This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft
File: NBfrvXgtZfKcRPwL3lgaTRst66Q.mft (raw, json)
Hash identifier: /+RvqL1OgqPLezFwiUz/0GsQa0VYbUkqVUi3BvPVFsk=
Subject key identifier: 92:2E:A6:D1:6C:B4:D3:AE:EB:11:59:F0:00:68:EA:20:F1:D9:9E:B9
Authority key identifier: 34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4
Certificate issuer: /CN=A91836DB/serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft
Manifest number: B4
Signing time: Sun 25 Jan 2026 05:14:05 +0000
Manifest this update: Sun 25 Jan 2026 05:14:05 +0000
Manifest next update: Sun 01 Feb 2026 05:14:05 +0000
Files and hashes: 1: NBfrvXgtZfKcRPwL3lgaTRst66Q.crl (hash: +Wm9EmehxJejhBhz63cK+ae9sD201+AR2LueIjmsqF4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl
rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91836DB, serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4
Validity
Not Before: Jan 25 05:14:05 2026 GMT
Not After : Feb 1 05:14:05 2026 GMT
Subject: CN=6975a69d-b1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:b3:c7:d9:88:2f:3c:34:ca:d8:86:43:d0:
77:a6:75:2c:13:19:bf:97:a6:d2:5d:e9:d4:c6:34:
ee:00:fc:e6:d1:9e:8b:96:e2:3d:54:56:af:fc:54:
4d:54:e2:e7:1a:ae:46:dd:cf:9d:7d:05:ba:24:c2:
57:97:e4:82:7a:d3:5b:c7:48:b0:2b:51:a9:0b:50:
24:39:24:0e:37:6f:04:6a:a8:b1:2a:5d:8e:cc:de:
01:08:bf:cc:b2:b4:47:91:9e:5a:eb:e8:58:10:98:
c6:a6:24:9c:a3:e2:da:8e:23:c9:25:c7:51:9c:3e:
fa:bf:4a:83:ad:ba:a4:e7:72:b5:31:a5:c9:98:3e:
33:1f:95:29:00:dd:1f:01:36:dd:c8:7e:fb:d0:6d:
08:66:ac:a2:1a:7b:e1:ae:d7:a9:22:91:32:5c:18:
a3:71:9e:73:59:7c:41:72:81:8d:7e:c9:da:48:59:
32:5d:0e:ff:66:3b:05:96:81:ab:13:15:4b:dd:76:
eb:48:6e:74:bb:ff:76:53:06:f8:22:df:e8:6f:66:
b0:4a:c6:0d:b3:ec:6e:dd:78:c8:eb:c5:b7:b4:ae:
dd:7a:20:a4:4f:42:b0:bb:fb:64:d9:93:bf:53:a7:
c8:48:d1:05:c9:7d:c9:4c:e7:a4:ab:8c:0b:43:30:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2E:A6:D1:6C:B4:D3:AE:EB:11:59:F0:00:68:EA:20:F1:D9:9E:B9
X509v3 Authority Key Identifier:
keyid:34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:9d:61:11:1d:43:0d:8d:8b:3a:ee:80:3d:57:28:d4:cc:fb:
3e:78:33:04:3f:a3:8c:d9:4b:5d:81:88:d3:a3:2d:a1:31:b0:
33:46:15:da:9b:a5:98:5a:9e:cf:1b:dc:25:f5:37:c1:aa:48:
e7:e6:b6:2a:3a:c8:10:8e:57:a6:29:fb:e0:68:86:b8:81:30:
5e:3b:c6:94:21:aa:68:d6:bb:45:b2:06:6c:30:7f:9e:8f:38:
9d:33:df:38:1d:26:81:20:6b:6e:8e:43:43:3a:d1:b5:f4:8d:
d6:df:cf:fb:3b:39:c6:c9:b3:a1:3e:f2:0c:79:5a:f9:a9:d8:
7e:dc:b8:d0:96:e0:12:bb:50:49:c1:85:b6:4d:fd:81:c7:19:
43:5a:29:a7:f4:d4:ab:f1:7f:fa:3a:aa:e9:98:93:93:a1:e0:
d5:90:2b:e9:c2:0b:1a:66:65:86:e0:ce:d5:df:b7:1f:07:01:
9c:54:1d:71:c5:28:69:0c:f0:cc:df:66:17:98:9a:40:61:9e:
7c:de:86:05:a7:1b:58:c9:ad:ef:c7:26:4b:b2:89:a0:8d:2a:
64:7a:16:85:fe:2d:b8:80:89:90:9b:da:28:68:aa:4c:37:42:
7a:e0:3e:f0:4d:7a:c8:3a:c2:f7:0f:0b:90:4b:d2:13:ec:e3:
de:d9:b6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:13 2026 by rpki-client