This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json)
Hash identifier: 6tD+8e+FtstlgNl5PxcOTpAsUZImtpKyPm8o4Yz78pA=
Subject key identifier: D6:38:84:EF:32:E7:0E:3B:57:FF:81:7C:AA:2B:28:2E:82:F2:14:6D
Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B
Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B
Certificate serial: 0C6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
Manifest number: 0C67
Signing time: Thu 18 Dec 2025 18:17:52 +0000
Manifest this update: Thu 18 Dec 2025 18:17:52 +0000
Manifest next update: Thu 25 Dec 2025 18:17:52 +0000
Files and hashes: 1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: j/HnTZT6NdhY40sLGeoGrxE9qWxAF4cuG/NE1BdlFto=)
2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: Sb4C6SBlwbEgArJd0mwobbSvCSiB+bY80WW0ZbhEHoI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl
rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 18:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3182 (0xc6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B
Validity
Not Before: Dec 18 18:17:52 2025 GMT
Not After : Dec 25 18:17:52 2025 GMT
Subject: CN=69444550-f112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:51:9d:82:53:51:7d:c9:19:1b:31:2e:72:
49:ca:c7:7e:6b:d1:34:0b:ff:4d:14:1c:37:53:c4:
ef:6e:df:dc:54:41:cd:d7:e6:e7:be:6c:a5:79:06:
9d:f5:9b:1c:8c:e1:9f:0c:3a:47:97:c8:f7:e0:43:
7a:b8:8a:92:04:89:ae:ad:4c:de:b0:38:6a:9a:56:
7c:8b:9b:e7:d9:0f:3c:94:ae:4e:f8:12:bd:da:fa:
13:48:25:96:e9:11:88:eb:7a:56:f3:02:f6:ef:d6:
10:79:26:61:40:35:d8:8e:9a:28:e8:3e:d4:03:66:
f8:60:c2:c3:20:f4:fe:d8:97:c2:74:ed:ba:0e:8f:
f6:20:9e:dd:46:17:eb:2a:78:60:3c:b6:16:d1:a9:
54:59:01:f6:22:9f:54:56:82:e7:d5:31:26:75:e1:
e0:df:53:c3:3e:0a:37:d6:eb:54:c6:c8:f2:c5:68:
46:7a:09:35:e1:fa:54:16:8f:a8:03:72:a6:b1:86:
d6:b0:bb:e2:df:fd:e2:67:e4:91:50:83:24:ed:bc:
27:af:97:3d:da:fa:2e:7d:8a:ac:91:e3:f2:f3:fe:
a5:aa:08:ea:bc:37:19:79:de:4c:6c:88:07:95:d8:
27:86:49:d9:e1:38:13:fb:38:e7:c9:8c:de:ce:61:
c4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:38:84:EF:32:E7:0E:3B:57:FF:81:7C:AA:2B:28:2E:82:F2:14:6D
X509v3 Authority Key Identifier:
keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:6d:35:bc:8a:56:40:aa:37:5e:8f:f0:84:c1:41:a7:a7:fe:
a7:d1:90:c7:6a:fb:f8:13:46:e1:3a:53:8b:fa:a8:14:ea:44:
f1:ac:44:b9:db:14:7c:bd:76:6a:3e:ed:ac:b3:2b:ad:c3:55:
27:ef:ba:67:c1:2c:6a:b3:99:60:f3:dd:50:3f:1c:8a:8a:88:
d3:11:76:22:c6:c9:2e:0f:a4:4a:05:8a:a7:e6:63:33:ab:ec:
b8:4b:c9:56:dd:c2:a2:bb:5e:3f:74:09:a5:e7:0c:b5:47:b7:
50:7c:fe:0d:28:c3:43:5b:28:a9:ea:c8:67:e5:56:d4:50:7a:
7a:41:67:90:7e:07:21:68:50:14:c8:65:64:1b:fc:ff:7c:e9:
86:93:0f:9c:1e:be:d3:0b:c9:b1:f2:ff:25:0c:99:12:74:45:
56:fb:d7:c0:3a:fa:58:35:5e:6c:0d:61:a7:6b:43:84:1b:84:
1c:cc:84:7c:c8:f1:dd:d8:d1:78:88:82:82:b7:66:da:f7:85:
1f:fd:39:e8:b1:f7:52:e1:e8:d9:40:ae:0c:8e:85:37:32:69:
f4:e7:b5:95:64:d2:ab:3b:14:ff:db:30:71:48:d1:f5:db:79:
ff:7b:a0:72:99:4c:9c:ee:93:c4:3a:41:a6:9c:43:0f:2c:d4:
0e:33:ae:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:35:37 2025 by rpki-client