This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
File: nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json)
Hash identifier: 55iUlQa9FtZrg2Eh4VHCHknBqnRlWVPCTfcALMYInEU=
Subject key identifier: FC:C3:38:9F:DB:F6:36:90:32:C5:38:F7:D8:27:B0:A4:2D:7E:1A:8A
Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
Certificate issuer: /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Certificate serial: 7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
Manifest number: 79
Signing time: Fri 05 Dec 2025 04:43:15 +0000
Manifest this update: Fri 05 Dec 2025 04:43:15 +0000
Manifest next update: Fri 12 Dec 2025 04:43:15 +0000
Files and hashes: 1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: QqeFQZ4iZ5quVjESnLBZLxas9w9gfbTMGTlt3L/azTc=)
2: 06B2C184C06711F094A5BC25C4F9AE02.roa (hash: XHsWgt14mba6jCHltNoKhdxGvt+PpB0JF3/BXTo/7EM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Validity
Not Before: Dec 5 04:43:15 2025 GMT
Not After : Dec 12 04:43:15 2025 GMT
Subject: CN=693262e3-c8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:27:c0:4d:04:50:8b:e3:08:2d:1f:e3:9b:7b:
ce:1d:41:52:a1:1c:5a:8d:e1:c5:a3:57:99:9a:93:
76:ad:eb:e9:31:53:cc:31:90:51:82:da:fd:8f:53:
1f:ec:58:bf:44:64:b6:e0:38:23:45:78:b0:c8:47:
f0:f7:16:f2:be:89:eb:db:a5:a1:10:71:44:8d:78:
87:a4:61:cd:8e:58:2b:27:92:79:7a:92:09:36:60:
4f:3f:6c:29:f7:92:4c:e2:d4:28:07:30:41:c9:8b:
7a:d3:bc:a7:08:c4:ce:f0:ae:c7:b3:5e:66:c0:1f:
58:5b:09:5a:cc:f9:b0:1e:52:b5:14:df:e4:ba:3a:
3e:b4:42:74:4c:8c:2f:d4:2e:04:99:1b:07:16:1a:
7b:eb:cd:bf:10:d7:6f:97:31:53:59:13:4d:86:1e:
8f:e2:b6:ba:93:3b:48:64:51:f5:99:62:62:85:b0:
27:27:66:59:62:e4:5f:e8:f6:3c:21:59:4d:36:4c:
1a:32:77:e7:78:7b:8e:0a:ed:9d:69:fc:f9:01:16:
35:94:53:f9:5d:2c:7c:67:df:28:0c:e5:7d:e9:3d:
b6:c3:cf:61:7d:13:1e:6f:c8:4c:62:bd:39:86:05:
d1:6c:c2:ff:10:8f:b3:9b:05:31:16:91:a5:48:c6:
37:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C3:38:9F:DB:F6:36:90:32:C5:38:F7:D8:27:B0:A4:2D:7E:1A:8A
X509v3 Authority Key Identifier:
keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:d2:cc:4f:75:d8:76:34:bf:e6:54:47:4a:4b:90:73:73:ae:
8b:d6:84:49:fb:97:94:41:80:eb:38:ac:cb:c4:97:a5:12:54:
f6:c8:5b:6b:e3:d5:52:5d:fd:6c:22:02:3d:95:b2:87:00:c0:
57:f3:e7:c9:e2:b9:d6:66:d4:d6:25:3d:c6:fe:66:c9:53:d6:
e0:9c:1e:50:0a:a9:65:9b:26:b8:20:1e:d1:47:d8:77:47:b7:
86:77:d1:37:a7:b8:12:22:dc:5e:48:6d:f8:80:3a:a0:ed:a7:
f4:e2:0d:e2:d8:d0:9a:0a:7a:a1:5a:42:2f:e7:56:e6:ce:07:
1d:5b:16:4a:c4:17:25:9b:0b:3b:45:f9:3d:e7:c0:23:a2:ca:
81:3e:b8:5b:8c:37:25:45:12:83:f2:a1:c1:bd:56:ae:96:c0:
71:57:0d:4c:d2:0e:d5:a9:fa:f5:2f:83:ef:1e:aa:d5:55:5a:
77:32:be:52:26:53:96:b8:1a:8d:c0:1a:21:a1:7e:bd:e4:34:
d6:f7:fd:1a:9e:7a:04:0a:30:39:77:b9:fd:e4:40:50:7c:ca:
d1:be:26:b0:85:63:81:85:b9:2d:82:fc:83:ec:8c:4f:33:09:
eb:b1:49:d0:09:45:a2:e0:5b:fd:22:08:dd:69:57:44:5c:f1:
95:97:f3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:49:37 2025 by rpki-client