This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
File: nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft (raw, json)
Hash identifier: S2TJsj/xHVsFV6LuptzpcVrqvp8TE9OnnXSFyNsqQrw=
Subject key identifier: 8B:84:54:6C:32:5E:DF:D6:4E:FB:72:3C:71:34:C1:C4:6D:1E:86:31
Authority key identifier: 9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71
Certificate issuer: /CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
Manifest number: 0119
Signing time: Tue 23 Dec 2025 03:46:47 +0000
Manifest this update: Tue 23 Dec 2025 03:46:47 +0000
Manifest next update: Tue 30 Dec 2025 03:46:47 +0000
Files and hashes: 1: nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl (hash: 5138ywP5GCk0OmYgTcS/ywbPyvbzAx28UI9FJC7vj0Y=)
2: 6375B8642F5811EF93FCF427C4F9AE02.roa (hash: C3woTmy4KRh8oZfuokqoz+ySn5YpmljqQzslPnXWG7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl
rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:46:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91113E7, serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471
Validity
Not Before: Dec 23 03:46:47 2025 GMT
Not After : Dec 30 03:46:47 2025 GMT
Subject: CN=694a10a7-64e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:af:73:9c:ae:d5:06:9f:2e:ce:1f:47:cc:
c1:3d:d0:a1:b1:36:56:c8:9f:c7:9f:50:78:bf:a4:
38:b7:39:e4:ac:ad:74:4a:af:43:a2:f3:50:ca:fd:
7c:0b:ca:77:ce:71:a1:3f:d0:72:88:ed:a8:ec:10:
a8:4c:35:f0:12:fe:24:01:08:e7:80:60:7a:38:ee:
96:4d:59:a5:1b:77:8a:47:8c:2b:8b:c1:5d:75:68:
48:ba:9c:38:b3:f4:2c:c4:83:40:0d:97:a6:07:ce:
20:34:72:07:1a:1f:da:bf:ea:3c:b1:18:45:f9:40:
31:7f:65:c6:c1:5d:15:d1:ac:16:94:51:99:c6:4b:
20:27:62:b5:ed:f3:70:e1:db:83:f0:ee:f9:5a:37:
50:27:08:42:f2:b7:65:eb:e1:88:5e:d9:94:c4:3a:
85:9d:f1:39:40:e9:65:fd:21:00:71:35:4a:70:79:
16:88:13:a4:aa:f6:78:1d:6d:d9:5f:0e:19:28:61:
83:5d:8a:1f:49:a6:dc:7f:45:d9:bc:a1:31:80:52:
8a:68:25:2c:e1:4c:79:d4:93:bf:72:ac:9b:3b:fc:
1e:40:ac:06:cd:c1:c7:74:fa:e7:95:11:d2:01:d5:
b1:5b:37:0b:d0:21:a0:6a:65:9c:3f:9f:83:95:8e:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:84:54:6C:32:5E:DF:D6:4E:FB:72:3C:71:34:C1:C4:6D:1E:86:31
X509v3 Authority Key Identifier:
keyid:9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2b:7c:3f:55:45:f6:60:bc:f4:c4:ae:a8:08:d6:b5:8d:ec:
bd:24:40:12:ab:23:fb:db:e3:3a:2f:67:48:35:9d:91:ed:c8:
c4:ac:64:89:b4:7b:2c:db:49:2a:bb:d8:2e:5d:81:cf:f5:7c:
9d:6b:b4:0f:62:26:0a:22:a9:3f:98:11:e9:79:c6:31:25:05:
fc:c4:3b:56:a8:70:4b:01:78:3d:91:d9:10:02:31:05:a7:93:
40:50:da:d2:d7:60:db:bc:6f:1d:26:bf:2f:df:bb:e5:6e:bf:
4f:42:35:bf:9f:05:17:85:a0:2f:a2:97:41:16:0a:5b:b4:8b:
d8:e0:44:b6:cd:98:d3:71:d8:b8:01:2e:ae:6c:f9:3d:a3:3d:
47:72:55:fd:3c:27:22:c3:64:6b:d0:ac:28:0b:d6:f4:22:41:
e4:d6:93:8b:28:b6:95:f0:12:98:c8:34:2d:70:8d:9b:bd:0c:
e2:47:88:2a:11:fc:f7:10:a7:2e:a6:ad:63:b0:8a:2d:ea:fb:
8d:de:5b:df:ce:58:83:da:7f:75:46:44:9e:e3:2a:9d:cf:8f:
0e:4f:66:89:a4:93:17:12:30:0d:e9:62:51:68:7f:71:97:a0:
3d:ea:05:50:cd:e2:da:15:25:0e:98:40:3b:b6:4b:c8:00:00:
55:86:01:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTEzRTcxMTAvBgNVBAUTKDlENkM3NTBDRTAzOTNDMjAwQUJGOEE2NzFDMUYyQzIw
NkEwQ0I0NzEwHhcNMjUxMjIzMDM0NjQ3WhcNMjUxMjMwMDM0NjQ3WjAYMRYwFAYD
VQQDDA02OTRhMTBhNy02NGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmeevc5yu1QafLs4fR8zBPdChsTZWyJ/Hn1B4v6Q4tznkrK10Sq9DovNQyv18
C8p3znGhP9ByiO2o7BCoTDXwEv4kAQjngGB6OO6WTVmlG3eKR4wri8FddWhIupw4
s/QsxINADZemB84gNHIHGh/av+o8sRhF+UAxf2XGwV0V0awWlFGZxksgJ2K17fNw
4duD8O75WjdQJwhC8rdl6+GIXtmUxDqFnfE5QOll/SEAcTVKcHkWiBOkqvZ4HW3Z
Xw4ZKGGDXYofSabcf0XZvKExgFKKaCUs4Ux51JO/cqybO/weQKwGzcHHdPrnlRHS
AdWxWzcL0CGgamWcP5+DlY6Y1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuEVGwy
Xt/WTvtyPHE0wcRtHoYxMB8GA1UdIwQYMBaAFJ1sdQzgOTwgCr+KZxwfLCBqDLRx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTNFNy85RDNBMjAwMDJG
NTYxMUVGQTIzRTVBMjNDNEY5QUUwMi9uV3gxRE9BNVBDQUt2NHBuSEI4c0lHb010
SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25XeDFET0E1UENBS3Y0cG5IQjhzSUdvTXRIRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTNFNy85RDNBMjAwMDJGNTYxMUVGQTIzRTVBMjNDNEY5QUUwMi9uV3gxRE9BNVBD
QUt2NHBuSEI4c0lHb010SEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAdK3w/VUX2YLz0xK6oCNa1jey9JEASqyP72+M6L2dINZ2R7cjErGSJ
tHss20kqu9guXYHP9Xyda7QPYiYKIqk/mBHpecYxJQX8xDtWqHBLAXg9kdkQAjEF
p5NAUNrS12DbvG8dJr8v37vlbr9PQjW/nwUXhaAvopdBFgpbtIvY4ES2zZjTcdi4
AS6ubPk9oz1HclX9PCciw2Rr0KwoC9b0IkHk1pOLKLaV8BKYyDQtcI2bvQziR4gq
Efz3EKcupq1jsIot6vuN3lvfzliD2n91RkSe4yqdz48OT2aJpJMXEjAN6WJRaH9x
l6A96gVQzeLaFSUOmEA7tkvIAABVhgFE
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:51 2025 by rpki-client