This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: 5hbjrlEqGgRLVRcCMPGWh1CTP21/MeGRI8U/R4c5t78= Subject key identifier: 08:C5:B9:68:14:7B:DA:74:4F:68:38:A2:FF:0D:B4:CF:20:D7:D0:6F Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0CF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0C98 Signing time: Fri 30 Jan 2026 18:29:49 +0000 Manifest this update: Fri 30 Jan 2026 18:29:48 +0000 Manifest next update: Fri 06 Feb 2026 18:29:48 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: X7laOA5cFLUJvxk9+9sS+OC4WJwzuVaj8G7vb1Mxx8A=) 2: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: WVkxMnAPmYEx2pir9yJBj6S9Ri2HeWB84QrUcGBIgX0=) 3: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: uM9esMnbJemVTDXSBi0eBdZiTFnt+Mq64Yuw7Vo5ff8=) 4: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: JKDdsewbmTds8DX8z5n44dixpiguXnj1mkHopckNnnI=) 5: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: EXrq9SaZzH6ZvSPXc9dAkv/CRi57VwFICygbDK3FbAQ=) 6: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: mpanMW6E++IIJhwRfBokQkjYWR4BXeWQNkL+zlkPQk0=) 7: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: yVyxrQ/XexxsyDCtzcGEooxv2C0cJKVEzNUoJUfFCpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Feb 2026 18:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3321 (0xcf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Jan 30 18:29:48 2026 GMT Not After : Feb 6 18:29:48 2026 GMT Subject: CN=697cf89d-9c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:03:d5:41:80:80:4b:ee:87:be:01:70:26: 20:71:9f:7d:f5:55:10:e5:b6:8d:67:2b:1d:f8:de: 1c:83:f2:74:58:5c:f8:a9:d4:32:4d:aa:a8:25:bc: 54:43:01:4c:01:72:f0:e0:19:07:92:bb:a8:54:4b: 71:6e:af:3d:2c:1c:20:2e:9e:f0:4b:aa:d7:47:cb: bd:0d:11:7c:1e:a3:d3:05:b0:fa:12:72:52:99:25: 3b:ab:12:18:94:12:b1:97:20:97:6d:fc:5c:26:1f: 58:71:39:26:dd:74:10:bd:fd:ee:85:bc:ba:2f:be: a7:19:79:f0:f9:a5:89:2b:59:51:21:bc:51:05:81: 1a:92:db:38:34:8f:19:6e:04:74:a4:09:89:c5:56: 9b:5a:ff:2f:f7:4a:7b:1a:30:65:65:0c:a0:5c:6d: e9:10:99:8e:33:34:c5:ae:aa:c2:ec:0a:c0:f9:a1: 0b:77:54:79:95:c1:77:0d:20:92:91:68:bd:09:c5: bf:16:10:76:0e:ea:59:70:b4:d7:f3:2a:7b:19:29: d7:33:f8:39:66:f1:8b:68:6a:d9:7e:da:f7:79:05: 54:a7:e7:a4:be:6d:44:ed:ee:70:ea:97:00:9e:4b: c7:45:1e:c8:db:15:81:42:c3:5b:17:b6:17:2c:b3: cd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C5:B9:68:14:7B:DA:74:4F:68:38:A2:FF:0D:B4:CF:20:D7:D0:6F X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9b:be:ef:08:11:26:31:9c:68:e4:b3:fd:9c:19:40:19:06: e6:17:67:44:14:51:51:97:48:51:f7:b0:c1:ca:77:3d:38:9b: f1:dc:a3:1e:6d:ef:52:e5:f1:22:e4:6a:98:bb:c7:57:80:b1: c0:34:f4:f7:8c:bf:c0:67:d4:04:ee:11:9c:d7:b3:a0:51:7a: 60:d3:20:57:13:29:62:48:a5:18:71:6b:70:b8:54:e2:33:77: e3:fd:0f:4a:91:a0:c2:a6:5a:f6:e9:93:77:68:07:d2:0c:d8: 31:ff:82:e9:26:51:d9:93:5f:0f:13:80:9f:80:a1:c2:1b:ef: 0d:b1:dc:a6:c6:20:da:25:c7:4c:4b:f8:dd:cd:b7:18:3b:86: 43:e4:e7:09:89:55:96:e3:5c:75:01:33:fa:82:e2:1a:8f:92: 1f:e2:af:d1:d1:22:80:46:76:f3:12:b1:92:2d:f1:5a:0f:bd: d2:14:24:ff:2a:29:fa:81:63:86:b0:e3:05:b4:26:e6:09:7e: ef:b1:80:42:25:03:03:00:4c:3d:95:c1:2a:d3:b5:af:36:29: 0e:ef:34:60:74:db:4b:0f:98:b5:05:62:fc:b1:6b:78:37:28: 96:75:05:6b:08:e8:92:52:6f:3f:19:18:29:55:cb:34:22:b3: 9c:b6:25:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjYwMTMwMTgyOTQ4WhcNMjYwMjA2MTgyOTQ4WjAYMRYwFAYD VQQDDA02OTdjZjg5ZC05YzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwUD1UGAgEvuh74BcCYgcZ999VUQ5baNZysd+N4cg/J0WFz4qdQyTaqoJbxU QwFMAXLw4BkHkruoVEtxbq89LBwgLp7wS6rXR8u9DRF8HqPTBbD6EnJSmSU7qxIY lBKxlyCXbfxcJh9YcTkm3XQQvf3uhby6L76nGXnw+aWJK1lRIbxRBYEakts4NI8Z bgR0pAmJxVabWv8v90p7GjBlZQygXG3pEJmOMzTFrqrC7ArA+aELd1R5lcF3DSCS kWi9CcW/FhB2DupZcLTX8yp7GSnXM/g5ZvGLaGrZftr3eQVUp+ekvm1E7e5w6pcA nkvHRR7I2xWBQsNbF7YXLLPNxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjFuWgU e9p0T2g4ov8NtM8g19BvMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbm77vCBEmMZxo5LP9nBlAGQbmF2dEFFFRl0hR97DBync9OJvx3KMe be9S5fEi5GqYu8dXgLHANPT3jL/AZ9QE7hGc17OgUXpg0yBXEyliSKUYcWtwuFTi M3fj/Q9KkaDCplr26ZN3aAfSDNgx/4LpJlHZk18PE4CfgKHCG+8NsdymxiDaJcdM S/jdzbcYO4ZD5OcJiVWW41x1ATP6guIaj5If4q/R0SKARnbzErGSLfFaD73SFCT/ Kin6gWOGsOMFtCbmCX7vsYBCJQMDAEw9lcEq07WvNikO7zRgdNtLD5i1BWL8sWt4 NyiWdQVrCOiSUm8/GRgpVcs0IrOctiX7 -----END CERTIFICATE-----Generated at Fri Jan 30 21:30:56 2026 by rpki-client