This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
File: nUVn--JSxmFkKqM-eASKhxf6fLM.mft (raw, json)
Hash identifier: whXl9jaVJbCxiTUU0c4+JuXb/yDsNSHHvpRo5ior1O4=
Subject key identifier: D1:1F:63:F1:6C:81:F3:8E:83:B0:95:AC:A5:77:9D:16:E6:1E:DA:03
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Certificate issuer: /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
Manifest number: 94
Signing time: Sat 17 Jan 2026 05:33:48 +0000
Manifest this update: Sat 17 Jan 2026 05:33:48 +0000
Manifest next update: Sat 24 Jan 2026 05:33:48 +0000
Files and hashes: 1: nUVn--JSxmFkKqM-eASKhxf6fLM.crl (hash: NnBqb9GijvFalV3tvoGWACFrhojGuO+WSC00ousA/08=)
2: AF75682A101911F09363D44DC4F9AE02.roa (hash: xmriq54EyLF1B3bTExDk9IsDRaD4W5eEAO8AyaCzAaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 05:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Validity
Not Before: Jan 17 05:33:48 2026 GMT
Not After : Jan 24 05:33:48 2026 GMT
Subject: CN=696b1f3c-75fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:06:86:5b:1d:4b:77:07:1f:93:c1:44:3b:
08:ff:55:39:d2:74:37:f4:77:26:d5:8b:59:2c:fa:
2a:94:c6:7e:4c:68:2a:6d:09:33:2c:0c:44:af:de:
74:14:5f:16:ba:1a:f6:a2:c1:b7:3e:e3:06:40:58:
11:2c:b0:de:cb:bc:ff:c3:d3:07:d5:15:61:e6:a7:
e7:65:67:d2:fe:09:95:ab:dd:25:a1:51:1a:9a:1e:
26:09:fd:63:c5:2c:bd:d7:41:95:b0:51:f1:3a:e7:
d9:3c:23:8f:64:04:f7:af:0e:40:c9:ac:01:95:9b:
04:b5:36:67:7e:de:5a:2a:80:0e:c8:3a:7d:12:8a:
6b:b3:36:7b:44:67:0f:30:17:e8:64:78:e1:5d:cf:
9d:5b:e5:09:ea:36:1d:02:ba:9c:2f:98:c1:99:33:
89:f0:f0:d1:80:e0:71:09:70:de:c3:20:f2:74:6e:
37:0c:1c:b3:f7:f2:85:22:a9:16:0e:55:45:e8:0f:
30:d3:21:08:c1:7f:6a:b1:74:18:5d:0b:77:94:29:
0f:b4:e6:9d:1b:50:2e:6e:2b:7a:e2:a6:d0:4e:8a:
fd:6b:2e:ee:c0:4c:52:9c:fa:7e:7b:17:5f:7b:93:
94:c6:d5:5a:91:18:2d:bf:14:1a:bd:d7:60:df:33:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1F:63:F1:6C:81:F3:8E:83:B0:95:AC:A5:77:9D:16:E6:1E:DA:03
X509v3 Authority Key Identifier:
keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:33:42:e6:1e:d7:02:5a:5b:3c:f5:60:9f:c2:ae:f6:89:19:
80:63:6d:bb:ab:67:25:e5:8b:25:a4:2e:c6:8d:b2:08:bf:e6:
af:f3:88:01:14:4b:9f:11:4a:df:a9:2a:82:98:cc:47:e6:ac:
83:e1:bd:6f:b7:21:bd:2a:e3:03:f9:6c:85:07:52:40:0c:b5:
5d:19:a8:33:06:c0:9a:7c:0e:00:2d:e9:c9:41:ea:f3:5d:04:
c6:92:16:0d:ff:09:1d:c6:8b:37:a7:3a:19:8c:bb:83:6a:7c:
4c:3c:ee:9b:1d:d8:17:79:ea:4a:9c:2c:2f:ab:96:af:31:fc:
ed:46:97:5a:6a:3d:c1:fc:06:a3:c2:77:96:8c:ad:aa:b7:1d:
a2:16:01:08:f3:c4:d5:81:3c:55:f1:15:7c:ac:e1:bb:d7:ae:
f6:2f:fd:df:02:8e:6d:26:63:b9:4c:15:f9:c6:67:bf:62:06:
ec:f2:a9:d9:8f:a0:f9:a2:16:e9:b5:3e:8b:1a:c3:e0:9a:d4:
6a:2a:9a:89:76:a5:47:95:e9:51:2d:8f:2c:03:dc:85:37:c9:
38:7f:83:55:98:6f:23:8e:15:28:a0:0d:43:8a:ad:c4:c2:ee:
49:1c:26:e2:df:57:1b:0e:12:f4:a0:c3:8e:da:07:54:df:04:
cb:f3:54:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNGQUMxMTAvBgNVBAUTKDlENDU2N0ZCRTI1MkM2NjE2NDJBQTMzRTc4MDQ4QTg3
MTdGQTdDQjMwHhcNMjYwMTE3MDUzMzQ4WhcNMjYwMTI0MDUzMzQ4WjAYMRYwFAYD
VQQDDA02OTZiMWYzYy03NWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxnAGhlsdS3cHH5PBRDsI/1U50nQ39Hcm1YtZLPoqlMZ+TGgqbQkzLAxEr950
FF8Wuhr2osG3PuMGQFgRLLDey7z/w9MH1RVh5qfnZWfS/gmVq90loVEamh4mCf1j
xSy910GVsFHxOufZPCOPZAT3rw5AyawBlZsEtTZnft5aKoAOyDp9EoprszZ7RGcP
MBfoZHjhXc+dW+UJ6jYdArqcL5jBmTOJ8PDRgOBxCXDewyDydG43DByz9/KFIqkW
DlVF6A8w0yEIwX9qsXQYXQt3lCkPtOadG1Aubit64qbQTor9ay7uwExSnPp+exdf
e5OUxtVakRgtvxQavddg3zOLtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEfY/Fs
gfOOg7CVrKV3nRbmHtoDMB8GA1UdIwQYMBaAFJ1FZ/viUsZhZCqjPngEiocX+nyz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0ZBQy9BRkY1NjNFNjEw
MTgxMUYwODBCQ0MzNDhDNEY5QUUwMi9uVVZuLS1KU3htRmtLcU0tZUFTS2h4ZjZm
TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL25VVm4tLUpTeG1Ga0txTS1lQVNLaHhmNmZMTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0ZBQy9BRkY1NjNFNjEwMTgxMUYwODBCQ0MzNDhDNEY5QUUwMi9uVVZuLS1KU3ht
RmtLcU0tZUFTS2h4ZjZmTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgM0LmHtcCWls89WCfwq72iRmAY227q2cl5YslpC7GjbIIv+av84gB
FEufEUrfqSqCmMxH5qyD4b1vtyG9KuMD+WyFB1JADLVdGagzBsCafA4ALenJQerz
XQTGkhYN/wkdxos3pzoZjLuDanxMPO6bHdgXeepKnCwvq5avMfztRpdaaj3B/Aaj
wneWjK2qtx2iFgEI88TVgTxV8RV8rOG71672L/3fAo5tJmO5TBX5xme/Ygbs8qnZ
j6D5ohbptT6LGsPgmtRqKpqJdqVHlelRLY8sA9yFN8k4f4NVmG8jjhUooA1Diq3E
wu5JHCbi31cbDhL0oMOO2gdU3wTL81RA
-----END CERTIFICATE-----
Generated at Sun Jan 18 02:57:59 2026 by rpki-client