This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
File: nWBHd6Cse-aqCBCwJetJPqbdNGM.mft (raw, json)
Hash identifier: mAJnXSs+QD0WlbWgLYupEBNa7U75D2bUWigDGoQSmQ4=
Subject key identifier: 66:D2:30:54:84:E4:B3:48:A4:25:98:87:72:F3:6B:E2:70:A0:DD:1F
Authority key identifier: 9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63
Certificate issuer: /CN=A9198FD0/serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463
Certificate serial: 050E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
Manifest number: 0507
Signing time: Sat 24 Jan 2026 22:52:51 +0000
Manifest this update: Sat 24 Jan 2026 22:52:50 +0000
Manifest next update: Sat 31 Jan 2026 22:52:50 +0000
Files and hashes: 1: nWBHd6Cse-aqCBCwJetJPqbdNGM.crl (hash: wTFDBIM+aEFBwT74M/+f9TgyLi5Fq9f7yzBwxDJr59Q=)
2: 8327C2403DE011ECAB508171C4F9AE02.roa (hash: nj3zL8oObjV8NLXqj4IbNKya+FtBjMvRptjlINscrUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl
rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1294 (0x50e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198FD0, serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463
Validity
Not Before: Jan 24 22:52:50 2026 GMT
Not After : Jan 31 22:52:50 2026 GMT
Subject: CN=69754d43-95fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:50:88:43:4f:7e:7e:a3:d8:9d:69:01:7d:
aa:47:a1:09:0e:b8:b4:41:bf:c4:4d:25:25:ed:6f:
33:c1:3d:8b:f2:7e:d1:fe:b7:20:51:dd:a9:a6:6d:
32:ac:cd:8d:34:c7:9a:e6:68:8e:61:b1:b5:c1:75:
c2:ac:fd:f5:62:9a:5d:c0:c0:a0:bf:36:19:4a:bb:
14:30:d8:c6:bd:a8:97:32:38:e0:e8:20:fd:f1:c7:
32:39:54:8e:81:ed:dd:72:b0:58:cb:f8:10:a8:9f:
67:eb:81:d7:08:6d:62:f5:1a:bf:1c:c5:ad:4e:69:
10:f9:81:23:78:c5:7b:85:6d:86:6a:16:fc:29:1d:
3c:ef:dd:63:59:0e:3c:74:e8:6a:15:fd:09:a0:cf:
20:fe:6c:c8:ff:90:3a:67:bb:10:5a:15:f8:b8:36:
88:23:04:76:6d:49:6d:8d:24:14:4c:8d:ab:b6:af:
ae:45:f0:8b:b5:e9:f7:bc:1d:f3:9d:2a:51:ca:53:
f7:06:07:70:45:80:6e:28:77:3a:3a:b3:19:7e:ae:
f9:ac:d3:6c:24:c6:86:a4:ee:cb:c9:cd:00:1c:ae:
23:d1:4f:0d:6b:7f:c5:54:79:27:01:b7:75:f7:f5:
9e:fb:64:1c:f1:c3:f4:e3:6d:1f:96:a3:81:d8:f2:
b0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D2:30:54:84:E4:B3:48:A4:25:98:87:72:F3:6B:E2:70:A0:DD:1F
X509v3 Authority Key Identifier:
keyid:9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:03:2f:90:44:6b:38:09:82:c9:b1:19:a0:8d:e8:a6:f9:de:
12:da:29:1f:b0:5b:45:ac:88:be:f4:a5:21:4f:c2:7a:8f:0e:
dc:62:f8:cc:b0:bf:7e:84:e1:9e:46:20:eb:77:e4:c6:91:73:
f2:9c:e0:36:7e:de:4b:b2:15:8d:8d:01:47:fa:22:e8:f4:9a:
bd:f5:da:ec:4f:3a:fb:c2:84:e5:7d:f9:59:91:e1:be:54:16:
09:f1:2c:78:f5:17:26:b0:6f:d4:4f:5c:9e:ce:6f:ad:c9:af:
55:31:85:74:aa:10:3b:b1:d5:fb:ff:93:35:db:c3:0e:d7:c5:
3d:d9:e6:ef:05:6d:12:c0:2e:b3:c5:c3:e6:b7:47:a4:00:7e:
8d:b4:63:9e:b8:30:09:91:91:42:cf:19:68:f4:20:7d:2b:1c:
b9:46:1c:c1:a1:ed:a3:fc:61:fc:d2:97:45:a7:22:b8:3f:2d:
36:0e:9e:93:4e:4c:56:87:12:94:0b:52:3c:08:7f:e9:0b:53:
6f:2c:fc:5e:03:7b:c2:35:61:cc:2f:4d:c5:36:b1:42:16:c7:
73:d0:f8:70:5b:05:bf:12:1f:cb:c1:bf:e2:3d:90:43:d5:30:
75:33:e1:ba:a9:cd:45:de:a6:a9:63:10:9a:ce:de:cb:62:4e:
39:7b:87:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OThGRDAxMTAvBgNVBAUTKDlENjA0Nzc3QTBBQzdCRTZBQTA4MTBCMDI1RUI0OTNF
QTZERDM0NjMwHhcNMjYwMTI0MjI1MjUwWhcNMjYwMTMxMjI1MjUwWjAYMRYwFAYD
VQQDDA02OTc1NGQ0My05NWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA37ZQiENPfn6j2J1pAX2qR6EJDri0Qb/ETSUl7W8zwT2L8n7R/rcgUd2ppm0y
rM2NNMea5miOYbG1wXXCrP31YppdwMCgvzYZSrsUMNjGvaiXMjjg6CD98ccyOVSO
ge3dcrBYy/gQqJ9n64HXCG1i9Rq/HMWtTmkQ+YEjeMV7hW2Gahb8KR08791jWQ48
dOhqFf0JoM8g/mzI/5A6Z7sQWhX4uDaIIwR2bUltjSQUTI2rtq+uRfCLten3vB3z
nSpRylP3BgdwRYBuKHc6OrMZfq75rNNsJMaGpO7Lyc0AHK4j0U8Na3/FVHknAbd1
9/We+2Qc8cP0420flqOB2PKwIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbSMFSE
5LNIpCWYh3Lza+JwoN0fMB8GA1UdIwQYMBaAFJ1gR3egrHvmqggQsCXrST6m3TRj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEZEMC8yMEI0QkQ4MDNE
RDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2UtYXFDQkN3SmV0SlBxYmRO
R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25XQkhkNkNzZS1hcUNCQ3dKZXRKUHFiZE5HTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OEZEMC8yMEI0QkQ4MDNERDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2Ut
YXFDQkN3SmV0SlBxYmROR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCkAy+QRGs4CYLJsRmgjeim+d4S2ikfsFtFrIi+9KUhT8J6jw7cYvjM
sL9+hOGeRiDrd+TGkXPynOA2ft5LshWNjQFH+iLo9Jq99drsTzr7woTlfflZkeG+
VBYJ8Sx49RcmsG/UT1yezm+tya9VMYV0qhA7sdX7/5M128MO18U92ebvBW0SwC6z
xcPmt0ekAH6NtGOeuDAJkZFCzxlo9CB9Kxy5RhzBoe2j/GH80pdFpyK4Py02Dp6T
TkxWhxKUC1I8CH/pC1NvLPxeA3vCNWHML03FNrFCFsdz0PhwWwW/Eh/Lwb/iPZBD
1TB1M+G6qc1F3qapYxCazt7LYk45e4eG
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:31 2026 by rpki-client