This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
File: njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json)
Hash identifier: MRv1G52kqRkWpTOoM9S7I5/1tyuDTGhUGpKPCnMkntY=
Subject key identifier: CD:C4:85:7C:60:A5:B1:C9:26:09:DF:1A:36:1D:72:A8:6A:7F:32:54
Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66
Certificate issuer: /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966
Certificate serial: 34FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
Manifest number: 34FB
Signing time: Sat 24 Jan 2026 14:55:04 +0000
Manifest this update: Sat 24 Jan 2026 14:55:04 +0000
Manifest next update: Sat 31 Jan 2026 14:55:04 +0000
Files and hashes: 1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: M3fNjFixtvOjE0/NHzOSAQqSQ5ffUe6fMcyph6jbPeA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl
rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13563 (0x34fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCD2A, serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966
Validity
Not Before: Jan 24 14:55:04 2026 GMT
Not After : Jan 31 14:55:04 2026 GMT
Subject: CN=6974dd48-8efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:f2:6b:98:8e:7d:d7:eb:5c:0e:29:49:ad:
68:6b:4d:32:b7:fd:78:ba:d4:b1:cd:71:f3:c7:0f:
3f:cd:34:3f:e6:eb:a4:12:32:5b:d8:6e:29:23:cc:
f1:92:e8:1f:29:41:fc:d1:fc:f2:a0:31:4f:e0:9a:
b6:95:11:25:a3:de:42:01:be:6b:65:23:ac:03:ba:
37:46:13:2c:1f:d8:fb:af:28:01:e7:ca:b3:33:c5:
32:37:ec:7b:06:bb:0d:25:3e:41:2f:80:d0:16:32:
4e:0c:1d:b4:c8:6d:d8:f4:ab:a5:d2:45:fc:0d:5e:
3e:26:fd:e9:4f:f5:fc:c5:72:3e:4a:9a:03:a4:23:
c5:99:86:66:c8:22:91:85:ee:a4:52:a0:51:14:b4:
17:10:8a:b5:2e:d7:97:c3:5d:4b:b6:37:ee:34:62:
a5:89:16:1c:ac:0d:84:8f:2a:36:f6:28:d2:e5:19:
fc:fb:d3:91:f3:b9:e4:ec:23:16:c3:d1:8d:43:ca:
2a:01:74:1d:35:7a:89:ea:ea:65:be:28:6b:4f:56:
0d:0a:cb:bf:5d:8f:9d:05:22:f7:20:17:aa:92:69:
73:b6:77:1d:af:19:ba:93:3e:cd:4f:95:85:11:c1:
93:25:ae:0f:4a:9c:48:f6:57:4b:88:e0:ad:a3:2a:
53:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C4:85:7C:60:A5:B1:C9:26:09:DF:1A:36:1D:72:A8:6A:7F:32:54
X509v3 Authority Key Identifier:
keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:47:71:dc:88:7a:15:39:d9:fd:41:1f:44:47:6a:74:e6:fb:
53:69:09:17:80:e0:5e:69:50:55:a1:1f:dd:95:1a:12:c2:ab:
54:8d:b7:63:7f:67:cb:c9:2e:ce:a3:f3:38:7b:0b:9a:98:41:
25:9a:73:bf:aa:3d:eb:c7:53:06:c5:02:53:22:5c:e6:3a:8f:
c9:80:79:6f:c5:54:93:ce:68:7c:f2:4a:12:06:3a:bd:db:b2:
53:12:47:a4:5e:b0:3a:7b:ac:38:cb:48:70:cb:93:67:05:7c:
a1:a8:8f:89:fd:75:0a:d6:6e:b0:72:8e:e4:cf:3a:8e:25:90:
6c:ec:c4:b7:b6:3e:30:9b:6f:d7:b4:3f:65:31:f9:7f:4f:85:
4d:c6:90:12:f2:d0:c4:76:8b:42:c0:5e:76:42:a2:26:7a:51:
1d:f1:73:00:d9:23:0a:3c:6c:6a:d2:60:14:0c:29:05:63:46:
0c:06:95:e8:57:b2:df:81:ba:fe:07:55:f1:c6:66:b6:92:e9:
3d:03:cc:5c:27:1d:d7:45:c7:8e:ae:d6:a5:bc:0f:99:9b:cd:
1e:24:fa:06:66:10:74:4f:68:70:8c:0d:9d:4a:00:91:65:d2:
b1:e9:5b:fa:95:6e:ac:1f:e6:30:52:85:50:91:9d:f1:8e:5c:
32:37:24:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:49 2026 by rpki-client