This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
File: 1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json)
Hash identifier: RKjhnb2U71IWIZw8i9OBliklyNeBW+d2kb+Y5Vi1gnQ=
Subject key identifier: 90:26:75:36:11:7A:9A:84:77:EE:6B:DC:E2:5F:9D:80:52:A8:3D:C5
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial: 092C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
Manifest number: 090A
Signing time: Sat 24 Jan 2026 19:44:49 +0000
Manifest this update: Sat 24 Jan 2026 19:44:49 +0000
Manifest next update: Sat 31 Jan 2026 19:44:49 +0000
Files and hashes: 1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: W/F9Ux7ZKjBJ3LFR5E/2a3nYueLjWKxpxMbQmcyWkYY=)
2: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: XAx1J/DLce82S0DJ6QETMIUPs/8svCL35NE1zYijtJ8=)
3: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: 437Z5enRuaQO92H2FAcbSA65gK3IxD6GTsjTk9iVKzU=)
4: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: cndw19Zty56t27dvRNtU0GtVAt1H5pGdcRIcu3Z2IPk=)
5: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: K91u4jcxoGdVwNsfyPrjf+VTjR+CX+rH0W4KKBUnjNU=)
6: F814A546C01411EA912AC365C4F9AE02.roa (hash: VCA7ATdoKb3bc3VrnHWvqH8lcWu2vv1KBpe9G26/lek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2348 (0x92c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Validity
Not Before: Jan 24 19:44:49 2026 GMT
Not After : Jan 31 19:44:49 2026 GMT
Subject: CN=69752131-52df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:40:84:c9:73:5c:b0:48:81:b5:d1:8a:62:
14:c3:10:3f:1f:35:65:20:87:10:eb:eb:94:b1:92:
2a:38:ec:53:e8:c6:46:b7:41:4a:c8:7e:ab:6b:b7:
e5:8c:f0:ea:ee:41:67:a5:06:86:6f:ca:b7:12:73:
1b:38:03:18:ac:9a:21:46:7f:e2:5a:62:3e:20:34:
66:d8:26:53:fd:37:8a:3a:86:b3:bc:14:b3:a1:bc:
63:bb:c1:f1:3a:f3:13:73:34:55:9e:14:b3:9a:c4:
53:af:e7:d8:98:5b:2b:d0:0d:aa:cd:8d:4a:8e:af:
ab:1e:34:91:e6:44:0d:f6:77:ee:44:f1:fb:12:1d:
65:c2:e6:02:44:60:03:fb:2e:e5:55:f5:e2:c2:4d:
0b:87:99:1e:8e:c4:64:ba:67:a9:24:57:7e:dc:06:
c1:59:a5:20:e4:35:dd:b5:e2:23:2d:f3:f9:cb:81:
38:d8:34:cc:90:1e:62:d9:bc:f1:58:71:d1:c3:53:
40:5a:29:d0:80:48:0e:2d:72:8b:cb:1c:b7:4e:46:
12:a5:04:13:b2:13:df:df:f8:b5:20:17:17:6c:ad:
cb:cc:2f:6a:8c:3d:79:aa:7f:3e:9f:b7:50:c1:2e:
2f:b4:a6:e9:eb:82:0d:f9:23:0d:92:1c:eb:09:63:
fb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:26:75:36:11:7A:9A:84:77:EE:6B:DC:E2:5F:9D:80:52:A8:3D:C5
X509v3 Authority Key Identifier:
keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:35:0f:00:38:f2:6e:ee:78:a5:23:0e:cc:68:83:40:24:2b:
bd:a9:90:56:c6:c4:2e:38:84:6f:d0:58:ce:ba:81:d6:44:b0:
22:6f:ce:a8:54:f1:70:aa:8d:ae:6d:1d:87:a0:a2:b8:56:7a:
68:b8:c4:1b:70:5b:dd:1c:a3:63:1d:80:56:a0:93:d5:87:57:
01:05:64:96:69:95:3a:f3:b5:17:69:de:41:49:6d:6d:a9:3f:
06:0a:cd:43:b1:6a:a8:44:62:da:f9:b4:13:76:eb:65:af:d1:
1e:62:ac:c1:aa:71:f3:f8:99:09:9f:78:04:40:a5:35:6c:eb:
8d:be:4b:90:8a:61:e1:3b:3d:f5:aa:7b:22:ee:5d:70:e4:00:
d1:b3:4b:ed:c3:bf:48:2d:88:7c:fd:7f:ca:05:b7:51:c6:84:
ee:30:3c:2d:54:a5:41:55:2a:e8:d8:cc:ad:d5:eb:44:2d:9b:
0b:98:3d:aa:23:c2:ed:6d:af:bb:90:6b:d6:1f:2c:03:54:f3:
05:4b:85:cd:80:65:93:e1:f5:0c:f7:a9:92:74:dc:94:c3:94:
f7:80:84:9f:83:9c:bf:1f:5e:b8:ac:8f:40:8e:d2:da:d2:fa:
c1:3f:4b:9a:37:92:c0:e6:ba:36:da:46:02:19:c2:3f:15:d2:
5b:56:59:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:21 2026 by rpki-client