This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
File: nJSl3M9qZbaJhscEOEbHIb0zvpk.mft (raw, json)
Hash identifier: ncpOnzH5igGHm8tA5nY41iCV7edES3NZsEKwGQI8bto=
Subject key identifier: B0:23:60:3A:08:CC:69:4D:A6:34:FD:C7:D2:58:09:64:B4:E2:FB:74
Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99
Certificate issuer: /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99
Certificate serial: 0D97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
Manifest number: 0D81
Signing time: Sat 06 Dec 2025 17:22:03 +0000
Manifest this update: Sat 06 Dec 2025 17:22:02 +0000
Manifest next update: Sat 13 Dec 2025 17:22:02 +0000
Files and hashes: 1: nJSl3M9qZbaJhscEOEbHIb0zvpk.crl (hash: UveDjJKLxPV6er2ZAc9/GdvA3ZprF7jCPN4xoFy8Rj0=)
2: 064D129A56EA11EA84DC982BC4F9AE02.roa (hash: u1TNJ+cS4eVAcfkpJ21oJA8p8MXvtPlstoexuvgtfIM=)
3: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (hash: rShkEGVIbInxuwhM/D99+N9Ifro23DfGNAWpJ5dz2fM=)
4: 2BABEEB482EE11EAB170FD4BC4F9AE02.roa (hash: TU8TSmPX0pl0lGmdo+pSWKRJSfGRcwunEDD4PcVNXOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl
rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3479 (0xd97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D66A0, serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99
Validity
Not Before: Dec 6 17:22:02 2025 GMT
Not After : Dec 13 17:22:02 2025 GMT
Subject: CN=6934663b-7785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:40:d6:e0:dc:05:6c:00:9c:1b:05:13:30:05:
96:50:69:e7:54:de:43:64:5c:5a:f1:a6:d3:ea:3d:
be:7d:83:04:3a:d2:a3:0c:24:71:41:75:1c:63:09:
4f:1c:0d:10:d1:04:5d:5d:ff:d0:c9:25:4a:48:5f:
b0:30:fc:f1:8c:48:32:74:57:94:3b:f2:cc:00:a3:
aa:0e:f1:37:bf:22:f8:7b:7e:b2:2e:5a:f9:3a:53:
f4:81:4b:de:20:39:a1:ab:93:54:8b:fb:f6:91:67:
80:24:a4:c1:b0:3d:63:5c:7d:76:f9:51:c0:fd:c8:
a4:72:04:3a:2f:e4:32:58:6d:66:a6:2a:5f:aa:7d:
20:2f:bf:11:e9:be:fa:63:12:2a:d9:4d:cc:e9:8a:
18:ca:70:d9:47:9f:2f:b0:44:3f:4b:cd:91:31:ee:
27:44:aa:85:a2:a9:85:e3:b1:c2:5a:fc:62:e7:30:
5e:b5:6e:9b:aa:1d:3d:b6:37:b7:be:d3:34:c9:f5:
48:5c:f5:62:f6:df:70:89:b6:16:56:46:0b:12:f7:
5a:3d:de:e2:14:39:db:71:79:99:0f:e3:36:32:bc:
59:ea:d0:9c:f4:a7:62:24:c3:f5:46:6c:8b:8b:52:
24:9d:9e:9c:94:bd:a0:20:24:72:81:23:2b:4e:69:
bc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:23:60:3A:08:CC:69:4D:A6:34:FD:C7:D2:58:09:64:B4:E2:FB:74
X509v3 Authority Key Identifier:
keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:41:87:f1:b6:a6:5a:03:e3:e7:d1:f5:79:7d:38:b1:4f:e7:
43:9e:20:f1:43:d1:2c:02:44:12:65:f0:2f:cf:67:2c:14:cc:
75:c3:38:37:0b:0f:bb:f6:ed:f5:01:78:ae:23:43:72:02:ba:
39:47:98:ee:60:23:24:f2:66:db:fe:a8:fa:16:a7:b6:a6:29:
ee:49:5a:af:ac:98:5f:09:69:02:81:68:cf:e0:89:9b:27:03:
29:bb:ff:d1:dd:d2:8c:5f:82:f9:4e:84:fd:ea:88:6b:d3:7b:
94:42:ec:2c:00:1a:89:f0:94:fe:e8:fc:aa:a5:f9:cb:a0:91:
86:7f:55:77:5a:dd:55:52:b9:22:37:26:2c:e5:c4:3b:63:b7:
1d:2c:44:9c:15:a6:a9:3b:0d:89:f9:15:fd:21:42:3c:e4:5e:
b3:49:a3:d3:57:d2:4b:6f:80:3f:01:91:63:6c:5b:36:84:ff:
cb:89:7e:77:49:a5:26:50:7e:4d:88:bc:b8:68:1d:86:e5:b6:
27:69:50:2c:b8:dc:3c:39:6f:f7:ed:a4:71:16:54:cf:10:86:
e5:62:fc:ee:74:ee:8d:73:59:b4:f7:2f:23:f4:d1:d4:0c:53:
a8:06:10:df:12:29:92:54:63:13:99:83:dc:a8:fa:aa:06:98:
ce:e9:25:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:55:49 2025 by rpki-client