This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json)
Hash identifier: ttIjYy1PuM4ZCIkcyIHvy/RrEavFkLYQjv15omSaBsk=
Subject key identifier: 5C:5C:EC:7F:BE:A3:E5:E7:43:D7:3A:5C:F1:B5:73:8E:13:6C:8B:B8
Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Certificate serial: 0483
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
Manifest number: 047B
Signing time: Thu 18 Dec 2025 23:28:17 +0000
Manifest this update: Thu 18 Dec 2025 23:28:16 +0000
Manifest next update: Thu 25 Dec 2025 23:28:16 +0000
Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: p81FdbP3UviucrkBhMyKvOgRCWQVYg3lheRKCrIVTKY=)
2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: c0Qo/V4Zd6PI/SmvO+fxR2cS+G3poh+IiHb3vxBLGEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1155 (0x483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Validity
Not Before: Dec 18 23:28:16 2025 GMT
Not After : Dec 25 23:28:16 2025 GMT
Subject: CN=69448e11-bb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f1:c6:2e:01:f5:cd:e3:91:e9:96:de:b8:06:
4a:59:05:b4:4e:ac:77:e0:c7:9e:d2:b8:b9:15:5d:
c5:80:e8:cf:48:49:29:05:0f:a9:32:23:78:bf:1c:
4d:14:43:00:ca:67:bb:73:84:e5:c8:cf:c1:af:f1:
29:33:54:a5:50:79:1e:a8:a8:0f:77:29:0c:9d:75:
6b:a1:48:56:49:8e:bc:74:33:1e:1a:85:eb:f0:b0:
dd:63:93:8c:3f:91:d9:4d:38:6d:9f:1c:ce:f4:cf:
ec:44:bf:63:8f:f4:12:25:29:f9:ea:f3:d6:39:14:
38:ec:34:a4:fc:4b:10:04:27:e9:e0:e8:19:c6:96:
a9:f1:80:8a:73:e4:b5:a4:7a:36:48:5f:19:97:e0:
3e:37:c6:90:ad:cb:c0:7b:f7:1a:8d:ae:9f:a3:61:
fe:bc:71:7a:3c:2f:3c:22:7d:de:e0:33:71:f8:37:
9b:e9:02:a2:75:72:9d:6e:7e:f6:cf:d5:57:57:b2:
00:8a:32:39:a8:f7:d6:e7:be:8b:c8:f4:42:19:84:
4c:58:fd:12:24:5a:08:e6:cf:f3:aa:8f:37:45:01:
c4:b6:3b:ad:cd:aa:1d:ca:06:6e:30:6e:25:67:21:
06:44:2a:ad:4e:60:a9:dd:c2:93:9b:a8:53:1b:6d:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5C:EC:7F:BE:A3:E5:E7:43:D7:3A:5C:F1:B5:73:8E:13:6C:8B:B8
X509v3 Authority Key Identifier:
keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:6d:99:ce:58:3d:e2:c8:31:61:dc:b6:f2:c5:7d:f3:b9:fb:
bd:4f:21:40:96:56:42:ca:0d:a7:1f:20:9d:17:6d:9c:5a:4a:
7e:dd:71:bc:50:c0:0b:aa:af:1b:39:c3:df:14:2d:66:69:cc:
6b:1a:bb:32:a3:cc:f0:ff:3d:6a:82:f3:0d:04:0a:b4:56:c8:
93:17:39:d0:89:d0:3b:de:39:72:77:4d:b5:b0:82:bb:ab:04:
f6:35:e9:32:79:13:a0:86:19:30:d8:95:2a:fa:87:ae:c6:ef:
2b:30:e5:0c:1a:2f:ca:e0:2e:ea:42:de:2c:a3:11:10:b2:1e:
59:ff:c8:5c:45:61:4f:f6:83:70:b6:a0:fa:91:83:a4:aa:b5:
0c:4e:59:2b:7a:8d:c3:03:a5:cc:98:b0:40:7a:a5:39:85:5d:
5b:79:0a:e4:37:2e:c3:f8:39:8f:66:70:0a:a1:d8:60:86:58:
61:84:c8:ac:05:2a:97:9c:fe:5f:5b:b4:21:85:6a:71:8a:6d:
79:66:e6:8b:51:e2:21:28:e2:17:cc:36:79:b0:53:0d:c3:a9:
ed:58:8b:bb:1e:15:52:c6:2e:55:7b:06:17:7a:3a:05:03:01:
6e:86:56:06:04:02:10:03:3a:7b:54:ab:1f:be:db:7f:db:31:
37:6f:bf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:25 2025 by rpki-client