This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
File: NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json)
Hash identifier: gA829obWnwjWGbQ4KkrwPkwH1pLlc4JWbDBetXcZ/YI=
Subject key identifier: 14:00:E2:7E:1C:CF:22:5C:3C:D0:DB:39:F7:B9:63:5E:4E:D9:FD:6E
Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7
Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7
Certificate serial: 0CCA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
Manifest number: 0CAD
Signing time: Sat 06 Dec 2025 17:46:16 +0000
Manifest this update: Sat 06 Dec 2025 17:46:15 +0000
Manifest next update: Sat 13 Dec 2025 17:46:15 +0000
Files and hashes: 1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: UXjFXuPn+wRxPiHneoIdCjb9BSiH7BANy0JaTijywIE=)
2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: EaF6+NcOizXvwczdPzpRgDNyRvgLSS+QrNc16c+K0fk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl
rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3274 (0xcca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7
Validity
Not Before: Dec 6 17:46:15 2025 GMT
Not After : Dec 13 17:46:15 2025 GMT
Subject: CN=69346be7-3d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1a:2c:9f:6d:98:87:3c:f0:5d:f3:bd:b5:a1:
ca:ce:8f:95:ab:7d:77:b2:76:f4:4d:00:f9:41:d9:
59:d8:fc:a2:03:66:bc:15:da:e9:67:e3:74:a7:21:
6b:ab:d4:60:d9:be:e5:4e:d6:c9:7e:dd:36:f9:e1:
85:72:a6:54:91:dc:8a:b4:45:0d:5e:94:4f:2b:f2:
30:91:4e:10:5e:e7:25:3e:8d:2d:c5:0f:71:6b:90:
a3:bf:65:9a:00:70:be:c3:d2:c8:d0:79:04:7a:f2:
97:d2:99:6e:b9:c1:75:65:fa:98:54:a0:b9:f2:e6:
6e:9f:fe:ae:3c:9d:1b:75:74:a0:6a:65:dc:f7:6a:
15:a3:88:b2:49:63:a3:f9:20:bf:99:16:74:2d:9b:
89:28:83:df:4d:54:25:b8:88:2d:be:a8:ec:4e:39:
69:26:94:59:06:5f:99:90:94:77:81:ec:55:e9:4d:
e3:e6:f9:0d:46:2a:a0:04:df:bb:ee:83:16:a7:d3:
0f:3e:fd:fb:98:d0:62:25:b5:51:9b:3c:b9:5f:b1:
f2:2a:44:6e:1f:ce:e5:1f:b1:a9:c2:09:bf:3e:04:
c3:93:0d:18:6e:3e:9d:5e:48:33:c6:40:81:78:e1:
f7:ae:d3:f3:c4:0e:c8:4a:b9:05:6c:c1:cd:df:7a:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:00:E2:7E:1C:CF:22:5C:3C:D0:DB:39:F7:B9:63:5E:4E:D9:FD:6E
X509v3 Authority Key Identifier:
keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d5:23:ed:91:aa:fe:66:07:ab:e1:b2:fb:5a:8b:0d:a8:99:
5c:ee:44:f1:2d:35:26:72:7c:c5:07:2a:9d:b8:72:07:96:9b:
26:47:5e:20:81:6e:2c:b7:1a:d1:7f:42:6c:b7:94:7b:2e:29:
26:5a:00:2e:69:0c:7b:bc:27:12:1a:32:41:c7:2d:ea:e4:18:
ae:85:58:92:9e:13:53:c0:41:3f:48:62:7e:85:45:4b:64:49:
51:f0:32:72:f6:16:6d:8b:03:04:55:50:9a:6e:18:78:2b:69:
46:e8:c9:0d:c1:d5:f2:63:9c:7b:3a:27:c6:b7:a9:af:7b:21:
bb:9b:f4:19:59:b0:e3:58:d6:9e:c9:df:34:76:66:d9:7a:c8:
45:44:79:0c:05:b6:9b:37:2a:1f:ec:d2:a7:9f:3f:4d:84:d4:
a2:a6:6d:64:dd:61:72:ae:cd:ba:5d:b1:83:b6:f8:8f:d7:67:
5e:12:2b:db:a0:98:ce:f4:ba:57:5c:1c:04:7e:a8:de:28:79:
94:a9:2b:45:ef:ce:16:a3:4f:72:a9:d1:63:19:1a:78:57:98:
07:36:81:ba:fc:9c:a1:b4:c0:a7:4d:92:14:4e:c3:ef:bf:4f:
e5:10:db:02:b4:7f:36:3e:4d:ca:ad:08:5e:88:6d:aa:b8:3e:
19:77:73:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:30:02 2025 by rpki-client