This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft File: NuogEr2z5hGaWu-_Zs7rOLWTHek.mft (raw, json) Hash identifier: vEvc7Wyxstn/MQ2OCFN+JNPmCRGO5v0ruKYKEl3SYGw= Subject key identifier: 9B:01:85:30:4D:7D:67:45:D0:7F:5B:96:04:19:5B:51:25:0E:CD:EF Authority key identifier: 36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9 Certificate issuer: /CN=A914BE8E/serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft Manifest number: 08 Signing time: Mon 05 Jan 2026 06:56:48 +0000 Manifest this update: Mon 05 Jan 2026 06:56:47 +0000 Manifest next update: Mon 12 Jan 2026 06:56:47 +0000 Files and hashes: 1: NuogEr2z5hGaWu-_Zs7rOLWTHek.crl (hash: WZBEGedmyiso9r5Pn+QNnAoeEsS1E4uqZeyMYplbmOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.crl rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 06:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BE8E, serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9 Validity Not Before: Jan 5 06:56:47 2026 GMT Not After : Jan 12 06:56:47 2026 GMT Subject: CN=695b60b0-e0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:01:68:d8:70:64:1b:5d:08:d2:15:a5:f2: fb:73:9c:91:d0:e1:70:02:ef:0c:a4:a1:d4:4f:7f: 3b:4e:33:af:0a:67:52:1d:fc:69:92:9b:38:ca:20: 8d:22:6e:06:33:73:12:83:2d:04:8a:b0:46:04:dc: 51:83:5a:1f:3a:84:34:7a:5b:15:4d:b7:9a:17:e8: 50:da:89:1f:8c:13:ec:50:77:ff:80:06:44:bf:f3: 97:1d:b4:5b:a1:10:cb:22:55:57:e3:6b:32:4b:e7: 4b:6c:fa:ac:3e:cc:7d:95:cc:79:0a:aa:a5:9f:04: f2:19:1b:83:ec:dc:63:f2:61:fe:05:b9:16:4a:a6: 41:ad:f3:f1:bc:a9:ea:ff:a8:78:65:96:21:d2:6b: 7d:6e:3a:b1:c7:b9:07:3e:75:8d:8f:83:5c:3b:ae: 42:a2:e7:a6:3a:9c:c5:25:5b:5a:ff:9b:7b:db:eb: 24:f0:65:c3:e0:e0:de:6a:8b:cd:bd:d8:8b:65:5b: bc:f5:32:0c:db:3b:89:84:7b:7d:76:35:94:11:0a: 9b:5d:14:a6:65:48:09:f8:13:70:a0:58:62:41:6a: 2d:89:d8:b8:91:a1:82:fa:1f:34:4b:5a:55:d2:3e: 6d:3e:b6:1e:60:a8:04:b3:c2:d9:e5:ef:83:09:70: 82:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:01:85:30:4D:7D:67:45:D0:7F:5B:96:04:19:5B:51:25:0E:CD:EF X509v3 Authority Key Identifier: keyid:36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:73:89:bf:16:76:1b:a9:ec:83:33:85:5a:ec:76:44:11:9a: 48:b6:65:b5:9a:f3:b3:41:f6:75:48:64:eb:26:52:a5:6d:46: 95:ee:b3:bd:55:24:2a:3b:0a:5b:7e:49:1c:85:39:2d:5e:1b: 55:03:3f:3e:4f:75:d8:96:e8:6d:f4:12:e3:5c:06:ae:59:d7: 5f:a0:8e:88:f1:1a:e0:e8:68:d2:6f:19:b4:09:35:ef:ab:25: 70:dd:99:b1:f6:01:cd:a5:86:f7:9a:28:65:f9:30:48:72:60: 23:ea:0a:00:d6:41:97:4b:d0:40:54:e4:97:f3:0f:9d:b6:ad: 74:92:62:36:40:44:f6:7d:b0:eb:d8:b0:b7:bd:ef:a9:4b:55: db:0f:14:1c:3d:a7:1b:ad:86:d5:a4:0b:0f:e7:e2:dc:eb:5b: 8e:14:6c:2d:ae:5e:32:9d:3f:3b:48:b5:e5:57:3f:b9:ea:88: e8:f3:90:93:b7:9b:62:5f:c3:61:e0:8c:99:46:a3:4b:4a:02: 44:9e:89:28:30:0b:5e:2c:fb:79:7c:6d:e5:fb:e4:50:3b:d9: 8a:b8:2f:38:d5:7e:a5:b6:18:57:76:bc:55:64:b8:bf:19:6e: 82:4d:91:8b:2a:a7:4f:6c:e0:1e:4a:d6:22:4a:cd:72:e4:67: f4:12:68:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE0 QkU4RTExMC8GA1UEBRMoMzZFQTIwMTJCREIzRTYxMTlBNUFFRkJGNjZDRUVCMzhC NTkzMURFOTAeFw0yNjAxMDUwNjU2NDdaFw0yNjAxMTIwNjU2NDdaMBgxFjAUBgNV BAMMDTY5NWI2MGIwLWUwZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3UAFo2HBkG10I0hWl8vtznJHQ4XAC7wykodRPfztOM68KZ1Id/GmSmzjKII0i bgYzcxKDLQSKsEYE3FGDWh86hDR6WxVNt5oX6FDaiR+ME+xQd/+ABkS/85cdtFuh EMsiVVfjazJL50ts+qw+zH2VzHkKqqWfBPIZG4Ps3GPyYf4FuRZKpkGt8/G8qer/ qHhlliHSa31uOrHHuQc+dY2Pg1w7rkKi56Y6nMUlW1r/m3vb6yTwZcPg4N5qi829 2ItlW7z1MgzbO4mEe312NZQRCptdFKZlSAn4E3CgWGJBai2J2LiRoYL6HzRLWlXS Pm0+th5gqASzwtnl74MJcII/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmwGFME19 Z0XQf1uWBBlbUSUOze8wHwYDVR0jBBgwFoAUNuogEr2z5hGaWu+/Zs7rOLWTHekw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCRThFLzU0NjE5M0VDRTE0 NjExRjA5MTY0RTBBODcxNkY1NkJDL051b2dFcjJ6NWhHYVd1LV9aczdyT0xXVEhl ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnVvZ0VyMno1aEdhV3UtX1pzN3JPTFdUSGVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC RThFLzU0NjE5M0VDRTE0NjExRjA5MTY0RTBBODcxNkY1NkJDL051b2dFcjJ6NWhH YVd1LV9aczdyT0xXVEhlay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK1zib8Wdhup7IMzhVrsdkQRmki2ZbWa87NB9nVIZOsmUqVtRpXus71V JCo7Clt+SRyFOS1eG1UDPz5PddiW6G30EuNcBq5Z11+gjojxGuDoaNJvGbQJNe+r JXDdmbH2Ac2lhveaKGX5MEhyYCPqCgDWQZdL0EBU5JfzD522rXSSYjZARPZ9sOvY sLe976lLVdsPFBw9pxuthtWkCw/n4tzrW44UbC2uXjKdPztIteVXP7nqiOjzkJO3 m2Jfw2HgjJlGo0tKAkSeiSgwC14s+3l8beX75FA72Yq4LzjVfqW2GFd2vFVkuL8Z boJNkYsqp09s4B5K1iJKzXLkZ/QSaGI= -----END CERTIFICATE-----Generated at Wed Jan 7 06:36:35 2026 by rpki-client