This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
File: njXlPupre8PsKa87NiDpplTAtqw.mft (raw, json)
Hash identifier: Y7fAWGe9d14a3iMazuZMV+jZjAGO6sV9ZAT65DIQkPw=
Subject key identifier: 87:1E:8F:01:D7:B9:E8:31:75:95:EA:FF:AA:96:BA:DD:D0:75:76:6C
Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC
Certificate issuer: /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
Certificate serial: 05B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
Manifest number: 05B0
Signing time: Mon 22 Dec 2025 22:15:28 +0000
Manifest this update: Mon 22 Dec 2025 22:15:28 +0000
Manifest next update: Mon 29 Dec 2025 22:15:28 +0000
Files and hashes: 1: njXlPupre8PsKa87NiDpplTAtqw.crl (hash: IolkchxNy+WKbh0cor+ndgIKu+r+DvvXlltyJ6mFU+w=)
2: E11FA920F11A11EB9F005358C4F9AE02.roa (hash: CdrfPMZy52he8bpwd/sQIj17yAvkU7L0EqcCRVjCrHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl
rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1461 (0x5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91177A8, serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
Validity
Not Before: Dec 22 22:15:28 2025 GMT
Not After : Dec 29 22:15:28 2025 GMT
Subject: CN=6949c300-79aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:72:5b:ff:ca:e9:a2:b8:70:38:53:74:2b:
9e:db:d5:b9:80:9c:b4:4d:02:93:bc:b9:2b:ec:6c:
15:2b:36:7c:7a:c3:3d:25:56:6d:ca:9d:79:4a:05:
5d:df:e5:37:83:ae:0e:17:c1:71:d6:40:94:aa:68:
23:02:a3:1b:2a:55:7d:bb:f8:1c:d6:a4:cc:a0:b0:
e4:e5:60:ad:e2:83:2f:bb:9b:a3:4a:8d:de:ef:58:
44:73:5f:9a:21:38:68:43:14:28:b2:dc:58:b9:f3:
7f:b0:ba:da:97:57:34:23:c1:5e:7e:56:c9:fc:28:
94:5c:d0:f6:bf:ec:fa:b2:8b:8f:bf:0f:22:5b:c9:
74:42:0d:fb:8b:3c:de:44:2f:e6:ba:3a:fc:b3:1d:
7e:20:be:b1:72:46:7b:82:92:1e:81:d6:bd:67:f6:
4c:92:16:b5:65:a4:03:c2:92:69:5f:0f:97:ce:7b:
63:6d:84:ef:06:5e:59:46:42:54:e3:88:d1:a6:f6:
0d:26:f0:bb:46:3b:d6:3f:61:fd:53:c2:28:53:da:
86:3b:d8:46:87:a6:ff:b8:0a:5a:49:17:d2:84:46:
b2:de:86:c5:da:99:8e:21:20:15:d2:58:80:8f:4f:
3a:c4:42:96:45:84:b5:7c:5c:71:5e:f1:31:c0:19:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1E:8F:01:D7:B9:E8:31:75:95:EA:FF:AA:96:BA:DD:D0:75:76:6C
X509v3 Authority Key Identifier:
keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:73:48:0c:bb:34:65:0d:d9:69:b9:b4:43:ab:11:aa:a2:53:
e7:a1:43:fa:ce:ef:8b:c8:b2:88:73:23:88:e3:66:6d:62:61:
bb:d3:3c:c5:5f:31:ed:1e:aa:cd:ec:b5:66:9e:45:f6:a6:85:
2e:96:96:d2:33:6f:65:4e:49:55:b4:e3:b3:52:4e:17:33:05:
f2:3d:3c:d5:11:e0:5f:22:06:32:35:03:56:bd:09:ec:20:5b:
b6:7b:15:10:d7:36:c8:00:12:56:09:f3:77:ba:56:5a:e9:9a:
45:d5:54:51:27:ee:90:f3:24:45:5c:eb:f3:3a:aa:e0:ba:ec:
08:86:f4:41:68:90:21:53:76:8b:1d:cf:a1:5a:87:66:8a:6e:
18:6a:80:b3:4b:c2:8f:93:be:7f:5a:b6:8b:5d:94:0b:f9:f5:
ad:bf:97:b2:36:65:27:e7:31:a3:bd:85:87:4d:32:b9:f2:92:
49:9c:45:33:c4:41:4b:d0:60:aa:ff:ea:30:01:11:d1:aa:19:
a0:9e:90:94:1f:95:d7:b5:bf:f2:05:91:0b:e9:9a:da:d7:47:
4d:9b:de:08:e9:e1:13:84:33:3f:99:27:b5:cb:d3:f5:a3:70:
af:e2:bd:e0:56:10:38:b2:98:f8:17:97:84:7b:ea:32:16:d3:
5b:ee:7a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:36 2025 by rpki-client