This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
File: nLnwNCujTijkVM2SOEk0ZgWxxjI.mft (raw, json)
Hash identifier: TQuZf++qWQ5q3QvKoVH4zAdqopS0iJ9dmjeBsTfjwdc=
Subject key identifier: A8:41:E1:C4:1A:FC:39:AD:A3:BD:7D:00:03:E4:9C:86:8F:29:0A:4F
Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
Certificate issuer: /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Certificate serial: 05AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
Manifest number: 059E
Signing time: Thu 04 Dec 2025 21:50:48 +0000
Manifest this update: Thu 04 Dec 2025 21:50:47 +0000
Manifest next update: Thu 11 Dec 2025 21:50:47 +0000
Files and hashes: 1: nLnwNCujTijkVM2SOEk0ZgWxxjI.crl (hash: /Xd5ve0Ml5TB4Dxiga1nwajDHaqHnKTROp6cNGFuXVY=)
2: 77465F12874511EEBEA58225C4F9AE02.roa (hash: xh9UKJYFp+YhsYj95yxNw0UlkYprDVOg6UWQXH5rOS0=)
3: A4331EC89E4911EEA1F8471AC4F9AE02.roa (hash: q68S8qeaTqWEZ5l+4qz/s/O62R3KsNh3wb76imnXzwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:50:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1450 (0x5aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919899D, serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Validity
Not Before: Dec 4 21:50:47 2025 GMT
Not After : Dec 11 21:50:47 2025 GMT
Subject: CN=69320238-6a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:66:22:0a:5b:5b:c1:d2:ec:65:47:f9:b3:
aa:12:be:7c:3a:f4:39:59:8f:3b:12:88:88:34:fd:
20:80:2f:e0:25:09:e8:5d:98:0d:4a:b2:39:9a:7d:
12:17:38:dd:50:2a:bb:52:42:82:d6:77:a1:eb:c0:
06:0c:da:e1:18:0d:a3:6e:80:d4:87:70:70:89:cb:
1d:c2:47:ea:57:7f:8f:89:b6:5f:36:70:9c:8d:dd:
34:74:12:d6:8b:de:2b:26:a4:a5:91:cf:b3:ec:51:
13:bb:08:69:80:e2:61:bb:d8:2a:4a:4a:78:81:4a:
04:b6:1b:f6:7b:44:2d:cf:c2:ca:ce:78:37:00:88:
87:7e:da:68:1c:82:d0:fc:c3:12:24:9b:f3:69:4e:
ef:9e:9d:ef:61:f9:09:55:df:25:3f:3f:2b:78:34:
a6:d4:8a:6e:82:53:77:33:f4:d4:3a:e1:b7:6b:ae:
ba:a9:b7:49:ed:c2:dd:51:f0:de:32:6f:f6:67:87:
c1:4b:a3:3b:3d:68:ea:cc:a6:5f:41:a8:6d:88:6d:
35:60:de:40:93:00:ac:c3:b4:84:e8:52:5f:fe:48:
26:9c:17:5d:dd:fc:c2:45:b5:bd:69:eb:5e:bf:8f:
50:8e:cf:39:b7:c1:9c:78:cb:e6:72:55:59:bd:7a:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:41:E1:C4:1A:FC:39:AD:A3:BD:7D:00:03:E4:9C:86:8F:29:0A:4F
X509v3 Authority Key Identifier:
keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:79:e3:83:6b:e7:46:85:10:19:9b:1e:2c:66:9b:3a:96:65:
5b:f3:23:50:e0:1e:70:6c:91:10:02:dd:13:af:f7:c8:1d:96:
f0:af:22:33:2b:c8:eb:33:25:74:67:8e:ca:a5:71:0d:89:bd:
92:09:1e:20:38:aa:56:cc:4e:95:57:8f:59:3a:22:de:a3:c2:
6e:30:23:1a:06:e2:9b:12:30:c8:de:c9:be:f9:3f:40:bb:ba:
33:d4:bc:8d:b4:9d:a3:40:9e:b0:e2:d7:10:d9:81:a7:63:78:
82:e7:09:9c:12:13:0e:f1:3f:5c:a0:d3:a6:d2:cb:f1:7a:c8:
02:7d:88:d5:15:eb:45:55:23:d7:a7:02:97:43:f7:05:86:a6:
75:1e:34:44:69:36:41:e1:ce:5c:a5:17:1d:e9:e8:48:2a:9f:
21:f1:15:1c:1c:bf:2e:78:46:13:0f:fa:82:4a:a9:fb:01:38:
85:4f:83:c1:a7:be:71:cb:70:ee:da:86:9b:30:40:0a:1c:db:
fa:18:6d:31:13:f3:18:73:c4:87:99:77:46:60:0b:e6:1b:95:
b1:f9:b0:eb:a3:8c:67:4e:3c:c1:47:1c:8d:6f:c1:60:4c:91:
ed:b2:21:1b:c2:6f:4e:dd:41:9f:45:be:e9:fc:7d:2e:31:d5:
aa:91:0c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:23:57 2025 by rpki-client