This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft
File: NUOeC_NciIu4TRsk7N5wYM90TpE.mft (raw, json)
Hash identifier: XXUB8zS30o+QJo/zJlXKG+6JpXCIuzF99znf/QRa8A4=
Subject key identifier: 44:C1:1E:23:32:6F:8D:40:25:64:D6:C1:B8:FD:F6:FA:C3:7B:5B:A5
Authority key identifier: 35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91
Certificate issuer: /CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91
Certificate serial: 2BEC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft
Manifest number: 2BD6
Signing time: Sat 24 Jan 2026 14:25:03 +0000
Manifest this update: Sat 24 Jan 2026 14:25:03 +0000
Manifest next update: Sat 31 Jan 2026 14:25:03 +0000
Files and hashes: 1: NUOeC_NciIu4TRsk7N5wYM90TpE.crl (hash: Vfdb1Di/14lFpK/omFtkpzu/gFbc4cRPVDtfAU1Svhs=)
2: 6313DADA500011EBB74A2C2AC4F9AE02.roa (hash: Dh1mpv4UoWbEEeCnj4hWDVua0Kb3Ya4BmP9+TVk00i8=)
3: F645F318500C11EBA2295426C4F9AE02.roa (hash: NK9ND6m4XQQdYJfdTkVni6Vzs2GTwmWQ7OeeG3lJVUs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl
rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11244 (0x2bec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C422, serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91
Validity
Not Before: Jan 24 14:25:03 2026 GMT
Not After : Jan 31 14:25:03 2026 GMT
Subject: CN=6974d63f-4281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d0:1a:e1:96:57:6e:91:ce:c6:d2:0a:33:f8:
b6:93:1d:2a:bf:36:a4:a4:a6:dc:b0:b2:38:47:f9:
4b:7c:4b:70:b2:e3:d2:16:89:67:0d:f3:36:7f:de:
48:b2:d7:ce:63:67:ae:76:12:81:9e:1e:e0:c4:9a:
07:b6:3f:4b:e2:13:43:2e:12:cb:9a:0c:a9:32:db:
a1:c8:a9:7c:b2:26:86:77:61:90:d4:b2:ca:ef:66:
13:e5:74:eb:70:58:d3:26:7c:5f:3d:cf:75:87:7c:
57:b3:a8:04:32:ab:36:f2:df:ba:f6:af:fa:9a:4a:
5c:b0:e7:aa:f2:e0:59:88:b7:b2:a3:d7:fb:2c:f1:
00:3b:62:40:f4:97:68:cf:81:44:4d:2a:14:80:4c:
b7:b8:35:44:90:85:77:8b:7b:6c:01:07:93:22:33:
83:61:a3:24:e4:d0:4a:f6:4e:a3:27:1f:1d:c6:97:
d8:18:cd:69:2b:02:d4:e9:f9:8c:49:53:ac:ea:bb:
6a:e1:c0:8a:f4:ac:e5:d3:98:fd:95:e8:c7:5a:85:
9a:84:0f:45:0e:6e:8f:f2:ce:91:c5:2e:48:84:3e:
6f:33:cf:ec:2e:68:09:cf:8c:93:c1:0f:b3:f8:59:
4b:4b:dd:13:97:b0:10:5f:cd:f7:1f:97:db:a7:4e:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C1:1E:23:32:6F:8D:40:25:64:D6:C1:B8:FD:F6:FA:C3:7B:5B:A5
X509v3 Authority Key Identifier:
keyid:35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:78:03:e5:7d:2f:d2:e6:77:e4:6d:82:07:72:b8:7e:5f:98:
fb:cc:95:10:7e:f6:8e:39:9c:30:c3:85:aa:e1:69:60:dd:39:
4c:72:ac:b8:61:d7:e2:72:67:15:fd:6e:87:87:61:e9:5c:95:
73:3d:ba:87:87:91:2d:08:35:43:cb:fb:1f:94:59:94:ed:f6:
a8:06:69:64:d3:db:f8:4d:de:31:4d:73:bb:af:4a:e3:79:a3:
10:21:7c:f0:6b:eb:c0:df:aa:2b:45:b8:77:45:fc:a9:2a:d4:
5d:90:35:ce:41:82:a1:b8:a5:91:73:36:61:ba:82:f9:ca:1a:
db:d3:46:5c:38:47:20:38:04:03:34:ac:9f:89:d6:6c:6d:32:
67:9c:eb:e4:70:ee:41:23:89:57:63:1a:35:52:0a:6f:1b:8e:
77:f7:75:63:3f:44:4b:00:8c:36:00:c6:d6:05:bf:68:49:e0:
d9:00:0a:89:d6:aa:e5:68:09:b6:00:2b:39:d9:6a:e7:a4:29:
49:cf:78:29:48:48:5c:96:97:a3:6d:b0:a5:96:25:0c:e0:02:
39:aa:af:5f:00:e4:7b:95:dd:b7:eb:00:f9:47:8a:66:46:be:
5e:9b:2e:f9:5e:0c:e6:8e:3d:c2:13:68:65:ad:60:17:d0:9a:
e5:8d:ee:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:44:39 2026 by rpki-client