This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
File: Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json)
Hash identifier: LCQSCN9IkV+bsFftufbPn9wbBqOqs7SbsYANTrWmRG0=
Subject key identifier: E0:7D:BB:02:EF:11:C5:FB:E7:B8:0A:A0:69:BD:68:17:91:2B:45:AF
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Certificate issuer: /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial: 0951
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
Manifest number: 0931
Signing time: Wed 04 Feb 2026 19:42:43 +0000
Manifest this update: Wed 04 Feb 2026 19:42:43 +0000
Manifest next update: Wed 11 Feb 2026 19:42:43 +0000
Files and hashes: 1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: cDyx5QuF6CjIv5pvg30noVpgsadlf6FnFk5wO67srrk=)
2: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: UE5+ErJEcnaRAzrTj0O4uJaAR4eaT67kWYQs9QGi9rM=)
3: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: LDyZCEh4lHkU/m1TvJhILb1LRL3feZ7tdaVfK9q/FJE=)
4: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: UMY2SMXz/mJaifHHi29M/g1LYVd8AUhMyEaWSsVqYYY=)
5: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: d9vZgZrOvFQ4TRJSBIsKc/8yFGao6z4V3n1WpvXvkS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Feb 2026 17:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2385 (0x951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Validity
Not Before: Feb 4 19:42:43 2026 GMT
Not After : Feb 11 19:42:43 2026 GMT
Subject: CN=6983a133-e4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:4d:b3:fb:60:53:bc:f8:c9:d9:40:69:09:
b8:61:69:35:e5:f3:2e:6a:3a:68:9f:66:1e:d3:d0:
6b:0a:da:0d:1c:78:36:57:59:50:35:cd:16:e0:3b:
65:3d:2a:54:eb:24:6c:e2:89:5d:c6:4e:20:c0:f3:
45:60:a2:2b:2e:47:92:84:35:45:ef:d4:c3:2c:9e:
c0:6b:04:70:61:e0:3a:d2:33:7a:bd:b5:ba:a4:60:
91:c3:cd:ba:f2:05:b8:38:1d:0d:6c:cc:7d:bc:07:
93:80:b4:07:79:8f:c0:67:24:af:2d:a4:1e:5a:cf:
5f:f1:dc:88:02:82:09:c5:28:8e:fb:16:2f:0d:4e:
b4:6a:f5:45:71:bc:fe:76:51:7a:64:83:22:d7:ac:
fe:c9:d9:a2:aa:7f:21:91:af:e1:d3:48:31:5d:d6:
36:dc:e1:ad:26:f6:47:97:76:1d:c5:39:74:4b:08:
cb:ce:ca:89:cd:d9:bc:4a:80:de:65:65:91:a8:16:
65:22:9c:04:41:27:c5:a5:2e:ae:ff:78:96:32:b2:
94:37:f4:77:b0:9c:2d:66:f7:e3:e5:e7:b8:da:ff:
7c:6b:ab:28:ce:8d:ea:56:75:68:e4:87:7a:3e:5b:
12:74:86:73:23:c7:4d:a1:f4:a7:ef:75:85:ba:b9:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7D:BB:02:EF:11:C5:FB:E7:B8:0A:A0:69:BD:68:17:91:2B:45:AF
X509v3 Authority Key Identifier:
keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:24:9e:cc:34:2c:56:cf:c4:25:ef:b1:82:76:0e:18:21:23:
75:2a:da:18:d0:25:e1:df:d3:7a:81:ad:b8:f3:fa:77:8e:23:
48:a8:4e:ad:18:0f:63:50:ca:bc:c9:64:b9:c9:f6:30:a5:d9:
66:09:17:2c:f1:b0:6b:78:18:13:75:1c:f6:58:e9:e9:6a:57:
b2:8f:eb:3a:20:55:ed:97:16:55:ed:33:8f:01:59:02:af:b4:
08:87:20:23:54:16:74:d0:54:13:2b:52:10:58:05:d1:82:9a:
64:a9:27:59:f2:e9:7d:e3:b1:ca:bd:37:19:26:9a:70:9a:f3:
cd:bf:61:91:9d:6f:8a:c4:e3:09:a4:a0:eb:a1:fe:c7:1f:e8:
05:9a:57:f2:e6:f9:8b:35:3e:a1:d4:bf:6b:ae:23:5c:1c:c1:
65:a8:e7:56:01:76:e6:79:5a:37:a8:a5:7a:5d:da:15:0c:50:
f6:b7:25:f5:55:42:36:b3:26:8b:f4:28:f0:b0:3a:35:3f:59:
27:b5:32:27:31:c5:bf:19:58:09:76:fe:0d:c8:d6:5d:b3:17:
ff:20:7d:35:f1:c2:7e:1d:8d:b7:fb:f6:49:1a:86:35:5f:b0:
64:e3:1b:fc:6b:a8:2a:c0:32:d5:8d:46:6b:19:ed:40:3e:bb:
19:d9:0b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 22:10:27 2026 by rpki-client