This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
File: nPapYQAMl2lHu76x0XPCPpCflUQ.mft (raw, json)
Hash identifier: 5oFLmldM3xNSLEm4HoeZcTS2JE4fGQTGnMkjQ+gzCbM=
Subject key identifier: 40:E2:72:C6:33:C7:B8:71:A6:1F:C6:5D:40:7F:E0:10:0C:62:E0:69
Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
Certificate issuer: /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Certificate serial: 0714
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
Manifest number: 070F
Signing time: Thu 18 Dec 2025 21:18:51 +0000
Manifest this update: Thu 18 Dec 2025 21:18:51 +0000
Manifest next update: Thu 25 Dec 2025 21:18:51 +0000
Files and hashes: 1: nPapYQAMl2lHu76x0XPCPpCflUQ.crl (hash: VKu92DfoSw4AZ08R2AzPb2J4Gr3tdl/+zJSdAyHoxQI=)
2: E14DB058662411EBADFEB364C4F9AE02.roa (hash: AGJnIVMVxGCqhPBai/J+rGCznBK2uUe21t16AbPm6pM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl
rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1812 (0x714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FA65, serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Validity
Not Before: Dec 18 21:18:51 2025 GMT
Not After : Dec 25 21:18:51 2025 GMT
Subject: CN=69446fbb-75ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3f:35:37:d4:2b:04:ac:8e:b3:9b:8d:da:20:
4d:6c:43:6a:91:a7:e9:7e:60:65:97:a8:cc:e1:cb:
9e:db:8a:4c:d5:df:46:d7:12:c0:92:5e:08:71:1d:
d0:5d:7b:d6:cc:b0:3f:3f:d9:0f:c4:0d:58:60:4d:
c6:e0:f5:63:29:fd:23:a9:d1:6e:22:6d:08:3c:3b:
d7:42:38:c0:d4:32:9a:b3:df:89:87:4c:81:32:db:
e1:c6:88:a4:c7:90:d9:38:0e:9b:59:3e:6f:ee:49:
13:64:1a:87:0e:f8:20:e1:e9:1c:37:90:e1:c8:54:
29:e1:2b:4a:44:8d:17:51:09:7a:52:d6:91:ee:d6:
0d:e2:53:eb:f0:94:76:71:10:36:5a:95:92:c8:33:
46:18:02:23:ed:39:7a:f1:67:04:60:66:3e:ab:ec:
e1:13:54:38:72:b6:5a:46:82:e8:1d:9d:95:cf:c5:
77:9b:7e:8a:db:12:a5:40:01:d4:3e:d1:f7:cf:df:
a1:0d:41:7c:63:a9:e7:ac:eb:10:57:6f:96:b6:89:
ba:e0:43:3f:4a:7a:f0:9c:c2:cc:5e:5c:e2:79:c5:
4e:37:df:0c:2e:33:19:a6:99:f5:3f:bc:f3:2d:45:
a0:14:9c:8e:d4:be:e1:f8:4f:f2:cb:8c:66:4e:a9:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E2:72:C6:33:C7:B8:71:A6:1F:C6:5D:40:7F:E0:10:0C:62:E0:69
X509v3 Authority Key Identifier:
keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:cd:8a:c9:22:90:18:98:3d:f6:7f:0e:3b:0b:2c:85:6d:f0:
ef:2b:29:e0:64:87:23:36:fa:8c:f1:24:7b:e3:b1:76:45:d7:
c8:87:ef:e1:ee:2d:3a:72:4c:95:5a:ee:37:84:f3:a7:bf:38:
61:ab:25:67:e5:06:2f:18:fd:3c:5a:c4:9d:e0:32:71:40:7a:
ea:40:43:bd:34:b8:0c:1b:3c:3e:2d:55:84:40:24:fc:f8:a4:
31:53:ef:4c:fc:a6:43:e3:6d:4f:08:df:53:ae:6a:9d:b4:97:
25:24:29:09:a8:6a:1c:28:03:95:3f:d1:75:4e:44:cb:fb:96:
3e:7a:6a:12:59:6b:ce:b9:b0:36:55:af:c1:eb:da:6c:e6:a4:
00:a8:df:2c:c2:ff:a5:a5:8c:f6:66:01:0e:4b:79:c8:ab:75:
04:24:87:5f:7e:f2:45:92:53:df:7d:a5:e3:c8:55:3e:22:a9:
23:c6:c6:4f:85:d2:15:5b:d2:6c:58:f9:04:50:e3:ea:00:97:
23:c8:15:3a:42:41:78:43:14:99:52:db:15:7e:8e:36:e9:57:
3d:26:41:fe:5c:88:37:8f:01:df:a0:90:6a:33:b4:a4:3e:ff:
33:4d:69:a5:9d:2b:c8:29:66:30:de:d1:d3:55:49:97:92:1a:
90:d5:96:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZBNjUxMTAvBgNVBAUTKDlDRjZBOTYxMDAwQzk3Njk0N0JCQkVCMUQxNzNDMjNF
OTA5Rjk1NDQwHhcNMjUxMjE4MjExODUxWhcNMjUxMjI1MjExODUxWjAYMRYwFAYD
VQQDDA02OTQ0NmZiYi03NWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2z81N9QrBKyOs5uN2iBNbENqkafpfmBll6jM4cue24pM1d9G1xLAkl4IcR3Q
XXvWzLA/P9kPxA1YYE3G4PVjKf0jqdFuIm0IPDvXQjjA1DKas9+Jh0yBMtvhxoik
x5DZOA6bWT5v7kkTZBqHDvgg4ekcN5DhyFQp4StKRI0XUQl6UtaR7tYN4lPr8JR2
cRA2WpWSyDNGGAIj7Tl68WcEYGY+q+zhE1Q4crZaRoLoHZ2Vz8V3m36K2xKlQAHU
PtH3z9+hDUF8Y6nnrOsQV2+Wtom64EM/SnrwnMLMXlziecVON98MLjMZppn1P7zz
LUWgFJyO1L7h+E/yy4xmTqmjSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDicsYz
x7hxph/GXUB/4BAMYuBpMB8GA1UdIwQYMBaAFJz2qWEADJdpR7u+sdFzwj6Qn5VE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkE2NS85MzVEQ0ZCRTY2
MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwybEh1NzZ4MFhQQ1BwQ2Zs
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25QYXBZUUFNbDJsSHU3NngwWFBDUHBDZmxVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkE2NS85MzVEQ0ZCRTY2MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwy
bEh1NzZ4MFhQQ1BwQ2ZsVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBFzYrJIpAYmD32fw47CyyFbfDvKyngZIcjNvqM8SR747F2RdfIh+/h
7i06ckyVWu43hPOnvzhhqyVn5QYvGP08WsSd4DJxQHrqQEO9NLgMGzw+LVWEQCT8
+KQxU+9M/KZD421PCN9TrmqdtJclJCkJqGocKAOVP9F1TkTL+5Y+emoSWWvOubA2
Va/B69ps5qQAqN8swv+lpYz2ZgEOS3nIq3UEJIdffvJFklPffaXjyFU+IqkjxsZP
hdIVW9JsWPkEUOPqAJcjyBU6QkF4QxSZUtsVfo426Vc9JkH+XIg3jwHfoJBqM7Sk
Pv8zTWmlnSvIKWYw3tHTVUmXkhqQ1ZYl
-----END CERTIFICATE-----
Generated at Sat Dec 20 01:27:40 2025 by rpki-client