This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
File: NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json)
Hash identifier: +61DbNUe8rneCeM10HJef/k/vA/7CG7IKiCyKkEuVNA=
Subject key identifier: 61:BD:C7:0B:7B:AC:7F:D6:C1:F4:31:23:F0:E2:D2:E0:D4:BC:6C:65
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Certificate issuer: /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial: 07D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
Manifest number: 0D0A
Signing time: Wed 10 Dec 2025 17:29:42 +0000
Manifest this update: Wed 10 Dec 2025 17:29:42 +0000
Manifest next update: Wed 17 Dec 2025 17:29:42 +0000
Files and hashes: 1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: MAJFexLXrW0wrFQMVKbhktU411XiTn6o7wvUn9Bt4ps=)
2: 13D5D992979E11F08E996475C4F9AE02.roa (hash: uqXdul36EDPRkEmn7F3Pi5w/fW3yUykVpbjNAjajNRk=)
3: 5573F3D8979F11F0BD27D51AC4F9AE02.roa (hash: jBmeI5y0SVJB4aMWbKmtmiFdyrbiBVSMzrKP/rJrmhI=)
4: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: lOrA6k7sYmhjZNB1ZlbvSFLY4z9Dna+Fs7CLS+wxvaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 17:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005 (0x7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Validity
Not Before: Dec 10 17:29:42 2025 GMT
Not After : Dec 17 17:29:42 2025 GMT
Subject: CN=6939ae06-0c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:7a:6c:c9:f0:c6:dc:6c:37:82:86:20:45:
fc:f3:a7:4e:9d:0d:5c:9f:9a:90:4e:3a:21:ed:63:
92:12:2e:c6:9d:d1:92:fd:52:9a:98:b8:81:96:56:
3a:a9:c6:07:19:2e:de:54:31:36:f8:5d:85:91:34:
a9:41:4b:4c:14:50:cd:e8:e6:2b:77:fc:4f:73:26:
3a:e9:1d:c9:fc:49:b9:5f:8e:86:ad:48:b6:1e:da:
33:ac:06:1f:6c:48:85:2d:3f:20:10:b2:a3:b8:3e:
37:d4:d6:82:7d:82:45:bb:4f:dc:22:eb:bc:f8:b8:
cd:a6:84:63:7e:44:b3:01:3f:14:ec:0e:5a:5d:d3:
3b:54:c2:16:87:4a:d9:d3:89:44:8c:1d:d4:f3:af:
73:f9:a2:10:83:69:48:73:60:0f:d4:4c:bf:8d:71:
ff:fc:b5:55:1b:bd:c0:d8:a1:48:30:47:7a:4a:ff:
dd:49:8d:35:31:3f:cb:31:8d:03:32:72:aa:b6:a0:
c3:28:10:1d:9b:f1:99:6c:83:c0:c5:6b:80:2e:96:
0b:e2:8a:73:20:ff:56:2c:05:25:91:69:52:9b:3e:
15:26:65:5c:0e:d7:64:10:a2:ad:d2:1a:b8:9c:6a:
72:a7:8f:bf:46:6a:49:e7:2d:57:25:d8:02:b3:7d:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BD:C7:0B:7B:AC:7F:D6:C1:F4:31:23:F0:E2:D2:E0:D4:BC:6C:65
X509v3 Authority Key Identifier:
keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:4d:38:40:96:47:5c:6d:43:ef:85:22:6e:72:44:86:c9:0e:
8d:01:7f:6b:4a:38:df:c1:00:71:f1:6a:7c:8e:18:9e:a2:59:
2a:41:67:3f:e8:64:43:aa:1e:b5:5f:28:5a:b9:2b:3d:26:1a:
58:36:96:7b:32:e5:b1:69:5a:dd:78:7d:69:52:80:5a:8c:1f:
68:9b:2a:1a:50:44:84:b5:6d:97:4a:60:d0:c5:cd:51:28:7c:
17:e4:26:e6:11:ac:2f:fd:42:f7:73:ea:aa:66:22:f1:e7:ce:
1f:37:02:5a:9a:13:e6:95:21:3a:7f:68:02:d1:4c:97:4a:fd:
7f:20:82:4f:e8:70:3a:09:91:0c:60:cd:87:76:9f:d7:b3:0e:
81:71:57:d3:05:8a:eb:04:db:ad:79:37:a4:dc:40:d0:28:e2:
78:e3:a7:59:bb:b6:a8:98:d5:ff:77:ec:53:42:8e:9b:71:cd:
8e:13:1d:a2:9c:72:34:f8:35:d7:94:1d:e3:d2:62:c0:a1:93:
96:96:31:4c:8d:19:a7:14:79:0e:30:b6:cb:f4:c4:00:de:52:
99:ce:8f:9c:e4:d5:3d:0a:83:03:a7:83:c2:6a:58:a8:e7:ff:
de:89:c1:90:e1:b0:d6:f3:39:4f:53:db:26:3e:9e:c3:0a:c6:
00:06:49:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:09:44 2025 by rpki-client