This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
File: nczQgPBy3iTvhCxqopJJnvE2m_Q.mft (raw, json)
Hash identifier: NqZq6XAiGLmezVld6Y7HpTQR00ytpT+538l1SptyWfM=
Subject key identifier: 2C:51:17:F7:6F:42:6B:AD:B6:6A:DB:FD:FC:B9:2D:69:25:76:AA:E1
Authority key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
Certificate issuer: /CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
Manifest number: C2
Signing time: Fri 23 Jan 2026 05:04:23 +0000
Manifest this update: Fri 23 Jan 2026 05:04:23 +0000
Manifest next update: Fri 30 Jan 2026 05:04:23 +0000
Files and hashes: 1: nczQgPBy3iTvhCxqopJJnvE2m_Q.crl (hash: uHe8s7tt09kEdu+Hof3/ICY/o4AOiWFzHgOM3f0da9s=)
2: D7BBDE18D3AB11EFB022202CC4F9AE02.roa (hash: 759eVfeplnxkWNaLr3cFwL2y/eV2CJBpdnC5ec+BIG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 05:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A504, serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Validity
Not Before: Jan 23 05:04:23 2026 GMT
Not After : Jan 30 05:04:23 2026 GMT
Subject: CN=69730157-3ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:89:4f:49:b2:8c:e6:44:c8:da:1b:28:5b:
ca:d6:54:02:27:85:7a:40:a1:41:f7:07:27:80:f2:
b2:54:51:56:d1:be:a0:a6:34:09:b5:5b:16:42:87:
33:ad:d7:43:09:a9:34:28:57:bc:d4:e7:4c:0c:96:
53:03:7d:50:f1:06:3b:1a:89:d5:d9:fc:f2:00:45:
02:cb:24:f3:09:b0:d4:41:ad:66:c0:09:fa:0d:81:
32:56:ce:b1:16:e9:fe:8c:80:90:08:30:9d:41:6f:
46:4f:78:4d:6d:2b:0b:cd:27:ca:97:84:79:bb:4d:
0e:20:35:55:fd:1d:83:50:25:46:72:b3:c5:c4:e9:
80:69:23:e9:0e:df:d9:be:b2:b6:dc:b3:5e:67:8d:
8c:4b:9b:2f:0c:bb:d5:f1:a1:16:fb:61:57:9d:9f:
69:e4:25:4a:31:66:ca:7d:cb:29:35:3c:d0:fc:32:
f3:64:a0:fb:78:85:d4:57:1a:e6:ad:71:4b:b5:58:
7e:6c:f6:58:15:1a:bc:cd:a1:0e:f7:d7:56:25:a4:
c8:fc:9d:92:17:e4:da:96:1a:3c:04:6b:c6:1f:f4:
a3:58:c0:10:8a:db:19:4e:8e:b1:7f:10:43:a0:0d:
9f:2d:2b:ce:4c:60:e4:59:a6:40:c9:5b:18:a6:11:
ca:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:51:17:F7:6F:42:6B:AD:B6:6A:DB:FD:FC:B9:2D:69:25:76:AA:E1
X509v3 Authority Key Identifier:
keyid:9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:a3:4b:ed:c8:ab:74:cc:d9:f6:4c:36:ea:81:7c:f3:39:d9:
84:73:58:14:61:c1:5d:06:43:39:39:d9:68:d3:b4:0d:fe:78:
ff:9e:98:f3:7e:52:5c:f2:dc:52:7a:74:47:70:7e:74:d8:27:
4b:55:3e:54:75:29:9f:7f:4a:55:3d:44:f6:a6:b0:a2:2a:f7:
56:1a:23:f1:6f:e2:81:6d:20:5c:e8:38:2a:c5:2c:d6:9b:9f:
20:31:7e:4f:de:db:57:e6:c0:06:5b:09:6f:fa:7f:52:5b:62:
89:20:4f:79:ed:60:56:a1:f8:85:c3:82:ae:a9:3d:94:0b:cf:
50:23:83:4b:b4:bc:29:3f:69:b2:36:a8:b6:00:2b:b4:ca:66:
81:c3:22:c6:43:0c:0e:af:f7:2e:96:ab:ed:67:2a:57:58:50:
58:13:03:6c:d1:0a:60:03:06:57:1f:4a:af:68:2b:9d:0d:b9:
6a:c1:03:9a:5d:2b:01:0b:cf:ac:94:9c:99:d1:2b:23:90:f7:
87:d4:a4:16:e0:52:aa:e1:bb:33:b8:4a:6e:2e:59:21:23:28:
9b:be:c8:2e:64:e6:1a:68:d9:36:2c:8a:75:6b:26:f5:3e:31:
85:dd:7e:48:72:e5:0d:9b:98:12:9b:63:ec:7a:78:46:96:3f:
d1:23:5d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:30 2026 by rpki-client