This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
File: nAcegU2AsQ4sofcemy5TXDkFy2U.mft (raw, json)
Hash identifier: GtOmJ6ZLNUtzkq71jk7wyLRkswAVwGjnYNCKch0x8Qk=
Subject key identifier: CD:9B:F6:B9:70:D3:D7:FE:42:EA:F1:C3:AB:92:E1:4E:85:52:C3:55
Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
Manifest number: 010C
Signing time: Sun 25 Jan 2026 04:24:46 +0000
Manifest this update: Sun 25 Jan 2026 04:24:46 +0000
Manifest next update: Sun 01 Feb 2026 04:24:46 +0000
Files and hashes: 1: nAcegU2AsQ4sofcemy5TXDkFy2U.crl (hash: 9S2+P63vhVoslXbdlhqQuxrekbOEvK2BkW+USGvNWcE=)
2: B6DE83747AE811EF94E01B38C4F9AE02.roa (hash: NENKWBR9x0FYQGSayxsc772B6xcKqdDax7O0tt16MtA=)
3: F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa (hash: HhvN0QQ/t1aifshxGL31iNmJ/1oYowbGlAhBK1OxOCQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl
rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A998A, serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Validity
Not Before: Jan 25 04:24:46 2026 GMT
Not After : Feb 1 04:24:46 2026 GMT
Subject: CN=69759b0e-4819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:58:11:3f:98:ae:c2:0a:de:e5:e0:36:e8:
e7:b8:e0:ce:0a:51:69:3b:54:fb:7f:50:11:fe:83:
72:b5:88:70:81:d4:41:e8:91:8b:8e:1c:88:2b:cd:
da:05:f9:0d:b4:f4:9a:e5:b7:53:c5:2a:a2:f0:69:
c2:ea:f5:04:8e:ad:70:3f:14:2d:c7:13:dd:46:f0:
50:59:a2:c0:a7:67:2b:b8:4d:c3:43:06:1a:c3:22:
7e:d5:95:bf:5f:be:7d:b0:80:de:c4:7c:46:a3:ee:
77:f6:d9:e5:c5:92:65:5b:d2:73:84:38:4e:ef:e4:
c1:c1:85:8d:97:dc:a1:fb:14:de:e7:04:39:02:c9:
fd:bd:83:8a:ee:fe:88:08:90:71:e3:2c:d9:e1:1a:
37:e0:85:0d:31:34:a6:2f:e2:8a:36:09:01:ff:2e:
1c:81:aa:a9:77:44:f7:f6:27:d9:85:19:7a:a2:27:
57:0c:a0:44:0f:71:80:62:63:f3:fe:35:31:e3:16:
21:05:c5:09:46:c7:9f:c5:18:dc:56:8d:56:90:cd:
02:76:65:fa:c4:af:50:40:28:39:16:2b:9b:f2:93:
22:02:9d:83:45:24:94:bc:70:b8:07:14:e8:49:c1:
f9:df:8c:4c:bd:49:f2:9b:fe:97:47:dd:52:c5:57:
ef:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9B:F6:B9:70:D3:D7:FE:42:EA:F1:C3:AB:92:E1:4E:85:52:C3:55
X509v3 Authority Key Identifier:
keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:7b:06:d2:9a:8b:88:a3:e3:a1:c8:35:eb:96:06:d9:a9:c4:
34:4e:25:85:d4:9e:9d:7d:14:5d:05:0a:e0:85:54:00:db:c0:
78:48:0a:6b:1f:48:38:d2:30:45:d5:7c:c3:89:37:f3:72:b7:
4d:55:dd:b7:5d:d7:8f:c7:18:1d:f7:ee:30:6b:5f:28:04:4a:
56:cc:cd:23:c6:c5:fe:8d:b0:29:62:1f:1d:32:ce:23:9b:3d:
9f:58:02:b6:56:58:e4:08:47:e2:80:2f:4b:4f:86:2e:41:d8:
95:f7:00:0a:6c:6b:6e:90:e9:ce:00:a9:8b:eb:af:10:d3:7a:
df:c5:c8:08:be:ae:d0:61:ea:68:bd:b6:e3:1c:91:31:ef:1c:
50:cd:f6:11:22:b8:43:dd:d1:23:24:71:43:de:98:c8:77:17:
a0:2f:b7:dd:76:e7:10:ae:6c:62:de:59:f3:fc:98:c6:dc:1e:
f9:8a:b1:38:46:ba:ba:c1:4b:4a:f6:19:68:4a:0f:5c:3f:e2:
b0:7b:57:c5:31:30:f2:58:20:41:0e:84:79:0a:76:3f:a1:28:
8f:fc:a1:67:14:5c:9f:49:15:48:dc:c2:84:6f:8e:21:d3:80:
71:33:e3:e1:70:35:da:1d:de:fa:a3:a6:63:2d:ee:91:c9:dc:
9b:0e:97:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:11 2026 by rpki-client