa:6b:af:2b:15:e9:72:f3:bc:b4:55:7e:de:ff:
2c:a4:a5:5f:1e:1a:7a:ec:02:46:37:c3:64:57:9a:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9E:30:47:B7:6D:15:87:0B:D1:E0:2A:63:12:7C:85:03:2D:1B:51
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3a:e4:9b:7d:be:1c:15:90:ce:bf:f7:d2:39:46:21:7e:ce:
45:46:f6:93:60:4d:c0:e9:61:5d:2e:99:48:69:fc:ad:5b:cb:
78:88:e8:9f:df:c2:34:0e:cb:b6:cc:88:45:5c:77:3e:0b:f1:
2c:8b:0c:04:56:29:6b:ba:ea:5c:b1:2a:92:34:dd:26:58:b2:
dc:f2:75:82:6f:31:d1:95:41:7f:d7:bf:20:d3:fa:31:ce:e6:
c7:50:80:94:ad:ec:0e:d9:65:cc:89:d5:e5:2e:73:0d:d0:ee:
cb:2f:2b:91:85:f9:d3:ac:1e:49:79:90:49:e5:da:46:77:53:
80:c1:a9:f2:4a:94:96:b7:20:27:05:e9:99:7b:cf:5a:bf:11:
dd:d0:15:1f:b6:e3:e3:e8:b8:50:af:4d:aa:4b:59:bd:89:3f:
65:a8:71:60:a4:8b:da:a5:38:d1:f2:d1:ef:35:e8:a5:6b:32:
fd:aa:53:f0:ae:29:69:bd:b1:e1:5a:d9:1d:0f:74:63:94:b6:
32:97:e4:34:e8:ba:0c:65:8f:fd:af:72:18:11:72:98:6f:7e:
ad:4d:8f:3a:de:60:e0:52:b9:60:43:4d:24:33:aa:3d:e6:4d:
2c:bb:da:18:23:f6:f3:c3:36:0a:c9:ed:3c:35:85:b0:70:ec:
92:ba:c2:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC
OEIyNDAwMkIwHhcNMjYwMTIwMTU0NjA1WhcNMjYwMTI3MTU0NjA1WjAYMRYwFAYD
VQQDDA02OTZmYTMzZS1jNDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ZlcvzDYcQbnPRSxdbn3AfFxP0D0LEHivNrUdosEdlcV3hKGYI1KVd1+lDi+
kUjmCkzgAAf9Zd0diMJDNd1olckzgZzk+X1z8f0SFKkyW8rwa1YMN2hdqzjSAFfc
bKIBtYllCF4oHfqBD0LkGM2cSJV2GIHFnumwzeKq57m0EMG+LhjsHIa4Zjl0s0OF
uf6knkc7ERr69n9kgnj4wwEynKucfHK3qvTb4fqiX7QNtg7ICoxhcHXxhmasMSL1
hK6MEpt+/SQNQhILuRl4qqFeLlgXshrgGsyX4T0guLXZ0cqRqmuvKxXpcvO8tFV+
3v8spKVfHhp67AJGN8NkV5pGIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2eMEe3
bRWHC9HgKmMSfIUDLRtRMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy
Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjIwNy9GRTc1NjM0MDAyQ0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBL
ejVRS0lveEx3Sk80c2tBQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBqOuSbfb4cFZDOv/fSOUYhfs5FRvaTYE3A6WFdLplIafytW8t4iOif
38I0Dsu2zIhFXHc+C/EsiwwEVilruupcsSqSNN0mWLLc8nWCbzHRlUF/178g0/ox
zubHUICUrewO2WXMidXlLnMN0O7LLyuRhfnTrB5JeZBJ5dpGd1OAwanySpSWtyAn
BemZe89avxHd0BUftuPj6LhQr02qS1m9iT9lqHFgpIvapTjR8tHvNeilazL9qlPw
rilpvbHhWtkdD3RjlLYyl+Q06LoMZY/9r3IYEXKYb36tTY863mDgUrlgQ00kM6o9
5k0su9oYI/bzwzYKye08NYWwcOySusJK
-----END CERTIFICATE-----
Generated at Wed Jan 21 19:36:24 2026 by rpki-client