This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
File: NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json)
Hash identifier: U/RNmijh39ozdDv3wqasVS4RRbTLzNaKn43tnWZXhb4=
Subject key identifier: 14:99:52:9B:8F:F1:C5:44:41:5E:1B:E3:3A:9E:39:84:8D:87:2F:35
Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C
Certificate issuer: /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C
Certificate serial: 0222
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
Manifest number: 021F
Signing time: Sun 11 Jan 2026 01:23:10 +0000
Manifest this update: Sun 11 Jan 2026 01:23:09 +0000
Manifest next update: Sun 18 Jan 2026 01:23:09 +0000
Files and hashes: 1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: IPdFO5RE2Xf3kfzUdecp4FD5NBVe2qYxBDgJ9D4/lKk=)
2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: WkJCgrbBmelQA5c6twQaEqrtwUH2ZoyRfcoaWRVuiIU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl
rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 01:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C
Validity
Not Before: Jan 11 01:23:09 2026 GMT
Not After : Jan 18 01:23:09 2026 GMT
Subject: CN=6962fb7e-2c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:c9:6b:59:31:e5:e6:de:28:b0:99:6d:68:
ba:29:aa:f6:8f:19:29:af:56:9c:21:97:34:9c:74:
b0:23:a8:88:41:60:0f:6b:6a:c1:4f:75:4a:67:bf:
46:e5:46:5c:8b:39:01:67:2b:2a:bf:d3:d5:26:56:
96:09:24:1f:16:ec:29:64:d8:c5:f6:ff:83:82:1f:
68:e1:c7:84:d7:22:49:e2:23:bc:4a:c6:6a:02:00:
7f:e2:ad:53:3c:0c:74:7f:ad:0c:a7:92:ce:6a:1d:
c2:11:68:42:d0:9f:3c:a4:74:17:37:04:54:b0:ca:
d7:0b:5f:86:28:06:0e:5f:40:b1:80:d4:fd:08:78:
f8:39:db:76:23:b6:6a:f9:48:48:31:82:62:aa:9a:
cf:fc:67:8a:2d:13:3a:5f:a9:6d:c2:05:ee:4c:54:
5b:04:1c:84:60:eb:16:5e:f1:bb:f1:e5:55:9f:0f:
ef:b3:03:68:40:6a:26:ed:76:bc:14:d1:24:2b:2c:
3e:31:22:44:b2:40:41:1e:da:6a:41:9c:ae:a3:d0:
96:fc:9b:e3:21:fb:9f:fc:d5:02:b3:10:a7:44:b5:
71:6c:60:dc:4b:7f:6f:09:c4:73:2f:80:60:c6:47:
03:b3:5f:13:02:66:32:43:26:73:99:24:a1:d5:6a:
d5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:99:52:9B:8F:F1:C5:44:41:5E:1B:E3:3A:9E:39:84:8D:87:2F:35
X509v3 Authority Key Identifier:
keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fe:fd:9b:52:47:c2:b9:bb:b1:5a:ff:9d:b2:bc:26:95:13:
8b:5a:0b:0d:17:60:7f:30:fd:9f:58:f9:fe:dd:16:ee:9a:cb:
4f:ef:b7:5f:7a:01:f2:5a:8a:74:07:0e:52:6f:4d:c8:33:4d:
4f:74:93:80:f8:02:7a:be:0e:07:b9:5c:ba:02:2a:71:17:e2:
10:93:6e:36:5a:d5:4f:e3:8b:24:04:8a:0d:9b:71:9d:0e:2a:
2a:df:cb:d6:14:06:55:12:f7:31:0c:00:84:69:68:c4:ac:9e:
c0:2e:37:91:f8:d2:4e:8e:de:19:f3:1b:5d:85:92:73:ea:98:
c8:f4:5a:35:1a:c7:70:e5:6a:6e:66:8f:ed:3a:72:04:a2:da:
ce:7f:f7:b9:e7:2e:62:21:6f:28:36:f5:35:4e:ae:43:d3:83:
b2:f9:42:46:a1:7f:38:be:99:b3:7c:92:b0:c1:91:a5:3b:f0:
fc:e7:c0:7f:31:5f:bd:2a:7b:15:8c:00:e3:ea:41:f5:3d:70:
24:e4:64:ef:60:a9:61:ab:82:6c:f1:c3:68:8a:7e:38:db:10:
df:f3:8c:9b:1b:e0:32:d7:0c:8a:62:dd:81:d9:9d:b9:25:b9:
42:ec:bd:9a:70:73:2c:98:24:29:4c:cd:e2:1d:ac:f6:3d:92:
d1:00:3f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 17:59:46 2026 by rpki-client