This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
File: NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json)
Hash identifier: o4woCBCo16UmKuoqhOK3Bmjit4NGiYfyDq48yJjTbmo=
Subject key identifier: DD:04:A0:7F:3E:C0:96:CB:6A:74:82:9E:24:44:10:45:DC:58:84:6A
Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46
Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
Manifest number: 6B
Signing time: Fri 23 Jan 2026 05:59:01 +0000
Manifest this update: Fri 23 Jan 2026 05:59:01 +0000
Manifest next update: Fri 30 Jan 2026 05:59:01 +0000
Files and hashes: 1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: /kydvkr6s9cz/k/8f7Lgm1iBOm8mNx13uIyt+qvULqQ=)
2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: YI5KTewQHT3HCq7P4Cu8YAVGa4eC3SI/cxqK9ohfnmY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl
rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 05:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46
Validity
Not Before: Jan 23 05:59:01 2026 GMT
Not After : Jan 30 05:59:01 2026 GMT
Subject: CN=69730e25-b4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:7f:79:b9:e9:f3:d5:e5:55:4a:dc:4c:bf:
e7:f4:dc:e2:e6:9d:14:db:01:01:0f:4f:7f:94:db:
df:ef:de:07:3d:0a:70:19:5c:76:79:db:1e:95:46:
82:ac:64:50:6a:32:7e:e0:27:1c:df:d6:d0:cb:63:
52:e9:92:f4:5d:d4:e7:3a:87:01:64:cc:04:b7:5b:
b1:81:2c:96:b8:fd:81:d5:5e:01:13:47:83:17:ca:
4a:47:0c:18:dc:4d:b4:52:cc:be:f3:38:80:bf:f7:
d8:10:e4:46:c8:d3:48:6c:13:fa:39:7e:c8:6c:61:
e6:66:77:13:39:50:16:91:ff:11:dd:49:a5:17:91:
12:d7:84:b0:b3:31:4b:3e:79:53:56:a5:0f:ff:d2:
48:64:b3:6f:af:5a:af:9b:e2:57:cd:53:9a:a0:4f:
0d:70:44:ae:f0:83:e2:10:08:54:70:6b:09:d5:41:
55:33:16:2c:61:b6:cb:c3:32:5e:ba:31:71:7b:2b:
cb:5c:39:a8:34:b7:21:6b:a3:1c:73:52:b5:82:bc:
b7:b2:ae:aa:92:e9:db:2d:b3:e8:df:93:fc:ec:2d:
c3:0a:d4:75:e2:18:89:39:70:c0:be:d5:ae:98:87:
b6:dc:d5:6d:2f:c7:a6:e4:3c:d5:1a:7e:67:43:3c:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:04:A0:7F:3E:C0:96:CB:6A:74:82:9E:24:44:10:45:DC:58:84:6A
X509v3 Authority Key Identifier:
keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fe:9f:c0:8c:df:e9:bf:c1:11:22:d0:d9:65:4a:6b:b2:b8:
aa:87:59:f5:7d:70:fe:3e:67:03:5f:f5:e5:75:fb:a9:eb:dc:
90:17:e4:79:ae:94:ca:24:be:62:7f:a3:12:9a:ae:da:15:2e:
1b:25:2c:4d:a2:d9:72:b4:e4:ad:19:c0:8b:96:3e:45:e5:61:
33:fd:79:ae:c3:51:c1:0b:62:1a:81:66:9d:4d:a8:d1:7f:c2:
e3:50:6b:46:1d:1b:42:65:f1:6e:9a:6f:b6:3d:30:cc:7e:5c:
ee:01:a7:4b:dd:2e:64:c3:17:cc:ca:17:51:7b:63:c6:ad:23:
9a:7f:2b:a2:27:70:22:5d:b8:fe:7e:1a:fd:bd:0e:4d:fe:08:
19:b1:33:ec:f0:b9:d1:c4:d3:c1:69:b0:b5:69:57:0a:37:2f:
62:cb:23:47:d9:0a:04:f7:93:99:4a:bb:79:8b:d3:41:1c:2a:
12:56:9d:d5:c0:c3:08:cb:b0:6c:8b:6f:15:41:36:dd:f0:fe:
0a:a3:ba:94:9e:50:d7:3b:57:ef:b2:1b:59:25:8b:3e:56:ba:
b2:d1:d4:9b:88:e1:9f:93:11:60:2b:4f:e3:13:05:01:4c:10:
15:b8:2f:69:36:ed:8b:5f:d7:fa:27:a1:98:6b:c2:d3:95:2b:
38:6f:71:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:54 2026 by rpki-client