This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json) Hash identifier: 1IqM9bXz5zzcGDAnxWtPsVzapcLEuK+vhek0mEZIT3A= Subject key identifier: 33:95:D2:75:2B:31:50:06:9A:E9:A3:73:A8:47:7B:14:9C:77:A5:D3 Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft Manifest number: D5 Signing time: Wed 21 Jan 2026 04:54:22 +0000 Manifest this update: Wed 21 Jan 2026 04:54:21 +0000 Manifest next update: Wed 28 Jan 2026 04:54:21 +0000 Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: E6DGeH4EtWaITixpAJGSa1zkrbBIwbkaNi8owUm1AGQ=) 2: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: PxzOBVWe5yWGLa4iNAyNqYyPaQ/eMXGqSREN7aFVLso=) 3: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: oV9dv3enUEk5QI7ZEWYNcHlwdjoeFV6bdPfVFfihoSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 04:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Validity Not Before: Jan 21 04:54:21 2026 GMT Not After : Jan 28 04:54:21 2026 GMT Subject: CN=69705bfe-dff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:e4:7a:ba:a4:ae:26:ad:74:c4:04:bd:9a: 69:b8:54:39:11:7d:fe:0c:0a:ef:3b:24:84:15:50: 2e:0b:29:7a:7d:34:24:1e:11:a3:67:f1:62:9f:02: 97:be:ae:d3:14:f7:e0:ff:93:8f:76:72:38:30:5d: 93:68:6a:a8:aa:e6:37:e3:2e:cd:04:f1:81:ca:f9: d1:05:d0:c9:6b:b2:29:e2:2d:24:c3:48:9c:16:dc: c8:b4:21:50:2a:75:51:4e:b3:93:7d:8f:d5:63:9b: c2:5d:79:22:47:74:be:9f:fd:49:39:1b:aa:d8:46: 82:ce:6b:f3:3f:ca:e0:a2:64:25:9f:89:cb:92:74: e1:a5:9e:33:da:0b:22:21:24:e9:77:70:91:9e:8e: 4c:76:17:f4:05:65:9f:1e:de:92:07:71:ca:24:75: 23:4c:34:8b:76:f6:39:64:4e:4d:2f:3a:a1:89:5f: 0e:cc:6f:cb:30:aa:4d:3b:04:6d:e0:71:0e:4a:3c: 5b:8a:53:59:e7:ba:51:c7:4e:f9:88:07:d0:14:15: f4:95:40:5e:eb:16:1d:02:e2:ff:4e:f8:6f:ba:83: 9a:88:bb:8c:fe:eb:19:55:10:9c:38:26:2f:48:7a: ef:08:7e:ed:ae:97:8b:82:82:17:3e:c3:42:77:fb: de:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:95:D2:75:2B:31:50:06:9A:E9:A3:73:A8:47:7B:14:9C:77:A5:D3 X509v3 Authority Key Identifier: keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:7f:be:b4:df:31:9d:cc:08:2d:b7:58:12:17:d9:45:65:59: 6d:50:17:cd:18:de:71:ca:40:b8:4b:a8:27:7c:64:af:cd:66: bf:11:ed:f8:2c:6f:0e:7a:df:63:7a:63:23:37:fd:df:94:5d: 87:22:84:5f:c9:0f:2c:7a:f5:f1:84:03:1f:54:63:4b:6b:67: 67:92:f5:db:15:1b:ce:7c:dc:1f:80:53:f8:66:3e:c0:53:c2: ec:3a:5e:3e:88:a1:06:07:2e:84:1b:90:a5:e9:df:58:c2:db: 96:f5:c0:26:d9:4c:3f:3f:e1:32:a2:e1:30:3d:bf:96:ef:e1: ad:67:71:fc:d9:29:30:16:17:21:2a:f8:db:cc:d2:1e:62:1f: 67:6e:b9:d4:5d:93:73:29:76:54:a8:2c:07:0c:c2:7c:2a:f1: d0:23:7e:5f:78:28:1f:84:70:46:5e:70:d6:64:5b:af:0b:4f: 67:0e:85:f8:8c:9b:33:f9:df:4c:50:f9:93:37:f9:68:6d:64: d1:b8:72:d2:fa:82:f9:a5:2e:63:99:6f:2e:38:77:c9:43:ca: 30:7c:d9:41:1a:8d:76:2f:87:c0:2d:82:0d:02:fb:5f:ad:3c: e3:f9:da:81:8e:02:3f:a6:83:7e:4b:15:ab:64:61:bf:6b:0a: 00:d8:35:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5NTgxMTAvBgNVBAUTKDlGNDkwNkMwRDRDQzk2NDVEOUJGRDkzMzY0QTIzQTVB MzNFRjU4REIwHhcNMjYwMTIxMDQ1NDIxWhcNMjYwMTI4MDQ1NDIxWjAYMRYwFAYD VQQDDA02OTcwNWJmZS1kZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNXkerqkriatdMQEvZppuFQ5EX3+DArvOySEFVAuCyl6fTQkHhGjZ/FinwKX vq7TFPfg/5OPdnI4MF2TaGqoquY34y7NBPGByvnRBdDJa7Ip4i0kw0icFtzItCFQ KnVRTrOTfY/VY5vCXXkiR3S+n/1JORuq2EaCzmvzP8rgomQln4nLknThpZ4z2gsi ISTpd3CRno5Mdhf0BWWfHt6SB3HKJHUjTDSLdvY5ZE5NLzqhiV8OzG/LMKpNOwRt 4HEOSjxbilNZ57pRx075iAfQFBX0lUBe6xYdAuL/TvhvuoOaiLuM/usZVRCcOCYv SHrvCH7trpeLgoIXPsNCd/veUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOV0nUr MVAGmumjc6hHexScd6XTMB8GA1UdIwQYMBaAFJ9JBsDUzJZF2b/ZM2SiOloz71jb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDk1OC82NzJEQjA0OEIz OUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxrWFp2OWt6WktJNldqUHZX TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDk1OC82NzJEQjA0OEIzOUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxr WFp2OWt6WktJNldqUHZXTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOf7603zGdzAgtt1gSF9lFZVltUBfNGN5xykC4S6gnfGSvzWa/Ee34 LG8Oet9jemMjN/3flF2HIoRfyQ8sevXxhAMfVGNLa2dnkvXbFRvOfNwfgFP4Zj7A U8LsOl4+iKEGBy6EG5Cl6d9YwtuW9cAm2Uw/P+EyouEwPb+W7+GtZ3H82SkwFhch KvjbzNIeYh9nbrnUXZNzKXZUqCwHDMJ8KvHQI35feCgfhHBGXnDWZFuvC09nDoX4 jJsz+d9MUPmTN/lobWTRuHLS+oL5pS5jmW8uOHfJQ8owfNlBGo12L4fALYINAvtf rTzj+dqBjgI/poN+SxWrZGG/awoA2DX0 -----END CERTIFICATE-----Generated at Wed Jan 21 21:10:29 2026 by rpki-client