This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
File: NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft (raw, json)
Hash identifier: gTiny8uHLHKzsuBQ0zx79e1okuWTGoJbX9p3/IY9Q44=
Subject key identifier: 85:4E:F0:5E:17:EA:DC:D6:B9:07:00:3D:12:8A:A4:4C:F9:5D:08:87
Authority key identifier: 34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7
Certificate issuer: /CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
Manifest number: 0160
Signing time: Fri 05 Dec 2025 02:09:53 +0000
Manifest this update: Fri 05 Dec 2025 02:09:53 +0000
Manifest next update: Fri 12 Dec 2025 02:09:52 +0000
Files and hashes: 1: NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl (hash: sstmZ3ackIvD/H5Tkl0BW0CRmX8S6EKNcSNWQQIenUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl
rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A268, serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
Validity
Not Before: Dec 5 02:09:53 2025 GMT
Not After : Dec 12 02:09:52 2025 GMT
Subject: CN=69323ef1-f0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:69:cb:4f:63:22:76:de:b8:8c:9e:c2:58:
76:9e:1c:3b:17:09:15:e1:33:44:81:e5:67:c5:bd:
d3:22:74:29:28:9a:6e:3f:53:f5:59:34:7d:f9:d1:
e1:28:c5:84:34:6c:7d:12:10:b3:a3:81:8c:5e:46:
6e:40:3a:c1:3c:b4:ee:a9:0b:2e:1b:43:71:bd:2e:
a4:94:a4:99:87:92:33:61:97:3d:34:e7:6d:e9:0f:
a1:eb:00:12:f1:ff:e0:cd:60:a2:3e:3b:2c:b3:59:
ce:4d:c2:0a:c9:c1:96:a3:04:e0:ba:97:54:75:42:
49:c0:d7:8b:ca:20:e3:56:69:5a:25:44:50:ab:e9:
b8:2e:89:f7:ca:5e:07:9e:fc:52:da:ad:30:26:b6:
06:14:59:28:01:6a:81:43:7e:7f:ed:40:b9:c0:ad:
ee:a6:56:4b:ef:17:9b:75:ef:41:07:ce:8c:1e:20:
b0:33:28:63:ca:e8:fe:ad:e3:29:d4:b7:b5:2b:68:
1b:c2:e4:66:93:19:df:cb:9e:88:0a:fe:9e:25:c1:
11:b3:11:57:28:08:1a:2a:53:69:3b:3b:5f:3c:7b:
40:e9:68:c8:94:a9:a3:2e:a5:7f:22:ec:52:e9:1a:
09:fa:df:2f:76:11:bc:cf:ab:68:45:9e:f8:9d:46:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4E:F0:5E:17:EA:DC:D6:B9:07:00:3D:12:8A:A4:4C:F9:5D:08:87
X509v3 Authority Key Identifier:
keyid:34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:e9:6c:a5:4a:64:20:ab:e0:d1:83:17:3a:24:79:31:98:71:
71:80:29:cb:22:da:53:57:48:16:73:73:53:74:7b:1d:dc:05:
f1:bd:3e:83:1b:bb:af:44:9d:60:5c:f3:51:18:48:7f:e9:27:
e0:ae:44:a4:d6:26:d7:14:ab:d8:89:06:f1:bc:ef:45:5d:c9:
44:a5:3c:ba:33:90:bd:e3:24:3a:33:58:49:51:58:03:8a:7a:
85:95:ad:fb:6a:98:12:31:50:24:57:e7:90:ef:02:7b:64:51:
03:79:ac:f3:11:2b:ad:b5:75:49:d1:f8:07:1c:16:1c:2b:ff:
d5:aa:7a:a7:ed:0b:c3:a3:0e:8b:47:6b:35:f6:85:1a:99:d0:
dc:3d:00:26:36:62:4d:8f:1c:97:20:cd:1f:a3:2d:34:14:84:
9c:da:da:bf:2d:da:eb:4a:03:e8:08:9b:89:4d:6a:1f:d2:36:
63:12:71:3e:a7:9f:64:3c:ed:35:cf:2c:f0:b2:da:53:2c:96:
e5:f9:91:1f:3a:47:e6:ef:93:ef:94:67:bd:1f:9e:de:48:4d:
5f:dd:80:66:4b:7c:98:b2:99:aa:ef:e4:05:60:46:e4:30:63:
3e:15:5a:e2:5f:54:5f:e7:94:8d:a8:15:dc:54:18:82:d1:de:
0d:15:94:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:35 2025 by rpki-client