This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json)
Hash identifier: 7SkMzx6IkFyS5yWhj4bia1xIaSUxQuFRttAjLgHOnsk=
Subject key identifier: A5:FF:2E:9B:38:CF:B2:73:90:E5:CC:F3:B1:7F:24:B4:29:47:54:92
Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8
Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8
Certificate serial: 198C
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
Manifest number: 4B8F
Signing time: Mon 08 Dec 2025 15:15:02 +0000
Manifest this update: Mon 08 Dec 2025 15:15:01 +0000
Manifest next update: Mon 15 Dec 2025 15:15:01 +0000
Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: OiuPGKmAgjZpGOmrpr+OMV++eNTCcLNb131/XoIQNB8=)
2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: fnrYZYlCN57UVfp7zz/b0ADCI8GQeD8xxQSWqXCF91M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Dec 2025 15:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6540 (0x198c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8
Validity
Not Before: Dec 8 15:15:01 2025 GMT
Not After : Dec 15 15:15:01 2025 GMT
Subject: CN=6936eb76-ab59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:64:b7:47:60:e7:97:39:eb:ab:b6:92:ce:
0a:44:8b:e1:98:61:5d:c1:ca:fb:86:5d:f3:cf:70:
85:b7:67:0a:3f:c6:7e:7a:75:ee:98:38:f6:eb:e3:
25:c6:50:43:9d:60:63:5b:51:e3:91:65:5e:fb:4e:
3b:78:1c:ef:22:43:49:42:7e:8e:c7:27:2a:98:65:
ad:97:3c:ca:24:4a:21:ce:07:aa:bd:a3:a8:3c:22:
c2:1a:1a:01:9e:eb:f2:94:52:8b:c2:2b:46:b8:e7:
2f:94:48:fe:64:e7:b0:c1:70:6b:95:84:0e:1f:57:
74:ce:b4:eb:8d:32:a8:9c:61:46:35:10:39:d3:72:
45:4e:85:b3:f6:fc:be:9e:b4:e9:ad:14:1b:f4:07:
44:9b:ec:ec:07:2c:8f:7e:1c:75:3c:f4:05:1c:35:
18:65:c8:83:98:63:8e:cf:83:be:54:94:a9:af:47:
29:7a:2b:d2:ce:4c:63:c4:80:c3:a8:de:b6:66:e0:
5c:8b:44:2b:d5:db:0b:09:d8:0b:e7:ad:bc:ca:18:
45:a9:9b:68:53:79:b7:e8:3e:15:91:86:17:ed:66:
27:cd:8b:29:3c:7b:58:f2:6d:c2:df:5a:5c:b7:55:
73:a6:a9:a5:23:0a:5e:90:35:c7:3a:ab:52:82:7f:
3e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FF:2E:9B:38:CF:B2:73:90:E5:CC:F3:B1:7F:24:B4:29:47:54:92
X509v3 Authority Key Identifier:
keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:19:86:67:bd:cd:f4:02:87:78:27:ac:7a:82:e1:39:86:52:
87:b6:48:bf:06:da:54:03:f7:d1:7b:11:af:0b:06:47:b5:e9:
08:2a:a0:da:23:54:15:38:7b:3c:ef:cb:81:7f:67:42:ed:04:
77:d2:73:f2:17:3f:f5:76:98:dd:b8:e3:80:2f:b0:57:93:d8:
f4:83:80:b0:94:eb:10:18:80:d7:de:ec:70:69:75:f1:60:d6:
4a:60:e3:f0:3c:56:22:2e:1e:2e:5d:a6:30:78:bb:fb:4c:ee:
b1:84:23:40:18:09:79:8a:59:92:62:8f:55:ef:bb:fc:02:fc:
8d:f8:9b:c2:c4:99:e4:14:92:8a:b8:7e:d1:15:dc:7a:f3:5c:
72:a3:43:e1:d4:40:52:29:af:72:f0:78:06:67:cd:bb:7a:57:
52:77:fd:68:46:b1:ea:aa:ff:09:78:26:58:c5:df:e9:f9:e7:
1e:45:f7:92:f6:f7:2c:a4:3f:73:16:e0:b1:14:b4:22:5e:ca:
49:54:f8:a3:02:4d:f3:75:8a:c6:b4:cc:ae:6f:69:97:62:30:
03:95:d1:ee:b2:ce:b7:73:f0:92:31:38:26:a5:90:4e:3d:39:
77:a0:27:9b:e2:a2:88:e9:b9:f2:f1:6b:80:ec:8d:80:2c:bf:
4b:01:d3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 13:30:39 2025 by rpki-client