This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
File: NmIvmQC0aq380FRk8Q1CsTBiUXY.mft (raw, json)
Hash identifier: PVElw5R1tRahNdOZEgfCHrS/Ihs2AT84Mu5OMjX8kqA=
Subject key identifier: 38:62:1A:8D:25:F8:10:AA:1C:28:FA:E1:94:D1:13:B3:29:56:81:57
Authority key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
Certificate issuer: /CN=A919CE1D/serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
Manifest number: 63
Signing time: Sun 25 Jan 2026 06:09:42 +0000
Manifest this update: Sun 25 Jan 2026 06:09:41 +0000
Manifest next update: Sun 01 Feb 2026 06:09:41 +0000
Files and hashes: 1: NmIvmQC0aq380FRk8Q1CsTBiUXY.crl (hash: WYHqJkD3bD/+2C2LS12kZ/+ZFVMfGOJfqCSeYqZ8hrg=)
2: 2518C04062E011F08D04F42EC4F9AE02.roa (hash: YXoQ9r4tej6CnG1FdK26UeZMqNkqakqvZSbUkeab5Z8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl
rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Validity
Not Before: Jan 25 06:09:41 2026 GMT
Not After : Feb 1 06:09:41 2026 GMT
Subject: CN=6975b3a6-652c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:61:03:8e:c0:3b:32:c1:99:8e:5e:54:e5:aa:
2b:53:f2:9d:ad:7a:d2:59:4f:8c:82:05:d4:2e:d1:
39:1e:8b:fd:24:98:87:a1:26:2f:c0:ed:08:ff:1e:
7c:ce:ab:91:2f:40:8d:09:61:f7:ab:a9:a1:06:aa:
28:15:ec:83:d0:45:51:f1:76:e5:fb:3c:76:72:5d:
c8:bb:14:3d:ba:38:00:c1:3e:26:13:72:c2:3c:2b:
9c:6f:55:b9:a8:8d:cd:c2:e7:b3:f0:cd:23:87:ae:
9a:f9:46:b6:78:ed:3f:c2:16:e7:f9:09:6e:27:0d:
90:0c:9a:5c:94:7a:2b:eb:65:1a:94:55:5e:e7:57:
c5:e5:1f:8e:c2:f0:28:d0:7d:b3:bb:4e:61:bf:21:
70:04:4a:1e:b6:2f:04:eb:95:f3:f4:86:fa:a5:bc:
43:f5:d4:6e:2a:0b:76:28:52:e5:e6:18:06:fc:cc:
b4:01:05:af:07:91:d9:eb:0f:ec:f9:90:dc:35:f7:
1a:16:c5:c4:d2:d5:f6:ad:5a:19:f5:5a:2c:60:cf:
77:cd:23:73:85:90:11:6b:f8:04:1b:62:bf:ac:5e:
7f:f9:50:49:89:7a:e9:fd:a9:84:93:93:81:58:79:
b3:90:18:5f:30:82:96:44:37:0b:4c:ff:53:63:40:
df:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:62:1A:8D:25:F8:10:AA:1C:28:FA:E1:94:D1:13:B3:29:56:81:57
X509v3 Authority Key Identifier:
keyid:36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:08:1f:9c:94:94:00:cc:6c:e2:4d:1d:c0:f4:db:61:c8:28:
41:b9:c9:f7:2b:48:b7:fc:e2:d3:38:72:f3:8e:d7:5b:31:2d:
48:ac:d1:bc:eb:a6:64:1e:44:ce:87:8b:07:57:01:66:a5:cd:
c1:9d:0c:48:d5:c0:f4:f0:39:ff:21:4e:66:84:bf:95:19:93:
89:eb:e7:29:74:1a:59:20:60:8a:f9:e7:bb:09:06:69:27:ac:
a5:ef:06:b3:55:c5:89:03:55:bc:45:3c:90:30:8a:7d:3c:ee:
47:f4:91:91:60:1d:7e:a9:0d:9a:1d:5d:fa:ee:7c:97:34:ad:
e8:a5:b4:71:9c:3b:1b:e7:c9:16:0e:2e:09:b1:61:c8:d2:d5:
51:d7:98:5f:1e:f0:fa:8b:b8:e1:1f:d5:2f:1d:b8:d5:d3:88:
c4:b7:d5:af:34:2a:ec:65:17:47:95:58:5e:30:9a:d3:65:50:
88:09:bf:fe:95:37:81:e3:b9:bc:79:8a:34:e2:55:3d:00:3c:
5a:1a:ff:e6:36:6d:0e:7b:7c:3c:01:1a:b7:ae:35:60:18:17:
8f:bd:7a:6d:d3:da:76:96:38:15:fc:cc:54:cc:d4:aa:a9:bf:
5c:17:d4:cd:e7:8e:74:32:77:7d:b3:21:6f:d1:7c:42:cc:a1:
60:cd:e0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:12:36 2026 by rpki-client