This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
File: n2T-UJklN_sLQOUvnPrDEMonGRg.mft (raw, json)
Hash identifier: 8YwqAa5vGZF9erFjfOB3hpgY3rnBXaMhdNlPc2Dc/v0=
Subject key identifier: CE:32:0E:7E:C5:61:C2:6A:5F:8D:DF:AB:58:BC:82:3B:48:64:63:34
Authority key identifier: 9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18
Certificate issuer: /CN=A91A57F8/serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918
Certificate serial: 024E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
Manifest number: 023D
Signing time: Fri 05 Dec 2025 00:39:50 +0000
Manifest this update: Fri 05 Dec 2025 00:39:49 +0000
Manifest next update: Fri 12 Dec 2025 00:39:49 +0000
Files and hashes: 1: n2T-UJklN_sLQOUvnPrDEMonGRg.crl (hash: wm4Y9J5jF2HNxome5LQguewlg2A8cao4F6IJtJUBxew=)
2: A508D320BBC711ED8DF23C40C4F9AE02.roa (hash: qkRYuAT6UAGXsy4Gp/LpKypt/tBfT+73f11tCNpfSwM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl
rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A57F8, serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918
Validity
Not Before: Dec 5 00:39:49 2025 GMT
Not After : Dec 12 00:39:49 2025 GMT
Subject: CN=693229d6-0d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:6d:8b:85:c8:96:31:bb:2e:25:77:f8:e2:
6e:5e:9d:8d:9e:94:22:15:92:22:fd:54:cb:a9:a3:
ef:76:76:fd:41:e8:a2:de:7e:4b:86:c0:dd:a6:6c:
a1:21:26:e2:d3:77:3e:38:93:5e:3b:08:73:9f:dc:
93:e9:c6:2c:2c:db:96:c9:79:78:f1:eb:55:65:e7:
25:4e:5f:8b:c7:8c:d9:08:19:e0:0c:3b:ad:20:6e:
a8:3d:1c:66:8e:69:67:53:4e:09:9e:7e:2e:ec:b0:
bf:3a:2d:05:f7:5e:23:80:15:46:73:0d:16:6e:df:
f7:c1:2b:3d:0a:db:f9:b3:89:87:ae:e5:2c:68:90:
e6:6e:cd:6f:3b:81:c8:18:16:52:e6:1d:eb:00:37:
06:da:b7:d8:b7:c3:24:94:b1:ef:b6:96:61:ce:53:
d1:2e:a5:09:5a:8e:2a:0a:3e:fd:cc:95:25:88:92:
ea:5e:52:33:4c:7c:ab:3b:a2:97:15:6d:82:d1:ec:
a2:2d:ca:44:b4:fe:a3:03:b2:77:be:6d:2c:7a:1b:
e8:21:ce:18:53:51:b8:72:64:42:63:0f:ed:58:97:
a2:58:02:8b:70:8b:e5:12:5a:6c:a1:e2:eb:ca:77:
12:bb:24:14:d2:86:53:9c:5a:19:99:2a:51:c8:20:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:32:0E:7E:C5:61:C2:6A:5F:8D:DF:AB:58:BC:82:3B:48:64:63:34
X509v3 Authority Key Identifier:
keyid:9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:6f:4d:10:fd:83:37:19:7a:a9:e6:c0:00:89:4e:da:3e:d8:
b3:bc:b2:67:fc:bd:ec:9d:b5:1c:97:77:97:8a:d7:7f:20:35:
4a:23:1d:b7:6c:11:87:1d:73:72:04:9f:4f:ac:8b:68:c9:53:
70:6f:15:b5:03:81:6e:5d:7e:1e:5c:a9:f8:e5:53:bc:f3:a3:
d0:21:24:90:3b:7a:70:3a:ea:51:0d:db:92:1d:e0:58:48:4e:
b1:98:dc:40:e0:4f:19:17:49:77:dd:9e:86:69:c7:5f:d8:51:
e9:b9:f6:bc:7d:e8:25:18:7d:9a:16:0a:c0:bd:8a:27:b7:21:
80:56:5c:ba:9d:bd:dd:57:7c:6e:04:ab:c4:0c:41:28:2d:35:
62:d2:21:22:8d:f0:f4:42:27:ac:76:a7:c4:a6:8b:fa:e1:f4:
64:9f:b1:28:09:11:69:73:f5:bf:34:fc:1b:f0:e8:89:09:a5:
c4:48:cd:e1:e0:19:89:3f:37:94:7c:a7:f3:8d:f3:de:ed:c5:
96:71:e2:db:2e:9b:a9:71:0b:3e:69:f5:c7:1a:33:22:61:12:
62:c8:ac:1b:b6:e1:49:12:9f:08:52:30:71:d9:f7:04:10:0b:
e1:a6:e3:47:10:dc:d6:bd:1d:d9:77:9f:50:f5:1f:8d:64:f1:
da:f0:d1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:51 2025 by rpki-client