This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json)
Hash identifier: uJgpQoIRUm+LpEDtCmyJslv+bYrDo5RUEHW+pJBod/w=
Subject key identifier: 6B:44:02:94:D9:D2:53:D1:86:2C:91:29:A9:EB:A0:A6:C4:ED:0C:36
Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7
Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
Certificate serial: 1499
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
Manifest number: 1491
Signing time: Sat 24 Jan 2026 16:36:58 +0000
Manifest this update: Sat 24 Jan 2026 16:36:58 +0000
Manifest next update: Sat 31 Jan 2026 16:36:58 +0000
Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: b1SxliLBIm5Izj1/z11oqdwUQdisqcKQ1x1OXea1N7s=)
2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: IY1KR2STRHWACxUYvedIZffoCYQxTjZXanC5kAZHVDk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl
rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5273 (0x1499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
Validity
Not Before: Jan 24 16:36:58 2026 GMT
Not After : Jan 31 16:36:58 2026 GMT
Subject: CN=6974f52a-1459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:c4:90:ca:e2:96:4f:9f:6a:37:92:3f:34:
c2:ae:58:59:02:f9:00:e2:71:26:c0:09:b7:ac:f3:
23:84:9f:0e:d8:37:b7:70:aa:27:5e:dc:a8:93:7f:
8b:25:4a:d0:db:c7:1c:07:78:c5:47:27:ab:2e:45:
e5:5e:cd:7b:dc:4b:5e:fe:9d:57:d4:3b:79:0e:e5:
a6:39:5a:fb:b4:bb:16:56:f3:a4:dd:5c:58:b4:06:
8b:fa:37:f6:cc:de:18:11:3c:56:3c:b7:fd:1b:cf:
99:91:8d:17:9c:0c:e4:32:64:e3:29:15:fb:7d:2f:
e3:5e:e0:7e:d6:87:6d:55:bf:ba:6b:7e:91:95:ea:
1c:41:ae:6f:c8:ba:b5:0a:7b:8b:03:9d:95:f4:58:
40:5c:b3:80:57:f9:3a:9d:17:db:aa:95:0f:f2:26:
d5:08:68:5d:e7:52:f7:2d:f8:fc:c1:5e:bb:39:a4:
39:80:61:af:f4:73:bb:ff:27:aa:0f:fc:28:43:22:
d1:86:06:79:eb:93:3a:6c:3b:bc:24:61:4c:00:b3:
fb:43:db:64:7b:aa:33:4e:86:9d:47:ad:f5:d0:0f:
b7:1c:f7:8a:bf:0a:f3:a5:13:63:0f:ec:09:09:ad:
cd:1d:94:5c:5c:32:9f:32:79:1c:d9:e8:34:e5:ec:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:44:02:94:D9:D2:53:D1:86:2C:91:29:A9:EB:A0:A6:C4:ED:0C:36
X509v3 Authority Key Identifier:
keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:3b:96:42:e7:4d:15:ad:44:32:4b:07:9e:97:75:8c:1a:c9:
1b:96:31:f6:cc:5e:6b:fb:60:fd:8f:51:bc:8a:58:6d:62:ec:
1c:5f:6e:97:7b:dc:0f:f5:87:25:63:da:46:45:b9:e7:04:6a:
f2:d9:9a:1c:00:a5:3a:51:31:0c:b2:47:d1:f6:f0:24:7c:ea:
63:69:a1:0c:e6:05:15:d0:cd:98:73:c8:94:79:f5:00:2d:db:
cf:c2:d1:64:87:5e:2e:7c:74:28:05:90:cc:49:97:fa:75:62:
9f:71:5e:e9:3e:9a:74:7b:f1:c1:05:ea:e7:e6:6f:3e:93:72:
96:d8:8d:44:9e:a7:46:3e:5b:8a:ed:6a:2c:6d:6d:a4:cf:fd:
61:44:bf:79:c4:2d:4d:13:66:3a:bd:4c:df:12:a5:9e:d8:a9:
d5:f7:1f:3d:39:11:1a:62:c9:d2:17:2e:51:71:06:d3:cf:cb:
60:f2:cd:8f:db:4c:10:bc:2d:13:b7:42:84:cc:e0:39:a1:55:
a2:ca:a2:7e:5a:c9:d6:bc:3c:04:29:02:51:44:f9:63:0f:67:
21:63:6c:aa:79:b0:f5:0e:1a:3c:07:c6:cb:c7:63:a6:4f:6c:
d5:e0:38:b3:b9:67:d3:6a:1c:93:24:a0:de:25:e4:6e:10:5e:
ea:73:a1:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3
NDMzRUIyRTcwHhcNMjYwMTI0MTYzNjU4WhcNMjYwMTMxMTYzNjU4WjAYMRYwFAYD
VQQDDA02OTc0ZjUyYS0xNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxt/EkMrilk+fajeSPzTCrlhZAvkA4nEmwAm3rPMjhJ8O2De3cKonXtyok3+L
JUrQ28ccB3jFRyerLkXlXs173Ete/p1X1Dt5DuWmOVr7tLsWVvOk3VxYtAaL+jf2
zN4YETxWPLf9G8+ZkY0XnAzkMmTjKRX7fS/jXuB+1odtVb+6a36RleocQa5vyLq1
CnuLA52V9FhAXLOAV/k6nRfbqpUP8ibVCGhd51L3Lfj8wV67OaQ5gGGv9HO7/yeq
D/woQyLRhgZ565M6bDu8JGFMALP7Q9tke6ozToadR6310A+3HPeKvwrzpRNjD+wJ
Ca3NHZRcXDKfMnkc2eg05ez26wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtEApTZ
0lPRhiyRKanroKbE7Qw2MB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC
MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT
MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQO5ZC500VrUQySweel3WMGskbljH2zF5r+2D9j1G8ilhtYuwcX26X
e9wP9YclY9pGRbnnBGry2ZocAKU6UTEMskfR9vAkfOpjaaEM5gUV0M2Yc8iUefUA
LdvPwtFkh14ufHQoBZDMSZf6dWKfcV7pPpp0e/HBBern5m8+k3KW2I1EnqdGPluK
7WosbW2kz/1hRL95xC1NE2Y6vUzfEqWe2KnV9x89OREaYsnSFy5RcQbTz8tg8s2P
20wQvC0Tt0KEzOA5oVWiyqJ+WsnWvDwEKQJRRPljD2chY2yqebD1Dho8B8bLx2Om
T2zV4DizuWfTahyTJKDeJeRuEF7qc6FB
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:37:20 2026 by rpki-client