This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
File: nLnwNCujTijkVM2SOEk0ZgWxxjI.mft (raw, json)
Hash identifier: bR96EpWAK+CDOLJt55Z9PrxqF8YHzHJNvAYm4AwQ67g=
Subject key identifier: 28:55:40:7F:71:30:A1:8F:73:AA:B1:98:E8:77:B2:A1:A5:AF:DB:42
Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
Certificate issuer: /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Certificate serial: 05AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
Manifest number: 059F
Signing time: Sat 06 Dec 2025 21:59:44 +0000
Manifest this update: Sat 06 Dec 2025 21:59:44 +0000
Manifest next update: Sat 13 Dec 2025 21:59:44 +0000
Files and hashes: 1: nLnwNCujTijkVM2SOEk0ZgWxxjI.crl (hash: 4R28SJ+C10daWrotpFxU8lYyFipUzayUcoqMendq/Hs=)
2: 77465F12874511EEBEA58225C4F9AE02.roa (hash: xh9UKJYFp+YhsYj95yxNw0UlkYprDVOg6UWQXH5rOS0=)
3: A4331EC89E4911EEA1F8471AC4F9AE02.roa (hash: q68S8qeaTqWEZ5l+4qz/s/O62R3KsNh3wb76imnXzwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:59:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1451 (0x5ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919899D, serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Validity
Not Before: Dec 6 21:59:44 2025 GMT
Not After : Dec 13 21:59:44 2025 GMT
Subject: CN=6934a750-4c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:66:ad:0b:2e:36:3a:35:52:38:a8:79:52:
8c:24:12:c6:7e:3d:b1:52:c4:68:bb:c4:65:19:c5:
94:bc:81:6b:2d:9a:a8:c1:62:ba:f0:72:ae:0d:7b:
80:74:9c:2c:f6:c2:1b:cd:42:c7:4e:24:92:c8:e0:
68:8d:91:f8:1a:99:a3:33:a1:51:4a:77:80:13:4f:
2e:a8:c7:dd:36:43:59:e3:c8:c0:86:39:25:55:0c:
cc:87:aa:d4:4e:cf:4f:97:f0:fd:22:2a:54:4b:1a:
13:6d:5a:e4:8b:39:c5:b0:fb:ac:73:62:4c:91:07:
65:c7:c3:55:e3:9e:bc:61:fb:57:88:d8:78:69:7d:
04:53:f8:aa:47:72:22:32:17:40:a5:d5:78:bc:d3:
03:62:b7:83:54:90:cc:83:f8:7a:63:e6:a7:ae:26:
f0:d6:b7:36:cf:2e:96:a6:d3:da:3d:b0:0f:21:7a:
74:61:ff:d6:80:83:2d:09:08:5e:1c:4e:0f:98:93:
99:ef:42:66:d1:a5:5b:93:11:d0:97:ba:a9:03:41:
bc:40:68:df:ca:3f:26:98:af:18:7f:29:27:a8:94:
aa:8e:54:b1:71:9f:cc:c6:de:2a:93:e4:ec:22:f5:
a7:fc:c0:67:bd:4d:d9:e5:9a:13:1d:2a:2a:3d:a6:
75:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:55:40:7F:71:30:A1:8F:73:AA:B1:98:E8:77:B2:A1:A5:AF:DB:42
X509v3 Authority Key Identifier:
keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f1:7a:c5:c2:1e:c9:9c:5c:01:89:78:b0:46:d3:e2:61:f7:
25:bf:1e:d8:3e:ab:5b:bf:a0:ea:c6:4b:4a:c4:7f:f4:bc:0e:
a4:33:84:2e:b4:dd:9a:8d:f2:5d:80:5b:44:2f:c2:6e:61:d9:
d8:07:3d:41:8a:10:7f:7c:66:00:76:21:49:8c:cf:df:a2:5a:
31:3a:0e:cb:2c:6d:13:2f:e8:d8:83:f9:81:b2:cb:b3:82:90:
8a:6d:c2:0d:67:c6:19:b6:dd:b7:45:93:ac:a0:87:39:7f:a9:
48:3a:d1:fa:10:5b:53:fb:62:2f:f4:f7:10:8d:52:12:75:00:
c1:ec:20:a1:ac:f4:06:f4:f6:31:b5:44:5b:9a:d2:81:f4:f3:
ee:1e:4c:70:7f:89:1b:88:90:69:30:bc:5c:54:a0:1f:6e:c5:
44:35:60:2d:9d:98:67:c7:c2:0d:2c:81:ec:51:60:84:91:52:
fe:05:5c:ae:21:e7:21:6e:b9:62:56:96:85:3a:b2:bb:82:e0:
b6:a4:a4:39:06:3e:33:00:a7:8d:04:66:4a:6a:2d:d5:ab:18:
cf:2a:51:8d:e5:23:be:9c:b9:0d:31:d9:ba:78:30:91:52:3f:
fa:9d:94:c8:46:ef:a6:10:aa:51:4f:d3:13:d8:fd:f3:7b:8c:
39:90:de:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:36:53 2025 by rpki-client