This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
File: NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft (raw, json)
Hash identifier: h5Pykn6+nM8Dq3FSA1sleV3csbXGy9R0uVOgxvHdtBc=
Subject key identifier: E9:10:9B:37:6E:DB:CB:E5:57:96:6E:C5:20:43:FA:A3:B1:E7:25:35
Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
Certificate issuer: /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
Certificate serial: 05E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
Manifest number: 05DC
Signing time: Sat 20 Dec 2025 22:19:14 +0000
Manifest this update: Sat 20 Dec 2025 22:19:14 +0000
Manifest next update: Sat 27 Dec 2025 22:19:14 +0000
Files and hashes: 1: NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl (hash: DH+5MHkKBGvfUPI04LDTMAou6UQlzETpyjhD0yGscLE=)
2: E50353FEDFED11EBA155C712C4F9AE02.roa (hash: IIVlt7G/+5szlJKKwOxccwy55c5N2K1rqxgqpnj4uFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl
rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 22:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1506 (0x5e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916714C, serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
Validity
Not Before: Dec 20 22:19:14 2025 GMT
Not After : Dec 27 22:19:14 2025 GMT
Subject: CN=694720e2-3ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:7e:b8:ed:84:47:2b:73:e1:d9:71:68:c9:
91:6c:e3:a7:9d:e5:49:c6:61:87:91:d4:2a:57:95:
c7:84:6a:2e:e4:27:a7:d4:10:05:90:5d:96:02:14:
29:b7:71:e9:6c:b0:8e:81:5a:2c:f6:a1:d2:89:92:
2d:df:89:1d:0e:98:4b:ca:81:7a:36:f0:a4:92:eb:
3a:96:22:a2:d8:da:35:94:e1:d1:27:0d:3b:41:1d:
ac:8d:2b:58:00:c7:a3:5e:64:d7:8c:4f:15:78:04:
08:cb:26:38:0d:5f:7b:80:87:e2:2f:29:e1:81:96:
4e:21:27:f4:b6:ef:54:4f:2d:e9:f5:d0:a5:a8:55:
74:99:4a:ed:c8:bf:eb:e2:ad:3b:41:5b:49:6c:99:
da:76:9b:45:06:c0:43:6e:e7:f5:57:05:fd:fb:26:
97:f5:bb:1d:a4:23:ac:cf:93:bc:6c:2c:1c:a7:10:
22:10:76:a6:11:c0:2f:45:02:54:ad:a4:8e:dd:d3:
29:29:29:31:02:5c:b7:d3:55:2a:2b:61:03:7c:36:
59:db:24:54:e8:7e:b9:b9:65:7c:4a:5b:ef:48:43:
75:86:14:c2:e9:46:49:75:03:5f:0f:4c:89:97:10:
b5:54:b1:07:7a:f9:c1:fb:f8:bd:23:5d:7e:38:be:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:10:9B:37:6E:DB:CB:E5:57:96:6E:C5:20:43:FA:A3:B1:E7:25:35
X509v3 Authority Key Identifier:
keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:b7:a2:8c:d6:b5:81:b9:aa:3e:fc:1b:d7:b1:a2:d6:d4:7b:
3d:8c:94:ba:d8:8a:53:e3:61:0c:d0:cc:2c:39:1c:b9:97:3c:
b0:03:e8:fb:9b:fc:79:0e:05:1c:4a:75:ea:eb:c2:d0:5c:f3:
2b:95:87:e9:87:e6:dd:17:5f:60:42:55:0e:b8:c0:01:79:9c:
ac:82:59:10:4e:38:fd:4e:07:2a:ab:92:c1:6e:a1:cf:07:7c:
6a:09:53:62:a3:2f:e9:50:02:6a:93:7f:59:a4:ed:37:61:a1:
5a:d8:70:68:49:ff:6a:ab:3b:d8:16:99:8a:b2:07:fb:6d:54:
89:2c:21:65:47:b7:94:4e:22:5a:f9:3f:03:14:91:e4:5e:3b:
28:24:0e:3f:75:3c:cd:0a:5c:8a:84:28:bb:0f:d5:0e:9c:de:
9c:0a:42:57:fe:0a:99:3d:38:da:5c:0b:4d:c4:11:56:97:98:
b1:52:b5:83:90:6d:fd:7c:6e:9e:c7:f3:3e:ca:80:33:b2:47:
ed:53:4a:3e:04:20:be:02:50:8b:ee:b1:61:02:58:1b:c4:ac:
16:0b:e1:d0:63:53:04:57:61:6f:52:44:1d:4f:29:05:f9:87:
77:db:41:5e:a0:30:ca:2a:92:52:80:2d:88:b2:ee:51:2d:72:
41:12:a4:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcxNEMxMTAvBgNVBAUTKDM1M0U0ODg3NTM3NkM2REI5N0UzNDI2MzY1Q0M3RjE4
Qzk0NTY4NzcwHhcNMjUxMjIwMjIxOTE0WhcNMjUxMjI3MjIxOTE0WjAYMRYwFAYD
VQQDDA02OTQ3MjBlMi0zZGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwFB+uO2ERytz4dlxaMmRbOOnneVJxmGHkdQqV5XHhGou5Cen1BAFkF2WAhQp
t3HpbLCOgVos9qHSiZIt34kdDphLyoF6NvCkkus6liKi2No1lOHRJw07QR2sjStY
AMejXmTXjE8VeAQIyyY4DV97gIfiLynhgZZOISf0tu9UTy3p9dClqFV0mUrtyL/r
4q07QVtJbJnadptFBsBDbuf1VwX9+yaX9bsdpCOsz5O8bCwcpxAiEHamEcAvRQJU
raSO3dMpKSkxAly301UqK2EDfDZZ2yRU6H65uWV8SlvvSEN1hhTC6UZJdQNfD0yJ
lxC1VLEHevnB+/i9I11+OL4vDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkQmzdu
28vlV5ZuxSBD+qOx5yU1MB8GA1UdIwQYMBaAFDU+SIdTdsbbl+NCY2XMfxjJRWh3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzE0Qy8zRkVENjYwOERG
RUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0dVg0MEpqWmN4X0dNbEZh
SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05UNUloMU4yeHR1WDQwSmpaY3hfR01sRmFIYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzE0Qy8zRkVENjYwOERGRUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0
dVg0MEpqWmN4X0dNbEZhSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgt6KM1rWBuao+/BvXsaLW1Hs9jJS62IpT42EM0MwsORy5lzywA+j7
m/x5DgUcSnXq68LQXPMrlYfph+bdF19gQlUOuMABeZysglkQTjj9Tgcqq5LBbqHP
B3xqCVNioy/pUAJqk39ZpO03YaFa2HBoSf9qqzvYFpmKsgf7bVSJLCFlR7eUTiJa
+T8DFJHkXjsoJA4/dTzNClyKhCi7D9UOnN6cCkJX/gqZPTjaXAtNxBFWl5ixUrWD
kG39fG6ex/M+yoAzskftU0o+BCC+AlCL7rFhAlgbxKwWC+HQY1MEV2FvUkQdTykF
+Yd320FeoDDKKpJSgC2Isu5RLXJBEqT8
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:53:32 2025 by rpki-client