This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: SM0BGSW1rFIgZ6hS5d7OzVHyxEMWuvz6EjmZKtNbeUE= Subject key identifier: 7A:5D:B1:23:E9:F4:E3:5F:DD:1D:57:B9:80:34:AC:F9:69:D0:92:9F Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 045B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 044A Signing time: Mon 12 Jan 2026 23:21:33 +0000 Manifest this update: Mon 12 Jan 2026 23:21:33 +0000 Manifest next update: Mon 19 Jan 2026 23:21:33 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: 1Z/heAAsMfRXYV4d96NSWv+FUaDtju+8OWIYlAY8JMg=) 2: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: BSpM2VSMPXNCcFdU8OVTaKUZ+gNICf8M+kzl5UfUxEY=) 3: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: q+X83YZL335SyLXeBoGpFgAzoByn2XCMGLkD6Ic10YI=) 4: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: EF49BWvzk+YoVF73ZbglxNosMQ3iOBpJBV3sashrep8=) 5: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: 0gOlRThj6WU6Oiu1Uasxby2bhwXyhTicR9aQwl0b5JY=) 6: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: gHndO2psRdsLz2dDuYnrptktBb4xTbMabDZZkDs+3FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 23:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1115 (0x45b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Jan 12 23:21:33 2026 GMT Not After : Jan 19 23:21:33 2026 GMT Subject: CN=696581fd-4758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5e:7e:74:d1:53:7d:e9:aa:99:c0:96:cf:bd: 6c:7d:7a:28:57:38:88:10:61:e9:9a:38:c8:63:78: a3:db:bf:03:6c:db:60:ca:db:ff:55:87:b3:de:18: 52:e7:37:2f:8d:93:ee:f8:a0:6a:3c:1e:8a:a1:69: 78:99:aa:5a:f0:78:68:bf:15:88:9c:1e:d6:d8:e5: 8a:8c:f7:ce:68:fe:ec:66:44:1d:8d:9d:ef:b6:d5: 4e:06:30:f6:41:a0:c4:54:42:65:03:55:08:a6:df: ed:23:f1:48:82:bc:02:0c:60:e1:61:5c:28:4d:f0: 33:f8:23:70:60:c1:32:00:3e:23:9f:db:f1:15:30: ae:21:74:c8:38:7b:e1:68:eb:4f:71:4e:b3:1d:09: f4:db:51:97:0a:1d:ce:9b:d7:b7:e0:4a:11:a9:ea: 6b:fa:d4:32:a0:01:ed:09:8d:79:68:5f:cb:ac:93: 6a:81:e0:66:7e:5b:f9:00:db:da:df:23:2c:6b:1c: b5:b2:a2:df:a7:f9:6e:09:38:b9:b8:49:28:26:d2: 3d:a3:fa:f3:db:20:a4:cc:8d:ee:d0:ce:f0:20:fb: 84:0d:76:cc:56:c9:9c:f8:cc:b4:62:56:94:e9:5b: a5:50:80:8d:04:79:52:18:9a:c6:35:cb:d7:99:ea: ff:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5D:B1:23:E9:F4:E3:5F:DD:1D:57:B9:80:34:AC:F9:69:D0:92:9F X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:99:2f:71:07:ac:23:49:2b:07:8c:4f:59:8b:37:45:3e:54: 47:f1:bd:a5:b4:ae:2c:b0:21:4d:3a:99:9f:8d:a5:00:99:98: 49:c1:1e:8c:05:fd:c9:91:12:ec:7f:73:99:7e:23:90:5a:f5: 08:e4:59:54:d2:7b:11:83:4f:06:d1:0f:a0:fc:67:52:b1:85: cf:fc:ff:28:80:6f:67:6a:98:90:4e:8b:36:ee:55:da:02:2b: 3e:d2:b5:81:31:61:fe:44:75:5c:59:c5:8f:46:08:4a:47:d2: 8e:21:2a:8d:6d:30:46:8d:ef:a9:f9:a7:58:3c:08:67:b9:9f: 38:f1:db:90:8b:e6:d1:f7:eb:2a:16:10:b9:93:07:88:d0:8d: 27:84:3b:46:3a:4d:49:74:85:6c:da:02:0f:aa:22:bf:ad:ac: 9f:ed:7f:e4:09:c4:86:f0:86:63:7b:38:3e:44:5b:db:2f:7d: a7:cc:51:7f:fc:4c:a4:12:58:f4:7a:93:bd:9f:8b:71:23:46: 4b:32:e3:63:d9:5f:74:c0:81:a3:ea:20:e9:0b:2c:a4:16:37: 1b:27:d8:bc:50:d6:51:72:31:d9:9f:86:22:a8:c1:5f:1e:18: 5c:05:d7:29:e0:10:4e:8e:c0:ad:7e:5e:28:c0:d8:95:64:35: ea:0c:8e:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjYwMTEyMjMyMTMzWhcNMjYwMTE5MjMyMTMzWjAYMRYwFAYD VQQDDA02OTY1ODFmZC00NzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApF5+dNFTfemqmcCWz71sfXooVziIEGHpmjjIY3ij278DbNtgytv/VYez3hhS 5zcvjZPu+KBqPB6KoWl4mapa8HhovxWInB7W2OWKjPfOaP7sZkQdjZ3vttVOBjD2 QaDEVEJlA1UIpt/tI/FIgrwCDGDhYVwoTfAz+CNwYMEyAD4jn9vxFTCuIXTIOHvh aOtPcU6zHQn021GXCh3Om9e34EoRqepr+tQyoAHtCY15aF/LrJNqgeBmflv5ANva 3yMsaxy1sqLfp/luCTi5uEkoJtI9o/rz2yCkzI3u0M7wIPuEDXbMVsmc+My0YlaU 6VulUICNBHlSGJrGNcvXmer/rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpdsSPp 9ONf3R1XuYA0rPlp0JKfMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0mS9xB6wjSSsHjE9ZizdFPlRH8b2ltK4ssCFNOpmfjaUAmZhJwR6M Bf3JkRLsf3OZfiOQWvUI5FlU0nsRg08G0Q+g/GdSsYXP/P8ogG9napiQTos27lXa Ais+0rWBMWH+RHVcWcWPRghKR9KOISqNbTBGje+p+adYPAhnuZ848duQi+bR9+sq FhC5kweI0I0nhDtGOk1JdIVs2gIPqiK/rayf7X/kCcSG8IZjezg+RFvbL32nzFF/ /EykElj0epO9n4txI0ZLMuNj2V90wIGj6iDpCyykFjcbJ9i8UNZRcjHZn4YiqMFf HhhcBdcp4BBOjsCtfl4owNiVZDXqDI7h -----END CERTIFICATE-----Generated at Tue Jan 13 04:38:37 2026 by rpki-client