This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
File: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft (raw, json)
Hash identifier: lONr90GtEh7VN9OICrETvdudLpx4qi0KIXB2lCrQr9Y=
Subject key identifier: 23:A2:69:3E:EA:EA:10:E3:7A:C9:9B:79:67:AF:6B:BF:59:E4:6B:A9
Authority key identifier: 34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
Certificate issuer: /CN=A91C779D/serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
Manifest number: 015A
Signing time: Sun 25 Jan 2026 03:20:51 +0000
Manifest this update: Sun 25 Jan 2026 03:20:51 +0000
Manifest next update: Sun 01 Feb 2026 03:20:51 +0000
Files and hashes: 1: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl (hash: PxI+ElDAv5EP9Os82kP4mfDmJVR7ME/OLaDySLx4Hqc=)
2: 0BBBE2B2E2B211EEACBA3341C4F9AE02.roa (hash: dwiUCjJJt0eG2N+1FVdoqJWTzPaXWWEUJdKiT+scZJI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C779D, serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Validity
Not Before: Jan 25 03:20:51 2026 GMT
Not After : Feb 1 03:20:51 2026 GMT
Subject: CN=69758c13-e488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:02:68:e8:26:78:08:d6:90:00:5e:04:fe:
c4:a6:cd:4c:1b:63:df:e0:18:1e:e5:b0:e5:7d:0d:
09:8d:1f:40:d9:c3:2d:fd:55:c2:a2:30:54:c1:48:
01:5c:fb:35:28:f6:1e:3d:81:dd:8a:a9:81:9d:e1:
66:e6:f9:d1:22:e2:c2:26:b1:ee:07:38:61:34:57:
85:4d:5a:20:c9:19:c6:f0:57:f6:cb:42:c8:63:4f:
0b:09:81:b1:63:68:25:91:11:ca:8e:cf:3e:42:cd:
f6:91:8b:d6:bb:f2:5f:34:5f:cd:fc:9a:06:16:e2:
f1:dd:67:40:ea:25:0f:88:bc:c8:00:cf:0a:64:ff:
37:23:88:e7:86:26:c9:35:9b:d5:25:1f:26:e5:9a:
ec:35:5d:85:f9:27:06:83:5e:57:49:ab:60:5d:12:
48:23:7b:09:9f:9c:4d:f3:a1:5d:73:76:d5:97:e4:
7d:58:c8:7f:af:60:a4:81:b8:59:cb:70:61:16:57:
94:d9:af:ca:8e:b2:51:9c:cf:72:9b:76:89:34:7c:
54:6d:4d:9a:ab:ad:0b:ef:ae:2e:43:2c:a9:8a:06:
5c:d7:7a:4f:c0:76:3b:ac:de:6c:1b:4f:7e:09:d1:
ba:a3:48:04:c1:59:f9:37:41:50:4b:4d:78:3d:8c:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A2:69:3E:EA:EA:10:E3:7A:C9:9B:79:67:AF:6B:BF:59:E4:6B:A9
X509v3 Authority Key Identifier:
keyid:34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:7b:c0:f3:1a:cb:47:5f:0d:52:c1:16:e7:54:9e:fe:13:d5:
f5:24:0f:bd:5c:17:c0:9e:e4:a7:ec:8c:11:05:5b:f7:75:6f:
2f:ad:62:c6:bf:b3:ff:55:d7:11:20:30:0c:8b:ea:24:68:c7:
ad:f1:15:c5:f0:25:3a:49:2b:d1:eb:57:66:ad:c6:0c:f8:d9:
e4:57:29:92:d8:91:d8:4c:0a:9e:30:13:dc:52:55:27:7d:09:
6e:60:82:da:00:e7:0a:b9:67:42:e8:3c:11:db:08:a2:b1:89:
f5:19:57:14:3b:1e:0a:71:47:c6:ab:b3:f0:84:22:b9:32:33:
9d:14:52:04:a0:9d:46:fd:d2:1c:75:f6:26:0e:01:c3:9f:13:
51:d7:f5:ea:2a:39:61:f9:39:f9:76:ee:de:04:a0:41:b4:0d:
dd:7c:a4:d0:b2:b5:91:f7:95:c1:1c:ab:44:20:78:72:0e:d2:
a4:f0:d8:78:76:47:3d:a5:ac:57:53:3d:df:53:fa:b0:76:d4:
1d:06:ac:56:75:14:d2:28:25:ab:ac:df:fc:19:98:b8:c6:77:
c1:01:3e:7b:2e:06:fb:2b:d6:bd:ae:fc:f1:e1:2f:18:bd:3f:
44:5e:c4:17:73:2f:bd:56:b4:1f:ec:34:93:d3:ea:6f:4a:36:
cb:1d:8c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:45:59 2026 by rpki-client