This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
File: Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json)
Hash identifier: uLmE20m4YuaA8r2WRTBbzJTfHZUNDvIUxR4g0kpm6Vg=
Subject key identifier: 40:F7:7C:4D:A9:F2:1C:1D:6B:0A:D0:7D:3B:35:C3:EF:1C:CA:4B:84
Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
Manifest number: 01ED
Signing time: Fri 05 Dec 2025 00:53:58 +0000
Manifest this update: Fri 05 Dec 2025 00:53:58 +0000
Manifest next update: Fri 12 Dec 2025 00:53:58 +0000
Files and hashes: 1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: 2uERP7pbGPOI8Z581XHKjIPtS/UjN4UqDXZAy5OYzNs=)
2: B188CE748E7011F08CF3B91AC4F9AE02.roa (hash: z9aB/eMQsAs4dx5UPgq7iMP6FyNI1Namac/Cs27VAaA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Validity
Not Before: Dec 5 00:53:58 2025 GMT
Not After : Dec 12 00:53:58 2025 GMT
Subject: CN=69322d26-fa67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:79:8f:1d:2b:64:26:ad:28:90:f4:a8:aa:
9f:f2:5d:eb:6a:e1:53:c2:72:6e:c1:f8:33:2e:50:
a5:19:a4:c5:2e:48:9c:30:64:d2:7e:34:bf:77:78:
5b:3b:21:bd:d5:cc:64:57:00:01:a6:14:e1:35:03:
3c:ee:f7:18:75:37:af:58:d3:4d:fd:5c:cd:b6:ee:
0c:00:5a:a0:d5:ba:13:c4:aa:84:12:80:7e:f4:ac:
31:cb:cf:3c:1b:f1:8f:ce:63:c9:1a:d9:bf:88:26:
0a:b9:5f:6f:76:ce:d0:ca:2e:55:a1:25:1c:e4:21:
f8:e3:f1:17:ed:67:fc:60:5e:73:ef:2a:99:a7:a3:
70:1b:81:32:d1:82:ad:bd:eb:e6:e3:45:49:62:65:
8c:ce:ef:15:63:6e:cc:34:e2:29:18:67:46:26:8e:
8e:a3:6b:dd:9e:2c:82:35:6f:e0:1b:c7:b8:7b:34:
7b:df:0c:49:70:5e:2b:f4:42:32:c4:04:ab:91:72:
63:d0:f0:ec:7c:57:18:58:e7:f6:b9:1e:63:da:2f:
bc:e8:d8:73:86:15:35:51:59:61:db:05:a1:7c:44:
a8:82:45:7b:d9:58:a6:b8:53:51:35:2e:33:85:76:
81:97:4f:74:f2:f1:3f:8d:22:c5:5d:24:80:73:c0:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F7:7C:4D:A9:F2:1C:1D:6B:0A:D0:7D:3B:35:C3:EF:1C:CA:4B:84
X509v3 Authority Key Identifier:
keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2c:07:8d:e1:ae:4b:fe:54:af:0b:a0:c7:58:a8:26:e6:00:
86:d6:ae:41:b5:a4:d7:49:f1:c0:f6:e0:1a:94:df:e0:41:3d:
54:b1:cb:bb:5f:49:f2:92:e4:12:ca:9b:7c:18:ee:6d:7f:6f:
2f:19:26:35:aa:ac:e4:18:ad:ba:49:4c:fd:e6:0b:8b:a2:93:
08:d0:76:c9:0b:52:98:fd:69:95:d8:67:f4:16:bf:f4:86:89:
da:e5:8a:1d:b0:df:c5:ec:40:d6:b1:93:43:d0:e3:55:9d:03:
09:1e:58:b1:45:7a:be:f3:a1:14:fe:07:81:60:73:e9:f4:ec:
d0:0d:13:fd:f5:42:2c:65:d3:68:01:e0:2f:81:b7:44:c9:ef:
8c:1b:08:20:ca:cd:4f:5b:ca:77:8b:f0:3c:d5:07:c8:f6:0f:
0f:4d:6c:ad:2e:43:c4:9d:8e:91:d0:3a:fa:9d:f8:5f:19:be:
2e:d1:4f:4f:23:9a:07:38:3c:45:73:fb:dd:d7:d0:f8:df:14:
62:95:04:23:a8:9e:e5:43:7b:10:f5:32:b9:43:88:0d:47:39:
3e:21:93:47:5d:5f:07:28:15:28:42:42:3e:d2:79:99:3f:80:
55:56:ed:1e:fc:c3:31:0e:cf:8d:2d:57:94:b3:b5:54:ad:f7:
34:3d:2f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:13:48 2025 by rpki-client