This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json) Hash identifier: TINTQOfHOnnRQM+o6KkJSxpO0i0X6G6y7E/+DUKKap8= Subject key identifier: B7:65:EB:29:D8:DF:EB:DA:D7:9B:49:DF:0D:44:7F:54:82:FD:B5:BD Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Certificate serial: 0826 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft Manifest number: 087A Signing time: Thu 08 Jan 2026 20:22:57 +0000 Manifest this update: Thu 08 Jan 2026 20:22:56 +0000 Manifest next update: Thu 15 Jan 2026 20:22:56 +0000 Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: SX81/keT6hHKwuPoN0RQceOlePT09Ad5iBe2HSWwAGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Jan 2026 20:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2086 (0x826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Validity Not Before: Jan 8 20:22:56 2026 GMT Not After : Jan 15 20:22:56 2026 GMT Subject: CN=69601220-ed01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:f9:f2:ee:3b:3e:88:d0:c8:ab:17:ab:e2: b6:79:87:32:da:a7:a7:2d:cb:2d:d6:09:d4:31:52: b3:00:ce:84:a5:74:cd:79:9e:24:19:b4:ad:55:5e: aa:c4:84:f9:9a:60:77:76:50:63:83:e4:10:79:f4: f4:d0:9a:2d:93:a4:14:4d:f5:e1:13:be:e3:50:ab: 04:46:46:3a:b7:69:57:18:d5:c4:d7:01:4c:b7:6d: c6:73:f4:c5:7d:8e:34:7a:8b:d2:60:34:75:1e:ff: 07:fa:87:8f:55:61:e4:6d:8e:40:12:8b:10:c8:dc: a3:29:fb:4b:56:1d:8a:24:ea:03:72:31:f5:dc:b6: 57:de:d5:a5:3c:67:38:8e:9e:1a:e3:ae:61:60:bf: 3a:79:1a:1a:fc:67:24:92:32:35:06:1b:48:94:6c: 9a:08:b9:b3:6b:01:ff:15:3c:fa:37:06:13:29:8f: 13:cd:0a:1d:ca:e9:29:d7:13:bb:80:38:ee:e6:c5: 9b:ad:b7:14:4b:e8:7f:72:6b:1a:70:c6:f6:b2:79: 5d:cd:4c:03:96:11:59:7d:bc:5d:a2:19:ff:91:ed: 8e:f5:ac:29:25:58:ff:5a:f9:66:d9:5a:10:e0:a8: 21:fb:bb:a7:95:4f:2a:0d:fa:62:f5:02:b3:0c:1b: e5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:65:EB:29:D8:DF:EB:DA:D7:9B:49:DF:0D:44:7F:54:82:FD:B5:BD X509v3 Authority Key Identifier: keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:97:98:f8:c3:c1:6b:d4:e0:5f:ba:a3:e7:84:5f:d8:7a:46: 19:68:c4:fb:b5:70:47:e0:1a:45:b4:fa:27:2c:77:ad:d0:1b: 24:8d:7d:f4:09:36:fc:f2:e1:f4:ff:84:55:1e:a1:71:63:f9: 56:b5:5f:0f:d8:1d:47:2b:7a:3e:97:3c:8d:4b:ca:d3:78:8c: 21:9b:d1:79:ae:32:71:03:d8:a0:b3:ee:e5:a2:d5:a8:e5:9e: 49:40:23:62:6d:85:4f:c6:24:14:f8:1c:97:d0:a1:e5:25:d5: ba:ab:31:15:11:1a:01:6d:61:39:ea:db:1d:e9:6a:06:3a:51: c0:de:7a:65:6a:ae:12:65:fd:34:ff:a6:a8:22:02:3d:ed:46: 3e:40:63:f5:da:43:0d:27:0e:44:1f:90:cd:7e:0f:db:f8:80: ad:3d:16:29:62:2e:9d:6d:1e:9b:fd:8a:ea:ed:4b:1a:23:72: f6:5e:5b:76:6b:da:ba:e2:7e:fe:5d:a5:91:6c:99:fb:4c:ec: fd:56:82:23:33:7e:fb:62:0c:91:db:87:ed:23:73:69:e3:27: 06:46:e5:94:3d:a7:18:44:8f:89:07:ee:5b:4f:47:ae:7c:ec: fe:4d:55:e0:f2:83:fe:11:e5:32:ea:9a:c8:c2:46:a0:03:d9: 3f:a0:75:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDlDMUYzMzJDMTI1NTQ1NzgyQ0UyMEM2RUY2NzFBRjFE M0ZDOTM3NEIwHhcNMjYwMTA4MjAyMjU2WhcNMjYwMTE1MjAyMjU2WjAYMRYwFAYD VQQDDA02OTYwMTIyMC1lZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLr58u47PojQyKsXq+K2eYcy2qenLcst1gnUMVKzAM6EpXTNeZ4kGbStVV6q xIT5mmB3dlBjg+QQefT00Jotk6QUTfXhE77jUKsERkY6t2lXGNXE1wFMt23Gc/TF fY40eovSYDR1Hv8H+oePVWHkbY5AEosQyNyjKftLVh2KJOoDcjH13LZX3tWlPGc4 jp4a465hYL86eRoa/GckkjI1BhtIlGyaCLmzawH/FTz6NwYTKY8TzQodyukp1xO7 gDju5sWbrbcUS+h/cmsacMb2snldzUwDlhFZfbxdohn/ke2O9awpJVj/Wvlm2VoQ 4Kgh+7unlU8qDfpi9QKzDBvlCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdl6ynY 3+va15tJ3w1Ef1SC/bW9MB8GA1UdIwQYMBaAFJwfMywSVUV4LOIMbvZxrx0/yTdL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9CRjQwNEE1QTAy NjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJYZ3M0Z3h1OW5HdkhUX0pO MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25COHpMQkpWUlhnczRneHU5bkd2SFRfSk4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJY Z3M0Z3h1OW5HdkhUX0pOMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFl5j4w8Fr1OBfuqPnhF/YekYZaMT7tXBH4BpFtPonLHet0BskjX30 CTb88uH0/4RVHqFxY/lWtV8P2B1HK3o+lzyNS8rTeIwhm9F5rjJxA9igs+7lotWo 5Z5JQCNibYVPxiQU+ByX0KHlJdW6qzEVERoBbWE56tsd6WoGOlHA3nplaq4SZf00 /6aoIgI97UY+QGP12kMNJw5EH5DNfg/b+ICtPRYpYi6dbR6b/Yrq7UsaI3L2Xlt2 a9q64n7+XaWRbJn7TOz9VoIjM377YgyR24ftI3Np4ycGRuWUPacYRI+JB+5bT0eu fOz+TVXg8oP+EeUy6prIwkagA9k/oHXb -----END CERTIFICATE-----Generated at Fri Jan 9 16:05:08 2026 by rpki-client