This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
File: NAcoRkbqh4WDwlsPqefW7aCRMpg.mft (raw, json)
Hash identifier: GCnPfEWT/WkV38/pSqoz/+NzIUuX6tw3ij4PFp57l1k=
Subject key identifier: 27:48:F9:D9:E4:78:07:A8:61:67:30:87:10:FB:13:E1:BA:F1:1D:30
Authority key identifier: 34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98
Certificate issuer: /CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298
Certificate serial: 097F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
Manifest number: 0978
Signing time: Sat 24 Jan 2026 19:29:50 +0000
Manifest this update: Sat 24 Jan 2026 19:29:50 +0000
Manifest next update: Sat 31 Jan 2026 19:29:50 +0000
Files and hashes: 1: NAcoRkbqh4WDwlsPqefW7aCRMpg.crl (hash: b961WYTKGQauU5ZGpt2WjZhooIf93jJR6J7eMdZQZu0=)
2: 9AA539E6A82411EA996D5F41C4F9AE02.roa (hash: pMMXr/lqWr+5GcVstLkkyd8gkDTgGy1DHQolAjMLixQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl
rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2431 (0x97f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C318, serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298
Validity
Not Before: Jan 24 19:29:50 2026 GMT
Not After : Jan 31 19:29:50 2026 GMT
Subject: CN=69751dae-ec06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:c3:b2:5d:00:d5:56:63:18:ef:c2:9c:54:
8c:d2:1e:f2:e5:08:55:81:e4:14:81:cf:2a:3c:94:
ad:5a:73:3b:4d:4a:ad:81:1e:5a:5b:63:85:2b:5d:
dc:d4:fe:90:a4:9f:53:ef:53:fa:62:ef:c7:14:0d:
dc:74:bf:e7:5c:4f:a2:7e:b1:e0:dd:fe:a2:02:ca:
b9:29:f6:82:b2:6e:4b:ed:c6:60:d4:32:8e:f6:bd:
01:78:54:a9:cc:8f:38:5b:ea:7b:cc:c9:d0:bb:bd:
d8:86:a2:88:a0:e2:f9:30:83:3b:11:fa:3f:89:13:
09:52:fa:f2:31:b1:35:19:cd:90:54:6c:5b:b1:6b:
be:eb:a3:33:21:35:d6:e0:79:34:14:c9:93:22:cd:
9e:88:b0:a5:b3:a2:d2:1f:67:cc:44:c1:5c:0b:27:
08:94:68:69:02:25:63:66:9e:87:12:d5:12:02:18:
5e:90:4c:96:ca:97:c0:15:94:c2:73:db:e0:a1:11:
67:4c:3f:51:6a:80:68:61:df:99:9b:96:74:d5:e6:
28:12:a1:8e:d2:fb:8b:da:08:32:fd:b5:3f:49:1b:
5b:3e:49:4f:a4:ca:29:d6:1e:f9:ba:d5:46:ad:e6:
a9:a3:cb:da:f7:59:dc:37:03:d7:54:a7:f4:ab:cb:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:48:F9:D9:E4:78:07:A8:61:67:30:87:10:FB:13:E1:BA:F1:1D:30
X509v3 Authority Key Identifier:
keyid:34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:26:1d:89:cc:21:e5:7e:6e:ab:2d:86:69:c7:e3:a3:a8:72:
8c:b5:b2:fd:b0:a0:08:4b:02:82:b3:0d:b2:cf:c6:53:5e:3e:
8e:e6:89:28:5d:a2:b4:7b:fe:71:de:63:3c:cc:04:31:1b:24:
e3:3a:c5:37:78:bb:90:48:dd:92:d2:9a:bc:f2:51:e3:71:de:
53:05:69:2e:c1:c8:6b:f4:91:f7:73:03:b8:3b:5d:a1:9b:be:
61:78:04:f4:4f:f2:a9:57:32:0c:55:99:4a:4d:ae:2d:8a:88:
21:93:4c:42:01:b6:91:1d:ca:4f:65:8e:70:57:4c:46:1f:3a:
d8:3c:94:bb:7f:59:8e:c2:46:9d:68:9d:eb:b8:23:0b:70:05:
22:3a:31:4d:78:78:a9:5a:8c:a2:13:6a:30:65:30:eb:3a:22:
79:18:06:92:bd:80:8a:44:27:99:79:7f:79:55:d4:00:9a:38:
cf:00:bc:a2:11:e0:0b:24:e1:87:3d:ea:95:bf:50:0b:19:52:
7a:90:34:3d:d7:84:7e:c5:6f:5b:a5:db:ba:c0:65:07:07:25:
0f:52:f4:01:15:3f:b0:ef:89:cd:60:50:4e:e9:a3:74:72:8a:
83:7a:4b:15:95:3f:a5:a2:f2:09:11:b4:97:93:a0:21:b8:0a:
50:c0:87:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:24 2026 by rpki-client