This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json)
Hash identifier: NqCMY+n/1VkBV7XLH0/2K8RJ8IzqfVGoFmhZD9S3rYY=
Subject key identifier: 67:6F:B5:C8:57:D0:4E:E7:E6:A2:17:A7:69:E8:E4:98:D3:48:13:C9
Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Certificate serial: 1E75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
Manifest number: 1E66
Signing time: Sat 24 Jan 2026 15:52:57 +0000
Manifest this update: Sat 24 Jan 2026 15:52:57 +0000
Manifest next update: Sat 31 Jan 2026 15:52:57 +0000
Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: E+0jgPz/2c3tqCKRKwSze6NrQxPLLHjFb4JK7qwgtIs=)
2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: BOcTF/v1Iy0DiJnxrZO8Yz9Fl7UTM9AhzmrK/G2Rmxo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7797 (0x1e75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Validity
Not Before: Jan 24 15:52:57 2026 GMT
Not After : Jan 31 15:52:57 2026 GMT
Subject: CN=6974ead9-c017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:db:81:7f:e3:ae:84:cf:6b:15:2d:ce:31:
5e:39:e5:e7:8c:5e:df:59:19:a7:f3:2d:2e:16:83:
b4:0a:77:81:ca:6b:2c:9a:ee:aa:04:27:e1:c9:6f:
9e:e6:3e:3c:63:35:58:77:9e:d8:20:1b:4c:d0:33:
20:fd:9f:fb:c6:ba:e1:01:b7:53:0c:67:7d:c8:ba:
55:27:63:45:45:0f:6a:a2:0e:9a:73:1d:2e:1d:c9:
fb:ee:06:01:f9:62:6c:c3:cb:26:40:24:1b:61:e3:
6d:fb:9c:d0:c2:15:1a:44:fd:3b:70:37:dd:d5:8d:
6f:9f:14:c8:fd:bf:e7:80:a4:f1:f8:14:8f:ee:43:
89:37:89:d7:0a:34:59:82:fe:7f:17:17:87:3a:5e:
2a:2f:21:46:e1:cf:c4:45:bf:c4:1f:b3:6e:fd:52:
4e:1b:de:21:27:a6:a1:5f:79:3a:12:45:5d:a4:c5:
35:0f:c4:97:73:fd:b7:26:85:94:2b:11:c0:a7:2f:
f0:77:f4:dd:e3:64:a1:04:f9:b3:35:84:55:53:ba:
c5:cf:70:09:3c:27:da:55:49:63:de:e8:b5:99:02:
07:b9:1d:70:53:3f:44:20:03:76:c6:31:e8:65:ae:
28:ef:90:5a:44:a8:86:60:34:ec:66:88:3e:30:44:
45:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6F:B5:C8:57:D0:4E:E7:E6:A2:17:A7:69:E8:E4:98:D3:48:13:C9
X509v3 Authority Key Identifier:
keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a0:e4:01:2d:1a:d5:93:55:58:af:57:fc:a3:6e:0c:83:cf:
26:87:67:73:58:83:30:62:a2:39:b0:26:a3:eb:7c:f0:7d:f7:
f2:30:84:2d:47:e8:91:df:2c:ec:4f:09:21:cc:82:43:f6:ca:
4d:bc:88:c4:b1:07:e8:0d:c5:92:cf:d0:2e:46:60:db:f7:13:
cd:df:13:6f:98:f3:8d:fc:27:b9:88:b9:21:c9:b4:85:2c:2f:
4a:a3:bd:f2:2f:39:ce:45:49:1a:8a:e5:93:1c:ea:ca:72:7e:
71:0e:60:96:3f:28:f8:55:10:20:b1:91:d7:a0:8a:fd:87:26:
62:d2:1b:62:bc:28:cf:85:aa:2b:1d:47:0f:3c:88:c7:d9:85:
ff:87:09:23:e1:5e:d5:50:00:ec:05:6a:eb:f1:ae:55:4c:d2:
eb:4d:93:c3:0f:69:9f:6c:77:2d:a2:ef:42:6d:9c:44:a1:0e:
9c:2d:5a:62:91:d8:29:e3:36:ba:b2:5c:72:ec:b3:43:c4:6c:
19:78:e5:e6:e2:d1:1e:83:4f:7e:45:19:6b:39:01:7e:6e:40:
3c:91:c5:21:2d:6e:07:03:cd:a9:af:7f:97:a4:1b:35:1a:a1:
1d:b1:92:00:c6:8c:b8:7b:5e:1e:a7:78:2e:a7:75:fe:7a:a2:
72:66:65:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:34:19 2026 by rpki-client