This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft File: nL-xN0vpMpetwbIdvTeY0VvSdN8.mft (raw, json) Hash identifier: PgoLl7T3gKwklLc4J7oKaQUy5HsHq3SDkZYCvqxwxLM= Subject key identifier: CE:57:8F:38:B2:A9:07:6D:74:AB:A0:EA:28:E9:5F:C1:79:E5:2E:F2 Authority key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF Certificate issuer: /CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Certificate serial: 0CB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft Manifest number: 0CAE Signing time: Thu 08 Jan 2026 18:00:01 +0000 Manifest this update: Thu 08 Jan 2026 18:00:01 +0000 Manifest next update: Thu 15 Jan 2026 18:00:01 +0000 Files and hashes: 1: nL-xN0vpMpetwbIdvTeY0VvSdN8.crl (hash: TOZrtDX4Wl1CnkkJhMppJCbW1X1EV6Bjdm5v0u+OKuA=) 2: E905CD5808F111EA8E4F1D51C4F9AE02.roa (hash: I2P5GKiYO+A0JWj3FCOtq5Wyspf+9wzs4i0nVaTxKFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Jan 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3254 (0xcb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152696, serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Validity Not Before: Jan 8 18:00:01 2026 GMT Not After : Jan 15 18:00:01 2026 GMT Subject: CN=695ff0a1-79cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:eb:ac:5b:dc:2a:0d:a5:84:99:da:5d:d8:e4: 99:9f:a8:84:88:d9:eb:54:e2:be:c4:4a:8b:fb:7a: ba:14:58:a8:1f:fd:31:6d:83:a0:bf:96:ee:de:2e: c6:eb:2f:8f:f2:d2:63:33:d0:f1:ad:bc:b9:95:5d: 86:5b:a1:21:76:5b:2b:53:37:f9:1e:b3:c1:90:1e: fd:23:b4:d8:79:ab:c9:81:6e:19:04:b2:a7:16:cc: 8c:db:ad:c7:01:5a:57:c2:05:29:51:f6:36:d5:30: 25:55:27:36:3c:be:07:bf:6f:62:60:4b:51:73:f3: cd:f4:4d:36:17:b6:1f:26:8a:62:47:3f:30:a2:02: f8:56:19:3f:1e:a1:cd:ca:42:77:5a:39:ab:4c:ab: 0a:d9:79:75:95:ab:46:53:11:20:5a:7c:06:92:32: 9a:be:66:9a:fd:49:35:69:10:04:ae:ff:d6:6e:a3: ac:74:e2:f5:06:3b:65:57:a4:cd:2d:6b:f8:f5:64: 09:7c:47:5b:98:67:6b:1b:b1:04:35:26:65:c2:f8: f9:a0:30:39:81:33:37:81:6a:57:8c:e1:11:22:38: ae:bf:38:ba:66:bd:a3:97:61:b3:78:4b:48:88:22: b4:85:cd:4c:97:d9:00:03:e5:22:78:08:75:e6:a3: 10:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:57:8F:38:B2:A9:07:6D:74:AB:A0:EA:28:E9:5F:C1:79:E5:2E:F2 X509v3 Authority Key Identifier: keyid:9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:d6:70:27:13:de:a5:92:3f:da:5c:3b:c7:62:8d:92:ab:24: 9d:95:e6:7b:64:36:46:35:95:34:c9:65:e9:9f:4f:c8:5b:42: de:41:d9:5b:ce:45:89:a6:d5:b9:8b:f0:49:33:87:b3:01:64: 32:b6:2a:9d:49:b5:f3:ab:bf:b4:cc:cf:fb:94:f8:53:47:01: 10:a9:76:9f:dd:98:50:4a:0d:fb:81:ee:ba:3b:a3:fb:bc:1a: e8:2d:e4:68:12:ee:14:4f:7c:2c:cf:56:d3:45:9c:c5:5e:2e: 5c:32:6a:11:57:13:bb:18:51:41:ac:b5:ee:ce:7b:d6:ee:6c: a0:20:90:78:da:8d:7f:ba:67:ae:94:2f:a0:67:fa:19:2d:96: 54:65:27:2f:0f:70:f9:ee:38:d1:9c:63:c0:e4:13:d5:e4:37: 85:8f:cf:9a:1c:00:f6:52:35:db:1b:df:4f:e4:e5:50:5e:6c: a8:a3:f6:4a:85:2e:27:c4:ba:c5:cb:25:9b:39:4d:c6:19:d8: 11:e9:76:7d:1d:f2:8d:d3:eb:90:ed:d4:e6:40:4e:90:f9:a6: 13:21:1b:d7:88:18:07:af:91:5f:62:dd:36:15:d3:42:6b:ac: 78:00:f6:ff:72:5c:16:13:72:9e:6a:9c:97:59:9f:6e:bc:22: 07:58:88:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2OTYxMTAvBgNVBAUTKDlDQkZCMTM3NEJFOTMyOTdBREMxQjIxREJEMzc5OEQx NUJEMjc0REYwHhcNMjYwMTA4MTgwMDAxWhcNMjYwMTE1MTgwMDAxWjAYMRYwFAYD VQQDDA02OTVmZjBhMS03OWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeusW9wqDaWEmdpd2OSZn6iEiNnrVOK+xEqL+3q6FFioH/0xbYOgv5bu3i7G 6y+P8tJjM9Dxrby5lV2GW6EhdlsrUzf5HrPBkB79I7TYeavJgW4ZBLKnFsyM263H AVpXwgUpUfY21TAlVSc2PL4Hv29iYEtRc/PN9E02F7YfJopiRz8wogL4Vhk/HqHN ykJ3WjmrTKsK2Xl1latGUxEgWnwGkjKavmaa/Uk1aRAErv/WbqOsdOL1BjtlV6TN LWv49WQJfEdbmGdrG7EENSZlwvj5oDA5gTM3gWpXjOERIjiuvzi6Zr2jl2GzeEtI iCK0hc1Ml9kAA+UieAh15qMQdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5Xjziy qQdtdKug6ijpX8F55S7yMB8GA1UdIwQYMBaAFJy/sTdL6TKXrcGyHb03mNFb0nTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY5Ni83MjVDQTFENDA2 Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1wZXR3YklkdlRlWTBWdlNk TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MLXhOMHZwTXBldHdiSWR2VGVZMFZ2U2ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY5Ni83MjVDQTFENDA2Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1w ZXR3YklkdlRlWTBWdlNkTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC1nAnE96lkj/aXDvHYo2SqySdleZ7ZDZGNZU0yWXpn0/IW0LeQdlb zkWJptW5i/BJM4ezAWQytiqdSbXzq7+0zM/7lPhTRwEQqXaf3ZhQSg37ge66O6P7 vBroLeRoEu4UT3wsz1bTRZzFXi5cMmoRVxO7GFFBrLXuznvW7mygIJB42o1/umeu lC+gZ/oZLZZUZScvD3D57jjRnGPA5BPV5DeFj8+aHAD2UjXbG99P5OVQXmyoo/ZK hS4nxLrFyyWbOU3GGdgR6XZ9HfKN0+uQ7dTmQE6Q+aYTIRvXiBgHr5FfYt02FdNC a6x4APb/clwWE3KeapyXWZ9uvCIHWIhq -----END CERTIFICATE-----Generated at Fri Jan 9 16:03:04 2026 by rpki-client