This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json)
Hash identifier: Ptn+/O4EWIUL+8CXfxlNqsYxuFyEzOFKCOCDip+QwFg=
Subject key identifier: 76:82:80:80:E2:3C:66:EF:C5:EE:0E:27:99:2A:BD:03:94:FF:23:E7
Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
Certificate serial: 1E40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
Manifest number: 1E32
Signing time: Sun 28 Dec 2025 15:54:10 +0000
Manifest this update: Sun 28 Dec 2025 15:54:10 +0000
Manifest next update: Sun 04 Jan 2026 15:54:10 +0000
Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: ahbxNQR6dOOhy/5ug8XDcbUIsNk99ZTRnOCsX9ynLYg=)
2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: UCPIk7PqTNU3ro9Psv5YDODZfhBpvATekxfIDIhqyNU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl
rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 15:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7744 (0x1e40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
Validity
Not Before: Dec 28 15:54:10 2025 GMT
Not After : Jan 4 15:54:10 2026 GMT
Subject: CN=695152a2-d470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:8f:44:4a:38:68:24:b0:90:80:11:12:bb:
5c:c8:70:c1:b7:e3:1c:8b:f4:fe:9d:b7:bb:d7:78:
88:62:0b:71:d2:39:b7:6e:d2:95:3b:6a:0f:c9:36:
a7:db:91:48:a4:ba:bc:9a:09:9c:de:5b:bb:72:d4:
98:48:84:d2:e6:f9:66:47:61:6f:5c:5c:76:29:16:
e3:a0:5d:bb:ee:10:f7:25:9f:04:71:44:ce:f3:49:
de:d7:0b:ba:51:9f:27:0f:b6:c6:25:91:1f:e5:69:
79:83:f6:13:1b:f6:9c:8d:ea:9a:0e:20:7a:63:31:
a2:62:e6:67:e1:bf:fb:3c:12:e1:67:99:8f:3a:8f:
14:7f:f1:10:3c:fd:d5:a7:f2:a1:11:52:97:c0:3d:
a1:18:c4:63:1c:ca:68:45:0a:0b:f6:43:9b:82:97:
11:9f:12:7d:e6:9f:18:57:47:d1:52:5e:cd:19:04:
4e:0f:2d:2f:07:4f:82:b6:c9:cf:18:15:0d:53:74:
23:ea:59:94:73:e6:00:0b:41:69:ac:86:0b:14:68:
b4:cf:65:98:3c:e3:44:3c:97:19:b2:5c:4e:c2:a7:
11:33:ff:0c:67:f1:87:c3:7a:31:0c:07:e5:1e:05:
c9:34:ab:b1:eb:8e:81:3f:d5:dd:54:65:76:2a:d5:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:82:80:80:E2:3C:66:EF:C5:EE:0E:27:99:2A:BD:03:94:FF:23:E7
X509v3 Authority Key Identifier:
keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c8:26:3d:3c:3e:d3:61:93:46:7c:da:2e:5f:af:62:ff:be:
18:a2:68:1b:89:8b:98:2d:e3:75:5d:c0:10:de:51:e4:d3:06:
eb:5b:51:8d:fa:29:ae:f3:31:2e:63:17:88:0d:02:9c:b0:33:
5b:08:25:c1:6d:38:45:5c:41:2a:e6:f4:b0:f4:75:79:ee:c9:
e2:64:80:5d:35:ad:c6:3c:54:d0:a6:91:fe:fb:64:29:6e:fb:
cc:a7:02:72:f6:1a:24:49:eb:d9:8e:94:f7:0f:1b:cd:27:e0:
e2:ad:71:e9:38:d8:ba:4e:45:d8:38:5e:7e:de:ff:dc:c4:b8:
d0:4b:5a:2a:0b:b0:00:05:08:bf:88:c8:10:1a:e5:7f:73:dc:
ef:f1:9b:a6:82:ba:e9:33:60:d2:59:f8:06:93:44:11:ed:4a:
bd:4e:d2:31:1f:ef:01:b9:34:f9:17:ef:7b:d1:0d:a2:99:01:
f1:b7:04:16:02:12:b8:03:dc:9d:53:cb:71:ea:f1:11:2c:47:
26:07:bc:8b:13:57:80:f8:57:a9:ec:62:35:64:22:1d:96:23:
2e:f5:0b:82:82:ed:ce:08:bd:d8:1b:af:bb:3d:3d:b8:43:c7:
75:34:89:46:db:5a:60:73:52:07:fd:36:80:53:ec:1c:e8:ba:
25:77:4f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 15:00:03 2025 by rpki-client