This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
File: NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json)
Hash identifier: dmNPLFZftBRuNIRWoUYaC1X3TR3pE41HQm8ExLCId/o=
Subject key identifier: E8:8D:B9:1F:3B:33:77:09:F6:90:66:46:16:A4:F1:3E:17:A4:3C:74
Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
Certificate issuer: /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Certificate serial: 1CD7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
Manifest number: 1CBE
Signing time: Sat 10 Jan 2026 15:58:24 +0000
Manifest this update: Sat 10 Jan 2026 15:58:24 +0000
Manifest next update: Sat 17 Jan 2026 15:58:24 +0000
Files and hashes: 1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: bUxJhCyCYDTCReLvonLdWqDmqQSoIiQm+tr3KRWIUfc=)
2: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: fMJYRNYu9EHrc5oKc1TxPlzepBubKFgRR2gCF/JM5ZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 15:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7383 (0x1cd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A70FA, serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Validity
Not Before: Jan 10 15:58:24 2026 GMT
Not After : Jan 17 15:58:24 2026 GMT
Subject: CN=69627720-7329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:22:bb:1e:39:12:2c:1e:02:32:af:9d:09:
a2:1f:23:0b:fb:b4:19:e1:b5:15:70:37:50:5e:15:
1e:e3:24:8e:62:c0:f3:6b:cd:2a:29:b3:de:50:e6:
7b:6a:11:49:20:aa:5e:6e:b3:1c:87:00:fd:10:a6:
40:71:4f:ee:c7:ae:8a:e9:cc:54:96:5a:f3:44:ea:
01:3d:6c:5c:16:e9:df:1f:14:e2:b2:eb:f6:98:d4:
b9:0a:b6:83:25:63:75:29:16:da:fb:fb:13:3d:99:
40:1a:28:f1:50:8b:ca:04:e0:b9:42:e6:da:ff:2e:
60:f4:c4:84:1b:78:aa:75:30:21:41:9c:11:81:7d:
1c:74:97:2c:41:74:35:9b:d0:9f:43:3d:d7:29:d9:
b1:68:a1:11:d6:51:3f:38:b1:61:e8:b7:cd:6b:c2:
5b:05:6e:8a:5a:47:2d:bd:83:0c:00:73:7a:30:03:
c6:8f:26:db:d6:c0:d5:48:f6:1a:53:39:7f:94:20:
e1:c2:e1:80:c1:7b:b6:6c:49:57:67:29:8e:46:63:
17:eb:e6:10:ab:70:45:ee:66:a8:ff:99:95:90:ab:
bd:97:75:a1:59:a0:9b:e6:15:f1:d6:46:41:2b:26:
8c:19:a3:d9:1d:5b:5e:b7:0a:8c:43:95:be:3b:d1:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8D:B9:1F:3B:33:77:09:F6:90:66:46:16:A4:F1:3E:17:A4:3C:74
X509v3 Authority Key Identifier:
keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:04:9a:11:32:54:43:2a:85:10:f5:3a:2e:06:a9:96:2c:b0:
71:e2:41:40:89:29:15:e6:69:bd:7b:68:4d:b4:94:2e:f7:fd:
f8:e7:1e:c7:35:f9:97:4e:fd:29:c5:15:89:3d:a9:75:2c:c8:
e7:67:4a:c7:07:9d:b1:6f:e6:59:c7:74:4e:d8:c8:d8:02:73:
74:d4:6e:c8:7e:8a:87:cf:07:95:84:d1:68:d3:f6:2a:98:9c:
e2:fd:73:8a:39:1e:55:de:f8:d8:96:cd:0b:a5:70:2a:f5:6d:
dd:e0:f9:8b:aa:96:65:30:d0:6e:2c:65:12:dd:60:8a:11:08:
e0:49:78:72:fd:c6:3e:c0:74:f5:e7:48:fa:78:f8:1a:08:56:
04:8a:2d:0a:12:68:b4:21:47:36:78:e3:c4:86:ea:e3:13:c5:
73:f5:e8:17:9e:50:58:65:36:03:7e:8f:5d:29:45:ea:1a:46:
01:44:cc:04:24:51:8a:03:f4:b2:a5:2a:3d:44:aa:1f:43:87:
95:19:62:79:6e:4b:20:32:aa:5c:a7:2e:e3:ca:94:c8:3c:bf:
43:e1:03:aa:d1:a6:64:91:a1:e0:09:93:15:d9:68:ab:7e:8b:
5b:ac:47:70:f1:30:71:bd:2f:b1:9c:df:77:0d:e4:4a:94:45:
4b:5d:7b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:29:21 2026 by rpki-client