This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
File: nUVn--JSxmFkKqM-eASKhxf6fLM.mft (raw, json)
Hash identifier: /CVop8Qdh0bZuErxLWEvG9PRH0gUrAVvha1ppIBU+lQ=
Subject key identifier: 6D:1B:A6:77:B5:AB:90:3F:EF:BD:EB:1F:4D:63:8F:C7:49:8A:7E:1D
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Certificate issuer: /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
Manifest number: 7D
Signing time: Wed 03 Dec 2025 05:00:48 +0000
Manifest this update: Wed 03 Dec 2025 05:00:47 +0000
Manifest next update: Wed 10 Dec 2025 05:00:47 +0000
Files and hashes: 1: nUVn--JSxmFkKqM-eASKhxf6fLM.crl (hash: yu8Wsn68uwGH9BbY0pknv9nyzSjpIsb4F6fIsAOG6jg=)
2: AF75682A101911F09363D44DC4F9AE02.roa (hash: xmriq54EyLF1B3bTExDk9IsDRaD4W5eEAO8AyaCzAaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Validity
Not Before: Dec 3 05:00:47 2025 GMT
Not After : Dec 10 05:00:47 2025 GMT
Subject: CN=692fc400-32e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:28:f4:09:3b:03:48:8d:a5:eb:eb:e4:e3:e2:
a0:27:02:66:2c:31:50:84:13:c6:c4:14:be:45:3b:
0f:4c:b8:17:ca:1b:fe:fd:e8:d3:0f:fc:33:20:3c:
f4:f9:53:0e:af:96:1b:02:d3:70:1e:68:0f:85:15:
24:fd:1b:9b:b9:4e:4b:9f:cd:c4:a1:65:a0:bb:4e:
88:e2:4c:d6:06:8d:93:b7:00:22:39:f5:1a:65:de:
46:a8:07:c2:e6:ef:e4:5e:b3:7f:a7:74:72:21:60:
ea:09:18:c1:bd:af:1c:95:b6:07:dd:03:77:26:cf:
13:b2:d3:10:94:88:95:97:94:98:71:75:eb:21:16:
49:48:69:89:8c:a3:c2:74:ec:dd:3a:d8:1e:a5:53:
40:0c:31:25:c1:2f:d9:c2:af:24:f9:b9:ee:22:8b:
87:2f:92:b1:18:11:c4:a4:06:fa:c5:f9:3f:16:2b:
9a:67:ab:ad:69:e0:ef:6d:8b:81:87:71:84:41:59:
de:c7:2f:4c:7c:f8:51:a6:1d:93:cc:ca:ee:f4:27:
19:d0:cc:98:d2:31:ca:85:56:65:b8:98:82:bb:f1:
d3:5f:53:4b:26:9c:1a:27:c9:2e:e8:d2:5c:94:be:
99:6b:a8:6d:ac:c0:57:e6:86:63:1c:95:91:c9:0d:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1B:A6:77:B5:AB:90:3F:EF:BD:EB:1F:4D:63:8F:C7:49:8A:7E:1D
X509v3 Authority Key Identifier:
keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:db:d2:89:cd:6e:f3:51:3e:c7:67:12:8a:0c:bc:f4:cc:ca:
b5:25:1a:19:54:73:a8:15:8a:ec:40:4c:8f:58:51:c4:a0:3c:
48:64:09:ce:13:b6:98:ea:b3:99:31:b9:b3:de:a3:89:79:51:
4f:d2:f9:01:33:00:d9:85:5e:90:a1:5e:a3:fc:b7:4d:2d:0e:
7d:03:fa:80:7c:21:2d:22:2b:88:15:a7:ac:23:0b:f6:e9:59:
a6:a7:d0:a1:dc:40:e3:c0:1a:7f:4e:7c:1b:ac:eb:77:96:62:
ea:78:5c:12:28:87:59:6c:c1:c0:a1:df:ee:91:fd:15:fa:f9:
d2:06:b8:80:ba:06:e2:4e:59:a8:ce:b8:3e:c1:84:d8:aa:b1:
76:a6:ac:b7:90:49:df:00:31:6f:f8:23:92:56:e9:74:df:95:
cb:c9:a2:4a:b6:d9:a1:bb:3b:b9:7e:cf:e2:7d:1f:04:3b:dd:
ae:de:26:d0:eb:f8:a2:24:3c:12:03:66:5d:ec:4b:8a:01:12:
bb:a4:e1:8f:10:5b:81:d6:a3:a5:9a:f8:b4:e7:89:8e:fe:dc:
ea:34:51:84:1d:3e:23:d3:cd:9c:ab:a7:83:f1:e5:2d:98:c4:
af:74:80:fa:f0:85:28:0a:0e:7b:ee:b4:64:c9:b3:b3:4f:6a:
5f:18:5f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:36 2025 by rpki-client