This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft File: njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json) Hash identifier: ahInNQuCpfFNGN96XAg13jQdSX7K9rtGlhY84nQCE4o= Subject key identifier: 34:A8:6A:87:2B:B0:8B:34:17:95:F3:0D:2D:13:C7:4C:E8:8F:E4:3B Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 Certificate issuer: /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Certificate serial: 34F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft Manifest number: 34F4 Signing time: Sat 10 Jan 2026 14:55:21 +0000 Manifest this update: Sat 10 Jan 2026 14:55:20 +0000 Manifest next update: Sat 17 Jan 2026 14:55:20 +0000 Files and hashes: 1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: MZ9axqmkoSdNOp26vA0SGqZtvImBAMqMnNV1Nr1d/5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 14:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13556 (0x34f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCD2A, serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Validity Not Before: Jan 10 14:55:20 2026 GMT Not After : Jan 17 14:55:20 2026 GMT Subject: CN=69626859-6b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:77:a5:52:ba:9d:9e:43:ff:77:4b:d3:24:ab: 85:68:3c:bd:a6:8d:95:cb:89:20:37:55:85:e5:c0: b1:f4:4b:5f:71:2a:a4:94:ba:cb:21:43:77:da:13: 0f:10:e6:53:4f:37:82:a7:fb:9a:1e:05:04:d8:0c: 14:0a:4b:8b:76:95:a5:05:9d:87:84:0c:5d:be:25: 36:cb:ff:42:72:23:36:33:7c:5f:4d:de:2f:f7:db: f1:ab:d3:88:55:67:d9:5a:66:89:b7:f8:ff:e2:75: bc:7b:20:45:f3:24:d5:99:b4:07:f0:13:fc:07:0d: 3b:2d:ef:67:d5:b6:9d:2d:af:53:ae:be:79:3a:9a: 67:c7:74:fd:95:1a:5b:bd:e6:75:d6:2e:1b:47:09: 7b:84:7c:ab:8e:46:d5:d7:30:17:24:21:10:ff:d8: dc:73:b9:15:b6:16:bd:d8:0a:cb:ec:da:1d:cc:e3: 79:46:2f:aa:4a:a2:52:94:31:1e:55:19:04:71:bb: fa:29:16:eb:5b:24:ba:32:63:b9:ac:79:3e:41:21: 22:2d:cf:34:f6:be:34:94:45:6e:87:81:ff:0e:84: 38:70:5e:f2:68:4b:87:9d:20:ce:85:aa:00:66:70: 15:4f:d8:e9:26:7f:01:ee:72:5c:6e:0a:5f:64:8f: ae:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A8:6A:87:2B:B0:8B:34:17:95:F3:0D:2D:13:C7:4C:E8:8F:E4:3B X509v3 Authority Key Identifier: keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:dd:66:35:79:2a:d0:4c:34:ac:89:64:06:ea:a4:c1:09:ae: d0:d9:49:fc:81:75:51:d7:c0:a1:00:64:f6:60:92:7a:f5:68: 9a:20:12:c6:97:c6:10:99:69:a8:e6:33:49:a7:c4:5b:9b:10: 68:1d:b3:95:dd:cc:7d:2d:26:b2:40:f7:e3:23:90:87:27:75: 89:45:d9:21:37:a1:56:09:87:76:a5:a7:1b:76:89:9f:8b:ad: 50:b6:f5:45:6b:39:13:d9:e2:0a:1a:d4:2f:4e:09:bb:0a:55: b7:72:f3:94:91:9a:2c:96:83:8c:48:bc:80:8b:81:89:20:5e: c8:d6:55:8b:5c:2f:9a:a9:8d:a5:28:f1:5e:6d:87:e2:14:1e: 62:b6:7f:4c:a1:5f:98:4b:04:d5:b2:8f:70:71:29:87:6b:e9: 05:0b:6d:1c:b1:e2:49:01:aa:12:54:bf:87:00:0d:b8:69:12: 87:f7:e6:83:89:44:c6:da:97:c8:a2:00:4e:43:63:82:c0:2f: d8:ce:13:ed:c2:54:9e:c5:19:8c:b1:6a:93:3c:71:61:4c:26: 14:88:ed:80:e5:cf:93:1d:68:35:ba:4b:d8:3d:92:38:f4:d0: 8b:c5:7f:9c:32:31:59:a3:80:2f:22:80:39:6c:9a:e3:67:c5: a8:37:ea:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNEMkExMTAvBgNVBAUTKDlFMzgwOTAxQ0M3QTAxOTQ4ODdGRDJENkY2QzY5MzZE QjJCMzc5NjYwHhcNMjYwMTEwMTQ1NTIwWhcNMjYwMTE3MTQ1NTIwWjAYMRYwFAYD VQQDDA02OTYyNjg1OS02YjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3elUrqdnkP/d0vTJKuFaDy9po2Vy4kgN1WF5cCx9EtfcSqklLrLIUN32hMP EOZTTzeCp/uaHgUE2AwUCkuLdpWlBZ2HhAxdviU2y/9CciM2M3xfTd4v99vxq9OI VWfZWmaJt/j/4nW8eyBF8yTVmbQH8BP8Bw07Le9n1badLa9Trr55Oppnx3T9lRpb veZ11i4bRwl7hHyrjkbV1zAXJCEQ/9jcc7kVtha92ArL7NodzON5Ri+qSqJSlDEe VRkEcbv6KRbrWyS6MmO5rHk+QSEiLc809r40lEVuh4H/DoQ4cF7yaEuHnSDOhaoA ZnAVT9jpJn8B7nJcbgpfZI+uqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSoaocr sIs0F5XzDS0Tx0zoj+Q7MB8GA1UdIwQYMBaAFJ44CQHMegGUiH/S1vbGk22ys3lm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0QyQS8xOTQ3MDM2NjFE OUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFaU0lmOUxXOXNhVGJiS3pl V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qZ0pBY3g2QVpTSWY5TFc5c2FUYmJLemVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0QyQS8xOTQ3MDM2NjFEOUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFa U0lmOUxXOXNhVGJiS3plV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR3WY1eSrQTDSsiWQG6qTBCa7Q2Un8gXVR18ChAGT2YJJ69WiaIBLG l8YQmWmo5jNJp8RbmxBoHbOV3cx9LSayQPfjI5CHJ3WJRdkhN6FWCYd2pacbdomf i61QtvVFazkT2eIKGtQvTgm7ClW3cvOUkZosloOMSLyAi4GJIF7I1lWLXC+aqY2l KPFebYfiFB5itn9MoV+YSwTVso9wcSmHa+kFC20cseJJAaoSVL+HAA24aRKH9+aD iUTG2pfIogBOQ2OCwC/YzhPtwlSexRmMsWqTPHFhTCYUiO2A5c+THWg1ukvYPZI4 9NCLxX+cMjFZo4AvIoA5bJrjZ8WoN+q0 -----END CERTIFICATE-----Generated at Mon Jan 12 10:32:19 2026 by rpki-client