This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
File: NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json)
Hash identifier: LmoQ7vLrpyB3ccebxlpLFtNidirAB7nip2udSw3I4ow=
Subject key identifier: 58:5F:82:C2:EF:1A:CA:E3:25:B2:18:08:A9:7D:E2:D8:A9:A4:0B:E4
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Certificate issuer: /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial: 07D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
Manifest number: 0D08
Signing time: Sat 06 Dec 2025 17:34:08 +0000
Manifest this update: Sat 06 Dec 2025 17:34:07 +0000
Manifest next update: Sat 13 Dec 2025 17:34:07 +0000
Files and hashes: 1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: WTwmo8+My621kHEQ6kSBKOleSNid5UUE/z7YDWBr8fk=)
2: 13D5D992979E11F08E996475C4F9AE02.roa (hash: uqXdul36EDPRkEmn7F3Pi5w/fW3yUykVpbjNAjajNRk=)
3: 5573F3D8979F11F0BD27D51AC4F9AE02.roa (hash: jBmeI5y0SVJB4aMWbKmtmiFdyrbiBVSMzrKP/rJrmhI=)
4: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: lOrA6k7sYmhjZNB1ZlbvSFLY4z9Dna+Fs7CLS+wxvaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2003 (0x7d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Validity
Not Before: Dec 6 17:34:07 2025 GMT
Not After : Dec 13 17:34:07 2025 GMT
Subject: CN=6934690f-ef45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:1f:5c:c2:b2:d2:5f:47:f4:90:1a:c3:45:
9d:89:43:b4:4b:04:80:8d:8a:35:d3:b8:36:ba:a2:
15:62:28:e1:3f:0b:56:76:27:76:3f:23:e3:89:c7:
c3:99:93:2e:cc:bf:74:19:86:5b:51:fc:c7:cf:92:
92:90:03:93:eb:b7:be:39:34:d7:f0:5f:42:ab:0d:
48:ee:74:20:95:24:d8:2d:42:53:a2:71:77:d0:da:
a3:8f:d4:97:b7:a9:f6:85:6b:32:43:d2:17:35:63:
e4:9d:4f:f1:e1:ae:e9:5f:9f:10:87:59:58:e6:d2:
f6:3d:22:b7:c1:25:71:1b:f2:8c:39:3f:69:ab:5a:
26:7d:e2:ce:be:e8:43:e6:16:fb:e9:b0:0e:be:65:
4f:b3:f6:20:9a:5f:dd:26:b5:b8:c4:d2:9b:5c:a2:
7a:9b:38:a5:cc:65:39:50:c1:d1:b9:30:c5:7c:40:
f5:6c:f1:2e:3b:6a:5f:16:a9:71:a8:83:97:39:8f:
93:c7:b0:04:cd:bb:11:e1:35:c8:06:9d:f0:e3:8e:
71:44:79:33:46:54:b9:70:40:78:cb:57:57:c8:a7:
b2:41:4d:e2:4f:26:0d:d1:3b:d1:b4:a8:25:38:e1:
7c:bd:3a:0c:1e:f9:46:8a:3b:dd:6a:35:f6:92:af:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5F:82:C2:EF:1A:CA:E3:25:B2:18:08:A9:7D:E2:D8:A9:A4:0B:E4
X509v3 Authority Key Identifier:
keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:54:42:3e:16:68:05:d0:40:30:0a:d6:f6:3f:54:92:b4:a3:
66:b2:a0:90:c4:0d:03:d7:4c:52:24:1b:d1:e1:25:41:bf:b1:
e3:03:61:3c:d6:67:bc:b7:54:2b:11:42:0b:e6:65:73:84:89:
92:12:e5:0a:fe:07:70:6d:26:b1:d5:41:0e:1d:a2:d1:05:d4:
9f:fa:d8:80:37:a9:d6:ad:3a:48:eb:4f:d2:71:21:ba:d4:5c:
49:a3:45:eb:08:a6:2a:53:85:da:06:2c:52:ec:06:2a:fb:a7:
42:9f:27:a7:51:4d:62:20:61:b6:78:ad:01:25:9a:ce:f0:50:
c5:9b:4f:2b:55:9a:61:4a:8c:47:48:7f:0b:6e:10:86:23:92:
f4:4b:68:ff:93:a3:0e:0b:1b:31:3f:7e:6f:c5:95:4b:f2:3b:
db:a6:bd:5e:e8:b7:19:24:ff:73:ff:bd:24:df:96:ff:50:98:
ba:57:2d:3b:a4:af:77:83:53:7d:81:61:35:ab:92:ec:6a:87:
92:2b:57:31:80:bd:04:38:d5:0c:92:96:0d:db:a8:b5:cf:3e:
2c:02:f7:8f:7d:52:1a:ba:27:52:fa:41:81:c3:99:05:55:91:
03:a4:fc:e4:09:23:09:e0:4b:3a:2e:3b:9e:dd:4b:27:a3:5e:
c2:2d:be:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:17:16 2025 by rpki-client