This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
File: NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft (raw, json)
Hash identifier: BVPgi+ldkbT7usErFM/BebmQTIVXetmyt6opndx+OSU=
Subject key identifier: A3:6A:89:11:21:16:47:91:11:11:76:72:37:93:04:C3:DA:27:27:FB
Authority key identifier: 34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7
Certificate issuer: /CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
Manifest number: 017A
Signing time: Sun 25 Jan 2026 03:00:10 +0000
Manifest this update: Sun 25 Jan 2026 03:00:09 +0000
Manifest next update: Sun 01 Feb 2026 03:00:09 +0000
Files and hashes: 1: NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl (hash: lSyNkZJbTub0PTASNb9mf3Vl+owlxK9J7RHINzpIPD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl
rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A268, serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
Validity
Not Before: Jan 25 03:00:09 2026 GMT
Not After : Feb 1 03:00:09 2026 GMT
Subject: CN=6975873a-2650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:17:fb:12:ad:5f:65:7c:ff:34:53:47:77:
d1:c8:41:38:b5:cf:f9:97:df:e4:3a:34:d0:16:96:
89:38:bf:ad:32:68:a8:f8:46:ea:08:4c:c0:be:fa:
21:22:6d:ff:cd:63:e0:bc:b0:5d:b3:79:57:6f:23:
88:a8:de:60:34:23:31:99:c9:85:5a:ec:5c:3a:ee:
1e:ac:17:dd:f8:ca:70:95:7c:cf:be:a2:b2:a7:a9:
36:f2:8a:14:68:a2:0b:9f:96:da:77:bc:c5:fa:8e:
46:b7:15:e1:20:26:a1:81:85:2b:92:06:ef:04:9a:
30:d4:c3:39:71:19:b6:7a:c4:ed:b8:62:f8:8a:d7:
4c:d3:10:7e:6f:ec:41:1c:e9:5a:36:ba:6e:ea:09:
ec:68:0a:99:71:93:bb:be:ef:87:7e:10:cf:3c:67:
0c:88:4f:3d:87:db:f2:ee:97:b3:b8:0b:c4:cc:4c:
98:b7:ee:9e:83:c2:d9:16:9a:66:28:32:74:6a:5c:
ee:0d:dc:6a:5f:98:94:cb:bf:bf:df:24:38:53:5c:
5c:36:92:e1:a3:6b:36:37:a2:60:32:39:57:af:8c:
fc:03:cf:7c:26:66:46:99:32:08:84:fd:23:cc:cc:
61:63:d9:43:55:d8:15:b1:36:57:ca:80:36:3b:cb:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6A:89:11:21:16:47:91:11:11:76:72:37:93:04:C3:DA:27:27:FB
X509v3 Authority Key Identifier:
keyid:34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:83:8a:0a:4a:37:9b:a8:8d:54:5c:01:72:2d:62:9b:fc:15:
21:a6:11:ac:4f:d9:b6:1a:ae:69:bf:08:24:d1:24:78:ed:12:
35:64:74:2c:03:97:e1:77:f1:36:ff:ce:a4:1f:26:85:dd:d5:
7a:3b:5c:fc:f8:4d:a7:8a:0a:b4:b4:07:65:07:3c:86:1c:78:
33:59:96:3d:94:b7:53:ed:aa:f2:02:6a:03:a1:80:57:90:58:
cf:44:09:56:29:58:97:ac:22:e5:2c:3e:d5:02:e0:fc:36:c2:
2b:a5:91:80:00:89:d3:8e:d4:24:18:67:10:e1:3e:43:0c:e2:
0e:c3:31:77:b6:9f:95:e5:0d:6e:c9:97:2e:17:71:f8:34:58:
e8:99:5f:dd:99:e5:a5:44:df:1f:74:25:3f:f1:9d:23:13:40:
6d:65:63:70:ee:a8:7a:46:7e:65:94:e0:0b:c3:fb:5a:f6:6d:
7b:4c:b8:1d:46:59:9c:36:1a:31:cb:b3:6f:17:c9:a2:b4:80:
71:67:d4:f2:b1:3a:c1:36:7b:c9:67:f2:24:13:a3:e9:92:5c:
1c:70:6f:6c:e6:14:63:eb:dc:1e:ae:06:d9:5d:fd:64:3f:b1:
4e:83:7f:6b:cb:0e:f3:62:42:a7:31:f2:03:74:55:a7:cb:b2:
2b:24:f0:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEyNjgxMTAvBgNVBAUTKDM0RUZEN0M0RDY2Q0ZBMzRCODQ1NjZCMjYyMzlEOTBB
OEM5MUVDQjcwHhcNMjYwMTI1MDMwMDA5WhcNMjYwMjAxMDMwMDA5WjAYMRYwFAYD
VQQDDA02OTc1ODczYS0yNjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAym0X+xKtX2V8/zRTR3fRyEE4tc/5l9/kOjTQFpaJOL+tMmio+EbqCEzAvvoh
Im3/zWPgvLBds3lXbyOIqN5gNCMxmcmFWuxcOu4erBfd+MpwlXzPvqKyp6k28ooU
aKILn5bad7zF+o5GtxXhICahgYUrkgbvBJow1MM5cRm2esTtuGL4itdM0xB+b+xB
HOlaNrpu6gnsaAqZcZO7vu+HfhDPPGcMiE89h9vy7pezuAvEzEyYt+6eg8LZFppm
KDJ0alzuDdxqX5iUy7+/3yQ4U1xcNpLho2s2N6JgMjlXr4z8A898JmZGmTIIhP0j
zMxhY9lDVdgVsTZXyoA2O8v/iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNqiREh
FkeRERF2cjeTBMPaJyf7MB8GA1UdIwQYMBaAFDTv18TWbPo0uEVmsmI52QqMkey3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI2OC81NDFGMzg4OEIz
NTAxMUVFOTI1RDc3MUFDNEY5QUUwMi9OT19YeE5acy1qUzRSV2F5WWpuWkNveVI3
TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05PX1h4TlpzLWpTNFJXYXlZam5aQ295UjdMYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTI2OC81NDFGMzg4OEIzNTAxMUVFOTI1RDc3MUFDNEY5QUUwMi9OT19YeE5acy1q
UzRSV2F5WWpuWkNveVI3TGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVg4oKSjebqI1UXAFyLWKb/BUhphGsT9m2Gq5pvwgk0SR47RI1ZHQs
A5fhd/E2/86kHyaF3dV6O1z8+E2nigq0tAdlBzyGHHgzWZY9lLdT7aryAmoDoYBX
kFjPRAlWKViXrCLlLD7VAuD8NsIrpZGAAInTjtQkGGcQ4T5DDOIOwzF3tp+V5Q1u
yZcuF3H4NFjomV/dmeWlRN8fdCU/8Z0jE0BtZWNw7qh6Rn5llOALw/ta9m17TLgd
RlmcNhoxy7NvF8mitIBxZ9TysTrBNnvJZ/IkE6PpklwccG9s5hRj69wergbZXf1k
P7FOg39ryw7zYkKnMfIDdFWny7IrJPA/
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:10:36 2026 by rpki-client