This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
File: NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json)
Hash identifier: QUgQqg1Zk1EETGuuHE7Bw2hhU53+7FX7xv4ixaxnb+0=
Subject key identifier: EF:98:BB:B9:69:1A:8E:FA:47:35:DC:0A:CB:65:B0:74:97:90:13:5E
Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Certificate serial: 05FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
Manifest number: 05FA
Signing time: Sat 24 Jan 2026 22:10:19 +0000
Manifest this update: Sat 24 Jan 2026 22:10:19 +0000
Manifest next update: Sat 31 Jan 2026 22:10:19 +0000
Files and hashes: 1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: nlbQQYHXEEzpcwl1AKc4Czhl212vyu7rxT21YIB7Dbg=)
2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: J5jgYUR9UX4U3661KuIFfEO7PQhAAk/pGUJOgrFfgBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1535 (0x5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Validity
Not Before: Jan 24 22:10:19 2026 GMT
Not After : Jan 31 22:10:19 2026 GMT
Subject: CN=6975434b-f6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:a7:3a:0c:f3:3b:54:00:b0:08:aa:07:66:
09:76:d5:b3:23:73:5c:de:e7:9e:cb:d2:0b:7a:c6:
09:55:43:e9:64:83:40:69:4b:13:f4:43:47:55:d5:
ba:96:94:f9:b8:bc:04:b5:53:81:4d:98:70:09:15:
4c:24:cb:c7:46:a9:6a:07:25:2e:fd:d9:41:4f:68:
1c:86:be:65:37:bf:28:d4:68:e6:55:e2:d4:f2:85:
bb:12:a8:67:6f:31:f5:24:e4:be:28:8a:4d:ee:c8:
84:36:a9:ed:2d:cd:78:e4:73:4c:b1:97:87:af:61:
91:76:d3:39:ff:65:45:0a:b4:74:55:e3:1c:63:cc:
41:78:f2:74:02:de:0e:bd:0f:7d:37:82:01:51:5f:
43:50:a6:f7:fa:c1:75:d6:ff:39:45:63:6a:29:e2:
32:35:13:19:8c:59:76:a1:92:39:6e:5a:67:73:1e:
46:0b:dc:2f:ee:5e:dc:e4:5e:4c:d6:2f:3d:4e:b1:
26:8e:9e:ed:d3:21:a6:32:45:85:fa:46:28:a7:bc:
6c:69:dd:3c:53:c6:1f:18:cd:39:7f:fb:dd:93:07:
83:e8:6a:b5:70:f3:f3:fe:0c:97:47:91:00:a5:c8:
6d:5c:a8:86:1b:40:31:8d:11:42:b1:7b:89:ea:7a:
58:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:98:BB:B9:69:1A:8E:FA:47:35:DC:0A:CB:65:B0:74:97:90:13:5E
X509v3 Authority Key Identifier:
keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:be:d9:b3:45:dd:9e:b7:77:6b:0c:50:91:f2:b9:87:5d:24:
e6:19:87:73:90:16:39:24:a9:5d:5e:49:46:e9:08:f9:07:bf:
5e:da:34:52:1f:ac:b3:9b:46:c0:28:25:85:e1:89:93:de:d9:
52:c8:5c:e7:67:d6:fa:08:75:d6:ad:b6:26:bd:7b:67:41:59:
99:71:32:9b:e6:6e:df:1a:e1:65:8e:5b:f6:41:1a:c7:47:ae:
ba:e4:f5:92:51:34:55:7e:75:08:2b:e7:72:9d:69:b5:9e:e9:
cc:05:91:dd:16:c8:93:6e:ac:7b:ec:bc:30:25:ef:16:ce:64:
bb:e7:28:57:65:86:82:3e:21:ed:bf:33:84:fa:e2:e9:20:58:
b6:36:a4:1c:1a:26:b9:b7:6e:ff:4b:02:43:10:0d:87:3c:e2:
22:94:b7:4d:d6:3f:3a:6e:3c:4a:1a:c7:33:e4:ad:1d:d1:73:
17:99:1e:38:53:99:99:a4:68:7f:3c:5e:51:67:d1:d8:36:3c:
3e:8a:86:43:2a:fe:77:64:ca:db:eb:40:1e:e7:b8:28:18:9c:
dd:89:83:05:81:55:1c:18:4c:82:95:07:e9:41:bd:59:ce:52:
de:4a:2e:82:ad:48:73:da:70:eb:11:aa:85:0d:da:ad:5b:db:
9a:29:52:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:44:57 2026 by rpki-client