This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
File: Ny468IjbN1qP-RmFiy3MXH_Epeg.mft (raw, json)
Hash identifier: Zj1T3SSwKnAwrotkIRZ6E1Nd0xFbzKNKVgvd4eQwppw=
Subject key identifier: 0A:F7:40:A9:3B:F6:90:75:ED:60:67:EF:E6:F7:74:35:82:F2:86:B4
Authority key identifier: 37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8
Certificate issuer: /CN=A91A679F/serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8
Certificate serial: 07AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
Manifest number: 079C
Signing time: Thu 04 Dec 2025 20:27:31 +0000
Manifest this update: Thu 04 Dec 2025 20:27:31 +0000
Manifest next update: Thu 11 Dec 2025 20:27:31 +0000
Files and hashes: 1: Ny468IjbN1qP-RmFiy3MXH_Epeg.crl (hash: 0lGL6Yh8HTZYy3Tg7OnAUjsleX7U5E5ba21hhzLJCVk=)
2: B033793C686D11EE8607594CC4F9AE02.roa (hash: JOi7OHLhFtdHcYqhgYyNkkEIbuwvBfapNIuWdidQbmc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl
rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1967 (0x7af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A679F, serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8
Validity
Not Before: Dec 4 20:27:31 2025 GMT
Not After : Dec 11 20:27:31 2025 GMT
Subject: CN=6931eeb3-94a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:67:6d:27:29:d7:32:d9:9e:61:34:1a:8d:
79:53:80:e2:cc:0a:e6:85:85:3a:27:5e:e6:d6:19:
76:29:17:ff:00:0e:43:14:ae:cc:41:dc:79:97:00:
6a:31:5f:7d:c8:84:e1:af:1b:4a:31:5a:94:a9:a6:
86:7d:d3:8c:aa:0f:30:7e:bd:ce:32:e9:d4:1e:be:
b8:6e:bb:20:eb:0f:6a:e8:8a:43:a9:13:22:2b:74:
9d:00:69:d5:e0:23:b7:25:77:f7:d7:7c:c8:63:46:
ab:e0:77:96:80:68:e8:08:24:e0:d9:69:f0:ea:56:
71:99:30:ed:73:0d:46:8b:da:10:31:6d:5d:3f:23:
e0:98:b0:3f:20:93:fc:61:11:b4:76:06:a9:f8:88:
59:a8:94:16:fa:5f:72:c9:66:d1:04:9c:af:d7:8a:
81:21:e6:ff:96:aa:5c:ee:f7:fc:c3:ba:b0:bd:e1:
15:a4:30:4c:2c:f1:78:29:de:ea:f9:15:da:7e:7b:
61:8d:f6:d5:30:e4:27:f9:1c:3d:b0:05:e8:04:36:
28:7f:f2:d1:75:aa:72:1c:12:d5:c3:33:70:4e:4f:
e3:e7:47:f9:ff:7d:f2:f8:3a:dc:19:4a:e3:af:a8:
e2:88:58:0a:a5:d5:d3:8f:fb:16:f5:99:23:6b:0b:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F7:40:A9:3B:F6:90:75:ED:60:67:EF:E6:F7:74:35:82:F2:86:B4
X509v3 Authority Key Identifier:
keyid:37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6f:12:4b:91:4b:5c:5d:b6:23:15:7c:3f:af:88:9e:c1:1d:
27:3d:e5:90:3d:f6:ee:f5:a6:6f:6b:5b:d6:47:29:83:9c:1b:
13:c1:3b:63:f9:76:c6:ed:b7:57:b3:43:fc:7c:c6:a6:35:10:
65:4f:d9:df:15:e6:1d:be:fa:42:a0:42:72:2b:37:c9:ea:77:
13:f7:43:93:f2:47:24:89:e1:2c:dc:d1:cf:aa:c6:24:24:f7:
28:75:1c:71:be:14:81:a5:b4:e3:6d:2b:37:09:13:f2:9d:e0:
77:e8:89:eb:66:7d:12:a5:ae:fc:b6:61:6e:76:f7:df:61:fb:
b2:0d:95:49:94:c3:1e:fc:8d:02:b0:9c:ac:59:ed:a2:c6:79:
0e:49:f0:9a:f1:db:6a:7e:b3:1b:54:6a:4c:68:96:6b:e9:4a:
0b:14:3f:10:88:10:5c:4a:65:cd:fa:66:14:e7:e6:1d:31:84:
09:90:da:2f:b3:fe:21:17:1f:36:7e:3b:0a:12:20:50:b0:dd:
41:6f:32:b0:64:2b:22:7e:9a:f1:aa:36:08:30:09:3c:cf:69:
3b:5f:6d:5e:31:e5:60:c4:7a:a8:c3:4d:2c:53:0f:a7:04:58:
94:05:b4:e1:37:a7:0c:80:2d:f0:3b:da:8e:66:dc:fd:f9:31:
e7:cd:b0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:21:45 2025 by rpki-client