This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json)
Hash identifier: sa0Hh4AH6ntvmf7EKlHyjnmfhWiWMe1pEzrV6AGXbjU=
Subject key identifier: 3C:E3:37:35:5C:65:02:51:A5:5C:58:E4:E2:79:B8:D1:1D:08:11:EF
Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Certificate serial: 018D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
Manifest number: 0183
Signing time: Sun 25 Jan 2026 03:02:54 +0000
Manifest this update: Sun 25 Jan 2026 03:02:54 +0000
Manifest next update: Sun 01 Feb 2026 03:02:54 +0000
Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: bTwqPfrJGF+kV7qtDChkvjmVerBJadhsY8maig517No=)
2: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: B4bx9kA0p4n5ASz52WYMBOS7rU+I5DT2fmWjDq/qssM=)
3: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: ZDrCMxxOwwuqNF0Q4xD3EvKSvIiYcNvuSOn5SbIs2mk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl
rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Validity
Not Before: Jan 25 03:02:54 2026 GMT
Not After : Feb 1 03:02:54 2026 GMT
Subject: CN=697587de-0da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:22:44:f1:0a:81:bb:5a:ad:0b:89:0f:08:
1f:44:f9:81:79:ca:e5:71:d3:33:18:26:6c:9e:87:
fc:3e:46:6b:ca:98:20:1e:94:34:2f:8e:a3:8b:32:
32:03:0b:e2:54:0c:77:9a:1a:c3:b6:8d:d8:f7:37:
52:1b:8a:6e:a4:09:28:24:4e:1d:9b:32:32:28:f5:
05:7f:b9:49:7a:d1:06:aa:b9:fc:a9:2a:39:76:6c:
d1:61:6c:5d:6d:66:e8:9f:9e:31:5d:2b:0d:74:7f:
7e:2e:ef:e9:1e:8f:f8:27:b8:7b:4f:e9:50:1e:75:
e1:f5:27:0a:d5:ed:32:e3:18:36:e6:8a:73:0b:b6:
00:2b:f3:30:5f:fa:3e:50:e2:72:73:7b:54:52:23:
4d:dc:9c:54:81:89:ea:e6:39:00:f4:77:93:8f:bd:
02:27:03:d1:e4:6a:1b:e4:e8:c1:1d:1e:2d:73:f3:
7f:2a:49:b2:a5:65:85:af:57:90:3f:db:12:ef:97:
b4:67:64:88:5f:24:0a:aa:36:3a:96:64:a7:30:08:
14:fa:eb:84:91:40:c3:7d:2b:0b:93:38:7e:96:65:
85:b4:23:af:9b:76:95:4c:f2:23:42:44:79:37:44:
a8:e5:2d:bc:39:cb:84:48:d4:9b:fe:ed:87:91:7c:
4f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E3:37:35:5C:65:02:51:A5:5C:58:E4:E2:79:B8:D1:1D:08:11:EF
X509v3 Authority Key Identifier:
keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:00:c1:41:e8:5f:3f:41:b5:8a:87:21:3c:73:9d:ff:01:fe:
ec:f6:95:1c:91:82:dc:e5:94:66:43:f1:3e:e4:9f:ea:80:59:
4c:ac:c7:24:18:d4:39:58:ca:09:1d:cf:bf:1e:07:12:4d:c4:
83:58:ea:a2:4a:8c:0f:ee:c7:ee:2e:44:02:05:10:6e:59:48:
f9:15:e3:6f:63:d9:55:c7:3d:99:c3:ff:9e:97:2c:32:95:03:
d6:ce:4f:77:9d:cb:13:0e:a4:d2:66:37:31:2c:29:ea:dc:51:
f0:70:f8:8c:8c:f1:c8:95:d9:3f:f7:38:4e:2b:74:87:b9:b6:
f9:93:fe:55:49:3f:f1:f8:49:e0:0d:88:5b:6b:e2:d1:79:71:
cf:b2:b2:7b:cb:2c:5d:4b:f4:b8:45:7a:12:c3:f0:eb:1d:d8:
3a:a5:60:7c:87:4a:50:65:d5:af:71:f9:b2:3f:a4:1c:b5:58:
2c:a2:42:89:36:6e:d1:b0:5f:f6:23:f1:2b:b5:c0:a0:44:72:
f6:47:a7:73:93:97:77:1d:54:bb:24:49:3c:54:34:90:ca:dd:
96:f9:49:c4:37:af:8e:10:13:45:c3:5e:b7:07:ba:3e:c4:4f:
45:89:80:d2:76:5a:65:a5:1a:6d:7f:0f:cf:b0:df:c5:95:1f:
d8:7e:03:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC
OTM3MjU1QzkwHhcNMjYwMTI1MDMwMjU0WhcNMjYwMjAxMDMwMjU0WjAYMRYwFAYD
VQQDDA02OTc1ODdkZS0wZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsG0iRPEKgbtarQuJDwgfRPmBecrlcdMzGCZsnof8PkZrypggHpQ0L46jizIy
AwviVAx3mhrDto3Y9zdSG4pupAkoJE4dmzIyKPUFf7lJetEGqrn8qSo5dmzRYWxd
bWbon54xXSsNdH9+Lu/pHo/4J7h7T+lQHnXh9ScK1e0y4xg25opzC7YAK/MwX/o+
UOJyc3tUUiNN3JxUgYnq5jkA9HeTj70CJwPR5Gob5OjBHR4tc/N/KkmypWWFr1eQ
P9sS75e0Z2SIXyQKqjY6lmSnMAgU+uuEkUDDfSsLkzh+lmWFtCOvm3aVTPIjQkR5
N0So5S28OcuESNSb/u2HkXxPcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzjNzVc
ZQJRpVxY5OJ5uNEdCBHvMB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2
RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU
RjFCOFNBSWM0S2k1TnlWY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA/AMFB6F8/QbWKhyE8c53/Af7s9pUckYLc5ZRmQ/E+5J/qgFlMrMck
GNQ5WMoJHc+/HgcSTcSDWOqiSowP7sfuLkQCBRBuWUj5FeNvY9lVxz2Zw/+elywy
lQPWzk93ncsTDqTSZjcxLCnq3FHwcPiMjPHIldk/9zhOK3SHubb5k/5VST/x+Eng
DYhba+LReXHPsrJ7yyxdS/S4RXoSw/DrHdg6pWB8h0pQZdWvcfmyP6QctVgsokKJ
Nm7RsF/2I/ErtcCgRHL2R6dzk5d3HVS7JEk8VDSQyt2W+UnEN6+OEBNFw163B7o+
xE9FiYDSdlplpRptfw/PsN/FlR/YfgPD
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:05:19 2026 by rpki-client