This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
File: neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json)
Hash identifier: mZQSeXk4Q/vd6mcdaOk4ex8QP1kipqwOW71ALgmpug4=
Subject key identifier: 3D:33:DD:C5:E1:38:52:22:68:81:69:E2:BF:FF:A7:8B:E2:56:5C:1F
Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8
Certificate issuer: /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
Certificate serial: 06F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
Manifest number: 53B2
Signing time: Sat 06 Dec 2025 14:56:46 +0000
Manifest this update: Sat 06 Dec 2025 14:56:46 +0000
Manifest next update: Sat 13 Dec 2025 14:56:46 +0000
Files and hashes: 1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: VT+jl4peDUDaTNjqLnKooSOvMc3FeZqEz/doDcbaNAk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl
rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1782 (0x6f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B42CA, serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
Validity
Not Before: Dec 6 14:56:46 2025 GMT
Not After : Dec 13 14:56:46 2025 GMT
Subject: CN=6934442e-09fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:a1:4e:5c:87:5a:11:8e:97:35:df:02:f2:
0a:89:ce:2a:91:b3:83:76:ee:14:32:e0:0b:b9:1a:
1b:81:8d:77:1e:8c:20:19:41:f3:42:b1:de:c8:1f:
71:66:55:57:40:26:9c:53:02:46:9d:da:a0:b1:f2:
5b:38:e2:19:57:25:65:f5:dc:30:9f:ae:4d:e9:53:
8c:0b:a9:c2:3f:91:ce:f5:19:09:47:e2:c2:62:28:
c0:62:d0:82:2e:00:c5:a0:8a:76:7a:3e:e6:6e:b5:
c2:d9:27:be:7f:53:31:23:e6:70:b4:39:13:8d:f5:
53:05:6b:c2:81:92:3f:7d:aa:a2:bc:59:0f:13:b8:
82:82:17:5f:c0:32:ff:c5:fd:d6:51:bc:d8:73:55:
f2:84:05:4c:5a:33:d5:a3:2f:63:24:40:f9:e0:01:
fc:94:e9:6f:31:d9:ae:c3:96:06:95:e1:07:6b:ed:
1e:91:98:8a:0d:dd:3a:bf:43:0d:12:7b:5a:63:71:
d1:59:42:cf:76:6b:17:df:48:e8:db:a6:05:60:ca:
fe:ad:bd:8e:71:b3:e6:ff:e5:c3:0a:54:6d:09:a5:
17:1f:6f:ef:4d:c9:40:54:2b:92:a4:db:46:66:43:
0b:13:48:02:55:22:ea:04:b3:32:da:13:e9:63:37:
da:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:33:DD:C5:E1:38:52:22:68:81:69:E2:BF:FF:A7:8B:E2:56:5C:1F
X509v3 Authority Key Identifier:
keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:83:46:00:0a:42:5c:f3:bb:71:8a:7c:9f:97:88:58:b8:c1:
70:b9:1c:6a:76:64:93:e9:2d:16:69:3f:51:e7:87:45:c1:42:
b3:8a:4c:b8:a6:27:74:a0:ac:c3:87:65:48:96:eb:77:41:20:
62:37:5e:47:49:0e:9a:ab:f7:e1:96:86:a6:ff:77:56:6a:00:
e4:2f:16:a8:ac:99:d0:b3:9d:ff:12:2c:d9:35:c3:54:26:3b:
ae:ac:a1:1c:a0:eb:fa:c6:75:8c:bf:59:82:c3:b7:ae:98:f2:
a8:95:66:9f:d3:f2:2d:d1:ae:7a:c7:b7:f9:db:93:5a:9d:f5:
67:57:3e:13:e6:9d:f0:05:d2:03:14:32:96:75:c4:f3:18:92:
4b:40:96:33:f5:cd:e1:9a:f8:42:c3:d3:2b:22:cb:8e:f8:22:
ad:9a:18:88:20:40:88:47:81:33:87:12:5d:85:67:09:5c:62:
0a:11:f0:d9:b0:b7:41:97:b0:d0:b3:6a:58:b9:f6:67:b1:c2:
72:e4:f6:e3:25:51:99:df:35:31:cb:2c:4a:5a:12:bf:1e:33:
f8:56:02:29:42:6b:4e:1c:6d:c4:bb:f9:a8:9c:e5:02:4d:92:
8a:3b:7c:c0:82:87:25:c3:10:44:58:7b:f8:50:ad:6e:97:86:
f5:1f:37:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:44:18 2025 by rpki-client