This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
File: nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json)
Hash identifier: 288hHLzzLZpwcm3JZiUEDZyc6S8/aPDBxltu7mhkifA=
Subject key identifier: 91:55:44:A9:0C:7D:F3:75:29:6A:9E:F5:E2:E0:98:0F:C8:01:7E:A8
Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
Manifest number: 014B
Signing time: Fri 05 Dec 2025 02:41:03 +0000
Manifest this update: Fri 05 Dec 2025 02:41:03 +0000
Manifest next update: Fri 12 Dec 2025 02:41:03 +0000
Files and hashes: 1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: V9XjIPmW7evF+09Yo37j9HrBUXq7hHHGLp/P/zeEGC8=)
2: D0F5F16EBFB811F0B09C3E14C4F9AE02.roa (hash: CmgxaioZaqBmTAKdrvrQvMBUPzNHQbmNsCbdVyQjo74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Validity
Not Before: Dec 5 02:41:03 2025 GMT
Not After : Dec 12 02:41:03 2025 GMT
Subject: CN=6932463f-d8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:30:0f:0e:30:72:07:6e:24:48:50:8f:66:c8:
ee:d1:f1:98:46:99:c7:2e:d1:0e:49:93:24:02:b0:
a2:fa:0d:a7:85:0e:24:dd:80:00:bc:60:94:66:9d:
03:ae:00:a0:2e:49:ec:09:95:b6:bb:29:94:2a:94:
cc:fb:de:87:61:f5:e2:27:04:2f:df:59:54:35:88:
9a:82:43:b2:9e:a6:8d:a4:e3:43:07:9b:c5:11:fa:
ab:8b:05:e2:b9:a6:51:8d:5a:c5:49:7d:bf:03:dc:
fa:2d:ff:98:21:7b:c2:e4:03:bc:28:53:46:3a:54:
09:09:3b:34:bd:10:2b:96:1b:03:4f:90:8a:62:d0:
1d:eb:89:27:55:a6:28:a1:e7:9f:8e:c2:10:96:91:
ca:c5:b7:95:86:f7:91:1c:44:1a:06:f0:2c:94:c2:
c5:50:ce:4b:ba:52:f9:17:ff:54:a3:76:0c:c9:2e:
2f:9f:8e:97:26:1b:6d:06:62:1c:93:4c:4a:f6:19:
5f:c8:3f:ce:96:e4:70:dd:0e:bc:2e:c7:61:c6:3f:
c2:15:27:07:8f:ba:a7:e7:30:5a:c2:d6:fc:7a:09:
59:ee:be:d1:0a:94:51:a1:8e:13:ad:1b:29:e1:e4:
94:19:5f:a0:f6:78:5a:95:c5:9f:37:2e:3a:be:f8:
4d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:55:44:A9:0C:7D:F3:75:29:6A:9E:F5:E2:E0:98:0F:C8:01:7E:A8
X509v3 Authority Key Identifier:
keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:8b:ac:07:49:77:1f:41:7d:2d:76:d9:85:78:0e:6a:2d:2d:
95:e5:0b:62:1a:75:4c:bf:51:46:11:51:18:07:85:ce:b3:0a:
1f:6e:32:ac:cc:0f:3d:da:ea:6e:bd:9c:c8:42:22:a4:ea:d7:
04:5e:95:28:68:0b:03:ca:ac:79:e1:d7:6e:42:73:ab:e1:11:
59:d1:1f:f6:d9:05:c1:51:13:9b:c3:74:c7:07:cf:0b:7e:55:
54:37:99:e9:db:b4:a4:15:e9:18:c7:88:00:85:53:c7:25:24:
e9:74:10:bd:7e:4e:16:53:20:58:40:92:ce:09:12:be:19:b3:
bf:34:a5:3c:7e:00:a3:ac:26:c8:a2:97:ee:ef:bc:10:42:8f:
a0:9a:01:8d:aa:fc:34:bd:c1:3d:92:f4:c9:27:31:fd:78:65:
1b:e4:6f:52:a2:ef:8f:22:21:b6:d0:1c:1d:4c:df:ba:fd:16:
4c:de:1c:8f:e4:37:99:fd:84:18:25:0b:88:fa:1d:08:fe:20:
e2:51:7f:dc:c7:1b:11:79:21:29:6c:83:71:6f:14:58:49:48:
44:d2:40:38:fa:e9:e4:08:6d:bb:79:4c:23:7b:30:1f:68:fe:
27:cd:05:ab:06:c7:60:fd:8c:6a:13:fa:64:f2:31:be:54:2b:
f5:8d:42:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:56:40 2025 by rpki-client