This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json) Hash identifier: TU2F5UOYGxDaTwYWznRX2zKxK0UJS4OGLpXrc/tLK/8= Subject key identifier: 2B:C2:0B:31:D5:9E:A1:BF:30:50:9F:E8:D7:0C:71:D8:81:F3:3D:DE Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft Manifest number: 0157 Signing time: Tue 27 Jan 2026 03:38:06 +0000 Manifest this update: Tue 27 Jan 2026 03:38:06 +0000 Manifest next update: Tue 03 Feb 2026 03:38:06 +0000 Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: 7zQnPZgPBK6sTkA80/C8ArTwpvvoKys4nSO+zYK1ofI=) 2: 77E54B78C45111EF9D399128C4F9AE02.roa (hash: StZAIMtKvc+DvwzgQ26IlnkW4j9VonIWzSJOuU7IXLU=) 3: FF233C70E62111EFACA87766C4F9AE02.roa (hash: 0dsUVKxnnglNpZZhhpBErhWI1oXUDVFF4BUubObFWiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 03:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Jan 27 03:38:06 2026 GMT Not After : Feb 3 03:38:06 2026 GMT Subject: CN=6978331e-28c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:d6:27:30:96:a4:67:34:80:7b:61:32:6f: 4f:15:74:0a:be:1a:f2:0e:7e:23:f6:14:c9:51:a4: 34:47:a5:78:45:f3:6d:98:34:d1:3c:76:b3:ed:ef: f4:7e:d5:d4:48:ee:70:b8:8b:8e:35:f6:53:97:8b: 82:d5:81:8a:de:e0:58:3e:7b:9c:c8:d7:26:3d:c5: f6:26:8e:6e:6d:b1:20:34:68:35:ba:3c:1f:a1:ee: 4f:ba:aa:58:62:75:76:ae:8d:7f:d2:47:90:23:a3: 4f:7e:59:62:ef:b3:e7:40:b5:ff:8a:ce:0d:fc:2c: 7c:bb:de:e3:d9:d0:a8:40:b0:3b:7e:43:96:3b:8d: 1b:91:be:f7:7f:5f:17:47:23:33:84:41:db:7a:a9: 48:af:8f:10:fd:de:db:09:a5:a2:33:b2:8d:96:d3: 82:74:01:2c:0c:fc:fe:a3:73:fe:3f:4a:c3:5b:38: bc:17:9e:90:89:97:35:85:15:4f:7f:7b:46:28:bd: 89:f5:c3:29:da:00:5d:74:58:0d:c7:25:f6:bf:b8: 5c:38:1e:9c:3e:88:2e:64:79:6e:af:93:2f:10:77: 7d:3c:1a:5c:26:0c:68:4b:7e:54:17:83:ba:67:2d: fe:dc:2d:18:7d:44:a5:6e:01:af:ba:e8:6b:13:65: f1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C2:0B:31:D5:9E:A1:BF:30:50:9F:E8:D7:0C:71:D8:81:F3:3D:DE X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a8:e7:15:ef:e2:85:79:71:0c:4b:0a:bf:56:1c:3b:ff:6a: df:92:9e:37:a4:cd:ea:04:92:22:9a:3d:26:52:dc:86:41:8f: 38:8e:74:ce:cd:e7:6b:18:0e:b1:6f:f5:99:6a:65:24:65:df: 2e:40:58:a2:c1:36:13:44:c2:6c:f3:c0:e0:81:fc:51:3f:2b: 0b:08:91:67:b4:57:a1:54:05:3c:73:26:46:50:ff:68:51:0b: 62:ed:01:22:83:7f:73:a0:ca:ba:41:b9:09:17:49:ff:85:39: 6c:38:e5:06:4e:ea:25:67:3c:ec:cd:d1:4a:c8:e1:98:d8:d3: 7a:04:67:f0:03:cf:62:0f:af:ab:67:07:55:48:89:52:e5:a6: e8:46:25:20:c9:76:4a:97:87:0b:bb:00:14:36:e5:74:91:a9: 69:02:19:7a:fb:bf:c4:98:d2:dc:42:b2:77:2b:52:4a:e0:d5: 6c:06:6d:4d:7a:9c:83:35:28:62:59:ed:05:47:4e:78:25:93: 08:07:fb:cb:19:2b:72:30:b0:3e:08:53:20:c1:1f:e4:6e:cf: ba:9e:d0:a3:5f:0d:0d:3f:d4:22:b8:b3:b4:70:e2:92:f0:75: d2:72:34:72:ab:a4:74:d0:9c:aa:55:91:4c:a0:90:f8:e5:81: 3f:db:3d:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjYwMTI3MDMzODA2WhcNMjYwMjAzMDMzODA2WjAYMRYwFAYD VQQDDA02OTc4MzMxZS0yOGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwM7WJzCWpGc0gHthMm9PFXQKvhryDn4j9hTJUaQ0R6V4RfNtmDTRPHaz7e/0 ftXUSO5wuIuONfZTl4uC1YGK3uBYPnucyNcmPcX2Jo5ubbEgNGg1ujwfoe5PuqpY YnV2ro1/0keQI6NPflli77PnQLX/is4N/Cx8u97j2dCoQLA7fkOWO40bkb73f18X RyMzhEHbeqlIr48Q/d7bCaWiM7KNltOCdAEsDPz+o3P+P0rDWzi8F56QiZc1hRVP f3tGKL2J9cMp2gBddFgNxyX2v7hcOB6cPoguZHlur5MvEHd9PBpcJgxoS35UF4O6 Zy3+3C0YfUSlbgGvuuhrE2Xx0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvCCzHV nqG/MFCf6NcMcdiB8z3eMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9BRUY2Mzc2MDE5NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5u OXVBcl9BVkswem1GUFozVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABqOcV7+KFeXEMSwq/Vhw7/2rfkp43pM3qBJIimj0mUtyGQY84jnTO zedrGA6xb/WZamUkZd8uQFiiwTYTRMJs88DggfxRPysLCJFntFehVAU8cyZGUP9o UQti7QEig39zoMq6QbkJF0n/hTlsOOUGTuolZzzszdFKyOGY2NN6BGfwA89iD6+r ZwdVSIlS5aboRiUgyXZKl4cLuwAUNuV0kalpAhl6+7/EmNLcQrJ3K1JK4NVsBm1N epyDNShiWe0FR054JZMIB/vLGStyMLA+CFMgwR/kbs+6ntCjXw0NP9QiuLO0cOKS 8HXScjRyq6R00JyqVZFMoJD45YE/2z1c -----END CERTIFICATE-----Generated at Tue Jan 27 05:46:33 2026 by rpki-client