This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json)
Hash identifier: p+QvpIczmgqFBFzw7kp2V1RdAOnglwInntv7pRFl9pE=
Subject key identifier: C8:93:4B:04:85:74:B9:64:85:75:1D:77:5A:3D:F1:F3:3C:B0:26:81
Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8
Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8
Certificate serial: 19A4
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
Manifest number: 4BA7
Signing time: Sat 24 Jan 2026 15:14:14 +0000
Manifest this update: Sat 24 Jan 2026 15:14:13 +0000
Manifest next update: Sat 31 Jan 2026 15:14:13 +0000
Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: Qjm4usESx1YEWRP2Bjbl8GI89cr3422Pv3xJ4qri8U4=)
2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: fnrYZYlCN57UVfp7zz/b0ADCI8GQeD8xxQSWqXCF91M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6564 (0x19a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8
Validity
Not Before: Jan 24 15:14:13 2026 GMT
Not After : Jan 31 15:14:13 2026 GMT
Subject: CN=6974e1c5-a4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:67:77:91:27:27:d7:40:f5:d8:47:84:37:
d8:17:a8:a8:ff:14:6f:02:36:c2:5b:4b:9a:f0:f9:
dc:df:91:25:0a:c8:2f:22:ed:1b:ea:60:d7:e3:3f:
c4:8c:9a:b8:41:0c:34:f2:49:f8:2d:30:db:f6:72:
b6:31:6e:fd:e6:9c:51:68:2b:48:90:de:b7:28:02:
3b:3d:cb:63:ac:7e:66:7b:38:a4:d1:af:1c:ee:22:
fb:c7:71:22:6f:d0:73:76:db:c3:af:9f:bc:59:4a:
81:0d:c7:df:ac:64:3d:8a:d8:0b:ea:fd:ff:a0:50:
9c:31:85:1b:22:96:90:e3:b0:34:b8:0f:7f:5c:ef:
8f:4e:f5:4a:a7:f6:0c:49:2a:c0:ac:3c:c1:8f:16:
3c:b5:b8:53:89:87:33:ad:9b:ba:8d:41:3d:7f:7c:
0d:92:6e:19:1d:db:3f:62:78:91:e0:3d:61:ac:b1:
9e:6d:e0:13:cc:5d:42:0c:88:3c:df:6f:63:05:c2:
bc:d0:15:75:94:8c:05:ec:af:fd:5b:0e:e7:85:69:
41:70:d1:5f:5d:72:25:cf:dd:96:f1:ee:28:15:09:
6f:2d:2c:60:d8:b4:98:b3:b7:b6:74:87:54:b7:7c:
ef:3f:2f:12:1f:ea:ff:d7:da:02:26:e6:0f:6d:4f:
54:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:93:4B:04:85:74:B9:64:85:75:1D:77:5A:3D:F1:F3:3C:B0:26:81
X509v3 Authority Key Identifier:
keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f0:8b:82:b9:44:97:52:57:8b:50:73:0b:d2:0c:52:a4:7b:
d2:dc:d0:2a:2d:c3:49:34:f1:de:75:94:54:ae:06:90:4f:68:
43:b2:33:4e:93:85:32:5d:4f:8e:05:4a:33:51:1f:cb:9c:24:
67:a2:1b:1e:1f:d4:d6:ee:46:89:e4:1c:11:9e:0e:e0:30:45:
41:f3:4b:4b:da:bd:35:a6:67:fc:4d:84:ff:78:ce:27:31:c3:
32:56:8f:49:5c:85:76:2f:70:3a:b1:93:ef:cb:78:e2:9c:6c:
f3:91:0f:41:34:78:14:54:f1:3a:87:f5:32:91:f0:b4:e8:cd:
3f:85:70:56:36:ae:5e:77:f3:72:33:45:a1:b4:8e:15:dd:41:
42:5e:06:3f:20:39:00:7a:63:9f:a5:8f:43:ee:05:e3:13:9a:
ca:d6:72:bc:16:85:44:ec:10:c8:03:3b:76:fe:3b:9b:a5:d0:
01:10:f9:61:59:6a:ca:cb:2d:54:16:8f:55:36:e2:36:c0:95:
36:d7:47:f9:31:91:ed:02:83:64:98:6d:64:98:00:c3:34:61:
44:e0:7a:0c:25:bb:2b:20:9b:d7:ce:d8:2d:ae:a7:40:cf:05:
8a:87:e9:85:c4:c3:b9:58:17:49:17:ee:ec:49:94:07:68:b5:
c0:85:40:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:41:17 2026 by rpki-client