This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
File: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft (raw, json)
Hash identifier: RCfwR0yqZwlB4c2Nf/GEC2X6dV1oLbBJMQ/0P0QyHFI=
Subject key identifier: 7C:40:DC:94:DC:C2:D1:D2:E0:4E:D2:0A:5E:A8:A8:13:30:54:12:BC
Authority key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7
Certificate issuer: /CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7
Certificate serial: 0976
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
Manifest number: 0995
Signing time: Sat 24 Jan 2026 19:32:21 +0000
Manifest this update: Sat 24 Jan 2026 19:32:20 +0000
Manifest next update: Sat 31 Jan 2026 19:32:20 +0000
Files and hashes: 1: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl (hash: t2uu14MThUw6Y44fNs2sC3oJuNL3nO0u7VKEQkonkhw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl
rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2422 (0x976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150A9C, serialNumber=367E1FAF752C631FC43D872098240E80321575C7
Validity
Not Before: Jan 24 19:32:20 2026 GMT
Not After : Jan 31 19:32:20 2026 GMT
Subject: CN=69751e45-5ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3c:06:ad:dd:12:d8:10:5d:32:f8:bf:93:47:
e2:8b:c6:62:74:4a:86:db:74:13:64:ba:ce:d8:0a:
c9:46:a3:8a:da:40:d5:fa:b0:89:9b:37:c3:ce:14:
d1:17:dc:a9:67:4f:de:20:c6:f1:49:05:77:88:53:
91:f8:40:ee:ea:d2:2a:d5:03:ee:f5:82:a2:63:9f:
30:4a:60:34:9d:40:be:d9:1c:da:bd:ad:68:0e:da:
9b:9d:d6:6c:d5:73:71:a4:bc:a4:b3:01:69:70:54:
4d:76:19:65:9b:f8:ff:18:9f:ea:82:bc:9e:1b:eb:
86:04:9a:fa:24:8b:8f:6f:2e:8c:2a:17:7c:13:9a:
5b:55:1d:b1:13:07:0d:12:24:16:63:22:d6:0c:d4:
de:72:fc:2d:b2:cf:bb:04:be:e8:33:5f:9a:f1:f2:
90:93:c1:77:a6:a9:25:8b:3a:e8:3c:19:b8:e1:f5:
51:15:5c:c5:86:43:d9:64:82:0f:25:4e:bc:fa:70:
9f:dc:80:77:b4:3a:84:d4:f8:89:cd:2d:31:f6:15:
6d:ea:7a:c2:1f:ec:19:07:57:c1:92:a8:9f:67:07:
ca:07:3d:33:14:e1:ff:30:28:95:ff:9b:4f:07:d5:
54:ce:6d:ef:9f:53:3a:91:d4:b5:31:dd:95:21:f3:
de:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:40:DC:94:DC:C2:D1:D2:E0:4E:D2:0A:5E:A8:A8:13:30:54:12:BC
X509v3 Authority Key Identifier:
keyid:36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:0f:76:c6:d0:31:ae:77:91:e2:c4:35:a1:4b:97:20:a5:df:
17:e4:a1:a3:95:20:42:f4:de:67:75:47:62:d5:9c:65:c7:23:
4f:31:f2:17:c6:6d:b5:26:61:51:68:71:db:ee:5c:dc:71:b1:
83:f7:1b:f7:bd:38:f9:36:63:ec:3f:6a:43:ab:fa:14:0f:58:
30:64:6f:3d:f7:2e:a5:ff:f2:9b:2b:21:7f:20:fe:b7:ad:0a:
60:e0:ae:fb:b6:cc:0a:ff:10:b2:0c:0e:17:83:d5:af:43:5b:
9a:1e:f4:59:5c:85:c6:74:b4:5f:a7:b9:fb:18:ad:61:00:14:
e2:e0:ff:4c:8f:be:71:93:bc:ad:3d:d4:28:1c:0c:55:5d:d7:
00:47:41:6f:13:3e:07:e1:55:6d:85:b9:8d:e3:78:d6:bc:59:
de:79:2c:4e:dd:48:2d:0f:07:b8:a2:61:d2:87:26:68:1e:46:
9b:63:7d:7d:1a:04:c1:6e:6a:e0:45:97:e2:01:c9:cf:bc:79:
e9:bf:86:ea:35:0c:ec:9a:27:89:11:f4:23:c4:f7:a3:56:77:
04:f3:b4:a0:f7:df:cb:aa:df:09:5b:5d:e2:2a:d5:21:fe:3a:
9f:e6:00:17:23:40:e4:cc:27:92:01:4d:ad:4e:8a:c2:49:37:
cd:69:f5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:06 2026 by rpki-client