This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
File: Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json)
Hash identifier: YNC2ZlQ2M/jIOeZuSJlgSVHCpNAqulfZcM5nF4c//QI=
Subject key identifier: 61:F7:72:3A:41:9D:A9:50:25:E8:2A:F5:D9:FA:70:95:AC:8A:59:8D
Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
Certificate issuer: /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Certificate serial: 27B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
Manifest number: 27B5
Signing time: Fri 16 Jan 2026 15:29:42 +0000
Manifest this update: Fri 16 Jan 2026 15:29:42 +0000
Manifest next update: Fri 23 Jan 2026 15:29:42 +0000
Files and hashes: 1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: rAE4f8+kVYz3NA6LHjxfsv4ueWBEpENbs10BfvLVy6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 15:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10165 (0x27b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Validity
Not Before: Jan 16 15:29:42 2026 GMT
Not After : Jan 23 15:29:42 2026 GMT
Subject: CN=696a5966-418c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:aa:c4:85:c7:47:e7:ef:1d:0f:b2:b5:cc:
59:24:b0:37:ca:6c:a6:76:2e:37:33:83:d3:1c:63:
56:64:f8:46:d0:dd:ea:80:19:6e:a8:fc:41:48:5c:
8e:92:9b:10:ea:fa:de:25:1f:d8:c0:67:a9:db:13:
1d:7e:33:53:21:57:6d:7c:15:57:f6:08:55:fd:a9:
98:8b:c3:18:17:d8:2d:a0:7c:3f:dd:6b:ff:19:b5:
08:5d:5c:fa:fb:88:d2:93:04:68:b0:d5:13:ce:eb:
52:9b:72:dc:f1:2e:8a:a1:f6:5e:4f:02:03:84:39:
27:a6:11:18:70:05:fe:8d:57:64:1a:54:fa:66:83:
02:03:b2:8e:46:95:91:f9:37:cf:d4:7d:5a:4f:cd:
3f:57:e2:2f:53:9c:aa:c1:a8:36:38:56:4f:e9:29:
8c:bc:c8:e6:00:e6:db:aa:c3:7f:eb:aa:19:71:de:
5d:9e:ef:1d:75:78:92:4a:19:eb:48:67:23:10:c1:
d6:d2:5b:4f:af:bb:c5:87:00:0a:0e:47:d5:bd:50:
64:62:66:83:eb:0c:37:5b:59:f4:83:37:4b:c6:b7:
a0:18:8d:50:80:3d:94:05:c5:2f:b2:07:a8:3b:00:
92:41:c2:70:67:b4:de:41:75:be:f7:18:5f:52:0d:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F7:72:3A:41:9D:A9:50:25:E8:2A:F5:D9:FA:70:95:AC:8A:59:8D
X509v3 Authority Key Identifier:
keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d4:67:15:85:2c:12:cf:de:c6:52:3f:c4:69:2f:a0:8f:7e:
30:18:b4:08:0a:ba:98:37:a3:1a:a6:e8:8c:d9:45:f0:a0:a1:
b1:85:57:ce:73:ae:7e:e4:9f:5e:25:73:aa:24:5c:8b:0b:ec:
dd:52:a2:bd:a8:e7:26:4d:36:cf:2b:ae:a5:d2:e2:22:04:a5:
3d:14:8e:f9:c0:51:7f:a6:44:d9:b0:e7:dd:55:0c:e7:86:a8:
e1:ed:c4:e5:e2:43:8b:9f:46:c1:f8:67:8f:3f:d7:07:59:f0:
56:c2:13:7c:dd:cf:83:1d:8c:b1:79:a6:f6:4b:29:73:59:d1:
85:4e:cd:6a:f8:1d:2d:5b:16:40:84:8a:09:6f:97:a1:b1:35:
3c:30:d5:c1:73:f8:69:be:71:2c:64:61:2d:2d:ef:d8:4a:35:
39:38:d0:9b:5a:4c:43:7c:1f:4e:49:4a:b1:f6:cb:6b:d1:cb:
62:17:cb:1d:bb:be:d9:18:78:8f:f3:69:3a:4f:b3:6b:6e:76:
13:8f:4c:d4:9f:5d:65:5b:f2:eb:eb:91:c5:09:60:3d:f2:16:
8d:cc:b1:4c:3b:a4:b9:3f:7c:ac:e8:3f:90:aa:ee:ec:81:00:
56:81:1f:a6:70:bd:38:07:20:a9:77:f0:cb:b1:94:60:25:16:
21:c5:2b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:14 2026 by rpki-client