This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
File: nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json)
Hash identifier: 04yJNIFXZ/XK4l+siMKD+EgK8HoVnnuZDkagDwS+0tA=
Subject key identifier: 76:D4:99:7C:EA:A9:6E:55:88:BE:82:57:21:E8:60:13:BE:29:EA:C2
Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
Certificate issuer: /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
Manifest number: 0192
Signing time: Fri 05 Dec 2025 02:11:53 +0000
Manifest this update: Fri 05 Dec 2025 02:11:52 +0000
Manifest next update: Fri 12 Dec 2025 02:11:52 +0000
Files and hashes: 1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: Vduf8ZHISXEGJ/k2rAdL1ymfdCWn/nHXikeBvEW6cjc=)
2: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: oJfjnEnY0nHKhCrsxV6CXdWPVQs+ko5ofc6FaTj9TkA=)
3: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: nZEoGWTh+zL/qMXIKNmEKalrSA9YoN/9yQROvPE4NtI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl
rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91810E3, serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
Validity
Not Before: Dec 5 02:11:52 2025 GMT
Not After : Dec 12 02:11:52 2025 GMT
Subject: CN=69323f68-cedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:74:a3:b7:96:46:78:5e:4a:de:d1:86:c5:eb:
e6:0e:37:3b:d6:02:91:98:1a:f6:84:fb:8f:67:dc:
66:74:3e:11:b1:d2:27:f7:35:87:17:d3:d8:11:6b:
64:b6:ca:04:f1:6e:53:ad:e1:81:92:2d:4e:aa:2d:
b0:eb:fb:6a:84:d7:b3:a3:91:67:8b:21:3c:16:7e:
37:ff:e3:ad:d4:e9:23:fc:20:a0:10:29:55:dc:3c:
88:05:7a:ec:21:05:fe:48:ea:9b:70:6b:c1:81:d3:
fc:b4:ad:5a:35:12:55:16:ff:ca:88:f9:aa:ab:d8:
0a:03:fb:a1:d5:e7:67:94:c7:ed:57:f7:31:dd:a5:
ef:7b:99:97:c9:8f:4f:35:64:1d:91:6e:4d:3c:74:
f1:86:12:17:10:2d:84:1e:c3:7f:e9:3d:07:77:0f:
a0:b6:a7:4a:2b:43:64:2a:7c:ed:ae:09:4f:8c:d9:
a1:2e:a8:c7:a5:fa:cd:a5:51:a3:0d:89:f4:e7:50:
74:f5:ee:3e:4c:a7:0b:e0:b4:f0:77:c4:63:5d:4e:
61:5c:e6:22:ba:4a:e5:76:5c:96:b9:76:3f:bf:79:
07:cc:68:a1:81:02:25:da:39:11:74:aa:06:c9:96:
60:d9:3d:da:45:c0:63:b5:e8:e5:31:ec:9b:fd:fb:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D4:99:7C:EA:A9:6E:55:88:BE:82:57:21:E8:60:13:BE:29:EA:C2
X509v3 Authority Key Identifier:
keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:02:8f:00:86:15:c5:94:a0:cd:40:e6:43:77:e1:6f:29:fc:
18:1f:9d:5a:ea:c3:31:f6:51:84:55:b0:54:2f:53:ee:56:b1:
3f:cd:ee:95:00:f3:3e:77:31:96:4b:2f:01:0e:00:7d:66:d1:
8b:45:ee:3c:db:4c:a9:1c:8a:5f:9e:dc:c1:ad:c1:65:16:9d:
22:89:95:dc:98:fd:9b:91:88:8c:36:d7:1a:e3:69:d3:6d:34:
17:93:b8:df:f4:1c:aa:48:ac:42:a5:28:41:be:fb:6c:6e:fc:
4a:06:08:d5:e8:0d:10:21:55:20:5d:3d:80:d7:2c:03:ed:86:
ac:6c:6b:34:25:e5:1e:fc:d1:d2:b4:de:f3:6b:cd:99:70:06:
28:2b:42:74:57:b0:5d:dc:e9:78:fc:a7:4d:da:84:74:4e:9d:
f3:ef:8d:4f:7f:1f:71:64:47:cb:cf:0a:aa:74:1c:14:78:40:
f3:54:59:dc:c9:9a:06:55:af:9f:1f:54:00:b1:d8:c3:ea:ae:
fc:8e:66:a6:45:cb:82:5b:1c:ef:d4:1e:a7:45:26:a5:42:0b:
b6:a5:9d:ca:04:81:80:a5:b7:4e:1d:6c:06:85:c3:4a:1c:6f:
f6:45:35:dc:6d:1d:23:3f:83:64:87:63:00:59:e3:3d:e8:9c:
bb:62:e0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:14:45 2025 by rpki-client