This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json)
Hash identifier: n9dyRj3VGpHJMBhq8y8Si137Lq2q614jJ+kBRftK1O8=
Subject key identifier: F4:07:65:16:B2:FB:9E:CA:67:B9:69:81:9C:7E:B0:0C:BA:0B:E8:8F
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 057D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
Manifest number: 0558
Signing time: Sat 24 Jan 2026 22:45:15 +0000
Manifest this update: Sat 24 Jan 2026 22:45:14 +0000
Manifest next update: Sat 31 Jan 2026 22:45:14 +0000
Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: kiF7UvpL8+tjuz5Akqv3Z9Pv4HA9FU/Ay5qQYrbEqaY=)
2: 3D85B786EF7211F08C9974335B6F56BC.roa (hash: Jn6LUQTIm0Dpg1Ko7eo8YNgg7LbdkDyBWUmsJszAx7s=)
3: FBBECF1A694111F08D368069C4F9AE02.roa (hash: Hxo/oVA2HgH6qQ01M6fl9cqj5vSj3O9qRMc68jJm0P4=)
4: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: BaDUL34/Gwa3G8jGhtSk9P3jmeq3rCjBk1zIOgJr1cM=)
5: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: AhcbearK6iV6xBjXUDN0qGwO1GubeQ+m8AdvrMUpw0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1405 (0x57d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Jan 24 22:45:14 2026 GMT
Not After : Jan 31 22:45:14 2026 GMT
Subject: CN=69754b7b-1236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:ab:e0:af:a5:55:06:f5:6d:4e:f5:2c:f6:
4c:c3:35:ac:a9:01:9f:60:a9:b0:0d:bc:32:ac:fe:
20:47:42:c1:ea:a2:4d:1c:17:eb:5d:98:0c:8d:28:
13:4a:e1:aa:49:be:74:d0:b7:c7:00:f3:fd:13:bc:
aa:50:1f:41:1e:d8:bf:e6:d5:4e:ea:28:1c:12:99:
e7:72:fe:1f:9f:e5:e3:ba:67:a2:92:5e:80:65:1c:
0b:e7:2e:a3:ef:36:57:c1:5a:b3:c1:e3:e7:a9:9b:
a1:98:53:de:01:4f:e0:d7:b1:c9:b1:2d:13:18:d8:
1e:cb:c3:ad:74:7a:45:0d:18:67:c2:25:fd:04:de:
06:2e:78:15:4f:53:9a:c0:17:77:a5:15:43:65:a1:
26:d3:99:17:f5:c4:99:5b:9a:44:cd:a9:54:81:fb:
25:dc:14:c3:5c:0d:6a:8f:ce:0c:5d:b2:26:51:1b:
02:44:ed:70:16:be:3a:e6:50:f7:7c:05:09:e4:cf:
a9:e5:05:ee:70:78:bd:85:91:03:f2:c4:a1:52:bb:
db:6c:0b:78:28:87:4d:bf:52:18:f9:46:46:3f:e5:
b5:0f:dc:0f:b3:ec:c6:d8:60:b6:77:28:e4:61:e1:
81:ed:7d:54:7d:21:d6:f7:65:ac:c0:05:57:c9:2b:
7d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:07:65:16:B2:FB:9E:CA:67:B9:69:81:9C:7E:B0:0C:BA:0B:E8:8F
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:67:54:e7:38:12:f6:ef:ab:97:0a:aa:76:3c:89:ed:25:22:
28:cd:9a:9b:95:8e:a4:73:ef:a8:b6:11:34:5c:6b:f5:e9:40:
b6:86:eb:f6:f6:33:8a:b2:9e:f6:aa:52:93:1e:b3:fd:70:e6:
4a:11:f4:7d:5d:17:12:2a:02:42:9e:5a:e6:88:57:68:64:a7:
df:69:d2:36:7d:93:a1:a2:b4:bc:af:f6:a4:55:5a:25:28:d1:
cc:2e:6d:af:59:88:b9:95:65:70:bb:52:af:2e:f3:99:b2:46:
5f:01:7e:74:ac:4b:b6:f1:e5:d0:d9:8b:e7:e1:38:a3:d8:20:
b1:c9:03:5e:9a:c7:a4:91:c8:e9:56:8e:a0:63:d2:d3:5e:94:
04:24:ae:bc:2b:5c:28:91:ff:fa:ac:3f:2b:5e:a0:3c:8d:57:
37:58:36:03:02:81:f7:08:17:43:69:46:99:80:82:35:6f:1f:
32:00:5d:8a:76:8d:56:82:9e:72:0a:de:e2:2f:fc:6b:33:f1:
93:69:9a:24:4d:3d:9a:03:fc:e7:43:46:98:7c:4a:e5:ca:0a:
42:2d:2e:5c:6d:0f:91:03:39:b5:7b:2a:85:64:51:ae:96:06:
6c:18:95:f8:79:f8:fe:10:8e:14:70:78:15:de:f3:ce:9f:0f:
63:3d:71:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:45:34 2026 by rpki-client