This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
File: NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json)
Hash identifier: 4aFLqNoJWEtVhAz/7BCs8Y1hwldY2TvEBZgWH8GPxhc=
Subject key identifier: 22:2B:61:2B:88:F0:55:EF:20:AE:25:7E:B9:7B:7F:97:E9:E2:C5:77
Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96
Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96
Certificate serial: 171D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
Manifest number: 1712
Signing time: Thu 18 Dec 2025 16:31:00 +0000
Manifest this update: Thu 18 Dec 2025 16:31:00 +0000
Manifest next update: Thu 25 Dec 2025 16:31:00 +0000
Files and hashes: 1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: 3/zkVUrvkdqEU30YHQi8DQ8dtBy/1svtJoNochAhQWw=)
2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: 3NBDQoX7jImDov3ZX0pfPuQVgflIK4hAwefOS6yfBcQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl
rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 16:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5917 (0x171d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CADE, serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96
Validity
Not Before: Dec 18 16:31:00 2025 GMT
Not After : Dec 25 16:31:00 2025 GMT
Subject: CN=69442c44-0b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:e7:44:10:24:51:8e:05:99:ce:28:41:f8:
2c:ad:5a:31:70:80:25:60:eb:ff:8a:9c:4a:55:d3:
2a:82:e5:9b:c2:5a:ce:31:17:51:7d:8b:20:bc:7f:
18:d2:a5:d3:9f:2d:63:4d:9a:50:b0:b2:1f:32:17:
42:80:6e:04:d4:61:20:a9:fa:1c:80:cd:32:44:2b:
d7:1c:87:f3:53:54:a5:e0:c1:9d:70:21:a5:b3:8f:
e4:e4:ee:9e:15:e8:22:8d:c9:16:3c:78:bb:89:8f:
e3:f9:0d:75:62:1a:a5:a3:f3:3d:95:bd:c8:e5:a1:
fd:d8:9c:85:3b:1e:b7:ae:ff:94:89:3f:55:28:8e:
ac:19:93:02:a7:c3:30:cb:84:e6:99:02:e6:77:6a:
c1:09:37:02:c1:41:6b:41:ee:54:73:39:da:2d:92:
c1:54:3e:ff:e4:85:4c:85:3a:8c:50:01:49:03:73:
44:33:3c:91:93:27:6f:4a:56:20:52:69:e0:4c:ba:
f4:2e:a4:9c:d0:af:eb:19:72:df:d5:33:50:38:63:
ec:1c:22:07:a9:e8:e8:c4:cf:ee:87:1e:61:a5:2e:
5c:8a:53:32:0d:9c:83:fd:1b:ff:41:b2:33:7e:df:
e3:d8:24:a1:a7:d1:6b:ce:06:a7:d3:2e:6e:8f:de:
79:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2B:61:2B:88:F0:55:EF:20:AE:25:7E:B9:7B:7F:97:E9:E2:C5:77
X509v3 Authority Key Identifier:
keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:e8:e5:d7:cc:0e:c0:4e:3e:53:d9:44:4a:83:28:d5:8f:84:
33:e7:f8:22:5b:91:44:8f:47:22:01:9e:26:a7:e3:15:57:2e:
a2:22:ba:af:50:f5:4a:f0:e9:8d:0e:90:22:5b:2a:84:21:0c:
a1:97:34:8a:72:a8:f8:55:9a:ec:cd:0a:ef:1a:d8:24:c1:97:
e4:8c:4c:ae:bc:04:0f:6d:2a:cf:69:36:fc:90:88:45:e3:dc:
5b:84:5b:2a:5c:66:7e:3f:f0:97:74:1f:fb:8d:e3:b9:1d:4c:
1a:2f:db:8b:49:05:ac:c5:43:18:69:b5:c2:7a:1a:a1:21:8e:
38:96:9a:a7:35:4b:c9:01:75:23:f9:3c:89:0a:97:7f:5a:5d:
d0:ed:74:ed:67:82:3d:22:15:89:bc:9c:91:28:91:eb:5f:e1:
55:e7:08:e5:1e:1a:f9:e3:42:e7:1c:51:a9:3a:a5:bb:5f:a4:
7b:31:ee:26:fa:ef:f7:88:bf:f4:82:0f:c7:81:ff:60:1a:f2:
e1:0f:bc:29:f1:05:89:f6:09:b8:b4:a4:3b:b5:7c:35:b5:e9:
2d:3e:fb:58:8b:ee:12:c6:01:b3:f8:b2:63:af:b1:70:df:28:
b9:5f:80:b9:c6:6c:e1:ce:4e:76:30:a4:c4:ad:88:2e:31:56:
67:93:73:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:17 2025 by rpki-client