This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
File: NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json)
Hash identifier: DFLpR1niTd7xQYFoaI/8+pf6Jo0lOsoPHxSg83OjTLQ=
Subject key identifier: 73:C7:93:BF:65:34:F6:BD:3B:C5:FB:84:0A:0E:B4:F9:DF:27:9A:BF
Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Certificate serial: 0A8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
Manifest number: 0A79
Signing time: Sat 24 Jan 2026 19:06:39 +0000
Manifest this update: Sat 24 Jan 2026 19:06:38 +0000
Manifest next update: Sat 31 Jan 2026 19:06:38 +0000
Files and hashes: 1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: oXlWpELDqme8LKw2+rZ3XL/k7lKcmnZ1LBhYNOMt1Xo=)
2: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: MzXzYE5MrqHvRoe17AJmK7I+zMsNRRFLd5oWGTmAVM0=)
3: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: 9GaBS9IbS88to+9kkQ6jxibXk5BWsO+3f5H1a6SCfEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl
rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2703 (0xa8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Validity
Not Before: Jan 24 19:06:38 2026 GMT
Not After : Jan 31 19:06:38 2026 GMT
Subject: CN=6975183f-a23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:ec:83:28:e8:18:57:83:ea:2e:73:72:4b:
29:82:26:67:e4:d3:3f:93:ff:7e:3d:f7:bc:92:8f:
06:32:af:9e:21:74:c6:62:90:82:72:5d:78:45:98:
39:22:09:c4:c9:c1:3a:6f:41:fa:71:2d:c5:9f:fc:
70:70:85:7e:58:96:28:23:15:e0:5a:09:cb:67:53:
08:14:84:cf:45:46:de:22:ab:18:65:1c:77:05:e8:
d1:6b:d7:5e:d1:dd:ef:0f:dc:99:f7:e3:09:89:d3:
fa:ea:c5:5d:28:8e:18:c1:6d:24:cd:c8:67:ca:e8:
c5:a5:18:99:71:5f:21:57:37:0c:ec:d2:71:76:6d:
e3:4b:85:aa:5c:7d:30:89:b4:67:76:5d:0f:6d:ce:
ad:2b:c4:7b:fc:3a:b3:27:ed:cf:97:eb:8f:38:1c:
8c:68:32:fa:b6:16:ab:48:38:e7:82:d9:27:3e:93:
18:0d:f5:47:07:cb:92:06:4c:c0:ec:23:79:c7:bf:
ef:51:d3:58:74:c1:57:f7:0a:f6:fa:6b:75:c4:c3:
dc:3f:73:1a:50:a1:e4:56:00:33:9d:90:28:c8:78:
1f:30:1b:a4:00:81:25:e0:68:11:88:83:fd:04:3d:
34:bc:0e:1c:c2:8f:69:cc:56:a5:f8:a9:5d:43:1c:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C7:93:BF:65:34:F6:BD:3B:C5:FB:84:0A:0E:B4:F9:DF:27:9A:BF
X509v3 Authority Key Identifier:
keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:85:37:a8:40:51:56:e9:e2:e4:bc:c4:70:4b:86:2f:48:e9:
d4:01:0a:6b:bd:19:d9:9f:0e:1b:ab:41:4c:26:a9:be:82:13:
b8:94:ad:8f:42:47:a4:fa:b8:ba:76:be:1c:c4:68:bc:82:34:
8f:1a:23:be:22:91:0f:a0:9b:ba:4b:97:a0:38:0b:4e:45:1c:
f0:4b:2e:e4:99:15:5a:3e:65:93:c6:f0:b7:db:94:9a:7b:b2:
14:53:c0:46:fd:58:7c:37:f8:c6:83:50:0a:f9:e6:c7:7d:a8:
82:f9:84:8a:ed:bf:cf:05:d0:f7:17:af:e1:c7:5c:de:ce:fe:
3d:ac:07:d5:38:f4:02:a1:9b:4d:eb:ae:44:ae:17:bd:96:45:
28:6b:d3:d5:cc:49:f3:01:e4:a3:4c:1a:1a:63:cc:44:1b:5d:
1d:95:35:24:9a:01:ff:c6:cd:83:2d:bd:fc:f3:98:ca:2b:94:
42:e7:99:86:c2:61:cc:8e:fb:e7:c2:e2:07:8d:28:f7:60:ef:
93:c5:ce:c4:51:d8:24:c2:ea:45:ad:e5:f2:a3:26:90:5f:6a:
bd:9b:a0:57:f6:a7:11:cf:21:7c:e6:ca:57:18:37:44:72:44:
95:e3:ac:6e:d6:3b:20:c3:d1:7a:6a:4b:aa:de:7c:af:ee:9e:
09:6f:d8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:25 2026 by rpki-client