This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
File: nSYymrepW4-pWWN12jcInk18Iss.mft (raw, json)
Hash identifier: SU/IfQsp0ZtVd/ShgUpOkbC1NS0RUhXYTTvsY/rI1bE=
Subject key identifier: F5:67:86:D4:AC:5A:44:56:F5:8B:96:17:D1:5B:B0:14:AD:82:AA:CF
Authority key identifier: 9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB
Certificate issuer: /CN=A9156801/serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
Manifest number: 28
Signing time: Tue 23 Dec 2025 06:31:29 +0000
Manifest this update: Tue 23 Dec 2025 06:31:28 +0000
Manifest next update: Tue 30 Dec 2025 06:31:28 +0000
Files and hashes: 1: nSYymrepW4-pWWN12jcInk18Iss.crl (hash: PWDRhvHWc4PvyMV53RBekExDFbmnydWd45VAv5aZlaI=)
2: 777A4FE4A67311F0B63FA56CC4F9AE02.roa (hash: MhcPpDX0ybNW5suRVqJQ8Y/zpF6Sqp1SAZfBtZfMNRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl
rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156801, serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
Validity
Not Before: Dec 23 06:31:28 2025 GMT
Not After : Dec 30 06:31:28 2025 GMT
Subject: CN=694a3741-e4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2c:11:01:2e:7d:10:76:03:96:68:bd:f2:92:
5d:d5:eb:6c:6f:73:f6:ea:51:4f:c2:4d:08:45:fd:
96:fe:db:ff:49:65:94:70:80:da:c1:ca:bb:77:e1:
7a:a0:3f:a0:73:ec:17:fd:fa:d2:28:d6:f3:be:4a:
dc:99:11:29:65:7b:45:6b:56:a0:71:0b:c2:c6:76:
09:e0:af:37:a3:2d:e8:1d:78:db:c6:78:bc:fc:57:
2a:c8:e1:c0:0d:df:6d:a0:6b:fc:15:5e:01:7e:11:
91:3d:31:8e:62:25:31:a2:d3:6c:94:44:fc:3b:b6:
a3:37:fd:64:fe:d0:b2:6c:0d:ee:28:e2:ce:f2:fd:
16:b7:e7:8e:67:1b:3a:0f:31:c6:90:35:dc:5f:8d:
64:28:63:ea:cf:fe:1f:0f:03:3b:83:76:1f:cb:1a:
19:2e:d6:9d:78:ae:c4:31:63:b9:02:24:b0:04:da:
66:ac:df:6d:62:93:0b:3d:9b:70:52:ce:36:99:c4:
1c:90:04:68:9b:21:7c:b0:21:f1:30:87:c4:04:59:
39:20:43:4b:cc:76:25:f4:66:54:e5:bf:3a:ca:1b:
b4:2b:f7:99:4c:9f:24:07:33:9d:89:5a:fe:29:1f:
a1:14:e5:4e:33:91:6a:c3:23:1d:31:37:43:05:fa:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:67:86:D4:AC:5A:44:56:F5:8B:96:17:D1:5B:B0:14:AD:82:AA:CF
X509v3 Authority Key Identifier:
keyid:9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dc:46:07:86:6f:fb:2a:79:ac:f2:f3:df:2b:07:5d:1a:41:93:
91:e4:5a:cf:10:c4:d9:3b:25:ef:01:52:95:4e:cb:a7:16:f1:
fe:75:7a:01:6a:2e:97:68:34:d0:4d:4a:0d:f7:e3:53:a5:ae:
33:d5:e0:6c:9e:74:c9:36:15:7c:90:53:1a:a6:b3:cd:11:5c:
32:51:68:b4:1c:87:df:62:e1:fb:73:30:4d:65:42:38:db:aa:
9c:b8:bc:84:23:45:e3:7a:f9:e4:c8:98:62:43:e8:af:38:64:
c1:30:7d:db:10:99:5e:c3:83:f4:24:72:dc:16:50:5e:4d:26:
2a:ef:93:af:43:ec:35:d0:8f:99:d8:08:1c:7f:95:fe:8d:32:
14:52:bc:db:78:3a:84:3e:af:18:3f:80:fb:da:e7:ee:a1:da:
5d:e6:24:02:9b:b3:f1:21:61:c1:9e:27:75:72:9a:57:a6:df:
0b:10:26:4d:22:f6:f7:d8:ad:4a:30:0c:c9:e9:b9:a1:91:ea:
ee:9e:b4:1c:93:d4:91:54:64:26:68:57:24:30:1d:54:a6:06:
b2:e0:7c:ef:2f:d1:11:87:8d:7c:91:7b:47:a0:2b:59:19:39:
b2:65:63:59:6d:d4:1c:4a:4c:be:4b:3c:10:20:47:11:b5:1b:
8c:a8:0e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 17:41:54 2025 by rpki-client