This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft
File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json)
Hash identifier: 4K7qedjxTmugr5WIBIx/w2myQEpshkfvussqTnzn+i0=
Subject key identifier: 59:ED:F0:56:C6:38:7A:52:45:92:CF:3F:B9:79:19:19:4B:FD:5D:F4
Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1
Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft
Manifest number: 018F
Signing time: Sun 25 Jan 2026 02:51:56 +0000
Manifest this update: Sun 25 Jan 2026 02:51:55 +0000
Manifest next update: Sun 01 Feb 2026 02:51:55 +0000
Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: v4V2L2C5vfoxF84F+bbFyZowplJ7MJoDp4OZZob6YKM=)
2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: CH0RcTjT3+/CHefP1yxI2QXlV1Q7xfsQAzCv5/ZeECQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl
rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F0DF, serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1
Validity
Not Before: Jan 25 02:51:55 2026 GMT
Not After : Feb 1 02:51:55 2026 GMT
Subject: CN=6975854c-18c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:71:6e:7d:79:aa:8a:8f:64:25:eb:de:d0:
e7:bc:bd:a0:c2:b2:b0:8e:1b:24:1f:e9:90:68:01:
4e:8e:aa:b6:37:59:ee:75:e7:d9:b3:54:47:11:94:
c5:67:a2:88:b7:98:e1:2d:1b:26:df:bd:2b:7f:b2:
bc:f3:4f:f5:ff:bf:42:bf:12:16:33:19:77:ff:36:
6d:15:bf:db:72:ca:a3:ce:1d:61:b6:af:4c:2e:c6:
f4:fa:57:42:2b:47:10:88:bd:d1:af:c2:aa:76:81:
76:48:fb:3c:00:e9:25:aa:73:d4:14:e3:15:53:bd:
86:ec:f6:a7:00:5e:e4:65:46:3a:cb:37:37:82:39:
c0:33:cb:3e:23:07:e3:9d:70:21:e0:d9:60:58:6d:
e7:b2:55:ef:b7:3d:37:2c:f5:c5:58:37:f0:98:ef:
44:95:b1:37:de:c2:09:ca:5e:a3:c9:fa:ea:18:e2:
86:b2:f2:d3:98:e1:fa:d3:9d:d9:bb:ff:2f:0e:6b:
2e:79:d1:00:29:d6:b3:ef:62:81:27:f6:8f:30:36:
b8:51:d4:fc:e2:f7:d2:20:ea:5e:be:3f:9f:30:29:
9d:8e:6a:b6:fe:d9:f7:11:a7:27:dc:7b:07:16:c7:
b1:9f:91:3e:01:2f:87:32:24:6e:fb:a0:2b:d6:44:
48:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:ED:F0:56:C6:38:7A:52:45:92:CF:3F:B9:79:19:19:4B:FD:5D:F4
X509v3 Authority Key Identifier:
keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:68:f2:ea:ea:23:77:5c:95:63:7a:71:bf:0f:7e:8f:b3:c8:
c4:c3:6c:ef:48:05:23:b9:ce:06:fb:4b:d6:34:8c:5a:c3:d7:
a0:a3:cf:91:8d:6c:3f:8b:b5:b2:a9:3e:ac:37:9b:4a:64:ba:
58:62:2c:70:84:a2:d7:05:fd:4c:ea:68:7a:36:48:25:06:bb:
76:a3:84:f5:0c:c9:be:4e:20:3d:f7:b7:3d:f5:6e:32:a7:63:
69:bf:78:1b:dd:a6:25:5d:d0:2d:1b:1f:70:c7:01:78:ae:e2:
a5:69:e7:87:79:b6:4f:c6:99:af:08:47:79:81:b6:c5:da:fa:
8c:e3:c8:61:00:55:60:78:25:a4:0f:d5:f2:ac:36:57:be:6b:
98:1a:77:b5:79:2e:a9:34:58:b9:25:03:a1:5f:69:5f:c9:a6:
18:d8:8a:fa:07:21:60:97:30:4f:53:bb:1c:d6:7e:6f:f0:37:
5c:03:ff:93:18:94:7b:ff:d2:d8:d0:7a:4d:a7:a3:3b:2f:3d:
90:f1:3e:0b:e8:d4:03:5a:6c:5f:d0:8e:51:ef:f2:b7:ca:1c:
f8:f1:e9:99:c4:6f:b4:de:34:84:4a:89:16:ba:a2:d4:cc:7e:
38:e7:6f:a6:ac:13:06:c8:af:2f:30:6d:a1:cd:f5:a8:33:b0:
4a:b2:3d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:04:13 2026 by rpki-client