This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
File: n0mgwprfTYMDB3M9LGCp2TEQogg.mft (raw, json)
Hash identifier: W3KKxCUR8fr+1FEPGDysbJkkCE2+926w8q20NW3lnqE=
Subject key identifier: 37:39:03:8B:C1:F0:CE:80:41:3E:96:C6:1D:96:91:88:91:C4:85:F3
Authority key identifier: 9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08
Certificate issuer: /CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
Certificate serial: 0284
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
Manifest number: 0280
Signing time: Fri 19 Dec 2025 00:46:52 +0000
Manifest this update: Fri 19 Dec 2025 00:46:52 +0000
Manifest next update: Fri 26 Dec 2025 00:46:52 +0000
Files and hashes: 1: n0mgwprfTYMDB3M9LGCp2TEQogg.crl (hash: c2SE3ZFBDRCjA3qGZTqFXoS4Qng30o3kZoThUMjILV8=)
2: 38F69014325B11ED8403A325C4F9AE02.roa (hash: FZIeDc9fr9Vk3VF/3NkVllxgVFZLM9kYFOVZSgfzDWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl
rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:46:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B393, serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
Validity
Not Before: Dec 19 00:46:52 2025 GMT
Not After : Dec 26 00:46:52 2025 GMT
Subject: CN=6944a07c-efb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:31:a8:cc:41:03:dd:f6:3b:a9:96:7a:4a:28:
dd:87:34:c3:2d:8a:4b:00:75:ac:8e:ec:bd:1d:b9:
bb:b6:04:7b:1f:67:61:7c:d0:af:75:1f:8c:65:f4:
8b:a2:06:2e:8b:18:4c:a8:b8:fe:48:be:fe:60:0a:
5c:09:2e:bc:33:38:a3:39:aa:14:05:f8:d1:da:59:
d1:78:5d:9a:70:83:56:52:df:43:3b:ed:33:91:ac:
0e:9d:a0:a4:83:07:9a:fa:d2:e8:cd:b6:8a:5a:63:
5d:d8:71:fa:95:24:04:a3:3a:06:c8:a5:d9:1d:12:
fd:fb:c1:d0:50:04:13:c1:f2:ee:57:56:09:65:12:
31:5a:f3:1a:9b:77:2f:54:ef:11:d6:b5:a9:02:ae:
37:33:8a:33:18:e9:91:98:77:cd:55:f9:fe:33:38:
65:14:5e:09:57:f7:f7:e8:7d:b4:ad:4e:f0:3a:b6:
b8:8c:cf:d8:89:b6:76:22:dc:5a:c0:90:4a:c8:4b:
07:48:fd:bb:68:28:e5:53:fa:6f:50:22:09:2c:fd:
01:c9:d3:59:09:e7:4c:05:d0:01:90:a0:c1:2c:ba:
df:e8:91:4a:f2:ce:c0:f1:01:b6:ba:34:47:1d:90:
47:22:1b:2f:e2:81:d8:3b:2c:ad:c8:af:c0:3f:6d:
ab:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:39:03:8B:C1:F0:CE:80:41:3E:96:C6:1D:96:91:88:91:C4:85:F3
X509v3 Authority Key Identifier:
keyid:9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:55:8a:b8:2a:7f:4d:d4:cc:0f:2e:0b:b2:2e:ad:9a:32:c6:
c5:ab:2c:d5:94:ff:8a:c3:db:99:64:81:a5:8b:e9:70:1f:9e:
06:79:1d:cd:c4:f5:85:3f:f6:29:bb:a4:8d:a1:67:14:01:b1:
9b:8d:cc:a9:74:3d:dd:73:34:00:68:be:53:70:89:92:79:aa:
0d:e7:76:ee:c0:22:86:44:66:36:29:5c:cc:4a:5b:09:d8:41:
29:88:21:31:ed:f8:66:3f:85:43:d2:eb:cb:94:75:79:89:bd:
bd:e3:8e:a1:f0:7c:29:84:80:b7:e5:e4:22:4f:4f:25:52:95:
00:ee:18:f3:e0:af:41:f0:69:1a:14:81:85:e6:8f:47:17:ea:
e0:74:3f:f9:fb:a9:d2:c2:d9:dd:d7:10:6f:fe:5a:e1:72:f6:
09:3f:18:31:ef:3b:48:98:b2:fe:5c:47:6a:c0:8b:52:53:8c:
c8:f4:0e:17:0c:f6:12:80:29:98:f3:92:26:7f:57:e2:fe:b0:
a5:4b:eb:c9:a9:1a:df:00:ad:52:14:70:a1:b6:f5:ac:8f:b7:
30:bb:cb:c1:f4:61:b7:a2:dd:d6:f2:6e:86:9e:09:e2:8b:07:
2e:9e:05:39:51:96:da:02:56:3f:f4:e7:ee:3a:1c:48:9f:f7:
f5:66:36:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIzOTMxMTAvBgNVBAUTKDlGNDlBMEMyOUFERjREODMwMzA3NzMzRDJDNjBBOUQ5
MzExMEEyMDgwHhcNMjUxMjE5MDA0NjUyWhcNMjUxMjI2MDA0NjUyWjAYMRYwFAYD
VQQDDA02OTQ0YTA3Yy1lZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnDGozEED3fY7qZZ6SijdhzTDLYpLAHWsjuy9Hbm7tgR7H2dhfNCvdR+MZfSL
ogYuixhMqLj+SL7+YApcCS68MzijOaoUBfjR2lnReF2acINWUt9DO+0zkawOnaCk
gwea+tLozbaKWmNd2HH6lSQEozoGyKXZHRL9+8HQUAQTwfLuV1YJZRIxWvMam3cv
VO8R1rWpAq43M4ozGOmRmHfNVfn+MzhlFF4JV/f36H20rU7wOra4jM/YibZ2Itxa
wJBKyEsHSP27aCjlU/pvUCIJLP0BydNZCedMBdABkKDBLLrf6JFK8s7A8QG2ujRH
HZBHIhsv4oHYOyytyK/AP22riQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDc5A4vB
8M6AQT6Wxh2WkYiRxIXzMB8GA1UdIwQYMBaAFJ9JoMKa302DAwdzPSxgqdkxEKII
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjM5My8zMjZDQkQ1ODMy
NTcxMUVEQjg4REZDMkNDNEY5QUUwMi9uMG1nd3ByZlRZTURCM005TEdDcDJURVFv
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL24wbWd3cHJmVFlNREIzTTlMR0NwMlRFUW9nZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjM5My8zMjZDQkQ1ODMyNTcxMUVEQjg4REZDMkNDNEY5QUUwMi9uMG1nd3ByZlRZ
TURCM005TEdDcDJURVFvZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIVYq4Kn9N1MwPLguyLq2aMsbFqyzVlP+Kw9uZZIGli+lwH54GeR3N
xPWFP/Ypu6SNoWcUAbGbjcypdD3dczQAaL5TcImSeaoN53buwCKGRGY2KVzMSlsJ
2EEpiCEx7fhmP4VD0uvLlHV5ib29446h8HwphIC35eQiT08lUpUA7hjz4K9B8Gka
FIGF5o9HF+rgdD/5+6nSwtnd1xBv/lrhcvYJPxgx7ztImLL+XEdqwItSU4zI9A4X
DPYSgCmY85Imf1fi/rClS+vJqRrfAK1SFHChtvWsj7cwu8vB9GG3ot3W8m6Gngni
iwcungU5UZbaAlY/9OfuOhxIn/f1Zjby
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:59:22 2025 by rpki-client