This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft
File: NkbrHzcLfmPR823rNsJHbJbmuug.mft (raw, json)
Hash identifier: YvAkZgtNdmiubY2GM57p4MAGOhUIErz8S6Gzoj3n5bs=
Subject key identifier: D0:20:96:65:A4:AC:00:E7:20:F1:A2:03:13:14:68:22:08:B1:4C:61
Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8
Certificate issuer: /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8
Certificate serial: 034D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft
Manifest number: 0341
Signing time: Sun 25 Jan 2026 00:11:34 +0000
Manifest this update: Sun 25 Jan 2026 00:11:34 +0000
Manifest next update: Sun 01 Feb 2026 00:11:34 +0000
Files and hashes: 1: NkbrHzcLfmPR823rNsJHbJbmuug.crl (hash: zo7db3oNHPuWLGMDazJwfYjhaxuWLdzs6mGA2BKSr74=)
2: F3B00CD2666C11EEB1B4711CC4F9AE02.roa (hash: NLX9iBQc5qpA5HiI79qnyQxZYjEiAaFpUSGQqEwDv14=)
3: 627A6758DF2A11EEBC440C5EC4F9AE02.roa (hash: q/TcJaaAitP3rzneDoOcxqjjnobWifgs1ChVJEG3jdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl
rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 845 (0x34d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113BE5, serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8
Validity
Not Before: Jan 25 00:11:34 2026 GMT
Not After : Feb 1 00:11:34 2026 GMT
Subject: CN=69755fb6-3ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:50:41:c7:d3:0d:8f:e8:31:0e:a9:24:b0:
cf:29:a4:9d:a0:dc:52:3e:e5:77:8b:af:72:d2:0f:
d5:14:32:3e:78:b2:bb:58:cc:c0:cd:08:51:21:05:
aa:2d:d0:78:05:24:27:e4:49:34:4b:ac:64:6b:8a:
ad:2e:7f:3b:bf:06:dc:f9:3d:6a:00:3a:f2:36:3c:
e2:15:1f:ae:ea:97:28:3c:10:af:84:39:98:af:ba:
55:95:53:c9:15:c0:5b:ef:81:06:c4:5b:7a:57:6a:
21:0f:e0:95:68:59:7a:8a:cc:95:05:19:0f:25:6c:
2e:3f:55:38:5e:8f:16:90:80:8a:25:ef:87:12:b1:
e4:5c:de:94:ea:62:3c:0e:0f:22:56:dd:2c:a7:39:
6f:92:d4:2c:d8:5c:a0:06:00:13:da:cc:d5:10:fc:
7c:b9:0d:7c:e7:4f:c4:90:cd:0a:20:17:0a:58:24:
26:21:9c:d2:e7:57:05:88:fc:af:fa:30:4e:dd:03:
47:f9:4a:0d:d4:a8:e7:2f:13:ac:5d:50:ee:6c:1f:
c6:2e:20:18:02:b3:70:4a:2f:95:ba:1c:6f:d1:8d:
aa:16:04:8a:65:68:93:6b:e8:33:5a:03:aa:af:61:
fc:71:67:71:52:e5:9c:29:ce:3b:ee:43:1d:07:3d:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:20:96:65:A4:AC:00:E7:20:F1:A2:03:13:14:68:22:08:B1:4C:61
X509v3 Authority Key Identifier:
keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ab:53:d0:46:d3:81:4f:42:89:6f:a3:06:54:be:98:b1:e8:
80:df:ad:90:7a:bd:2f:b9:b0:b4:35:7e:d8:1e:38:24:b8:52:
3d:5b:d0:fd:2c:2c:0e:81:dd:0e:2f:c2:e0:cd:a8:3a:f6:d6:
06:6b:03:0d:e4:bd:6a:18:cf:69:0a:fd:41:28:62:28:9f:39:
c7:2c:48:1a:5b:1c:fa:ba:b9:d8:08:fc:2a:d5:49:f8:a4:0f:
47:9d:73:bf:5a:4c:fd:ce:34:aa:9d:37:9f:59:c0:ca:2b:e9:
c5:61:01:d6:30:48:95:40:58:ec:0f:8c:78:26:d3:6e:8e:00:
2f:60:29:31:26:d5:25:00:cb:5a:d9:ee:b8:b0:b8:b6:80:45:
84:4f:a7:52:82:be:fc:04:5e:3d:a7:0c:48:a1:c6:56:4b:b8:
4f:7a:5f:68:c8:61:ab:28:4f:e0:50:28:45:84:b6:9f:67:d6:
36:98:b5:1d:a2:e4:3e:fc:b2:3f:1e:38:80:d7:68:53:41:bb:
d0:09:e8:1d:16:2d:ab:04:2c:53:20:1c:92:73:3f:5b:b5:21:
2b:b1:79:2a:38:64:a3:83:6a:a6:88:2e:1c:17:40:d4:08:63:
10:f3:b1:c8:a5:3a:a5:74:0c:45:51:8a:11:ae:35:fb:93:2f:
26:b3:60:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNCRTUxMTAvBgNVBAUTKDM2NDZFQjFGMzcwQjdFNjNEMUYzNkRFQjM2QzI0NzZD
OTZFNkJBRTgwHhcNMjYwMTI1MDAxMTM0WhcNMjYwMjAxMDAxMTM0WjAYMRYwFAYD
VQQDDA02OTc1NWZiNi0zZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwPFQQcfTDY/oMQ6pJLDPKaSdoNxSPuV3i69y0g/VFDI+eLK7WMzAzQhRIQWq
LdB4BSQn5Ek0S6xka4qtLn87vwbc+T1qADryNjziFR+u6pcoPBCvhDmYr7pVlVPJ
FcBb74EGxFt6V2ohD+CVaFl6isyVBRkPJWwuP1U4Xo8WkICKJe+HErHkXN6U6mI8
Dg8iVt0spzlvktQs2FygBgAT2szVEPx8uQ1850/EkM0KIBcKWCQmIZzS51cFiPyv
+jBO3QNH+UoN1KjnLxOsXVDubB/GLiAYArNwSi+Vuhxv0Y2qFgSKZWiTa+gzWgOq
r2H8cWdxUuWcKc477kMdBz3BZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAglmWk
rADnIPGiAxMUaCIIsUxhMB8GA1UdIwQYMBaAFDZG6x83C35j0fNt6zbCR2yW5rro
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JFNS82MTFDNTEyQ0Yw
RjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZtUFI4MjNyTnNKSGJKYm11
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05rYnJIemNMZm1QUjgyM3JOc0pIYkpibXV1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0JFNS82MTFDNTEyQ0YwRjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZt
UFI4MjNyTnNKSGJKYm11dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQArq1PQRtOBT0KJb6MGVL6YseiA362Qer0vubC0NX7YHjgkuFI9W9D9
LCwOgd0OL8Lgzag69tYGawMN5L1qGM9pCv1BKGIonznHLEgaWxz6urnYCPwq1Un4
pA9HnXO/Wkz9zjSqnTefWcDKK+nFYQHWMEiVQFjsD4x4JtNujgAvYCkxJtUlAMta
2e64sLi2gEWET6dSgr78BF49pwxIocZWS7hPel9oyGGrKE/gUChFhLafZ9Y2mLUd
ouQ+/LI/HjiA12hTQbvQCegdFi2rBCxTIByScz9btSErsXkqOGSjg2qmiC4cF0DU
CGMQ87HIpTqldAxFUYoRrjX7ky8ms2CY
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:21 2026 by rpki-client