This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft File: NhN5wakOmU8oZFtzNWRe_DpeGs0.mft (raw, json) Hash identifier: UwsPUB3+JmoPm6lsWSRlz8hfu2vhQBGAYjm/uYhpwZU= Subject key identifier: ED:36:E0:07:0F:AB:9F:9B:70:B0:C7:96:4B:F3:B8:6C:6B:A3:5E:CF Authority key identifier: 36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD Certificate issuer: /CN=A914DCD4/serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft Manifest number: 08 Signing time: Mon 05 Jan 2026 06:57:09 +0000 Manifest this update: Mon 05 Jan 2026 06:57:09 +0000 Manifest next update: Mon 12 Jan 2026 06:57:09 +0000 Files and hashes: 1: NhN5wakOmU8oZFtzNWRe_DpeGs0.crl (hash: RK9FPsgYifKmISBeLfj6yF7hiUQr2bOUSIPNrpqlJYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 06:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DCD4, serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD Validity Not Before: Jan 5 06:57:09 2026 GMT Not After : Jan 12 06:57:09 2026 GMT Subject: CN=695b60c5-4fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:df:e8:f5:f5:0b:b2:89:36:db:f3:45:46: fc:50:32:d6:c5:a7:90:fc:b6:39:86:fe:53:c4:e2: 04:d5:11:40:1d:34:ff:71:ae:72:06:e8:5f:e1:ac: 1d:16:ae:82:67:eb:57:09:3b:e9:df:f5:81:9f:f1: 9a:ea:31:f8:90:c9:fd:da:0d:a9:c4:37:5c:97:13: ca:91:33:76:d9:86:27:e0:77:38:6c:e6:15:ff:b3: 3d:39:8d:92:ff:ae:a3:44:79:25:85:70:75:47:7f: ad:49:fe:4d:ef:c3:53:c6:7b:bf:03:72:88:ab:b5: d8:ef:07:a3:69:b9:dc:cf:41:73:d8:8c:6f:22:13: 53:4e:62:ea:77:30:b0:eb:2d:fd:17:ab:d9:b8:c2: 33:a6:70:70:72:bf:61:3a:a0:94:77:35:7f:f8:bf: 2e:e4:67:07:2e:2e:3f:9e:ef:35:87:bb:c3:c3:b0: 89:62:ba:09:e1:de:2f:d1:b9:80:0e:9e:f7:ea:90: 8b:f0:69:86:17:17:6c:f9:ef:06:d0:fd:81:5d:fc: 09:91:c4:be:b0:26:3f:a4:06:ab:b1:09:f6:59:4d: f7:4e:89:20:f4:15:c1:94:d0:65:34:9c:ac:ab:cd: 8a:ab:85:60:41:dc:fc:00:75:07:ac:86:f0:c7:68: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:36:E0:07:0F:AB:9F:9B:70:B0:C7:96:4B:F3:B8:6C:6B:A3:5E:CF X509v3 Authority Key Identifier: keyid:36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:52:4d:2e:51:fd:51:86:bc:fb:ed:fc:b2:3d:15:f0:29:a2: 0b:0c:ea:b8:39:51:3c:86:c8:e0:49:4f:43:18:98:04:c7:6a: 80:26:d4:42:dd:50:a2:8f:43:d3:c4:2f:17:52:43:f5:ff:c5: 4c:26:45:c9:9d:81:f6:b6:af:3a:f3:a8:98:90:7a:3e:ea:00: 06:45:b5:fd:71:43:58:1f:84:2d:d3:0a:cb:38:02:28:8c:6b: 74:2d:66:89:ab:54:28:c4:61:a8:ae:ba:76:c6:5a:50:f4:bc: c9:df:8e:14:09:06:72:c9:4c:a9:33:7f:a3:ac:52:2d:6d:10: 06:ef:a3:22:61:32:78:14:99:92:4f:37:9a:19:38:b1:67:b5: 57:cc:0d:9d:09:54:88:b3:2f:ef:ca:af:4c:33:01:24:b9:7d: 55:e7:dc:66:92:17:c8:8e:f9:f8:ad:5a:60:bb:a2:6c:5c:a3: 46:7f:a9:35:9b:2f:8e:fd:89:0d:c4:a4:bc:74:2e:ea:48:61: ff:be:b2:9b:75:1a:52:99:b2:4c:7d:1a:8f:02:38:bc:87:b3: ef:89:58:ff:ad:c9:44:dc:a1:4a:7f:6e:19:b8:4a:f2:dd:33: 45:a4:c2:b2:6b:ae:ea:9f:27:6d:2c:2c:40:01:46:a1:62:48: bb:d4:c2:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE0 RENENDExMC8GA1UEBRMoMzYxMzc5QzFBOTBFOTk0RjI4NjQ1QjczMzU2NDVFRkMz QTVFMUFDRDAeFw0yNjAxMDUwNjU3MDlaFw0yNjAxMTIwNjU3MDlaMBgxFjAUBgNV BAMMDTY5NWI2MGM1LTRmZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC89t/o9fULsok22/NFRvxQMtbFp5D8tjmG/lPE4gTVEUAdNP9xrnIG6F/hrB0W roJn61cJO+nf9YGf8ZrqMfiQyf3aDanEN1yXE8qRM3bZhifgdzhs5hX/sz05jZL/ rqNEeSWFcHVHf61J/k3vw1PGe78DcoirtdjvB6NpudzPQXPYjG8iE1NOYup3MLDr Lf0Xq9m4wjOmcHByv2E6oJR3NX/4vy7kZwcuLj+e7zWHu8PDsIliugnh3i/RuYAO nvfqkIvwaYYXF2z57wbQ/YFd/AmRxL6wJj+kBquxCfZZTfdOiSD0FcGU0GU0nKyr zYqrhWBB3PwAdQeshvDHaD/fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7TbgBw+r n5twsMeWS/O4bGujXs8wHwYDVR0jBBgwFoAUNhN5wakOmU8oZFtzNWRe/DpeGs0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQ0Q0L0I5OEMzQTM4RTFB QTExRjBBRkNFODRCODRBNkY1NkJDL05oTjV3YWtPbVU4b1pGdHpOV1JlX0RwZUdz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTmhONXdha09tVThvWkZ0ek5XUmVfRHBlR3MwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE Q0Q0L0I5OEMzQTM4RTFBQTExRjBBRkNFODRCODRBNkY1NkJDL05oTjV3YWtPbVU4 b1pGdHpOV1JlX0RwZUdzMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH1STS5R/VGGvPvt/LI9FfApogsM6rg5UTyGyOBJT0MYmATHaoAm1ELd UKKPQ9PELxdSQ/X/xUwmRcmdgfa2rzrzqJiQej7qAAZFtf1xQ1gfhC3TCss4AiiM a3QtZomrVCjEYaiuunbGWlD0vMnfjhQJBnLJTKkzf6OsUi1tEAbvoyJhMngUmZJP N5oZOLFntVfMDZ0JVIizL+/Kr0wzASS5fVXn3GaSF8iO+fitWmC7omxco0Z/qTWb L479iQ3EpLx0LupIYf++spt1GlKZskx9Go8COLyHs++JWP+tyUTcoUp/bhm4SvLd M0WkwrJrruqfJ20sLEABRqFiSLvUwqE= -----END CERTIFICATE-----Generated at Wed Jan 7 06:35:54 2026 by rpki-client