This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
File: nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json)
Hash identifier: aW80pXKa3hE8eKD4BgXy8h08KxiZ/zpDjjDmo05Sx18=
Subject key identifier: 89:A2:CF:C8:F5:DE:12:58:35:AF:BD:97:17:2A:21:18:5C:68:37:30
Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
Manifest number: 0165
Signing time: Sun 25 Jan 2026 03:33:14 +0000
Manifest this update: Sun 25 Jan 2026 03:33:14 +0000
Manifest next update: Sun 01 Feb 2026 03:33:14 +0000
Files and hashes: 1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: +hsIIBA4y3i4P48urLYjix2E7GnW+CZ/15Js76Z+ON4=)
2: D0F5F16EBFB811F0B09C3E14C4F9AE02.roa (hash: CmgxaioZaqBmTAKdrvrQvMBUPzNHQbmNsCbdVyQjo74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Validity
Not Before: Jan 25 03:33:14 2026 GMT
Not After : Feb 1 03:33:14 2026 GMT
Subject: CN=69758efa-553e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:68:bd:fd:f1:d4:4f:e4:ad:00:bd:aa:7a:
6f:20:bb:46:12:70:37:62:7d:38:b2:c9:c3:90:87:
3f:1c:69:00:33:85:dd:39:52:b8:68:b7:d3:35:4a:
c1:96:b0:d2:53:91:f1:7b:57:23:3f:45:7d:77:02:
8a:c0:ed:f4:65:c5:29:95:23:98:e4:26:58:32:53:
c9:97:8a:38:97:d3:8d:3a:dc:9e:82:6c:a2:2a:2f:
5a:6e:f5:3d:c2:2f:fb:85:f3:8a:28:2f:d4:10:68:
ef:c8:84:0f:ea:19:6e:81:df:d0:ca:1f:85:fd:0b:
61:53:01:5a:3d:83:a9:f3:91:18:49:38:28:d6:d3:
63:5e:c3:ec:10:3d:c4:0b:50:97:74:e2:3e:58:a5:
44:ea:ea:d8:71:8e:55:8f:fe:67:22:2f:84:70:84:
e2:41:0d:18:73:9b:a1:83:f4:f8:51:78:2a:0c:3d:
8e:95:51:63:f2:ca:a1:be:0d:9a:37:bd:45:ec:68:
e5:f6:1a:69:21:40:9a:5a:8f:04:8b:41:4e:e6:dc:
21:ab:f9:87:cd:e5:71:f3:12:8c:40:1f:c1:30:c2:
95:3c:b5:39:42:00:9d:83:6e:6e:79:44:91:ec:6b:
c9:8b:3a:c3:2b:b6:ca:61:2f:a2:2c:4f:79:de:aa:
2b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A2:CF:C8:F5:DE:12:58:35:AF:BD:97:17:2A:21:18:5C:68:37:30
X509v3 Authority Key Identifier:
keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:2d:6f:84:08:5a:d4:ff:f4:2e:a1:98:cd:26:0c:f5:2e:d1:
3c:f9:be:6a:9d:f4:59:3e:82:0e:40:92:c7:69:8b:da:db:e1:
03:15:c6:8f:e4:02:cf:0c:98:ec:17:f1:f5:ad:5d:93:b8:ad:
20:04:5e:26:80:5f:5b:a5:dc:ef:46:2c:dd:c6:55:44:35:e4:
20:76:16:ab:70:41:32:12:af:e1:8d:b1:c4:08:55:ca:21:eb:
da:8b:90:47:b7:62:16:d3:28:43:00:50:0d:28:bc:32:22:13:
c2:16:64:ad:1d:5d:3d:f9:cb:a4:a2:f9:e8:6e:c6:09:9f:1b:
d3:31:82:5a:e5:5e:9e:13:09:14:2d:8a:6c:a6:8e:fc:75:b3:
47:5f:72:a2:f1:16:7f:5d:84:47:91:d6:6c:64:bd:96:fd:d1:
64:d7:ed:5e:26:92:d0:22:a5:67:07:9e:09:43:67:b5:f7:ac:
d0:93:a7:57:0b:a8:34:4e:cb:c1:e2:49:73:b2:a6:30:d1:5e:
b2:98:c3:f1:a9:88:8c:92:66:a1:5f:54:29:03:26:db:4a:2c:
c7:4c:39:10:2d:f6:64:7b:26:5e:4e:c4:19:cb:40:f0:cc:7a:
87:f8:52:ad:ee:13:d3:16:54:d7:19:1e:ed:14:0d:f7:08:08:
00:b4:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:43:14 2026 by rpki-client