This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: PPHMIPAe+S8kuB46zcdxALecZr0wsNIL6HVzg1kdqZU= Subject key identifier: 4D:F0:CC:26:1B:40:03:55:D8:66:39:92:0C:03:BB:CE:CD:E3:97:D8 Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1F67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1E91 Signing time: Mon 26 Jan 2026 15:54:16 +0000 Manifest this update: Mon 26 Jan 2026 15:54:15 +0000 Manifest next update: Mon 02 Feb 2026 15:54:15 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: cJLYi7KQqjueJIJxo7LHV7ir9eGL3bOCJAPNsBLUbss=) 2: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: 2B6MyeDlusb2e4Wysz6uj9aO5/idmj+cmIrB8/V1Q4Q=) 3: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: 5b1/IgnFBtnOU/QGYhYiucXHvjsBgfKiscQ0RXrreCU=) 4: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: 50LilFdBJbezb7tEZ8nsCEOtBU33AYgM2/+xtSJDySI=) 5: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: i7wEnbCyGMVzc1IAkdcmx0nvf45iFjmn6BBF93GVkvU=) 6: B6D9896CD51111F0AE06421FC4F9AE02.roa (hash: JeWsOi+knaSUxggDbgl626QjqrgQeIlCOoedWQ2j1gw=) 7: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: ltr4XnwnjVpdj/jucAxqqv9mxZJ3S6DG2NUkiYWuAIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 15:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8039 (0x1f67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Jan 26 15:54:15 2026 GMT Not After : Feb 2 15:54:15 2026 GMT Subject: CN=69778e28-5bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b2:62:3c:09:e9:a8:99:1a:06:01:aa:de:a7: 0f:fd:be:f3:c4:50:1a:3a:16:2e:07:32:3c:a9:91: 8f:28:9b:9f:b1:2b:b1:93:d9:3e:63:6f:67:2c:c7: fb:8e:b4:5e:2d:9e:75:00:9c:d3:84:d6:3d:f8:c4: 4e:9f:83:af:51:dc:c1:9b:8e:45:23:d2:02:b0:8a: 6d:37:53:1b:41:6a:f7:54:31:a9:6c:ce:ed:c2:f0: 78:0b:a9:e2:e9:c9:20:db:73:c4:f0:22:4a:39:96: 4f:41:c2:fa:d0:1c:62:56:22:94:1b:e7:a3:c1:d2: 3a:df:93:d1:d5:c1:46:f3:de:c8:b0:5c:24:4e:e9: ba:0d:4a:fc:df:c1:93:cb:75:4e:e2:79:1f:3c:5c: cb:fe:4f:2f:74:b0:89:2c:2c:85:15:35:3e:f1:94: 9d:86:39:3a:56:0c:42:1a:da:32:03:03:ea:0b:5c: 26:6e:f5:c2:b9:a6:dc:10:d8:f6:50:15:79:b6:71: 23:f7:e4:54:45:4a:52:c9:03:ca:19:23:ec:d8:29: 2f:87:9d:e1:eb:47:e4:8b:93:91:d8:10:66:b9:ad: 26:e0:52:3c:34:9c:b2:ea:fe:c5:b8:25:68:38:2d: 1f:79:d9:ff:4a:7d:0b:ff:2f:f0:34:60:8a:83:3a: 28:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F0:CC:26:1B:40:03:55:D8:66:39:92:0C:03:BB:CE:CD:E3:97:D8 X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:89:86:b8:3a:92:5c:a8:3b:fb:71:f8:77:b6:78:7c:8f:be: 86:25:ce:72:e4:e4:37:bd:55:48:8c:4e:01:f9:89:11:a4:ad: 19:0e:08:ea:a5:bb:b7:9d:a9:27:ef:82:9f:1b:90:78:43:80: 67:5d:ca:aa:ad:83:33:4f:96:16:b2:75:9e:42:a9:27:01:3e: ae:9a:84:06:dc:e5:7f:af:9b:f7:11:46:7c:5f:62:2f:2e:af: 4f:b7:ea:8d:28:ec:3c:31:3b:6f:27:51:fe:3e:db:17:83:26: fe:fd:db:9e:30:cd:44:fc:b1:87:aa:77:10:b3:c3:2e:b3:96: 5e:fa:e0:b4:15:b1:f2:f3:75:5f:fb:4b:70:d9:ef:7e:9f:e4: 35:c8:29:ef:58:f6:bc:32:fe:f5:f8:4e:7d:c8:3c:2e:7c:3b: 6b:2a:58:32:6f:85:b7:ad:18:b2:53:da:df:e2:6c:e9:30:75: 39:9b:f3:bd:5c:c0:a8:76:d8:4c:ed:fd:90:c2:2e:10:01:6b: 27:b6:e5:c0:fe:4f:07:44:a1:02:3a:b8:90:38:17:63:42:7e: 96:aa:87:b8:6e:8d:59:d5:7a:b9:7c:9a:bc:4a:51:d3:ca:c5: d7:c3:dd:f0:ee:ce:ed:42:ec:91:6a:da:49:64:b0:5b:fc:15: b3:c4:96:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjYwMTI2MTU1NDE1WhcNMjYwMjAyMTU1NDE1WjAYMRYwFAYD VQQDDA02OTc3OGUyOC01YmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57JiPAnpqJkaBgGq3qcP/b7zxFAaOhYuBzI8qZGPKJufsSuxk9k+Y29nLMf7 jrReLZ51AJzThNY9+MROn4OvUdzBm45FI9ICsIptN1MbQWr3VDGpbM7twvB4C6ni 6ckg23PE8CJKOZZPQcL60BxiViKUG+ejwdI635PR1cFG897IsFwkTum6DUr838GT y3VO4nkfPFzL/k8vdLCJLCyFFTU+8ZSdhjk6VgxCGtoyAwPqC1wmbvXCuabcENj2 UBV5tnEj9+RURUpSyQPKGSPs2Ckvh53h60fki5OR2BBmua0m4FI8NJyy6v7FuCVo OC0fedn/Sn0L/y/wNGCKgzoobQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3wzCYb QANV2GY5kgwDu87N45fYMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5iYa4OpJcqDv7cfh3tnh8j76GJc5y5OQ3vVVIjE4B+YkRpK0ZDgjq pbu3nakn74KfG5B4Q4BnXcqqrYMzT5YWsnWeQqknAT6umoQG3OV/r5v3EUZ8X2Iv Lq9Pt+qNKOw8MTtvJ1H+PtsXgyb+/dueMM1E/LGHqncQs8Mus5Ze+uC0FbHy83Vf +0tw2e9+n+Q1yCnvWPa8Mv71+E59yDwufDtrKlgyb4W3rRiyU9rf4mzpMHU5m/O9 XMCodthM7f2Qwi4QAWsntuXA/k8HRKECOriQOBdjQn6Wqoe4bo1Z1Xq5fJq8SlHT ysXXw93w7s7tQuyRatpJZLBb/BWzxJZZ -----END CERTIFICATE-----Generated at Tue Jan 27 01:46:04 2026 by rpki-client