This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json)
Hash identifier: N/pK5tWQVdAXv0qVLgmGctzQTgSknx2VxqwdksejdWQ=
Subject key identifier: 6A:BF:EC:87:1E:7F:23:FB:09:50:9F:17:EA:D6:14:57:69:AE:9D:F4
Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Certificate serial: 10B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
Manifest number: 10AF
Signing time: Mon 22 Dec 2025 17:01:46 +0000
Manifest this update: Mon 22 Dec 2025 17:01:45 +0000
Manifest next update: Mon 29 Dec 2025 17:01:45 +0000
Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: IpdaOO6C/g7+wLutDkoQnsEiIMmzxoa/XN0X9b7Ycl0=)
2: 566988C8717411E9AF629E4BC4F9AE02.roa (hash: EtmvbN1xVVE7PUjHrIh1I7up8NoBR/klrPWqoCS0Bq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 17:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4280 (0x10b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Validity
Not Before: Dec 22 17:01:45 2025 GMT
Not After : Dec 29 17:01:45 2025 GMT
Subject: CN=69497979-78e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:18:a2:f6:fc:39:aa:c0:4d:ca:0a:8b:b2:
02:d7:b0:67:72:76:73:23:3a:cd:6d:71:5a:1c:a0:
ac:17:41:24:61:e7:8a:44:13:fa:e0:e3:bb:27:b4:
fa:e6:82:2c:8b:45:98:1e:b4:2a:5b:e3:41:4c:6f:
94:bc:91:84:d5:ca:c6:8b:a0:8a:70:61:3f:09:97:
5d:fd:37:05:0c:f7:66:05:94:a5:88:90:b5:e3:05:
19:15:57:19:18:32:57:34:72:04:1a:f6:90:62:f9:
82:5a:e0:89:8d:d6:70:70:ad:c7:1f:e8:c1:f0:25:
f5:ec:84:17:6c:20:82:1a:61:55:72:0f:49:5a:bb:
f4:9b:cc:ed:a7:3a:6a:a1:36:42:36:8c:69:1b:d6:
5b:56:68:a6:df:93:7e:85:27:2c:81:26:be:f9:b0:
77:a5:43:00:d1:a9:4e:67:6b:bb:2d:07:f5:e7:6e:
bd:12:6d:f8:b5:ff:bb:54:bb:44:f5:45:1f:ab:93:
66:e0:8e:9c:66:31:1c:62:15:eb:57:02:6a:be:85:
77:f3:e4:52:56:9a:49:1e:c0:54:dc:dd:33:f0:85:
95:61:97:67:3a:bc:2f:cc:e7:b7:7f:b6:a9:54:19:
17:b3:2c:8f:8b:1e:ec:2a:73:ee:76:f8:c5:0e:52:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BF:EC:87:1E:7F:23:FB:09:50:9F:17:EA:D6:14:57:69:AE:9D:F4
X509v3 Authority Key Identifier:
keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:9b:4f:ba:02:c8:84:34:9d:41:2e:fa:d1:0e:69:ae:80:0b:
48:b1:54:2d:60:2e:43:6f:e4:1a:f2:96:f9:9d:22:76:64:e2:
75:6b:9d:dd:5e:81:c5:e4:2b:7e:1b:a9:29:e1:f5:5e:0f:bf:
24:29:e0:6c:99:6a:df:7a:9c:83:b5:30:4b:9d:18:d7:a1:d7:
67:ab:94:5d:2d:24:a6:5d:48:f9:44:92:1f:f2:19:63:62:3f:
a5:ff:ed:3b:37:03:d8:fb:4d:de:0b:32:5d:f0:c6:c4:91:c1:
a4:5f:0d:7f:4c:99:12:22:03:60:e0:9e:9d:a9:16:77:38:98:
49:ba:39:ea:e3:df:26:5f:db:24:a4:87:b4:15:b5:07:ad:b4:
c8:66:44:d0:87:38:6f:fe:f5:9e:68:ba:e7:e2:93:92:f6:3d:
07:3a:4b:50:88:6e:09:f8:ac:c4:13:d5:85:b7:77:28:8e:9d:
69:6e:8b:39:bf:bd:8c:7c:03:cf:77:00:9d:d2:d9:36:6e:bf:
0d:7f:8c:d7:18:5d:bc:b9:15:47:30:fa:49:be:68:cd:eb:39:
07:6b:09:2f:07:47:8f:31:e5:d6:26:28:57:5f:52:46:39:81:
f6:01:66:a1:ac:7b:90:fb:96:fd:b0:cf:9f:58:65:b1:d9:a3:
48:e1:eb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:35:04 2025 by rpki-client