This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
File: NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json)
Hash identifier: W0V4n0V7y15hMcIDDykFAndbNz9m2bg/MUk+FvKU6mM=
Subject key identifier: C9:B7:D0:E8:FF:EF:CF:0C:EB:5B:6F:95:8B:8D:C2:68:58:E0:CD:A4
Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
Certificate issuer: /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB
Certificate serial: 0B28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
Manifest number: 0B21
Signing time: Mon 22 Dec 2025 18:46:16 +0000
Manifest this update: Mon 22 Dec 2025 18:46:16 +0000
Manifest next update: Mon 29 Dec 2025 18:46:16 +0000
Files and hashes: 1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: VkSBC/V5ZjYmjr+v+aYWvXmZ2027XSNl9fAxgxrgONM=)
2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: PexI7Ux7URSg3e/gBgi7b1d+EMkFgIyBhb6944l9JRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2856 (0xb28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB
Validity
Not Before: Dec 22 18:46:16 2025 GMT
Not After : Dec 29 18:46:16 2025 GMT
Subject: CN=694991f8-4f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7a:30:89:81:e3:92:14:86:ca:d5:5e:f0:3b:
65:78:47:5b:1e:a4:e7:72:56:68:12:96:57:85:ce:
12:fc:7f:24:6b:85:fa:73:b3:c5:63:d5:0b:00:69:
ea:25:f1:ef:e2:03:b7:3a:e8:a7:62:de:30:ab:db:
75:17:f0:5a:c8:55:16:78:77:a1:dd:9f:d0:ac:4b:
86:39:b7:f4:9f:38:23:9b:ca:22:e3:ed:62:3b:10:
8c:31:d5:77:dd:80:e6:e9:81:2a:7e:3a:fb:db:20:
e9:88:c4:21:90:67:d8:13:13:44:7e:79:aa:88:6b:
69:b8:e9:15:1b:01:3d:64:38:6c:fe:e8:e1:14:dc:
32:f3:80:61:e2:9d:bc:a9:c4:56:0d:c4:56:3b:8a:
9f:0f:2c:a6:88:10:37:33:fd:93:8c:d8:17:4c:32:
fe:85:77:35:83:d7:d9:c7:4e:fd:4d:02:fb:8a:56:
14:ad:09:ca:6e:14:02:b1:8f:84:49:fe:5f:9b:16:
02:6f:48:e3:28:54:58:c8:54:3e:1f:d5:9c:44:f1:
44:dc:a6:58:c6:07:be:ca:90:47:c2:57:5d:40:a2:
2d:82:bd:15:54:3b:61:87:68:cd:14:8e:39:81:01:
f9:b3:8a:13:7d:14:dc:59:d7:d0:c3:28:d8:ba:b1:
1e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B7:D0:E8:FF:EF:CF:0C:EB:5B:6F:95:8B:8D:C2:68:58:E0:CD:A4
X509v3 Authority Key Identifier:
keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:94:39:e8:fa:d1:0f:bf:bb:37:b8:fe:ec:8e:b6:53:86:d6:
bb:80:a3:6e:51:b4:97:ba:e3:ab:8f:4f:66:e9:da:18:e3:c6:
b6:22:79:19:e3:74:be:c8:62:6f:24:fe:45:26:d0:15:b7:ed:
8d:df:97:4c:6a:26:65:96:a0:ff:36:6d:e2:12:94:e3:b6:ad:
8c:a0:9e:d3:df:30:ec:21:58:70:09:51:b7:cf:d7:23:42:c1:
9e:6f:ca:ab:a6:84:45:91:fd:f1:26:e4:85:eb:5f:c6:80:d6:
63:24:f3:20:0b:5f:74:ba:b5:cd:58:7f:62:b5:36:27:1e:aa:
a9:0a:79:09:d9:ef:4b:eb:f4:89:f0:63:09:3b:f5:89:62:53:
ea:1b:55:b3:32:65:62:68:2e:f6:70:3e:bc:3c:72:86:de:d1:
9c:84:00:2b:f9:79:a8:f3:df:e6:10:93:83:61:f0:e6:5a:4d:
b0:27:b7:9b:e9:71:95:e3:58:00:c4:c9:33:31:7b:93:41:b4:
e8:d5:bb:0b:71:e3:1c:0d:10:a6:7b:17:9e:24:4c:30:51:e8:
1f:3f:38:43:5d:b9:6c:87:16:76:7f:7c:2c:1f:8d:3f:c7:95:
fc:6c:94:35:19:db:35:b4:cd:10:af:a8:98:54:6e:18:8c:60:
82:ae:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:41 2025 by rpki-client