This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
File: nN366rxkvM14iClikQ7BkqLSKDg.mft (raw, json)
Hash identifier: fAtR9fZdU3AxHnn3V/5fjKQB1bVbiHWmCttbYAzVxgA=
Subject key identifier: 91:CE:45:7C:97:8F:64:76:8C:B9:65:BF:33:43:6A:69:88:35:38:64
Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
Certificate issuer: /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
Manifest number: E1
Signing time: Fri 23 Jan 2026 04:40:30 +0000
Manifest this update: Fri 23 Jan 2026 04:40:30 +0000
Manifest next update: Fri 30 Jan 2026 04:40:30 +0000
Files and hashes: 1: nN366rxkvM14iClikQ7BkqLSKDg.crl (hash: klwbCV62Sj8Krk5KgcEf0RADPzAoblJ6pHkenxrEnfE=)
2: 685DC124EC7B11EFAF014776C4F9AE02.roa (hash: J8sHwaYejB5G8PGUwZTmh70H4k+WJ4SNlX35xQySLfY=)
3: 6EBBA0F4A1AD11EF8A984349C4F9AE02.roa (hash: bG5p2NqoYlPIiNcdmfwhWt0izQbVX7XQpHNseQnNySY=)
4: 6F25556CA1AD11EF8A984349C4F9AE02.roa (hash: KMSyD55JIP9AF3MdjI33AREb+7ZT/A3CHz9uIEXFwWo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 04:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6F21, serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Validity
Not Before: Jan 23 04:40:30 2026 GMT
Not After : Jan 30 04:40:30 2026 GMT
Subject: CN=6972fbbe-4801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:2c:dd:41:e0:46:9d:9f:e7:62:66:7b:7a:
59:57:0b:3e:5d:fb:84:98:2e:bf:cb:8b:d5:9a:51:
75:bc:4d:52:6b:83:46:15:3f:43:e1:7e:e2:d9:b4:
fe:08:86:eb:6c:00:0b:f1:5d:89:8c:19:a8:e2:48:
b4:a0:df:12:51:94:39:49:24:5b:ac:89:65:bd:f1:
aa:bd:1d:ef:f8:92:86:92:a8:d4:9c:57:c1:3c:01:
fc:a4:72:1e:cb:60:b9:c2:0a:4f:16:fe:36:a9:47:
94:c3:5d:3f:ab:74:c2:6b:4a:e3:aa:8f:94:bb:b5:
74:2c:aa:52:f1:53:ea:d1:fd:7b:53:be:e4:e5:bd:
79:c6:e1:23:74:f9:c6:f7:f2:2a:4e:5f:8e:6d:07:
83:73:bf:ca:6e:8a:df:b3:0f:98:54:6c:d6:f3:53:
85:e5:0a:6a:7b:85:4f:08:44:67:b3:75:b4:fc:f0:
ed:6a:cf:44:d8:6c:7d:7e:32:0d:f1:f5:3d:6a:87:
44:c4:d1:90:1d:44:0b:7a:69:53:6d:0c:3f:28:fd:
f2:d4:cc:34:25:c9:be:94:8a:1c:2e:3d:bc:db:ff:
7a:ba:9f:26:e3:63:c8:6d:fa:51:db:37:b5:0c:3f:
85:74:c7:34:c6:a3:7b:e9:26:2f:65:d9:1c:7f:c0:
64:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CE:45:7C:97:8F:64:76:8C:B9:65:BF:33:43:6A:69:88:35:38:64
X509v3 Authority Key Identifier:
keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:ac:68:45:90:dc:e6:70:5f:06:f3:78:1f:01:cc:ec:24:d8:
5e:26:7d:42:7f:49:b9:1d:ca:9f:aa:16:2e:70:12:b9:1e:7e:
b8:23:f5:ce:d2:19:a4:00:df:cc:e0:c3:ad:6c:2d:d9:33:35:
8f:b5:01:25:01:ca:a9:ee:09:06:44:54:d6:b2:b4:5a:da:ff:
e1:fc:e3:6a:cc:2d:e7:ea:49:70:c5:95:b2:86:38:01:1e:32:
8f:06:99:5c:3e:67:61:c6:2f:ce:3e:9d:38:3b:bd:7a:f9:fe:
a3:72:66:da:a6:d4:33:4c:49:61:a1:87:5a:46:fe:47:b5:9a:
f1:96:1c:78:aa:61:c5:12:c1:83:08:2e:2f:1b:41:66:f7:2f:
fd:a9:4a:2a:d8:28:84:12:c4:d1:88:cc:c2:33:60:c0:0d:b0:
5f:20:22:d3:5e:f0:8d:84:73:2b:90:31:ba:cc:ed:bb:51:25:
6f:cb:df:0b:1f:e5:c2:65:7a:da:96:10:38:bc:09:44:69:28:
a7:28:ea:1d:c7:13:a3:d4:55:56:98:72:74:1b:45:86:59:2f:
be:69:c8:05:70:9e:be:24:72:7b:89:ad:c3:77:a0:f4:9a:8f:
dd:87:ce:5b:4d:44:d3:1c:f8:86:d3:4c:76:15:ff:76:e3:80:
91:c1:06:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:57 2026 by rpki-client