This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
File: NE-0maajfSYymrfV_1JiUQmOXfI.mft (raw, json)
Hash identifier: 9ujJT+uGueRDsiHMgXi34uADlmQMEmVWUm1r3gPq7hQ=
Subject key identifier: EA:72:AA:F1:8D:FB:36:45:E2:03:32:05:88:CB:E9:DF:89:C3:66:B7
Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2
Certificate issuer: /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
Certificate serial: 1084
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
Manifest number: 1075
Signing time: Sat 06 Dec 2025 16:52:46 +0000
Manifest this update: Sat 06 Dec 2025 16:52:45 +0000
Manifest next update: Sat 13 Dec 2025 16:52:45 +0000
Files and hashes: 1: NE-0maajfSYymrfV_1JiUQmOXfI.crl (hash: XcCsKXFTDdiYwrfMfbeXuC4cVOMlsaPCgxv+MaJi8Oc=)
2: 995AA100551611E9BDD3CB66C4F9AE02.roa (hash: vKUrCad/wDAN8DcFXzUyprhlGMmsi4Oqt3ZrPDf4rA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl
rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4228 (0x1084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912190F, serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
Validity
Not Before: Dec 6 16:52:45 2025 GMT
Not After : Dec 13 16:52:45 2025 GMT
Subject: CN=69345f5e-ac56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:45:13:44:ad:3e:b4:07:bf:21:2d:d5:21:2c:
4a:20:a7:9b:59:87:08:31:8a:22:ff:f8:92:ad:92:
1e:2a:df:fe:fa:90:de:5e:dd:53:0c:ff:ce:2b:3a:
66:5f:f4:47:31:33:f3:8b:1d:ef:8b:30:e7:77:55:
c9:b3:42:22:d3:09:57:fe:72:a6:42:4d:be:07:0c:
40:6d:e9:79:88:d8:36:4d:45:c0:de:46:c7:2c:46:
d0:9d:bf:38:fe:8c:1d:8c:52:20:41:ec:d3:44:ba:
1a:41:81:06:d2:33:0b:21:23:b0:5a:4a:e5:1a:94:
06:f1:b9:65:bc:89:2b:99:79:0a:ac:94:28:51:6b:
df:f6:20:19:57:54:2a:97:9c:05:6a:e7:09:97:86:
1a:28:a6:cf:f2:6f:f3:94:32:9f:9d:1d:15:16:6d:
24:f8:93:aa:7f:56:51:bb:a6:84:0e:85:8b:9c:cd:
a7:e6:df:be:1c:46:29:04:fe:6a:c3:77:8e:c6:df:
f0:71:53:bc:35:2f:9e:40:33:fa:f4:28:97:8d:27:
e7:04:29:7e:fe:54:d2:85:ec:2d:18:1b:3a:33:1b:
20:91:e6:b5:b0:c2:be:ad:13:81:19:f6:10:8b:c3:
b8:57:bf:72:b9:35:45:5a:bf:18:2c:94:02:29:5f:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:72:AA:F1:8D:FB:36:45:E2:03:32:05:88:CB:E9:DF:89:C3:66:B7
X509v3 Authority Key Identifier:
keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cc:f8:e6:03:e4:6a:4d:21:bb:ef:04:8b:17:75:9d:e7:61:
50:64:d7:46:c4:80:e5:6b:4e:61:65:14:34:41:4b:58:af:ba:
cc:af:8b:ff:b2:b3:c1:10:c3:0d:e0:e7:12:70:96:41:e8:78:
ca:c3:7c:be:c8:91:db:33:7e:15:cb:7a:3a:5b:78:90:e1:43:
f6:40:63:3d:b0:2a:d8:cd:c8:b4:aa:5d:4f:b6:ac:61:20:34:
45:ca:b4:0d:4c:e5:7e:74:01:f8:22:e4:40:6e:ec:af:0b:ed:
a8:e1:76:13:b3:b1:09:75:20:1d:85:bf:dc:59:1e:73:2a:ba:
0f:de:78:70:dd:91:18:b0:42:1e:c3:34:32:b2:1b:a3:89:b0:
d0:4b:7d:ee:a4:c1:68:87:2f:49:6c:23:42:71:e0:17:80:1f:
77:a2:22:3d:d2:8e:21:3f:67:b9:98:51:c9:bc:ed:b5:b9:c3:
66:9f:72:f2:6a:fd:97:09:7b:57:c2:b3:05:44:fa:87:1e:7b:
f0:30:f7:cf:77:2f:8d:58:a5:48:ad:05:75:12:1a:5c:e5:76:
76:44:7e:4e:8f:61:46:82:7a:7d:3d:1d:f3:54:2c:69:4c:61:
8e:a1:01:4a:f7:e9:87:d3:6a:b9:9d:7c:30:f8:f8:51:3e:ac:
a5:3e:da:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:05:09 2025 by rpki-client