This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft
File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json)
Hash identifier: ei38va8A/iBdqMMQvy11LuC+iFmfVk76SLZGnkZXpfs=
Subject key identifier: 55:9F:54:14:60:9A:14:E4:7D:2B:BB:21:DA:3C:4A:A7:A5:3C:28:99
Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16
Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16
Certificate serial: 07AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft
Manifest number: 07A6
Signing time: Sat 06 Dec 2025 20:27:28 +0000
Manifest this update: Sat 06 Dec 2025 20:27:28 +0000
Manifest next update: Sat 13 Dec 2025 20:27:28 +0000
Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: 4OEKJOZOGQFBTZHe/L8ikW90SlHIYuQU/9Gw7ttcNzA=)
2: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: QxeWRQMKmf7TJD4WLtGbHv118KvpecTV8OOHHwq8cdw=)
3: E9D321CEF2F611EE95E10935C4F9AE02.roa (hash: YwH6tW2wnqbHDFkrMa51ak141hU9452AG57RT759KqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl
rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1967 (0x7af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16
Validity
Not Before: Dec 6 20:27:28 2025 GMT
Not After : Dec 13 20:27:28 2025 GMT
Subject: CN=693491b0-4165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:c3:08:6b:3e:ab:07:46:c3:75:23:d3:31:
6c:35:f8:73:fb:11:b1:9e:a1:7c:48:46:ae:2f:ce:
37:c5:e2:d5:df:fa:e5:cd:23:26:97:6f:98:20:61:
fc:dc:50:53:d3:02:6a:65:9e:33:c6:21:8d:b3:fc:
4e:a5:23:d5:36:91:0f:76:85:5a:f5:ae:09:bb:24:
14:b2:25:90:43:76:ca:45:8e:f6:d3:59:ae:52:1c:
ca:28:81:3e:7e:60:c9:c7:74:ff:a6:01:9c:74:ac:
c5:b2:1c:c8:ea:7b:f9:47:6d:a5:63:4e:1f:a7:f2:
23:f0:82:9b:e5:47:6f:49:9e:76:d3:6b:d9:6e:20:
8f:1c:b8:77:5f:c9:80:99:30:81:56:e0:0c:53:bc:
82:8e:e6:98:bc:8c:7a:10:3d:89:b9:2f:e3:3e:03:
45:01:73:c9:7d:aa:30:3e:dc:cb:e7:4b:bc:a6:e3:
85:38:f1:49:32:aa:86:08:be:fb:70:a1:cd:9e:75:
e1:c7:87:27:fa:71:50:91:92:6b:4d:32:a1:4f:25:
db:52:a0:c0:23:0d:73:cd:82:9e:f2:e1:cf:74:0d:
36:08:bc:9b:29:3e:32:b2:d5:89:2a:56:55:e8:1e:
1e:bd:b9:1c:f0:50:65:a0:c7:de:c2:7a:15:e1:b3:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9F:54:14:60:9A:14:E4:7D:2B:BB:21:DA:3C:4A:A7:A5:3C:28:99
X509v3 Authority Key Identifier:
keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2c:4a:15:0c:98:96:dd:c6:d7:79:41:30:1e:a5:ca:6e:4c:
62:3a:19:3b:ac:b4:9c:d7:2a:ac:dc:4a:50:3b:32:09:d0:46:
5c:fc:22:ef:f8:4b:7c:6f:20:c7:33:e5:db:85:41:58:2a:6d:
64:25:11:83:50:22:7e:f9:cb:ea:55:6b:8a:5f:d3:39:eb:9f:
1f:72:5d:11:e3:ef:8b:5e:08:48:3c:1b:18:c1:97:b5:85:0c:
84:c0:0c:cc:5e:10:e3:ae:47:de:a2:20:df:89:a2:6a:6a:ef:
1b:b9:fe:0b:15:c4:50:74:01:9c:94:02:4f:1f:a8:38:68:f9:
de:ce:a0:6d:93:45:0e:8a:20:14:24:88:d4:3b:5a:1e:9a:29:
e0:ef:99:a5:4f:77:69:67:9f:de:8e:9d:74:93:4c:b6:ef:b5:
ad:93:7e:7d:dd:53:fd:91:ef:36:0d:d7:f9:4e:46:9c:e0:47:
a4:c2:3b:38:61:3b:56:f1:68:5d:25:2e:0b:1a:d5:e7:b5:ca:
88:7d:d0:48:b9:f3:33:aa:9c:c8:6a:eb:94:9e:40:57:27:46:
f1:19:3e:ad:c2:9e:77:41:fa:cd:75:ac:aa:d2:45:29:21:f7:
0f:0d:1a:c0:a0:0d:06:fb:f1:2c:c9:bc:41:81:8e:72:05:74:
21:e0:c8:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB
ODgzRkVBMTYwHhcNMjUxMjA2MjAyNzI4WhcNMjUxMjEzMjAyNzI4WjAYMRYwFAYD
VQQDEw02OTM0OTFiMC00MTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtiDDCGs+qwdGw3Uj0zFsNfhz+xGxnqF8SEauL843xeLV3/rlzSMml2+YIGH8
3FBT0wJqZZ4zxiGNs/xOpSPVNpEPdoVa9a4JuyQUsiWQQ3bKRY7201muUhzKKIE+
fmDJx3T/pgGcdKzFshzI6nv5R22lY04fp/Ij8IKb5UdvSZ5202vZbiCPHLh3X8mA
mTCBVuAMU7yCjuaYvIx6ED2JuS/jPgNFAXPJfaowPtzL50u8puOFOPFJMqqGCL77
cKHNnnXhx4cn+nFQkZJrTTKhTyXbUqDAIw1zzYKe8uHPdA02CLybKT4ystWJKlZV
6B4evbkc8FBloMfewnoV4bONYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWfVBRg
mhTkfSu7Ido8SqelPCiZMB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5
NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182
aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjA2NC81MkZFRjczQTI5NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFR
WDJtcER4enMyRjZvZ182aFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvLEoVDJiW3cbXeUEwHqXKbkxiOhk7rLSc1yqs3EpQOzIJ0EZc/CLv
+Et8byDHM+XbhUFYKm1kJRGDUCJ++cvqVWuKX9M5658fcl0R4++LXghIPBsYwZe1
hQyEwAzMXhDjrkfeoiDfiaJqau8buf4LFcRQdAGclAJPH6g4aPnezqBtk0UOiiAU
JIjUO1oeming75mlT3dpZ5/ejp10k0y277Wtk3593VP9ke82Ddf5Tkac4Eekwjs4
YTtW8WhdJS4LGtXntcqIfdBIufMzqpzIauuUnkBXJ0bxGT6twp53QfrNdayq0kUp
IfcPDRrAoA0G+/EsybxBgY5yBXQh4Mj0
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:04:16 2025 by rpki-client