This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
File: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft (raw, json)
Hash identifier: a7wcWdrx8qkHKJDg4fUs6QLiJcp/pm7wmUyvlbLd21E=
Subject key identifier: 26:E4:A4:A0:E9:B5:F7:AB:14:0C:37:DA:9F:52:B4:A0:31:64:04:75
Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
Certificate issuer: /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Certificate serial: 0211
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
Manifest number: 0208
Signing time: Fri 05 Dec 2025 00:40:28 +0000
Manifest this update: Fri 05 Dec 2025 00:40:27 +0000
Manifest next update: Fri 12 Dec 2025 00:40:27 +0000
Files and hashes: 1: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl (hash: QVzWR8DfysOhbIabNqlumcFVnZHqwLBxC0phgIkD1ko=)
2: A24D0F54140C11EFBC640B71C4F9AE02.roa (hash: wRJLakVb4OT38G6t+rRsnOSv4LpQV0AO0Scq5OD6JMU=)
3: 545EDE9C140911EF8520A25BC4F9AE02.roa (hash: Tv8VFI61ht6g4zpgpyoiarorIdL71VBSjtb/bqzuKfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:40:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDA40, serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Validity
Not Before: Dec 5 00:40:27 2025 GMT
Not After : Dec 12 00:40:27 2025 GMT
Subject: CN=693229fb-2f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:da:6c:08:13:60:1c:af:14:0d:a4:84:3f:
6e:f5:05:41:5c:f6:e2:05:ae:a4:a0:78:cd:6b:70:
b3:c2:16:0b:20:b2:9e:2c:70:5f:b0:98:cb:e2:1d:
20:f9:49:bf:20:2f:c2:e9:a8:ec:40:ca:ef:c9:3f:
7d:81:fa:b6:d2:6f:44:27:c5:e9:a2:0b:e8:5e:5f:
1e:cd:58:3a:49:2a:ad:0c:aa:36:74:2d:93:1a:ae:
52:52:f3:dd:93:b9:39:eb:d7:39:36:44:2a:5c:9f:
70:2d:dc:d0:4f:a2:f1:f8:30:f5:23:62:18:60:83:
39:9c:17:de:8e:f2:d6:8a:76:de:11:f3:60:8c:da:
ea:75:92:44:0d:c9:b8:76:90:da:87:78:d6:ba:08:
2e:95:70:9f:1a:12:df:76:0a:a9:58:4a:c1:24:17:
28:d1:96:4c:b4:95:64:ff:6c:28:02:0d:d0:fa:a5:
8a:b4:ab:d0:f4:f9:ad:98:7b:60:4c:e8:0e:23:22:
60:47:5d:a1:a5:e3:6b:a2:64:e3:94:45:50:cb:0e:
43:3a:1f:a9:dc:c9:a4:6c:b5:c7:67:77:52:e0:9a:
2e:1d:b2:39:d1:43:10:57:28:36:c1:c7:26:51:39:
dc:6a:79:8a:be:75:d6:8e:59:9b:60:7b:c8:da:f8:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E4:A4:A0:E9:B5:F7:AB:14:0C:37:DA:9F:52:B4:A0:31:64:04:75
X509v3 Authority Key Identifier:
keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:aa:54:78:5e:6e:de:2e:f4:3c:c1:8d:dd:94:36:56:54:0b:
4c:4d:a8:72:94:3e:a2:63:75:88:32:27:b2:2a:8c:29:94:ab:
c2:0e:d3:5a:24:7b:1c:6a:df:eb:9d:f1:fb:c2:07:34:65:ff:
dc:5f:7f:7a:3f:fa:2a:0b:28:af:25:dc:d1:92:c3:1f:c7:94:
62:35:1e:12:83:84:79:26:5a:8a:19:76:0a:d8:42:3d:1f:17:
f5:24:fe:12:e7:73:02:1f:34:43:ec:26:43:09:bb:98:ad:9a:
16:d1:5f:2a:8e:73:3e:f3:40:4e:82:6c:e2:59:82:eb:35:35:
f0:b6:f7:67:c8:5b:e8:41:ff:56:15:60:65:e9:4f:58:cc:a5:
3e:9c:8e:70:07:29:12:9e:22:1c:59:5f:b5:99:03:7c:65:3e:
dc:a8:59:b4:e1:41:32:71:2d:8f:d2:16:d3:4d:b9:60:90:22:
24:6a:56:9d:5a:30:0d:23:d3:73:17:28:96:a4:65:49:e1:49:
01:36:59:d1:05:98:59:59:5c:52:d1:a3:02:ef:81:e7:f7:15:
87:b2:ee:8e:d0:57:58:96:18:84:d5:57:08:09:3f:01:3a:c2:
8a:57:55:99:77:ea:bd:74:4c:66:8a:a2:bb:b5:8b:3c:10:ae:
39:0b:21:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:21:54 2025 by rpki-client