This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
File: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft (raw, json)
Hash identifier: wJwEuoKxjDNziFg7D7p6UFNpw5MQRN7muA4YQgOtf+0=
Subject key identifier: 90:C5:E1:D3:57:15:2B:FC:EF:69:85:2F:59:EB:D0:C5:4B:91:62:54
Authority key identifier: 36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26
Certificate issuer: /CN=A91B67B0/serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26
Certificate serial: 05ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
Manifest number: 05E4
Signing time: Sat 24 Jan 2026 22:14:44 +0000
Manifest this update: Sat 24 Jan 2026 22:14:44 +0000
Manifest next update: Sat 31 Jan 2026 22:14:44 +0000
Files and hashes: 1: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl (hash: tCQYb5QzjoA2jtnDCI7kif025U/pNVC8Poo0bH1QK1U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl
rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:14:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1517 (0x5ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B67B0, serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26
Validity
Not Before: Jan 24 22:14:44 2026 GMT
Not After : Jan 31 22:14:44 2026 GMT
Subject: CN=69754454-f3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:93:bb:31:25:a2:9f:81:a6:6f:09:c4:bc:
96:77:14:fb:43:b6:a6:b8:72:7e:48:e6:2b:d2:c9:
c3:74:47:ce:0b:73:2b:4e:0b:7e:77:de:82:11:e1:
99:5e:ec:30:2b:c9:7e:28:a8:94:0a:f6:68:34:fa:
85:6a:c8:6b:0c:11:60:21:79:52:06:c3:d6:f2:2c:
d2:d1:22:2a:ae:dc:17:a6:c5:7e:46:f2:59:b9:8d:
db:55:04:2c:81:fe:9a:bd:aa:8f:0e:33:b2:12:82:
1b:71:26:24:fe:ee:f3:6d:b1:8e:05:12:6d:83:ea:
b2:2e:aa:32:8d:09:82:43:43:d6:b5:8e:3a:df:26:
8b:1d:15:2b:9f:73:fb:b8:58:4a:1d:27:62:de:27:
3a:41:ff:ee:14:8e:11:d9:f2:f3:f7:ca:46:3f:64:
87:47:c2:76:96:a5:42:7a:9c:fc:b6:43:37:f2:56:
b8:a2:8a:3d:c5:cc:6d:1b:2e:64:fa:a1:37:4e:57:
a0:8b:b2:34:36:f2:1f:9f:cb:b9:5e:7d:d1:f5:4b:
96:6c:18:8f:08:42:bc:18:ad:6e:fe:06:ee:eb:d9:
ea:66:a0:35:8e:87:d4:b0:1c:e8:2e:40:1c:a9:3c:
6e:89:f1:1b:7f:2c:5a:e3:05:d2:e6:1a:9e:49:5b:
66:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C5:E1:D3:57:15:2B:FC:EF:69:85:2F:59:EB:D0:C5:4B:91:62:54
X509v3 Authority Key Identifier:
keyid:36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:17:d2:1d:cc:ba:2e:c7:84:76:e0:9f:11:4b:49:d3:8a:44:
38:07:f5:30:ef:b2:d1:b3:c3:4c:c6:f2:2c:ad:12:7e:bc:7b:
39:88:81:29:12:50:a5:b3:8d:d9:d0:8b:31:5f:11:40:1d:41:
a9:dd:27:44:2e:6b:b7:04:cc:56:fa:d6:b4:b0:16:4e:f5:5a:
74:79:70:18:ce:dd:8f:09:70:38:5f:af:2d:e1:69:90:44:ca:
ea:e2:f0:8b:2b:33:48:52:bc:f8:d9:59:53:29:28:48:76:af:
69:ca:05:a8:fd:84:5b:cd:0f:49:97:58:d4:81:75:c9:b3:44:
66:3a:49:0c:a3:ea:2b:a6:93:c1:59:20:9b:e8:c2:78:f2:8f:
38:81:49:a6:7e:4b:80:77:ef:c7:b7:ec:43:68:39:24:29:de:
74:5e:0c:38:04:73:6e:4c:a4:fa:55:dc:82:42:a6:6f:f4:73:
e4:a6:6d:a8:6e:89:d7:83:fe:ce:1e:40:f9:2e:10:fb:9a:b9:
5f:8d:45:e7:1a:f3:f9:58:73:fb:37:f9:76:6e:d5:60:5a:2c:
01:2a:da:6e:df:0e:1c:41:2c:96:0f:01:a8:d6:7b:59:6a:a2:
7a:1c:72:13:da:90:1a:a6:a8:8d:d0:34:34:1f:d9:09:87:2b:
db:3b:2c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:57 2026 by rpki-client