This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
File: 1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json)
Hash identifier: Gx0gVWGTyn8x8W5GW/jeMas+O2zhvJNADKME5zKIKRU=
Subject key identifier: 28:91:A3:11:48:BB:7F:04:6A:08:E1:F0:BA:D2:AE:29:BE:82:C4:D7
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial: 091E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
Manifest number: 08FC
Signing time: Sun 28 Dec 2025 19:45:33 +0000
Manifest this update: Sun 28 Dec 2025 19:45:33 +0000
Manifest next update: Sun 04 Jan 2026 19:45:33 +0000
Files and hashes: 1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: X7KG0mbxfQRGRcMnw3wc+04Vcfzzae83GSkCP3rKAMM=)
2: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: XAx1J/DLce82S0DJ6QETMIUPs/8svCL35NE1zYijtJ8=)
3: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: 437Z5enRuaQO92H2FAcbSA65gK3IxD6GTsjTk9iVKzU=)
4: F814A546C01411EA912AC365C4F9AE02.roa (hash: VCA7ATdoKb3bc3VrnHWvqH8lcWu2vv1KBpe9G26/lek=)
5: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: cndw19Zty56t27dvRNtU0GtVAt1H5pGdcRIcu3Z2IPk=)
6: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: K91u4jcxoGdVwNsfyPrjf+VTjR+CX+rH0W4KKBUnjNU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 19:45:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2334 (0x91e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Validity
Not Before: Dec 28 19:45:33 2025 GMT
Not After : Jan 4 19:45:33 2026 GMT
Subject: CN=695188dd-09ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:5e:74:cf:ef:45:1f:e5:9d:2a:fc:b7:7b:
f5:c7:85:ad:0c:24:c9:2e:5e:c6:ec:ba:5d:5d:94:
86:72:f5:bf:96:55:03:0b:de:30:0f:f4:1e:2f:43:
fe:4c:36:e4:1c:73:15:e0:91:68:de:4f:57:6f:22:
83:6d:b3:90:89:89:8c:64:24:c8:1b:13:ee:68:42:
6c:b4:ee:5a:a2:7c:1c:97:a9:7f:51:07:70:33:65:
b2:93:7a:99:82:c2:34:4f:e3:b4:81:81:60:4e:97:
5b:39:e0:36:a9:b9:4c:db:cd:73:90:be:4f:79:b8:
94:f2:0d:26:cc:71:f6:fd:09:f1:b9:be:12:69:36:
e5:71:94:ea:30:2a:f7:21:d3:0f:50:52:e5:c9:b5:
1b:e8:b2:e5:11:cb:95:da:78:6e:54:0d:35:11:f3:
51:be:8b:bf:3d:0f:04:68:34:1c:6d:43:eb:ff:8c:
de:46:2c:a7:a0:97:91:b5:e0:6e:52:ea:09:ce:69:
4d:9f:2f:82:b3:22:27:34:04:8d:10:9c:c9:c3:9d:
74:8a:ce:30:fd:0b:9d:88:a6:94:c0:99:3f:a5:36:
a7:14:8f:5d:6e:89:75:3b:5f:6a:b6:59:5d:6a:0f:
8b:f2:ed:1e:23:d1:ef:ec:62:91:6a:f1:4d:13:5d:
b8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:91:A3:11:48:BB:7F:04:6A:08:E1:F0:BA:D2:AE:29:BE:82:C4:D7
X509v3 Authority Key Identifier:
keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:c8:bc:76:d5:30:39:3d:4a:fa:44:4c:92:de:c0:e6:6a:6d:
7a:29:31:82:79:a7:cd:31:e8:49:53:39:a8:d0:77:d0:09:8a:
49:cc:60:c5:60:93:6f:dc:cc:a6:6e:73:d5:66:66:23:06:72:
b7:6f:93:4a:48:b7:49:f3:be:18:58:92:3d:b5:31:69:0b:09:
61:8a:0c:12:ae:ef:ab:8e:3e:72:35:a8:1a:e4:ed:16:74:20:
d1:7b:d6:da:61:c0:93:52:9d:a3:73:a8:50:dc:4b:71:b2:3a:
94:f9:c4:93:6f:3f:7a:c2:d0:e0:e2:98:ff:d3:26:5f:95:1a:
83:67:26:e1:e3:12:03:32:e5:f3:e0:12:e1:ac:9e:79:8c:91:
18:ba:f6:79:1b:73:bd:a0:b3:1d:29:f0:10:43:07:fd:86:88:
6c:4a:66:91:6e:ec:95:d4:65:dc:f2:57:d8:8c:80:59:53:05:
f6:14:d7:f3:15:fe:2e:38:48:64:fa:fe:ae:e8:0d:ca:87:0c:
0b:ad:b1:2f:94:e7:f4:3a:04:e6:68:13:ba:b5:48:02:43:23:
fd:ff:fd:0c:9d:41:5c:39:ef:85:e0:61:20:82:7a:aa:0d:6b:
b0:e9:65:4a:4d:13:e5:54:ac:29:70:d9:1a:ef:15:af:ce:7c:
58:88:b2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 04:53:49 2025 by rpki-client