This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft
File: NGwg84nbntxqG_L0AxqaFwO-h-E.mft (raw, json)
Hash identifier: RoHLKhr2hCuCniAIIaqXQUQlkbcVuOAPYa9TRmaiCN4=
Subject key identifier: 3F:2F:C7:08:4A:6E:DD:4E:B8:0F:AC:AC:6D:A2:EB:4D:05:D5:05:C6
Authority key identifier: 34:6C:20:F3:89:DB:9E:DC:6A:1B:F2:F4:03:1A:9A:17:03:BE:87:E1
Certificate issuer: /CN=A914E928/serialNumber=346C20F389DB9EDC6A1BF2F4031A9A1703BE87E1
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft
Manifest number: 1E
Signing time: Tue 23 Dec 2025 06:49:34 +0000
Manifest this update: Tue 23 Dec 2025 06:49:33 +0000
Manifest next update: Tue 30 Dec 2025 06:49:33 +0000
Files and hashes: 1: NGwg84nbntxqG_L0AxqaFwO-h-E.crl (hash: 1IhaDComsGJIWtdXyhwlm+7p2wVlo4hurk+gQy6TYe0=)
2: 1E50C954D4B611F098D4561EC4F9AE02.roa (hash: u9vxSEeF71FktTFmVKKaYHom90pW7KjDsd5fo0Vc2l0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.crl
rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:49:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E928, serialNumber=346C20F389DB9EDC6A1BF2F4031A9A1703BE87E1
Validity
Not Before: Dec 23 06:49:33 2025 GMT
Not After : Dec 30 06:49:33 2025 GMT
Subject: CN=694a3b7e-6d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c3:8b:14:6f:d5:b7:04:e7:d9:07:69:33:67:
4c:54:82:24:08:19:d8:db:fb:9b:1c:a7:b4:d8:5e:
99:35:42:56:0b:c4:a8:b4:eb:65:94:d9:12:df:99:
30:8c:0e:0e:96:98:a3:9f:8d:31:88:87:68:f5:77:
ed:96:e8:bf:3e:be:1b:ca:a1:4e:1c:77:b4:e4:1d:
39:57:c2:21:cb:de:ff:67:b8:6a:54:18:df:a7:ab:
02:ee:dc:3e:3b:c0:bc:de:67:05:91:a1:99:fb:33:
fc:9f:24:63:e3:44:7d:aa:e2:53:56:2a:3a:e5:2e:
e7:ad:ba:00:4d:3c:cc:02:75:b5:bc:40:cd:32:d2:
6f:6e:19:2f:b5:b5:d9:cd:f7:16:30:71:30:63:da:
27:21:98:fb:bf:85:c0:5f:fb:60:51:4e:16:17:5c:
df:73:cc:e9:a8:e4:b0:53:ff:88:3a:1b:d3:7a:6d:
c5:c6:32:cb:4d:ae:af:45:2e:d1:d4:b5:a2:cc:bf:
1d:58:fd:9c:17:38:ac:b4:58:a3:a7:40:9a:6f:fa:
64:94:34:7a:5a:a1:62:5b:6f:64:d0:47:25:2d:60:
0a:8a:33:c1:54:4b:71:19:56:88:19:1b:11:9f:9c:
5a:21:c9:78:c6:fd:11:6a:89:66:8a:cc:66:37:be:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2F:C7:08:4A:6E:DD:4E:B8:0F:AC:AC:6D:A2:EB:4D:05:D5:05:C6
X509v3 Authority Key Identifier:
keyid:34:6C:20:F3:89:DB:9E:DC:6A:1B:F2:F4:03:1A:9A:17:03:BE:87:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:44:86:23:a1:47:dc:6c:d0:13:64:ac:16:e3:f1:31:35:0d:
ce:83:39:80:39:cf:46:0c:b1:e2:4b:92:75:2b:e5:ec:d4:2e:
f7:83:50:f9:04:13:c0:6e:d8:a5:fa:db:10:8c:26:3c:5a:65:
48:92:00:1f:b9:28:fb:2f:15:df:92:e7:3d:91:09:e2:64:85:
86:ae:5f:b0:fe:fe:f9:19:54:82:b9:86:f0:3d:47:80:af:a5:
c7:7e:10:fb:0f:19:22:7a:22:fe:56:6c:76:a3:5b:68:5b:a6:
eb:fe:41:e5:e7:77:10:b5:5e:a3:bd:8e:a0:9c:84:20:7c:b4:
45:f4:db:93:6e:c2:03:57:0e:c3:8f:8b:bc:da:3b:38:4d:a7:
fb:89:2b:c2:e5:c7:25:ae:bc:18:5c:c8:2f:10:e1:ec:bf:0b:
06:84:55:67:38:b4:17:29:e9:de:23:76:c4:04:6e:0b:95:d1:
91:d7:9e:fd:16:3f:03:ad:11:0d:df:2b:d9:24:81:4b:fd:23:
a5:57:a9:d9:f6:ae:ae:30:fd:bd:7f:6b:97:b3:ae:43:8c:6c:
d6:f6:58:44:a5:52:9d:1a:4b:32:a5:1c:df:3a:49:0d:27:77:
bb:56:32:41:0d:39:1d:b5:37:d3:ca:92:0e:fe:da:95:3d:6a:
af:81:2c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:48:29 2025 by rpki-client