This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
File: NhN5wakOmU8oZFtzNWRe_DpeGs0.mft (raw, json)
Hash identifier: BXLuxF6P12Ro8xcdUSmmOHCJt+H9iW4HWLsYXFb0hrk=
Subject key identifier: D7:36:06:AE:6F:E0:9C:DE:42:9D:5E:85:28:9D:EE:D3:37:94:1A:01
Authority key identifier: 36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD
Certificate issuer: /CN=A914DCD4/serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
Manifest number: 11
Signing time: Fri 23 Jan 2026 07:01:54 +0000
Manifest this update: Fri 23 Jan 2026 07:01:53 +0000
Manifest next update: Fri 30 Jan 2026 07:01:53 +0000
Files and hashes: 1: NhN5wakOmU8oZFtzNWRe_DpeGs0.crl (hash: 3lUqsy6Npj/bUL7FzmK9dB2U+ArxvVuA/MQE+E2q2Dw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl
rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 07:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DCD4, serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD
Validity
Not Before: Jan 23 07:01:53 2026 GMT
Not After : Jan 30 07:01:53 2026 GMT
Subject: CN=69731ce2-8d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:ba:0a:d9:bb:58:bd:59:97:4e:f9:77:e6:
63:d3:39:9b:7a:d5:06:18:8e:ae:00:49:53:34:48:
6f:de:e8:20:13:2b:66:47:a8:ad:7c:49:1d:04:c6:
64:a5:81:9f:aa:46:b8:c9:7a:e6:ae:b4:83:5f:f5:
95:df:80:07:00:50:42:4e:bb:ad:85:14:d3:6c:a3:
f8:8d:15:97:93:6b:e0:ff:77:2a:27:da:71:ef:57:
cd:0d:d3:53:6b:6e:ce:e4:e7:85:25:c7:e2:cd:a2:
03:ae:71:eb:3b:b1:13:b5:e3:18:b1:cb:2f:6a:0a:
30:7d:57:c5:a1:90:cb:ac:67:b7:2f:25:53:1a:93:
d3:ea:50:b8:46:f0:ca:ed:ab:a1:fe:72:64:fb:3a:
9d:80:a9:e9:bb:c8:ff:af:f4:42:23:36:b3:e6:01:
68:b0:e6:1e:49:cd:95:70:7d:1d:8a:a8:69:5b:f1:
74:d4:51:be:a2:5b:af:4b:3b:41:e1:80:38:5c:aa:
58:03:ac:be:24:92:cc:b9:65:e1:24:36:a4:9d:96:
52:43:c3:bf:e8:3e:e9:84:46:f2:ee:7a:cc:f2:df:
d6:a0:aa:43:38:8b:4e:eb:fe:4c:a5:59:45:1c:4b:
a4:d6:e9:48:ca:44:6c:fe:8f:a1:cb:11:d7:42:1c:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:36:06:AE:6F:E0:9C:DE:42:9D:5E:85:28:9D:EE:D3:37:94:1A:01
X509v3 Authority Key Identifier:
keyid:36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:a2:f7:21:d7:3b:43:26:6c:e6:dd:04:b8:88:c2:f3:a1:a2:
32:72:04:aa:70:22:5a:c9:fb:27:66:b4:20:83:8c:95:14:df:
c8:af:bc:8d:67:dc:0b:db:e4:20:e6:bd:cc:aa:1a:f1:48:d6:
29:35:43:f8:40:54:03:f4:49:6b:e5:5a:22:cc:00:a5:1b:4a:
dc:6d:8b:ea:98:5b:8f:8b:07:c3:3f:02:a4:d4:99:0a:d7:c8:
67:66:d4:fb:fe:fc:c4:c2:cd:55:f5:00:ff:f1:b4:81:32:b7:
ce:9c:29:45:95:1d:37:23:cf:97:d7:46:3c:b4:90:73:b1:9b:
3d:3f:a9:49:b8:9b:a4:ab:08:d1:1c:c3:54:63:ea:a8:22:0c:
20:ff:85:c8:6a:06:39:8f:88:7c:03:b2:9b:34:3e:6f:50:6a:
71:b9:19:86:4f:97:a2:09:8b:c0:bc:0c:c3:75:ea:5b:b0:31:
82:95:f4:f7:54:0d:33:70:76:6a:8a:a8:63:d9:21:75:3b:a3:
d5:d9:9d:dc:b8:b7:29:60:4b:40:c5:14:f2:fd:9f:ca:26:22:
47:61:d5:a0:66:8b:3b:cd:bc:5d:32:d5:be:21:93:fd:20:5e:
20:b4:8e:45:d6:ad:93:70:46:3a:8e:6d:00:49:58:a8:5d:12:
00:6f:2f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:48:29 2026 by rpki-client