This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json)
Hash identifier: TRqonCeWWZulLTYRnnQDHbyoCm1re2W+apdOP8uSccI=
Subject key identifier: 50:81:23:00:59:83:27:4F:01:3E:D0:11:80:EA:64:6E:87:3A:FB:9C
Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Certificate serial: 10B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
Manifest number: 10A7
Signing time: Sat 06 Dec 2025 16:50:42 +0000
Manifest this update: Sat 06 Dec 2025 16:50:41 +0000
Manifest next update: Sat 13 Dec 2025 16:50:41 +0000
Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: 4xampTI9uW/h5PUtm4P2LYIe7lePu5IixToKsm3PZN8=)
2: 566988C8717411E9AF629E4BC4F9AE02.roa (hash: EtmvbN1xVVE7PUjHrIh1I7up8NoBR/klrPWqoCS0Bq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4272 (0x10b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Validity
Not Before: Dec 6 16:50:41 2025 GMT
Not After : Dec 13 16:50:41 2025 GMT
Subject: CN=69345ee1-5b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:7f:db:34:40:6e:1a:ed:fe:29:35:4b:2b:
d1:7e:7c:8a:24:14:35:13:c6:26:02:e7:f5:3e:bb:
6b:12:84:33:f8:01:3b:8d:87:42:b2:33:d3:f6:cb:
dc:86:b8:dd:a9:d8:30:cd:1c:c5:6a:0d:e5:12:90:
9c:a0:6e:a2:1c:1e:5f:8d:7e:18:06:5d:7b:c6:92:
54:de:56:64:33:dc:ab:0b:67:61:40:1a:1a:69:72:
56:37:e4:4f:e3:96:9c:63:4e:d2:09:7b:c4:8e:b2:
87:58:7f:21:02:fa:d8:7a:99:ec:af:7a:41:71:89:
21:f1:a4:66:d2:a3:bd:d3:d7:8b:d5:a1:3c:d6:78:
77:4c:44:fb:1b:32:d1:30:ea:cd:a1:fd:5c:6c:a3:
c1:7c:6c:14:d2:ed:f6:de:03:1d:30:7d:5d:7a:0b:
c1:0c:71:49:6d:4b:87:c2:c1:21:7b:a8:ec:7b:bb:
e2:85:fb:f6:a7:22:8c:47:49:a6:27:8b:5b:70:c1:
a6:07:8c:e1:65:10:75:82:fa:83:f5:89:66:ab:fe:
86:f3:41:67:15:25:24:87:53:a4:26:cc:c1:34:5d:
8c:43:62:43:c1:5b:f7:80:ad:ea:3d:0e:91:b5:73:
1c:f0:ad:e7:79:29:9d:d8:3d:c0:6d:27:c6:f1:f0:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:81:23:00:59:83:27:4F:01:3E:D0:11:80:EA:64:6E:87:3A:FB:9C
X509v3 Authority Key Identifier:
keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:69:39:3f:39:0f:08:81:61:b2:0c:b5:c9:62:b3:91:ff:d6:
a7:51:d3:c0:40:8f:9d:17:7f:7e:1a:a7:b9:eb:f7:fd:74:13:
77:1f:c5:81:0a:02:75:da:0f:59:d0:6c:9c:1e:a7:c7:b6:5c:
ca:c9:f3:f1:04:4c:87:9c:3e:e1:8c:30:96:ab:b3:c9:57:24:
42:52:df:f6:d7:0e:dc:16:b1:da:1d:f3:52:66:dd:0a:6f:1d:
6c:4d:41:32:c9:0a:26:91:8d:21:99:03:d1:29:8d:04:94:16:
03:08:e9:aa:5f:40:e5:ec:5d:3b:20:5a:af:87:84:9a:78:3a:
c3:2a:2e:46:e2:3d:36:71:ab:94:5b:5d:b8:82:7d:d6:81:49:
d4:6e:48:e2:e8:7e:86:53:af:92:26:b3:81:d0:5a:76:e2:40:
0e:44:d7:34:87:cc:6d:a4:61:0b:1b:b9:a0:66:e9:4d:50:e9:
6f:12:69:61:0d:d3:e9:63:99:f8:b9:17:ac:9f:8a:e2:e6:5e:
dc:4d:8a:08:c2:4a:87:e5:3f:e4:f7:a4:0c:2c:8e:d8:ef:27:
44:67:1a:32:1e:b4:c9:10:e4:0c:df:4e:04:bb:32:3f:7d:a1:
09:aa:e6:69:6a:88:f7:fb:06:05:d7:36:01:54:92:bc:5d:1a:
7d:e3:a9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:17:22 2025 by rpki-client