This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json)
Hash identifier: 4ZMxSZz4+fpe6xSgmiuTfrJq4431vWablD5KToNuviI=
Subject key identifier: 4D:FE:D1:92:F2:39:F4:11:75:6B:2B:8B:E4:7F:2B:06:4A:95:CE:4C
Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
Manifest number: 0131
Signing time: Tue 23 Dec 2025 03:33:47 +0000
Manifest this update: Tue 23 Dec 2025 03:33:47 +0000
Manifest next update: Tue 30 Dec 2025 03:33:47 +0000
Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: UVd31WFlws8Sel4wdjdzWwPkfVcD2Cjh8jHhcLeFYvU=)
2: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: G6b5iOlkKludFCzss6jnAMWJYZcz6E/s4QELN3EDX6c=)
3: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: ppr+f3CQLMrxRnmkUupoZgwnP/LYRvSbiOC7CwxVMhs=)
4: BB90D9FECF4B11F08EB76486C4F9AE02.roa (hash: vyWjtraKy2uNU188bHY1lVeQD/xqPddD3pXN0n/73vU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Validity
Not Before: Dec 23 03:33:47 2025 GMT
Not After : Dec 30 03:33:47 2025 GMT
Subject: CN=694a0d9b-f01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:e8:1b:f2:6c:f4:40:4b:ab:a5:9b:92:40:
b9:b3:21:04:3e:a6:17:32:04:6d:20:51:59:25:56:
ff:ff:e3:9c:69:40:01:a4:98:8f:e8:88:27:a2:94:
2a:5e:dd:c0:fc:49:b7:79:6c:45:5d:1e:a7:90:df:
86:f9:64:f3:af:ac:64:07:a4:d0:bb:a3:c5:16:72:
3a:e5:eb:52:0d:37:60:1e:43:ad:28:03:83:3d:75:
ed:0b:83:1d:a2:cb:41:cc:4c:f3:41:39:48:2d:61:
56:19:71:40:39:14:7f:be:e8:40:7c:34:3f:dc:18:
5a:65:54:b4:7b:50:56:ca:b3:2c:66:dd:4d:18:13:
11:e6:08:2a:0e:0e:c5:87:a6:c4:d4:f1:3b:51:8c:
6f:ef:b6:1d:77:a7:47:25:b3:1b:92:4e:34:5f:f3:
56:5b:52:ca:4d:6f:3a:1c:b6:81:51:90:ae:ff:bf:
03:11:f7:1c:c8:c0:91:47:43:66:6d:3d:30:8c:11:
f1:9a:fc:ed:c5:2e:31:4a:05:57:e7:3c:c0:72:22:
d3:a8:25:b6:3c:cc:c9:8b:41:97:e9:cb:e4:25:82:
eb:8b:4b:d8:17:79:9c:f8:56:cd:24:f6:b3:01:2c:
b7:d8:1a:ae:73:f3:1e:bc:42:58:73:6a:51:e1:78:
ee:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FE:D1:92:F2:39:F4:11:75:6B:2B:8B:E4:7F:2B:06:4A:95:CE:4C
X509v3 Authority Key Identifier:
keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:62:ca:68:8e:d0:fd:59:a9:13:b2:77:4f:85:c2:51:f6:a5:
aa:77:82:37:1b:aa:c2:15:f0:02:38:08:b8:a0:e2:01:09:d2:
10:e1:05:85:08:1d:0b:a7:2f:be:4b:a1:88:43:5c:af:42:7d:
d0:0f:79:80:bd:0b:c7:bb:e1:81:90:ec:3b:f0:16:c9:49:e5:
81:a4:79:d4:2d:09:bf:df:c2:da:41:9c:4c:f5:1a:6b:e4:88:
e7:63:6e:61:ba:f1:63:b6:2f:48:6e:34:7d:50:0b:f9:e8:0c:
29:8b:1d:12:c7:2b:1f:48:74:4a:85:b5:7b:24:84:e7:bf:56:
eb:d1:b9:78:bf:7d:09:31:80:21:50:77:bc:03:26:0e:86:f3:
5c:d1:32:87:69:39:62:51:24:30:f3:fe:67:a5:52:d1:5b:73:
87:53:fd:81:0e:ac:59:4f:a7:ec:9f:30:ee:92:24:cb:13:0a:
b2:b2:ac:32:ea:24:7a:e5:9f:15:51:de:ec:db:a9:33:7e:88:
f9:ab:4a:e5:83:df:35:2b:d5:d0:8a:a0:52:41:25:77:1f:d7:
51:9c:71:5e:c4:8e:d1:6a:75:64:14:23:06:cd:9b:18:7b:2d:
47:1e:c4:3d:07:30:4b:45:8a:de:37:ab:43:f7:cd:10:b5:98:
af:38:dc:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThBNjkxMTAvBgNVBAUTKDM1MDczMUI2NjA0NEQzNEEzRDJEQTc1ODlCRDgzMzFE
MTQ1RkU0OTgwHhcNMjUxMjIzMDMzMzQ3WhcNMjUxMjMwMDMzMzQ3WjAYMRYwFAYD
VQQDDA02OTRhMGQ5Yi1mMDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwZToG/Js9EBLq6WbkkC5syEEPqYXMgRtIFFZJVb//+OcaUABpJiP6IgnopQq
Xt3A/Em3eWxFXR6nkN+G+WTzr6xkB6TQu6PFFnI65etSDTdgHkOtKAODPXXtC4Md
ostBzEzzQTlILWFWGXFAORR/vuhAfDQ/3BhaZVS0e1BWyrMsZt1NGBMR5ggqDg7F
h6bE1PE7UYxv77Ydd6dHJbMbkk40X/NWW1LKTW86HLaBUZCu/78DEfccyMCRR0Nm
bT0wjBHxmvztxS4xSgVX5zzAciLTqCW2PMzJi0GX6cvkJYLri0vYF3mc+FbNJPaz
ASy32Bquc/MevEJYc2pR4XjugwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3+0ZLy
OfQRdWsri+R/KwZKlc5MMB8GA1UdIwQYMBaAFDUHMbZgRNNKPS2nWJvYMx0UX+SY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEE2OS9DNjIwMTFENjBD
RTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAwbzlMYWRZbTlnekhSUmY1
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05RY3h0bUJFMDBvOUxhZFltOWd6SFJSZjVKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OEE2OS9DNjIwMTFENjBDRTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAw
bzlMYWRZbTlnekhSUmY1SmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnYspojtD9WakTsndPhcJR9qWqd4I3G6rCFfACOAi4oOIBCdIQ4QWF
CB0Lpy++S6GIQ1yvQn3QD3mAvQvHu+GBkOw78BbJSeWBpHnULQm/38LaQZxM9Rpr
5IjnY25huvFjti9IbjR9UAv56Awpix0SxysfSHRKhbV7JITnv1br0bl4v30JMYAh
UHe8AyYOhvNc0TKHaTliUSQw8/5npVLRW3OHU/2BDqxZT6fsnzDukiTLEwqysqwy
6iR65Z8VUd7s26kzfoj5q0rlg981K9XQiqBSQSV3H9dRnHFexI7RanVkFCMGzZsY
ey1HHsQ9BzBLRYreN6tD980QtZivONwZ
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:13 2025 by rpki-client