This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: epfD50tniri7SA/cOXINVW8ln1uVCnL+gPESNdI8Esk= Subject key identifier: 08:5C:F6:FE:18:DC:81:43:45:21:90:BE:31:F6:66:7F:E0:09:DA:82 Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 045F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 044E Signing time: Tue 20 Jan 2026 23:25:00 +0000 Manifest this update: Tue 20 Jan 2026 23:24:59 +0000 Manifest next update: Tue 27 Jan 2026 23:24:59 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: +ZyY22jKdHHZr4o02mJW7PSTUvPp09S2aQ+UrlNk2kc=) 2: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: EF49BWvzk+YoVF73ZbglxNosMQ3iOBpJBV3sashrep8=) 3: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: BSpM2VSMPXNCcFdU8OVTaKUZ+gNICf8M+kzl5UfUxEY=) 4: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: q+X83YZL335SyLXeBoGpFgAzoByn2XCMGLkD6Ic10YI=) 5: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: 0gOlRThj6WU6Oiu1Uasxby2bhwXyhTicR9aQwl0b5JY=) 6: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: gHndO2psRdsLz2dDuYnrptktBb4xTbMabDZZkDs+3FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Jan 20 23:24:59 2026 GMT Not After : Jan 27 23:24:59 2026 GMT Subject: CN=69700ecc-aa2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7b:df:a8:b1:a4:e9:ba:cc:48:20:cd:56:c2: 10:ed:25:f6:80:0b:ea:04:f1:d1:2e:86:e0:41:6e: 72:78:15:1d:85:30:56:f1:97:39:b2:6f:d3:0a:cf: d1:ee:91:f3:94:cb:b1:fa:20:bc:6d:ed:06:e8:25: 73:73:62:fa:0d:67:e0:09:e4:60:68:22:f4:93:b9: fd:47:0d:59:e6:cc:5d:74:2c:8c:ee:a5:87:d0:04: 85:87:df:2f:30:15:f0:f0:ba:3e:6a:e3:b4:a7:f7: 10:ef:8e:b9:8b:7c:69:a2:87:e7:33:c0:3d:4a:e3: c2:24:77:25:68:f6:80:89:5f:90:ec:05:96:71:ae: f5:78:f6:9c:59:8b:96:30:e8:70:d9:0d:19:ab:a1: 1f:f4:a7:19:ea:d1:22:c5:a7:93:d2:b0:ec:99:b6: 69:64:bc:e9:ec:c9:8d:2e:10:07:95:a0:fa:4a:be: 8a:3d:6b:b0:04:05:d8:25:d7:0f:00:43:50:ec:31: 75:06:57:92:bd:a9:14:63:4b:ce:57:c2:ee:e1:1d: 45:b3:86:9a:10:a4:e2:27:9d:a6:98:08:2d:71:76: 57:a1:76:23:4a:73:e5:92:bb:ac:14:7a:46:ad:5c: 43:ff:39:b0:7d:e0:61:cc:1a:92:7a:04:ea:13:8d: be:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5C:F6:FE:18:DC:81:43:45:21:90:BE:31:F6:66:7F:E0:09:DA:82 X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:b5:f0:0a:9f:4c:3c:b2:d9:3e:b4:43:4d:99:73:c4:1d:ca: 22:b9:1f:6d:d7:9d:86:ed:af:0d:14:c6:00:bb:0f:00:c9:f2: ad:30:ec:b1:d3:16:d7:c4:69:c7:d3:0b:c9:4f:41:e1:28:c2: ff:eb:b6:df:b3:1a:d1:fe:2d:0a:c8:e6:f6:5c:aa:cd:79:ad: 27:7f:38:8b:be:0b:e8:42:27:60:e7:85:f6:cb:67:54:c8:48: db:ec:ef:c3:c0:b5:b6:b1:de:ee:13:a5:e9:f6:07:dd:24:dd: 15:98:1d:3f:50:25:22:5f:14:78:3e:98:cb:e6:21:0f:43:e0: 00:6a:f2:dd:68:ba:f1:b3:81:23:53:c5:4f:4f:4e:fc:a3:ad: 29:a4:57:0e:b5:1a:0e:f2:83:11:33:d8:09:a7:51:6f:2b:2c: eb:40:af:89:85:f4:7c:23:81:e9:9a:2d:d8:01:0b:f1:30:68: 2a:2f:b3:ea:33:4e:e0:41:c5:06:73:52:19:8b:8e:58:03:2d: 6e:40:b4:68:36:c8:46:20:2a:60:30:a3:98:a0:fe:cd:f5:4d: d3:14:3e:d6:ac:5b:69:36:17:12:30:9d:ba:e0:7a:6b:60:5e: e6:9f:1c:c2:14:46:e8:63:4a:87:1c:8f:47:20:97:1a:3f:30: 90:f0:24:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjYwMTIwMjMyNDU5WhcNMjYwMTI3MjMyNDU5WjAYMRYwFAYD VQQDDA02OTcwMGVjYy1hYTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23vfqLGk6brMSCDNVsIQ7SX2gAvqBPHRLobgQW5yeBUdhTBW8Zc5sm/TCs/R 7pHzlMux+iC8be0G6CVzc2L6DWfgCeRgaCL0k7n9Rw1Z5sxddCyM7qWH0ASFh98v MBXw8Lo+auO0p/cQ7465i3xpoofnM8A9SuPCJHclaPaAiV+Q7AWWca71ePacWYuW MOhw2Q0Zq6Ef9KcZ6tEixaeT0rDsmbZpZLzp7MmNLhAHlaD6Sr6KPWuwBAXYJdcP AENQ7DF1BleSvakUY0vOV8Lu4R1Fs4aaEKTiJ52mmAgtcXZXoXYjSnPlkrusFHpG rVxD/zmwfeBhzBqSegTqE42++QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhc9v4Y 3IFDRSGQvjH2Zn/gCdqCMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwtfAKn0w8stk+tENNmXPEHcoiuR9t152G7a8NFMYAuw8AyfKtMOyx 0xbXxGnH0wvJT0HhKML/67bfsxrR/i0KyOb2XKrNea0nfziLvgvoQidg54X2y2dU yEjb7O/DwLW2sd7uE6Xp9gfdJN0VmB0/UCUiXxR4PpjL5iEPQ+AAavLdaLrxs4Ej U8VPT078o60ppFcOtRoO8oMRM9gJp1FvKyzrQK+JhfR8I4Hpmi3YAQvxMGgqL7Pq M07gQcUGc1IZi45YAy1uQLRoNshGICpgMKOYoP7N9U3TFD7WrFtpNhcSMJ264Hpr YF7mnxzCFEboY0qHHI9HIJcaPzCQ8CQe -----END CERTIFICATE-----Generated at Wed Jan 21 15:41:39 2026 by rpki-client