This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
File: njXlPupre8PsKa87NiDpplTAtqw.mft (raw, json)
Hash identifier: UhSNAlD5MyQDAM+WYQQA9Vn92HgeleRDpILqnqnMbfs=
Subject key identifier: E4:E7:38:4F:52:74:E4:BB:28:AD:2F:E5:0F:0D:2C:89:67:95:63:BC
Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC
Certificate issuer: /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
Certificate serial: 05AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
Manifest number: 05A7
Signing time: Thu 04 Dec 2025 21:48:38 +0000
Manifest this update: Thu 04 Dec 2025 21:48:37 +0000
Manifest next update: Thu 11 Dec 2025 21:48:37 +0000
Files and hashes: 1: njXlPupre8PsKa87NiDpplTAtqw.crl (hash: jwaJQL9VYzmt7ONgfv3xgD2nj4JyJiU+QAMPMEzVML4=)
2: E11FA920F11A11EB9F005358C4F9AE02.roa (hash: CdrfPMZy52he8bpwd/sQIj17yAvkU7L0EqcCRVjCrHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl
rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1452 (0x5ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91177A8, serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
Validity
Not Before: Dec 4 21:48:37 2025 GMT
Not After : Dec 11 21:48:37 2025 GMT
Subject: CN=693201b5-853c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:86:81:fb:12:f6:62:c4:7a:1c:d3:de:e7:
ea:f1:5b:c4:d5:45:49:d8:93:19:01:2d:eb:05:01:
c9:5b:b7:29:30:8f:b0:6d:4f:f7:c2:34:1d:fc:bf:
97:d1:0c:bc:19:f3:39:e5:5f:4b:e2:05:53:79:88:
49:61:2d:ae:5c:7b:4a:28:bf:c9:9d:6c:d6:85:47:
7d:4e:f1:5c:68:b9:8e:31:0b:b8:6a:19:ee:fa:8a:
df:96:f8:55:f3:d4:b6:f2:af:e2:8d:6a:25:70:32:
27:74:e6:af:91:cd:94:d5:c4:03:04:73:f4:9c:ce:
65:61:70:99:05:73:2d:cf:a5:11:41:c2:1d:c3:4f:
9b:54:b5:5b:99:c3:6a:e5:27:1e:97:dc:b4:69:ae:
aa:9b:78:b3:fa:cd:3a:50:d7:39:b6:47:6d:8e:4d:
0a:4d:50:23:a8:d3:5c:c2:c8:b2:a8:a2:0f:13:b0:
bc:a7:5d:b7:ee:22:ef:94:59:ba:83:46:a3:98:9b:
35:79:a8:8d:06:31:af:e8:dd:76:ec:36:06:e5:fa:
97:1b:8d:40:ac:08:de:91:b9:22:14:97:b2:9a:cd:
63:df:29:24:1f:ad:eb:c7:85:43:8c:22:da:ab:2b:
e4:35:63:20:15:a5:b7:19:0c:79:b1:c2:bc:25:93:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E7:38:4F:52:74:E4:BB:28:AD:2F:E5:0F:0D:2C:89:67:95:63:BC
X509v3 Authority Key Identifier:
keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9d:f2:97:02:b8:dd:7a:c0:a9:00:a0:60:90:dd:62:4d:ed:
c7:dd:b2:5a:cc:86:5c:20:93:4a:79:cb:3f:03:a2:30:dc:18:
6d:a0:92:0c:ad:22:0d:d4:38:3d:46:b5:2a:ed:79:0b:56:5a:
75:21:d0:95:5d:61:22:c8:55:8b:a0:42:f4:c1:98:3d:b6:88:
2c:5d:64:cc:23:6a:30:58:17:1c:c6:66:3f:cd:31:db:19:2f:
18:a7:79:11:27:39:dc:f4:0f:44:69:d3:21:22:65:dd:c0:9e:
3d:cd:88:e1:8d:d4:03:29:0b:73:4f:97:c0:ab:74:ed:ba:41:
a6:5f:c2:77:48:07:80:4f:16:b7:56:f9:51:b5:e0:b1:f1:71:
9e:94:58:cf:7b:a4:e3:ae:fb:8c:e7:9e:fa:2f:19:35:7a:37:
d2:a2:29:1d:13:32:88:1d:65:5a:fa:97:78:d7:78:96:e2:dd:
2d:18:aa:8a:16:db:a1:01:0a:c9:f1:62:f3:a1:70:0a:98:3f:
cb:64:6f:c9:ff:a4:d7:93:b6:db:82:1e:32:50:ee:62:d4:b0:
67:e4:f6:5c:bc:2c:f4:9e:47:b1:49:e7:00:69:eb:fc:aa:08:
8e:e4:32:56:2b:0a:5e:6d:34:b1:6b:11:3b:9f:0e:68:f8:64:
3d:87:b9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:49:11 2025 by rpki-client