This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json)
Hash identifier: uTDvE3RBhnx2XtUfB7+YwgfK9zKuHrLl1F5TctpNHoM=
Subject key identifier: A8:7E:EB:23:97:B7:08:DF:B3:0F:A0:D6:FE:89:B5:1A:E1:DE:D6:1E
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial: 09AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
Manifest number: 090D
Signing time: Sat 24 Jan 2026 20:08:24 +0000
Manifest this update: Sat 24 Jan 2026 20:08:24 +0000
Manifest next update: Sat 31 Jan 2026 20:08:24 +0000
Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: YxaHNH/aua55lxk5rW3kwtrWdu73j3McsTpmZwK1TKU=)
2: A98F7960A41F11F0A133244EC4F9AE02.roa (hash: wVCG2VGDbiE9LIJ+RohCK2UlytoDpY6tMaj0r14LtRs=)
3: B84CC7D2A41A11F08EC1655BC4F9AE02.roa (hash: BDzw5D5CcIPm56khil5lg8M53qDwHx2+4ZYsOb/1Mtc=)
4: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: I3D7DEeHdvNv2myIShwVUEjU7kH8j/IxEsxXCcOojFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2478 (0x9ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Validity
Not Before: Jan 24 20:08:24 2026 GMT
Not After : Jan 31 20:08:24 2026 GMT
Subject: CN=697526b8-2432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:08:13:91:32:b7:93:96:a9:f2:c2:46:58:
1a:c8:69:2a:28:d4:b0:59:c8:75:2a:67:f6:58:ef:
20:a1:ce:32:ca:f4:93:9f:5f:01:6d:d9:e3:5a:39:
1f:a5:9b:a0:fd:43:d4:1a:f1:b0:e6:c4:e7:f2:d1:
78:11:dd:5e:31:ab:14:d4:37:6d:d9:5a:3d:48:86:
5c:4a:e6:60:f1:79:7d:a7:71:ff:c0:af:74:77:9e:
86:80:20:f1:2a:3b:9e:4b:99:64:9c:90:ea:ee:ad:
6c:39:b9:76:43:10:21:70:27:c0:45:1c:14:57:b7:
6b:e0:b7:a4:19:e3:8c:af:78:79:38:e8:47:3c:ef:
7c:02:5d:f3:ff:5d:87:63:92:15:b4:a6:bb:f0:ca:
0b:6a:f4:f4:f1:72:4d:93:3f:13:df:5c:27:92:19:
74:a2:64:93:37:27:44:6e:d4:29:e5:32:c1:37:a2:
47:48:96:2b:e6:67:84:a3:d2:4b:50:ec:ae:cd:2c:
50:c2:f4:0d:5d:18:fe:6a:2f:6c:69:c7:cc:cc:74:
3f:53:f1:6a:57:2f:b3:c0:29:28:a8:ad:fc:b7:06:
0d:8a:f6:57:df:79:62:e1:b9:c7:7c:40:17:0c:d8:
b5:ad:f5:9d:a6:4e:c1:0d:de:e5:b5:36:d1:d6:47:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7E:EB:23:97:B7:08:DF:B3:0F:A0:D6:FE:89:B5:1A:E1:DE:D6:1E
X509v3 Authority Key Identifier:
keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:83:d2:4d:e0:12:97:57:ba:e9:3d:64:20:71:0c:ef:50:68:
c4:69:1d:06:7f:8f:10:12:fe:46:c5:46:fb:4c:38:b4:ba:f6:
a1:d5:e9:ed:de:b7:69:e8:08:e3:ec:3c:bb:31:a9:5e:bf:20:
2f:f5:1c:80:86:0f:7e:91:1b:ef:37:1b:c1:b7:47:6e:87:ea:
11:4c:c1:b5:b5:8d:66:12:7a:3b:24:43:c0:bc:85:b5:7f:5d:
31:88:12:38:e6:0c:cd:0e:6d:71:67:52:63:38:17:06:0d:19:
10:42:4d:f1:fa:48:75:00:ef:36:68:e7:1c:93:f6:2a:6d:19:
bf:20:f9:43:84:7d:af:99:66:c8:03:cf:75:4b:94:a8:c6:35:
72:1d:f1:bc:13:a3:41:88:b1:b4:1c:a3:94:c8:36:76:35:bf:
aa:a5:05:3b:09:a1:19:30:3a:8e:ca:03:b9:be:a6:dd:00:f5:
76:be:79:33:38:43:be:3d:82:77:9e:e2:71:05:e6:18:f9:30:
9f:13:fb:6f:07:5c:e2:e6:4f:4d:3b:a8:1c:c7:1e:05:b7:d1:
d6:75:5c:24:f6:04:e9:0f:33:c2:91:97:b9:11:43:b5:df:c4:
ed:93:88:ee:0b:9e:ab:68:24:20:83:ca:f8:41:ad:27:2f:1a:
7d:3d:a0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:43:19 2026 by rpki-client