This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json)
Hash identifier: 7drynwTRUJgo7+1xZAjYHZQ8tbFLRixAmEKbacGAvdQ=
Subject key identifier: 51:60:5F:02:3B:83:1D:22:D3:B5:9E:B6:B6:C7:D9:08:0D:0D:E2:A6
Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Certificate serial: 1E62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
Manifest number: 1E53
Signing time: Thu 18 Dec 2025 15:59:08 +0000
Manifest this update: Thu 18 Dec 2025 15:59:07 +0000
Manifest next update: Thu 25 Dec 2025 15:59:07 +0000
Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: Xmm/n+hDB+eNmMdU9kJSoSe5fyMLiMgoHszhk/vFZSA=)
2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: BOcTF/v1Iy0DiJnxrZO8Yz9Fl7UTM9AhzmrK/G2Rmxo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 15:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7778 (0x1e62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Validity
Not Before: Dec 18 15:59:07 2025 GMT
Not After : Dec 25 15:59:07 2025 GMT
Subject: CN=694424cc-556e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:c8:13:01:b5:05:e6:cd:37:42:11:99:81:
9f:99:1a:ae:79:f5:03:9b:2e:4f:11:7d:3b:d2:db:
c4:dd:40:57:6b:4f:aa:e6:ef:57:05:68:8d:38:db:
a5:96:59:55:09:74:f6:87:38:16:b6:01:36:9a:7d:
72:9e:d6:0e:8d:95:a3:12:cd:7b:46:35:b5:3d:56:
04:b1:70:8a:a1:76:9b:68:6c:6d:e8:7d:6c:d8:70:
b3:ab:9c:2c:b1:03:f4:16:6d:e3:80:78:cc:4c:ff:
43:9a:d2:bf:f4:cc:59:bc:6c:d2:e1:e5:88:5d:83:
a8:45:74:e6:57:18:99:d6:0d:8f:6a:be:c6:a8:c9:
b3:cf:fb:29:21:19:cf:57:c7:55:bb:e2:50:5c:21:
67:ef:11:ff:62:93:b7:5c:e5:0f:bc:d6:fe:8f:82:
4f:67:e3:fc:e8:2c:7a:c2:c7:1c:b7:4f:11:ad:5c:
1d:d9:a5:2a:b2:ca:df:f6:c0:72:ce:8c:92:d5:3c:
24:f3:97:89:48:1d:91:39:d4:b0:59:31:9e:eb:73:
82:72:0e:f5:65:d8:a6:1f:64:ac:a5:66:2c:09:e9:
c2:2a:6b:cb:89:e6:d2:e9:13:22:02:78:ea:4d:a3:
65:3d:3e:fd:1c:48:c7:28:65:33:c0:26:42:81:b4:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:60:5F:02:3B:83:1D:22:D3:B5:9E:B6:B6:C7:D9:08:0D:0D:E2:A6
X509v3 Authority Key Identifier:
keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:81:13:2f:79:34:31:a5:dc:10:44:bd:3e:c5:52:b1:7e:d5:
5f:84:66:47:72:07:9c:a9:da:c4:2e:f9:d1:24:78:82:95:55:
c9:1a:b6:2c:65:20:d4:9c:34:aa:ce:62:24:cb:94:ef:97:5e:
97:5e:e3:5e:0e:21:98:0e:f4:db:31:b0:e2:e1:13:36:cb:9f:
c6:54:bb:51:4a:11:ef:b4:be:30:97:86:1d:31:1f:6d:c4:40:
ac:6c:44:ad:70:e4:a9:60:48:08:32:92:59:96:94:f7:76:34:
5e:ab:eb:ce:7b:93:c2:bb:d8:2d:75:6e:7c:89:72:46:2d:46:
a5:87:e9:2d:57:fd:44:01:74:17:c4:d6:fd:c7:83:78:38:ee:
28:96:12:31:b9:31:57:6e:fc:1c:a9:bf:7a:93:5e:eb:6f:5f:
2a:00:f3:7b:4e:75:83:87:61:6f:92:a7:c8:dc:1f:5a:34:9f:
89:6d:7d:a5:41:04:84:9b:b1:17:79:ef:e9:19:77:ed:bc:b8:
20:8f:05:42:cf:b9:3d:06:c7:cc:f3:8c:6f:4d:3f:8f:10:3d:
1f:08:92:f0:a1:18:6a:40:3b:9f:62:00:d2:aa:b4:5d:08:b0:
eb:96:f1:e0:85:e6:fa:ac:eb:8b:74:af:f1:ab:10:b2:05:98:
46:37:5b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:32:36 2025 by rpki-client