This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
File: Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft (raw, json)
Hash identifier: QoERF8HnupR9nR1VwRewtMKJEV/7p1ixVczu+GmKAQY=
Subject key identifier: D2:BE:EB:8D:D4:53:4D:7E:D8:37:F9:8C:0D:FB:92:CA:5B:19:38:55
Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F
Certificate issuer: /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
Certificate serial: 024A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
Manifest number: 0244
Signing time: Thu 25 Dec 2025 00:57:16 +0000
Manifest this update: Thu 25 Dec 2025 00:57:15 +0000
Manifest next update: Thu 01 Jan 2026 00:57:15 +0000
Files and hashes: 1: Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl (hash: 2wC9Ui4+AzXqK810Hs54gpc2wMNHvRXaoe73r7DEzok=)
2: 00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (hash: 2OrdAZFq65lpVDk9H7JG++6UbmMYDfaSdAPzOkImZqE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl
rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 00:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D656, serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
Validity
Not Before: Dec 25 00:57:15 2025 GMT
Not After : Jan 1 00:57:15 2026 GMT
Subject: CN=694c8beb-81f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:cc:96:90:d7:26:3a:21:80:9c:a4:12:0d:
f4:07:fc:12:64:cf:04:29:5d:75:3c:15:e3:a4:45:
55:06:b0:62:73:cc:38:3d:c3:9b:24:5a:37:d2:4f:
76:ad:4a:31:4a:bd:46:cc:e3:50:76:f2:b7:10:18:
bf:36:da:6c:f1:0d:ed:6f:f6:af:7b:07:6a:65:ac:
b0:93:df:d5:53:5d:8c:e4:75:63:d3:d6:ad:e3:91:
67:36:17:06:1e:f9:f4:44:4b:54:4a:3a:37:c5:63:
6a:6f:ca:63:82:25:45:99:9d:5f:0f:d1:2b:33:d2:
1a:19:ec:cb:b4:e1:4c:cb:a6:60:a9:c8:16:07:6e:
7f:21:34:c5:43:f2:05:cb:1d:e4:0a:c6:ae:0f:e5:
f9:e1:e7:cf:12:85:71:53:db:23:cd:3d:00:c7:71:
07:27:ec:f2:4d:e9:9f:67:40:fd:d1:83:67:20:9c:
0f:47:9e:42:e8:b4:5b:2c:70:41:7a:8f:47:6c:15:
f3:f0:34:3e:96:2f:5f:fd:7d:b6:4f:3b:00:52:13:
92:05:fb:fb:8c:00:46:fa:4e:c3:da:d5:4c:8d:16:
64:1b:d3:ef:d6:b4:5f:5f:25:b2:2d:9b:3a:9c:df:
91:b2:dd:9d:09:05:42:f9:17:17:82:b9:62:59:4e:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BE:EB:8D:D4:53:4D:7E:D8:37:F9:8C:0D:FB:92:CA:5B:19:38:55
X509v3 Authority Key Identifier:
keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:49:e3:25:43:d4:80:09:d5:61:e2:3a:e9:55:24:37:98:69:
46:dd:c5:62:5e:8c:39:b5:87:20:de:72:18:00:a8:7b:a5:af:
ab:cc:49:e9:fe:ed:cd:e1:6d:a5:63:8c:57:19:07:ab:a4:d1:
31:b8:0a:19:84:e0:a8:63:a8:86:11:97:45:95:09:0a:c2:23:
3c:2e:15:7c:80:27:e2:39:70:a2:6f:24:0d:78:b2:57:b2:c0:
57:9c:18:dd:1b:f0:5b:d1:a1:6a:46:8c:76:da:5c:b9:23:ee:
1e:3d:0a:8e:8e:7c:a1:2e:aa:fe:83:9b:aa:fb:33:03:e1:1e:
61:4f:d4:3a:97:47:33:b5:62:ee:63:2f:07:65:2d:d3:d4:78:
29:ea:0a:31:5a:28:b6:d1:b0:70:59:21:80:ec:47:47:9a:01:
b4:9d:c0:18:10:f6:22:6e:04:fc:a2:f5:37:c8:75:ff:67:a9:
d3:4e:ab:5e:e1:2d:e1:01:9d:39:2c:b6:2d:aa:bb:30:a7:c9:
8d:75:82:f6:78:8f:53:68:94:33:5a:a7:68:ad:24:4f:c8:55:
82:c8:1e:fe:f3:1d:4b:ff:69:a9:24:f4:1e:d6:65:3a:b1:63:
c3:2e:9f:5f:56:68:f6:93:11:e1:de:3f:70:70:40:f6:37:d3:
2e:6b:db:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 04:57:36 2025 by rpki-client