This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
File: Nps-m3tm6PW7l5puLy56rPUA0_E.mft (raw, json)
Hash identifier: JNrSv19VugKuRyVzeSu873ydZlmdDPk82uBHZuMlT9I=
Subject key identifier: F8:2A:77:FA:CB:61:FA:19:4F:44:A1:22:B1:BE:21:D4:40:26:C6:BD
Authority key identifier: 36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1
Certificate issuer: /CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1
Certificate serial: 017F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
Manifest number: 017C
Signing time: Fri 05 Dec 2025 01:55:59 +0000
Manifest this update: Fri 05 Dec 2025 01:55:59 +0000
Manifest next update: Fri 12 Dec 2025 01:55:59 +0000
Files and hashes: 1: Nps-m3tm6PW7l5puLy56rPUA0_E.crl (hash: 5Qu/jJM81Rx6j0slarjS3e7/6GRY69UBYh4zIcru024=)
2: CA5B7DA48ECA11EEA3901581C4F9AE02.roa (hash: NP1KRG9waDvIQkw5KUdNc2k+dz2A2AWeqBvOhbZYwI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl
rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB8C8, serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1
Validity
Not Before: Dec 5 01:55:59 2025 GMT
Not After : Dec 12 01:55:59 2025 GMT
Subject: CN=69323baf-3e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:4a:f2:61:30:4f:c1:dc:cc:8c:8e:a7:9a:
9f:3d:53:e3:0a:3a:b0:1c:45:63:21:65:00:ad:1d:
1a:7c:61:29:0e:3e:00:8e:91:3e:28:c7:71:73:71:
58:8a:02:85:cf:36:4a:cb:d6:61:f0:78:f9:2d:0c:
11:85:b2:d8:60:fe:9c:f7:4a:f6:cd:a6:84:94:cd:
58:11:e5:18:52:21:9a:a2:9a:b3:9e:44:fd:59:a4:
90:2b:89:28:f6:75:df:ed:84:23:0f:a2:1d:1d:40:
d6:31:19:98:f6:a5:fd:10:85:df:fc:d2:70:78:f2:
21:8f:45:fc:be:1f:ee:4c:f6:bf:b7:75:74:ac:fd:
07:33:13:39:34:81:12:68:0a:49:ab:ae:13:cb:41:
39:21:9f:e4:f8:a2:9f:21:28:4e:73:21:a4:e3:5b:
8f:f8:19:81:6b:6d:58:9d:a1:33:b8:c6:ae:03:99:
f0:35:88:9d:d8:49:c9:bf:02:a0:d4:19:6f:c6:c7:
22:fb:6e:f5:86:b0:16:4c:1e:0d:b3:87:76:f8:cd:
be:c0:73:b6:81:dd:b5:51:21:fb:0f:b9:71:ea:a4:
96:72:b3:ea:31:05:c2:ab:63:e8:dd:92:85:ce:1f:
c5:22:7f:b7:0b:89:c9:e3:8a:9b:02:4a:e6:be:ef:
3b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2A:77:FA:CB:61:FA:19:4F:44:A1:22:B1:BE:21:D4:40:26:C6:BD
X509v3 Authority Key Identifier:
keyid:36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:e4:3d:bd:23:64:97:ad:ee:95:a8:cf:c3:df:bf:3a:81:0a:
71:c3:6e:30:7f:70:7b:eb:c0:cf:4f:e5:6e:bc:b6:bb:1b:18:
8a:f8:88:a4:f1:2b:97:d6:49:91:a6:33:6c:78:a7:b3:81:32:
89:b0:50:8d:7b:c2:ff:6d:10:28:c8:55:c9:73:b1:58:67:63:
1c:b8:03:a1:73:4b:24:23:f8:f6:41:ce:20:da:4f:5e:00:59:
04:cc:93:43:c2:9a:8f:30:aa:0b:09:f8:04:70:98:65:2c:5d:
e0:ba:ea:98:eb:b7:24:6d:48:88:31:f2:1d:89:5d:50:ae:62:
38:1c:c7:b1:ad:c7:b0:75:1d:c2:27:c0:a7:0c:31:42:c6:95:
26:c0:f2:20:ca:32:31:16:27:f5:10:07:9e:ca:66:95:75:fb:
d7:58:d8:e2:fd:25:df:31:c0:02:27:36:6e:1b:14:4a:b6:39:
f8:99:b6:a5:82:b8:5a:0e:7b:45:09:9b:d1:d8:50:d0:5b:e9:
6a:3c:27:c3:b1:df:db:d3:9c:45:35:dc:ba:f3:d6:65:f1:f9:
99:bc:e2:d9:b6:ec:a6:ef:46:6b:17:0d:ec:ce:ac:b7:ba:62:
c0:cc:07:28:09:1c:ff:2f:33:81:80:38:d3:c8:b3:8b:ee:9c:
24:38:97:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:14:52 2025 by rpki-client