This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
File: nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json)
Hash identifier: BSLteKwimz3no0YcYHqdhAbJdxYgpVokt2rScAxYpbQ=
Subject key identifier: D5:74:E0:47:77:02:22:18:3F:61:38:EB:D6:33:94:27:07:67:8F:EE
Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81
Certificate issuer: /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
Manifest number: 0100
Signing time: Sun 25 Jan 2026 04:25:49 +0000
Manifest this update: Sun 25 Jan 2026 04:25:49 +0000
Manifest next update: Sun 01 Feb 2026 04:25:49 +0000
Files and hashes: 1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: rS0nOf3DWJAc1VPiPwWXk1pshjyyZNJrq5cb6lx5hOw=)
2: B3634C229F4D11F098C42465C4F9AE02.roa (hash: uGMPJtsXfkYBK2w/JWT7YAmAoBGr8qkxrzxC5F98Uak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl
rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B190F, serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281
Validity
Not Before: Jan 25 04:25:49 2026 GMT
Not After : Feb 1 04:25:49 2026 GMT
Subject: CN=69759b4d-005d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f5:69:18:da:4e:c8:57:d7:3e:f0:1a:c9:31:
88:8c:59:c9:af:b9:d6:a7:6a:ce:ad:f0:09:06:e4:
c7:8b:5e:04:d2:23:c8:44:02:cf:9c:59:8d:6f:9d:
1c:b1:5a:bc:90:09:ab:e0:70:67:91:77:d8:51:25:
c8:9d:d4:eb:14:69:b9:c0:ab:61:c3:91:e0:ec:91:
bd:2a:de:09:90:bd:54:a9:c3:e6:3c:e6:70:ce:14:
4b:37:80:57:5d:fc:f8:26:b8:60:dd:3b:54:07:dd:
2f:3f:0d:b3:3c:fb:b7:62:63:5a:71:52:e0:bf:92:
f5:a8:fc:a2:e3:18:1e:49:05:35:c3:d4:a9:51:1e:
38:2c:7f:d7:3f:3e:98:ec:d9:8c:dd:25:15:66:86:
40:5b:15:8e:76:bf:73:da:8a:b9:79:4e:51:dd:c2:
54:fa:08:b3:f5:bf:88:98:e7:68:bf:c5:39:79:3e:
a5:0e:63:41:c9:86:74:c9:0c:9a:25:84:75:7a:33:
7c:0b:cd:b6:55:30:8e:3e:b0:17:3a:a2:10:ea:ce:
48:c0:39:72:13:07:35:e8:31:55:ec:65:17:a3:59:
20:38:d8:20:fa:7a:67:bc:a6:15:ea:95:9a:2a:f1:
cb:8d:db:51:30:8c:ef:42:87:52:57:ae:50:5b:bf:
7b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:74:E0:47:77:02:22:18:3F:61:38:EB:D6:33:94:27:07:67:8F:EE
X509v3 Authority Key Identifier:
keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:dd:19:88:82:66:ff:75:1b:2a:37:d0:17:5c:69:f0:95:8f:
b0:96:12:07:be:9e:b8:bf:7a:6e:f7:a0:3e:c4:fc:6d:e1:a4:
00:9e:a1:cc:8e:72:52:79:5d:dd:05:95:78:d2:36:a7:de:1f:
ef:63:f5:d9:78:f6:cf:a6:04:af:41:34:69:04:b8:4b:3b:70:
40:a0:c5:08:dd:35:b0:51:97:04:fa:47:80:9b:1b:40:2c:23:
56:62:2f:28:08:6d:79:d9:3d:a4:e6:08:71:93:a8:6b:7e:6b:
26:8b:d9:31:d9:5f:22:ce:3a:0b:95:45:04:f0:84:4c:3b:3f:
c2:5e:9a:28:96:48:c4:45:52:36:b2:b0:5e:c7:38:7d:bd:d5:
8e:db:56:3d:7a:bc:ba:de:d4:68:f2:80:f5:54:3a:42:05:58:
80:33:94:1f:bc:c0:2f:29:fe:73:f7:a6:ce:0c:c5:7e:e8:b7:
86:b9:a7:ff:54:09:21:6b:ac:5f:d8:6f:29:d0:3f:f1:6a:81:
f3:43:d8:09:38:7d:2f:46:d5:0a:97:a0:98:ca:61:44:c1:59:
79:6b:7d:36:0c:5a:2a:4b:47:53:9b:36:b4:16:5a:65:65:54:
a7:fb:02:79:b8:17:0d:e6:fe:99:67:6c:a9:ee:4a:5f:65:8a:
2e:fc:84:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:32:35 2026 by rpki-client