This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: qXz4WksbYRZ9NynN85uWEaCyjKux1p7zL3qEU6brrts= Subject key identifier: 9A:AB:54:13:74:AD:B7:54:59:B6:BC:1D:20:40:CF:6C:86:10:64:CD Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: 0177 Signing time: Thu 01 Jan 2026 03:30:09 +0000 Manifest this update: Thu 01 Jan 2026 03:30:08 +0000 Manifest next update: Thu 08 Jan 2026 03:30:08 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: H7rxFW8ZzkaQgwS5GKeELGmLeUwaNqfa0N1MW3zq4mE=) 2: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: ZDrCMxxOwwuqNF0Q4xD3EvKSvIiYcNvuSOn5SbIs2mk=) 3: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: B4bx9kA0p4n5ASz52WYMBOS7rU+I5DT2fmWjDq/qssM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 03:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Validity Not Before: Jan 1 03:30:08 2026 GMT Not After : Jan 8 03:30:08 2026 GMT Subject: CN=6955ea41-6147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:aa:6e:4a:ca:9a:7c:ed:b5:a5:d0:5b:dc:5a: 07:1a:c9:84:10:0f:cc:29:48:55:10:5b:2f:4a:61: 50:1d:f7:8d:21:0a:e7:8d:e5:35:bb:9a:57:68:63: bc:47:c4:0e:77:9d:4b:11:7e:7b:01:65:38:06:0e: 19:4a:d5:82:e1:26:7c:3e:e7:3d:74:da:a4:85:1c: 4f:f7:3b:a8:27:61:23:92:98:ed:ad:c0:01:24:46: bc:fd:10:27:33:f3:0a:1d:7d:63:eb:e9:6a:3a:b7: c8:94:48:8d:27:06:f7:72:b2:32:b3:cf:96:1b:0f: 73:56:21:6d:57:1b:65:40:da:00:9c:67:dc:ee:9c: 6a:7e:ed:82:0e:1e:f3:9d:e7:fc:73:cb:a6:e4:f2: 40:4e:64:3d:fe:67:f1:ae:0a:f1:78:f7:47:02:21: cc:ec:e2:40:cb:8f:dc:d5:7d:7a:3e:00:d8:ac:64: c6:b3:3d:1a:20:79:ec:d7:f1:0b:10:3f:76:a1:bf: b4:78:eb:53:04:1b:9b:f2:ca:8a:08:1c:b3:b3:6b: b8:50:0b:83:d2:b7:57:50:eb:45:a3:d4:b3:40:42: 42:38:48:a8:16:eb:32:cc:78:5e:67:d2:82:c0:fb: e7:9c:56:5e:cc:ee:cc:88:63:f2:1d:d0:66:df:2c: a0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AB:54:13:74:AD:B7:54:59:B6:BC:1D:20:40:CF:6C:86:10:64:CD X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f2:65:5e:ba:28:59:be:15:8a:51:17:cc:ba:49:47:3a:8f: 82:73:2d:08:32:15:b2:f2:00:34:75:db:dc:f3:13:ba:25:9c: 62:d0:58:d9:d4:e3:69:6e:dc:96:37:3b:11:00:05:6e:7f:d8: 62:77:7c:5b:b2:4a:90:ba:2e:60:fb:9c:fa:2d:6b:81:96:71: 5f:35:f4:ec:f7:d5:0f:74:37:6a:ea:99:a4:ae:57:4e:b8:72: 62:84:f4:bd:f9:53:55:41:a0:ce:34:06:b7:a6:e3:a4:e9:53: d9:2c:b4:8e:92:cc:ea:90:42:cb:c5:5c:4f:0c:51:57:76:cc: f7:7d:ad:e9:ff:d4:07:f0:ef:82:6b:5d:f9:f7:ac:4c:95:d8: 9f:1d:47:c0:6a:78:7b:5c:91:7f:f9:c0:5b:1d:1b:2d:91:b1: fe:ec:be:db:7e:70:b1:bf:fc:ac:bc:44:52:2f:49:c6:e7:be: 17:1b:41:e3:b5:8c:5b:0c:0c:83:9e:c8:b2:15:0c:55:98:51: d1:64:63:87:ef:0a:cc:a9:29:e4:4d:af:b4:63:2e:65:80:9f: 8d:04:52:18:1c:bf:29:d1:80:b8:f8:f6:2b:94:c8:15:da:35: 1c:7e:dd:53:af:6d:6f:38:cb:1c:08:b2:a4:c7:0c:af:ec:4f: 25:2d:4b:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC OTM3MjU1QzkwHhcNMjYwMTAxMDMzMDA4WhcNMjYwMTA4MDMzMDA4WjAYMRYwFAYD VQQDDA02OTU1ZWE0MS02MTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKpuSsqafO21pdBb3FoHGsmEEA/MKUhVEFsvSmFQHfeNIQrnjeU1u5pXaGO8 R8QOd51LEX57AWU4Bg4ZStWC4SZ8Puc9dNqkhRxP9zuoJ2EjkpjtrcABJEa8/RAn M/MKHX1j6+lqOrfIlEiNJwb3crIys8+WGw9zViFtVxtlQNoAnGfc7pxqfu2CDh7z nef8c8um5PJATmQ9/mfxrgrxePdHAiHM7OJAy4/c1X16PgDYrGTGsz0aIHns1/EL ED92ob+0eOtTBBub8sqKCByzs2u4UAuD0rdXUOtFo9SzQEJCOEioFusyzHheZ9KC wPvnnFZezO7MiGPyHdBm3yygRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqrVBN0 rbdUWba8HSBAz2yGEGTNMB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU RjFCOFNBSWM0S2k1TnlWY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH8mVeuihZvhWKURfMuklHOo+Ccy0IMhWy8gA0ddvc8xO6JZxi0FjZ 1ONpbtyWNzsRAAVuf9hid3xbskqQui5g+5z6LWuBlnFfNfTs99UPdDdq6pmkrldO uHJihPS9+VNVQaDONAa3puOk6VPZLLSOkszqkELLxVxPDFFXdsz3fa3p/9QH8O+C a13596xMldifHUfAanh7XJF/+cBbHRstkbH+7L7bfnCxv/ysvERSL0nG574XG0Hj tYxbDAyDnsiyFQxVmFHRZGOH7wrMqSnkTa+0Yy5lgJ+NBFIYHL8p0YC4+PYrlMgV 2jUcft1Tr21vOMscCLKkxwyv7E8lLUty -----END CERTIFICATE-----Generated at Fri Jan 2 11:30:59 2026 by rpki-client